How to remove dllhost.exe
- File Details
- Overview
- Analysis
dllhost.exe
The module dllhost.exe has been detected as Ransom.Sabsik
File Details
Product Name: |
|
Company Name: |
|
MD5: |
9a4febef8d60ba3a7039d023231c6dec |
Size: |
60 KB |
First Published: |
2022-10-30 23:19:14 (2 years ago) |
Latest Published: |
2024-02-09 00:00:31 (a year ago) |
Status: |
Ransom.Sabsik (on last analysis) |
|
Analysis Date: |
2024-02-09 00:00:31 (a year ago) |
%commonappdata% |
%commonappdata% |
%commonappdata% |
%commonappdata% |
%commonappdata% |
%commonappdata% |
%commonappdata% |
%commonappdata% |
%commonappdata% |
%commonappdata% |
|
70.0% |
|
|
25.8% |
|
|
3.7% |
|
|
0.4% |
|
|
0.1% |
|
Windows 10 |
96.3% |
|
Windows 7 |
3.7% |
|
Analysis
Subsystem: |
Windows GUI |
PE Type: |
pe |
OS Bitness: |
32 |
Image Base: |
0x00400000 |
Entry Address: |
0x000102be |
MVID: |
e3312807-e702-4207-8dc5-d3f0c69ff2b5 |
Typelib ID: |
7b7344d7-8ee4-4af1-b4d1-ee28bf905570 |
Name |
Size of data |
MD5 |
.text |
58368 |
a0c3f7fd3d83d5c8c91d1fd938387172 |
.rsrc |
2048 |
af7d39b8609e620387bfda9a139e3f75 |
.reloc |
512 |
df03cfe8c35f3173b0f81f46e1c604cd |