How to remove dllhost.exe
- File Details
- Overview
- Analysis
dllhost.exe
The module dllhost.exe has been detected as Risk.CoinMiner
File Details
Product Name: |
|
Company Name: |
|
MD5: |
a357e223b66b14cc9888dc74da3d5eb8 |
Size: |
165 KB |
First Published: |
2018-10-16 18:13:15 (6 years ago) |
Latest Published: |
2018-10-16 19:07:03 (6 years ago) |
Status: |
Risk.CoinMiner (on last analysis) |
|
Analysis Date: |
2018-10-16 19:07:03 (6 years ago) |
%system%\config\systemprofile\appdata\local\matrox |
Windows Server 2012 R2 |
100.0% |
|
Analysis
Subsystem: |
Windows CUI |
PE Type: |
pe |
OS Bitness: |
64 |
Image Base: |
0x0000000000400000 |
Entry Address: |
0x00001510 |
Name |
Size of data |
MD5 |
.text |
108032 |
96162766e9e51b6f2b731bfbf77286f0 |
.data |
1024 |
3326e663bb02494ebc6ed34112f2f85d |
.rdata |
17408 |
c7e279434df200cb5511ff5a8841df9e |
.pdata |
10240 |
a80c5466d8ce147b500993544874cc80 |
.xdata |
8192 |
37bead05828017c5d6d4fe8e859892fd |
.bss |
0 |
00000000000000000000000000000000 |
.idata |
4096 |
47dc6bcce84985065498e7541c3170a7 |
.CRT |
512 |
04a82518d50ae7d25e211fc38bddc6fb |
.tls |
512 |
5bfe778aedbcec03cbc740e30458409f |
.rsrc |
17480 |
12690c5f5405fcfba50d97bcf046fb8d |