How to remove pZLib.exe
pZLib.exe
The module pZLib.exe has been detected as SuspCPUMiner
File Details
| Product Name: | pZLib v3 |
| Company Name: | Razor12911 |
| MD5: | 8e52f6fb1bc36acbf6052728fda914ba |
| Size: | 1 MB |
| First Published: | 2018-08-21 13:08:05 (6 years ago) |
| Latest Published: | 2018-11-10 17:02:30 (6 years ago) |
| Status: | SuspCPUMiner (on last analysis) | |
| Analysis Date: | 2018-11-10 17:02:30 (6 years ago) |
Common Places:
| %temp% |
Geography:
| 40.0% | ||
| 40.0% | ||
| 20.0% |
OS Version:
| Windows 8.1 | 40.0% | |
| Windows 10 | 40.0% | |
| Windows Embedded 8.1 | 20.0% |
Analysis
| Subsystem: | Windows CUI |
| PE Type: | pe |
| OS Bitness: | 32 |
| Image Base: | 0x00400000 |
| Entry Address: | 0x001098ac |
PE Sections:
| Name | Size of data | MD5 |
| .text | 1078272 | e5b225d8459a3cad71a8a4504079497e |
| .itext | 5632 | 4aabd9a56358243f5a584ac8484bdf34 |
| .data | 29696 | b549a322c81d5ad322c9ad5d6c4d04f8 |
| .bss | 0 | 00000000000000000000000000000000 |
| .idata | 5120 | 44d3ffd0ac00a760096ef75bb3dc3dcc |
| .didata | 512 | 8f5b7c6150efe04a949b1407848ebae1 |
| .edata | 512 | 496eed35f20aa8e8686da51b60b9c343 |
| .tls | 0 | 00000000000000000000000000000000 |
| .rdata | 512 | 07dcade4989262791ad583ae5dc443a5 |
| .reloc | 99328 | 195c04afeed7f4707310cc1dbb5ecb9f |
| .rsrc | 71168 | 1bdb444e732e99fc716d88d09c915a1f |
More information:
Download GridinSoft
Anti-Malware - Removal tool for pZLib.exe
