pid_controller.dll threat report

MD5 df41e39c31fb928b8f0c8152449f5d45
Latest seen 2024-12-16 23:02:08 (a year ago)
First seen 2024-12-16 23:02:08 (a year ago)
Size 27 KB
Signed by H-Bit, d.o.o.

This report summarizes the file identity, detection status, publisher metadata, observed locations, and technical indicators for pid_controller.dll. ThreatInfo currently classifies this sample as Trojan.Agent.

GridinSoft Anti-Malware detection

GridinSoft already detects this file

The latest ThreatInfo record shows pid_controller.dll detected as Trojan.Agent. You can download GridinSoft Anti-Malware to scan the system and remove this detection if the file is present on your device.

Detection name
Trojan.Agent
Last analysis
2024-12-16 23:02:08 (a year ago)
File hash
df41e39c31fb928b8f0c8152449f5d45
Download Anti-Malware

pid_controller.dll is a Windows file recorded in the ThreatInfo database. The current detection status is Trojan.Agent, based on the latest analysis from 2024-12-16 23:02:08 (a year ago).

If pid_controller.dll appears on your computer unexpectedly, treat it as suspicious. Check its location, digital signature, and recent system changes before allowing it to run. A full anti-malware scan is recommended when this file is detected as Trojan.Agent.

MD5: df41e39c31fb928b8f0c8152449f5d45
Size: 27 KB
First Published: 2024-12-16 23:02:08 (a year ago)
Latest Published: 2024-12-16 23:02:08 (a year ago)
Status: Trojan.Agent (on last analysis)
Analysis Date: 2024-12-16 23:02:08 (a year ago)
pid_controller.dll detection screenshot

The screenshot is a visual record of a GridinSoft Anti-Malware detection for this sample. Use the hash and metadata above as the primary identifiers when comparing the file on your system.

Signed By: H-Bit, d.o.o.
Status: Valid

The signature on pid_controller.dll is reported as valid. A valid signature helps confirm publisher identity, but it does not automatically make the file safe if the installer was bundled, abused, or downloaded from an untrusted source.

%localappdata%\programs\nicehash miner

ThreatInfo has observed pid_controller.dll in the locations listed above. Files found in temporary folders, user profile folders, startup locations, or unusual application directories should be reviewed more carefully than files installed under a known program directory.

100.0%

The strongest geographic signal for this file is United States with 100.0% of observed hits. Geographic distribution can help identify targeted campaigns, regional software bundles, or where a file is most commonly reported.

Windows 10 100.0%

The most common operating system signal for pid_controller.dll is Windows 10 with 100.0% of observed hits. If your system differs from the common profile, check whether the file was introduced by a specific installer, archive, or removable device.

pid_controller.dll is identified as pe for 64 systems. The subsystem is Windows GUI. PE header values are useful for triage, especially when they do not match the expected publisher, product, or release timeline.

Subsystem: Windows GUI
PE Type: pe
OS Bitness: 64
Image Base: 0x0000000180000000
Entry Address: 0x000017e0

PE Sections:

Name Size of data MD5
.text 5120 2f95c8c371622f14066f46292165e3f0
.rdata 3584 c4e8af7357936fe083321e0dd61a67d9
.data 512 4054ec401cb940fa33b2f69632d526e0
.pdata 512 e291b1e77dafe7e7d0bca231ce78958e
.rsrc 512 621a4e0be78ed84c885d77620cd55b37
.reloc 512 459caf06a7d2ada971e7a701fa12950d

PE section names and hashes can reveal packing, injected resources, or unusual build artifacts. Sections with uncommon names, very large raw data, or hashes that differ from a trusted copy deserve additional review.

More information: