How to remove rundll.exe
rundll.exe
The module rundll.exe has been detected as Trojan.Agent
File Details
| Product Name: | MicrosoftHost |
| Company Name: | Microsoft Corporation |
| MD5: | 4aa97db59380fb799899e534b9d79eed |
| Size: | 4 MB |
| First Published: | 2018-08-24 12:08:24 (5 years ago) |
| Latest Published: | 2024-03-23 23:02:48 (3 weeks ago) |
| Status: | Trojan.Agent (on last analysis) | |
| Analysis Date: | 2024-03-23 23:02:48 (3 weeks ago) |
Common Places:
| %commonappdata% |
| %commonappdata% |
| %commonappdata% |
| %commonappdata% |
| %commonappdata% |
| %commonappdata% |
| %commonappdata% |
| %commonappdata% |
| %commonappdata% |
| %commonappdata% |
Geography:
| 58.4% | ||
| 8.4% | ||
| 3.8% | ||
| 2.9% | ||
| 2.3% | ||
| 2.0% | ||
| 2.0% | ||
| 1.7% | ||
| 1.4% | ||
| 1.4% | ||
| 1.2% | ||
| 0.9% | ||
| 0.9% | ||
| 0.9% | ||
| 0.9% | ||
| 0.9% | ||
| 0.6% | ||
| 0.6% | ||
| 0.6% | ||
| 0.6% | ||
| 0.6% | ||
| 0.6% | ||
| 0.6% | ||
| 0.6% | ||
| 0.6% | ||
| 0.3% | ||
| 0.3% | ||
| 0.3% | ||
| 0.3% | ||
| 0.3% | ||
| 0.3% | ||
| 0.3% | ||
| 0.3% | ||
| 0.3% | ||
| 0.3% | ||
| 0.3% | ||
| 0.3% | ||
| 0.3% | ||
| 0.3% | ||
| 0.3% | ||
| 0.3% | ||
| 0.3% |
OS Version:
| Windows 7 | 61.4% | |
| Windows 10 | 27.7% | |
| Windows 8.1 | 8.3% | |
| Windows Server 2008 R2 | 1.4% | |
| Windows 8 | 0.6% | |
| Windows Vista | 0.6% |
Analysis
| Subsystem: | Windows CUI |
| PE Type: | pe |
| OS Bitness: | 32 |
| Image Base: | 0x00400000 |
| Entry Address: | 0x00002b28 |
PE Sections:
| Name | Size of data | MD5 |
| .text | 8704 | 264ca42964cf5a4c6c722f9fd8c7f6d7 |
| .rdata | 2560 | f6694c54551d514f286e97634b5a17c3 |
| .data | 3072 | 1611cb3b9b45f5539a91e11559fb588e |
| .rsrc | 2719232 | 19ff7a4226826ceeed679a1353a5cfd2 |
More information:
Download GridinSoft
Anti-Malware - Removal tool for rundll.exe
