How to remove svchost.exe
- File Details
- Overview
- Analysis
svchost.exe
The module svchost.exe has been detected as Trojan.CoinMiner
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
091c75b7ffad08a5cb37ec6ed8d827c5 |
| Size: |
413 KB |
| First Published: |
2017-08-18 11:15:24 (6 years ago) |
| Latest Published: |
2018-03-24 09:04:32 (6 years ago) |
| Status: |
Trojan.CoinMiner (on last analysis) |
|
| Analysis Date: |
2018-03-24 09:04:32 (6 years ago) |
| %windir%\temp |
| %windir%\64bit |
| %windir% |
| Windows Vista |
92.6% |
|
| Windows 7 |
3.2% |
|
| Windows Server 2008 R2 |
3.2% |
|
| Windows Server 2012 R2 |
1.1% |
|
Analysis
| Subsystem: |
Windows CUI |
| PE Type: |
pe |
| OS Bitness: |
64 |
| Image Base: |
0x0000000140000000 |
| Entry Address: |
0x00015d0c |
| Name |
Size of data |
MD5 |
| .text |
303104 |
8a02b6b9a8785e90a30542aeec8bbb43 |
| .rdata |
92672 |
a7a1a46eb3f85211850c55a62d2f60cf |
| .data |
7168 |
e19e35218f736072c6fdd67c6f9558ec |
| .pdata |
15360 |
1cda5eea6cd696d0473aaadc77607ce2 |
| .rsrc |
1536 |
447041cf42c7759986f7555a0d995fae |
| .reloc |
2560 |
0d7cfa9f42d482d8e1dffb00bb9b753c |
