How to remove syshost.exe
- File Details
- Overview
- Analysis
syshost.exe
The module syshost.exe has been detected as Trojan.Necurs
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
3c30abe959f8af94f24c6cca183d09e1 |
| Size: |
128 KB |
| First Published: |
2017-07-25 09:23:56 (7 years ago) |
| Latest Published: |
2017-08-01 05:10:23 (7 years ago) |
| Status: |
Trojan.Necurs (on last analysis) |
|
| Analysis Date: |
2017-08-01 05:10:23 (7 years ago) |
| %windir%\installer\{85451bcf-30df-3c74-e4e7-f641c4bc9757} |
| %windir%\installer\{8fad9771-fd5b-a321-32f0-911910b9d61a} |
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x0000dd40 |
| Name |
Size of data |
MD5 |
| .text |
53248 |
b5027f71827c849c0bdac345ff28039c |
| .rdata |
8192 |
a8aebb6aa3a580ef95ddc8bd827d06a0 |
| .data |
4096 |
74156bedd774231f89e79364051b108b |
| .rsrc |
61440 |
07d16feda789d96d4b623780c5ffc06d |
