How to remove winIogon.exe
- File Details
- Overview
- Analysis
winIogon.exe
The module winIogon.exe has been detected as Trojan.CoinMiner
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
57d63df4ef476bff3c983034437396a5 |
| Size: |
3 MB |
| First Published: |
2017-11-08 16:02:48 (7 years ago) |
| Latest Published: |
2017-11-08 16:02:54 (7 years ago) |
| Status: |
Trojan.CoinMiner (on last analysis) |
|
| Analysis Date: |
2017-11-08 16:02:54 (7 years ago) |
| %commonappdata%\microsoftcorporation\windows\helpers |
| %commonappdata%\microsoftcorporation\windows\system32 |
| SecurityHeaIthService.exe |
| isass.exe |
| Isass.exe |
| SystemldleProcess.exe |
| winIogon.exe |
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x00588000 |
| Name |
Size of data |
MD5 |
| |
221184 |
f4b311be65b4e5ff04ce1e3110deea10 |
| .rsrc |
1443328 |
dd171b4a27c0d298ebfba059b47e9830 |
| .idata |
512 |
07eb350375f5853d93e61a4c8127dd7c |
| |
512 |
10583ec71b8bde1d6d43c87194eab2ac |
| vhswcjwe |
1790464 |
ffa1035d7e82f8970c564fbc80ca2e2a |
| rdmzxwlt |
512 |
e6d4d3eafc38f9064cf1269785b92788 |
