How to remove $RRWIGBI.exe

» File
File Details
Overview
Analysis

$RRWIGBI.exe

The module $RRWIGBI.exe has been detected as Trojan.CoinMiner

$RRWIGBI.exe

Remove $RRWIGBI.exe

File Details

Main Info:

Product Name:	Alrucs
MD5:	aaaf53e29ae5d81b4d8b43303b52f304
Size:	63 MB
First Published:	2024-04-18 23:05:53 (2 years ago)
Latest Published:	2024-04-18 23:05:53 (2 years ago)

Analysis:

Status:	Trojan.CoinMiner (on last analysis)
Analysis Date:	2024-04-18 23:05:53 (2 years ago)

Overview

Digital Signature

Signed By:	AtrtisDev Group P
Status:	Valid

Common Places:

%sysdrive%\$recycle.bin

Geography:

100.0%

OS Version:

Windows 10

100.0%

Analysis

PE Info:

Subsystem:	Windows GUI
PE Type:	pe
OS Bitness:	64
Image Base:
Entry Address:

PE Sections:

Name	Size of data	MD5
.text	739328	9474d9131afd40525091b26b8a030002
.rsrc	69632	3c44da321603d47f88c75a19781ccd08

More information:

Search on Virustotal

Download GridinSoft Anti-Malware - Removal tool for $RRWIGBI.exe

copyright for information about $RRWIGBI.exe