How to remove res.exe
res.exe
The module res.exe has been detected as PUP.CoinMiner
File Details
| Product Name: | Skiper DotNetGang |
| Company Name: | JSR .inc |
| MD5: | e362edcfdb2d5622b2e6222408d2aba7 |
| Size: | 1 MB |
| First Published: | 2017-09-12 04:07:37 (7 years ago) |
| Latest Published: | 2017-09-12 04:07:37 (7 years ago) |
| Status: | PUP.CoinMiner (on last analysis) | |
| Analysis Date: | 2017-09-12 04:07:37 (7 years ago) |
Common Places:
| %programfiles%\corner sunshine\res |
Geography:
| 100.0% |
OS Version:
| Windows 7 | 100.0% |
Analysis
| Subsystem: | Windows GUI |
| PE Type: | pe |
| OS Bitness: | 32 |
| Image Base: | 0x00400000 |
| Entry Address: | 0x0000525e |
.NET Info:
| MVID: | 013989b5-b591-4689-a16f-1541ee12845d |
| Typelib ID: | 11f1a75b-616d-4e5c-b0a4-0ed4513275b2 |
PE Sections:
| Name | Size of data | MD5 |
| .text | 13312 | 7e4a465f68eaf2c045ac6388c0f91611 |
| .rsrc | 55808 | 10916eb8062c0e31c4ea6c76f5f21a51 |
| .reloc | 512 | 2690cce0a9f9f4d431fe58aefa82d71c |
More information:
Download GridinSoft
Anti-Malware - Removal tool for res.exe
