How to remove 开源矿工.exe
开源矿工.exe
The module 开源矿工.exe has been detected as Trojan.CoinMiner
File Details
| Product Name: | MinerClient |
| Company Name: | 开源矿工 https://github.com/ntminer/NtMiner |
| MD5: | 3e8da27906cf567e17a2e844ab9ada24 |
| Size: | 5 MB |
| First Published: | 2021-12-19 21:29:28 (3 years ago) |
| Latest Published: | 2021-12-19 21:29:28 (3 years ago) |
| Status: | Trojan.CoinMiner (on last analysis) | |
| Analysis Date: | 2021-12-19 21:29:28 (3 years ago) |
Common Places:
| %sysdrive%\$recycle.bin\s-1-5-21-4031327708-2845879089-1308805700-500\$r9q5tqu |
Geography:
| 100.0% |
OS Version:
| Windows 10 | 100.0% |
Analysis
| Subsystem: | Windows GUI |
| PE Type: | pe |
| OS Bitness: | 32 |
| Image Base: | 0x00400000 |
| Entry Address: | 0x00583efe |
.NET Info:
| MVID: | f37f20da-254d-479a-b4a5-df3cafd588dd |
| Typelib ID: | 4b8a3aec-4021-480a-8c5f-dca17e6867b0 |
PE Sections:
| Name | Size of data | MD5 |
| .text | 5775360 | dc8637869d69491e62caede87e6b5159 |
| .rsrc | 350720 | 4c8d9026efd9a62c8e76a527e3a97b3f |
| .reloc | 512 | 77758dffb920ab39aa510303806a6165 |
More information:
Download GridinSoft
Anti-Malware - Removal tool for 开源矿工.exe
