How to remove AMD.exe
AMD.exe
The module AMD.exe has been detected as Trojan.CoinMiner
File Details
Product Name: | MicrosoftHost |
Company Name: | Microsoft Corporation |
MD5: | ab6c3d93586412a089b93dc630979dae |
Size: | 1002 KB |
First Published: | 2018-11-07 16:19:06 (6 years ago) |
Latest Published: | 2018-11-16 04:12:10 (6 years ago) |
Status: | Trojan.CoinMiner (on last analysis) | |
Analysis Date: | 2018-11-16 04:12:10 (6 years ago) |
Common Places:
%commonappdata% |
Geography:
80.0% | ||
20.0% |
OS Version:
Windows 7 | 100.0% |
Analysis
Subsystem: | Windows CUI |
PE Type: | pe |
OS Bitness: | 64 |
Image Base: | 0x0000000140000000 |
Entry Address: | 0x0003f1d4 |
PE Sections:
Name | Size of data | MD5 |
.text | 619520 | 0c893c63ffc9f5f0485662d42ca09de5 |
.rdata | 287744 | 8b7adcb83b6c44284488fe6230f0e758 |
.data | 35328 | 6de7fb0cc0b10da8f7f81cc42b78979b |
.pdata | 29184 | a47fe4cb0b7374ba1b55925715de9a39 |
.rsrc | 48640 | 6b0b05129a898a1d1eb81961bca2eebc |
.reloc | 5120 | e85f44f7cc6cd81d630c556a68fc76a8 |
More information:
Download GridinSoft
Anti-Malware - Removal tool for AMD.exe