How to remove AppModule.exe
- File Details
- Overview
- Analysis
AppModule.exe
The module AppModule.exe has been detected as Risk.CoinMiner
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
9d549a14324946d176046fa68e6e49ed |
| Size: |
11 MB |
| First Published: |
2018-10-21 18:10:43 (6 years ago) |
| Latest Published: |
2019-06-16 11:01:01 (5 years ago) |
| Status: |
Risk.CoinMiner (on last analysis) |
|
| Analysis Date: |
2019-06-16 11:01:01 (5 years ago) |
| %commonappdata% |
| %commonappdata% |
| %commonappdata% |
|
40.0% |
|
|
28.0% |
|
|
20.0% |
|
|
8.0% |
|
|
4.0% |
|
| Windows 7 |
60.0% |
|
| Windows 10 |
40.0% |
|
Analysis
| Subsystem: |
Windows CUI |
| PE Type: |
pe |
| OS Bitness: |
64 |
| Image Base: |
0x0000000140000000 |
| Entry Address: |
0x001a2bc0 |
| Name |
Size of data |
MD5 |
| .text |
1913856 |
ba147a5c7b9ffefcd91a7764cfb18127 |
| .rdata |
782848 |
3c0279648ee9e47b3141db7f1a8e4265 |
| .data |
70144 |
52148a160d8d42ab3824ee41705b76a3 |
| .pdata |
101888 |
11bd08e3e88ded28ced551a71d883f41 |
| .nv_fatb |
9183744 |
5289b76e80f5b3b32e49ce0f60065673 |
| .nvFatBi |
512 |
1520b372fecb32bd8a7de0073be9421d |
| .gfids |
1024 |
db65b05eecff2a0ca3a8f1042281b948 |
| .tls |
512 |
1f354d76203061bfdd5a53dae48d5435 |
| .rsrc |
48640 |
c2c2a3b0d2c51d21f0fbd8ccd596c3f4 |
| .reloc |
29696 |
8ff92c0cab6534aa17d71d71c89a4a5a |
