How to remove CleanWork.exe.quarantined
- File Details
- Overview
- Analysis
CleanWork.exe.quarantined
The module CleanWork.exe.quarantined has been detected as Trojan.CoinMiner
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
25bbe4f683fee440c0333d06b3cdad47 |
| Size: |
539 KB |
| First Published: |
2017-12-19 12:06:03 (6 years ago) |
| Latest Published: |
2019-05-11 10:52:34 (5 years ago) |
| Status: |
Trojan.CoinMiner (on last analysis) |
|
| Analysis Date: |
2019-05-11 10:52:34 (5 years ago) |
| %appdata% |
| %appdata% |
| %appdata% |
| CleanWork.exe |
| CleanWork.exe.quarantined |
| CheckingVersion.exe |
| trzB671.tmp |
| trzEDAA.tmp |
| trz7FF2.tmp |
|
20.8% |
|
|
12.5% |
|
|
8.3% |
|
|
8.3% |
|
|
8.3% |
|
|
8.3% |
|
|
4.2% |
|
|
4.2% |
|
|
4.2% |
|
|
4.2% |
|
|
4.2% |
|
|
4.2% |
|
|
4.2% |
|
|
4.2% |
|
| Windows 10 |
50.0% |
|
| Windows 7 |
33.3% |
|
| Windows 8.1 |
12.5% |
|
| Windows 8 |
4.2% |
|
Analysis
| Subsystem: |
Windows CUI |
| PE Type: |
pe |
| OS Bitness: |
64 |
| Image Base: |
0x0000000140000000 |
| Entry Address: |
0x00027100 |
| Name |
Size of data |
MD5 |
| .text |
387584 |
fbd3f0e112e654e4c44f36c169f54a84 |
| .rdata |
111104 |
0eb308cad70d54190a39d21e567ae78c |
| .data |
29696 |
02ef309696986f35aa4ae6c71af9e93e |
| .pdata |
18432 |
c9541ca125522c9bb660390afd1397c7 |
| .rsrc |
1536 |
4b67ed626f484ad9d7879968fdaac127 |
| .reloc |
3072 |
c317f54dc56f44c9d574cccaed04ae93 |
