How to remove GRW.exe
GRW.exe
The module GRW.exe has been detected as SuspCPUMiner
File Details
| MD5: | dc58e232d880e91d11b299accadd91be |
| Size: | 198 MB |
| First Published: | 2018-12-19 00:21:48 (5 years ago) |
| Latest Published: | 2018-12-19 00:21:48 (5 years ago) |
| Status: | SuspCPUMiner (on last analysis) | |
| Analysis Date: | 2018-12-19 00:21:48 (5 years ago) |
Overview
| Signed By: | Blue Byte GmbH |
| Status: | Valid |
Common Places:
| %sysdrive%\program(x86)\steamapps\common |
Geography:
| 100.0% |
OS Version:
| Windows 10 | 100.0% |
Analysis
| Subsystem: | Windows GUI |
| PE Type: | pe |
| OS Bitness: | 64 |
| Image Base: | 0x0000000140000000 |
| Entry Address: | 0x0c86f020 |
PE Sections:
| Name | Size of data | MD5 |
| .rsrc | 55711744 | 1ba49e924069f31a08159abe9b2ab622 |
| .sdata | 8678400 | 93469438019ee2a1deb0ba229de5ce07 |
| .srdata | 10561536 | 2d2dffbd3aed07ec2d0a6f8936e6bdaa |
| .pdata | 3641856 | b6273af7cb799474340bdcaa34c82fd5 |
| .edata | 131584 | cd735184429eab783510575a930aabf2 |
| .xdata | 512 | b1c4f1469db71fab9cd23a6369edffa4 |
| .data | 6144 | 9cb4b6d18bdd5c2de7a72e9a3a44f64d |
| .rdata | 512 | 7b5b4d9b8d3149a8da15543bdbeeb995 |
| .reloc | 128387584 | 38c0cc04b4277cfc00b1ab8feba7663e |
| .bss | 32768 | 627804c506520e856a938b37ef0344a4 |
| .xpdata | 3584 | c3d8fe86dd86e7bcdfe0a801796a1a27 |
| .idata | 512 | 6e7c5b713077c6033fce691bfc9dbf00 |
| .trace | 6656 | 8cfb7a20d6db5dd126701cd620073f65 |
| .arch | 553984 | b56fa38c622342997f322137979c14d8 |
More information:
Download GridinSoft
Anti-Malware - Removal tool for GRW.exe
