How to remove HFHelper64.exe
- File Details
- Overview
- Analysis
HFHelper64.exe
The module HFHelper64.exe has been detected as Trojan.CoinMiner
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
b88d219930fc0b4dd9f5121fa2d38481 |
| Size: |
346 KB |
| First Published: |
2019-03-16 18:06:27 (5 years ago) |
| Latest Published: |
2020-02-04 14:57:32 (4 years ago) |
| Status: |
Trojan.CoinMiner (on last analysis) |
|
| Analysis Date: |
2020-02-04 14:57:32 (4 years ago) |
Overview
| %appdata%\hashfish |
| %appdata%\hashfish |
| %appdata%\hashfish |
| %sysdrive%\softwares\crypto currency\miners\hash.fish |
| %sysdrive%\softwares\crypto currency\miners\hash.fish |
| Windows 8.1 |
57.1% |
|
| Windows 10 |
28.6% |
|
| Windows 7 |
14.3% |
|
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
64 |
| Image Base: |
0x0000000140000000 |
| Entry Address: |
0x00016c9c |
| Name |
Size of data |
MD5 |
| .text |
166400 |
8c1a10a779027a74a2fe5b1a619de36e |
| .rdata |
102912 |
8aa4dfb2694cb3c8b52a16f450bf11f7 |
| .data |
3072 |
758f5b2d9f80d7ba036c7b2dfaf03e42 |
| .pdata |
9728 |
febb4898317d7e2cb214386a9848dbf8 |
| .rsrc |
55296 |
123824613aa29a76c3fabf8acf331072 |
| .reloc |
3072 |
d621fcf0f5a9ad641a21c1922e9b96d8 |
