How to remove IM_FIX.EXE
IM_FIX.EXE
The module IM_FIX.EXE has been detected as Risk.CoinMiner
File Details
| MD5: | 43c816e02a249aa9fd239b7dd73ef938 |
| Size: | 845 KB |
| First Published: | 2018-01-12 17:02:15 (7 years ago) |
| Latest Published: | 2018-05-23 15:13:37 (6 years ago) |
| Status: | Risk.CoinMiner (on last analysis) | |
| Analysis Date: | 2018-05-23 15:13:37 (6 years ago) |
Overview
| Signed By: | IncrediMail, Inc. |
| Status: | Valid |
Common Places:
| %sysdrive%\lexor 60gb\my backup files |
| %sysdrive%\lexor 60gb\purchased |
| %sysdrive%\file history\purchased |
| %sysdrive%\lexor 60gb\files |
| %sysdrive%\lexor 60gb\files\purchases |
| %sysdrive%\seagate 128\purchased |
| %sysdrive%\seagate 128\my backup files |
| %mydoc% |
File Names:
| IM_fix.exe |
| IM_FIX.EXE |
Geography:
| 90.9% | ||
| 9.1% |
OS Version:
| Windows 10 | 90.9% | |
| Windows 8.1 | 9.1% |
Analysis
| Subsystem: | Windows GUI |
| PE Type: | pe |
| OS Bitness: | 32 |
| Image Base: | 0x00400000 |
| Entry Address: | 0x00027f4a |
PE Sections:
| Name | Size of data | MD5 |
| .text | 581120 | c2c2260508750422d20cd5cbb116b146 |
| .rdata | 188928 | 4513b58651e3d8d87c81a396e5b2f1d1 |
| .data | 20992 | c2de4a3d214eae7e87c7bfc06bd79775 |
| .rsrc | 38912 | b465f23637fdb78127ec722979f7a1e8 |
| .reloc | 29184 | 1254908a9a03d2bcf12045d49cd572b9 |
More information:
Download GridinSoft
Anti-Malware - Removal tool for IM_FIX.EXE
