How to remove KBWotN.exe
KBWotN.exe
The module KBWotN.exe has been detected as SuspCPUMiner
File Details
| MD5: | f1f906339ea8dd04f078797753074120 |
| Size: | 16 MB |
| First Published: | 2017-12-03 07:10:26 (7 years ago) |
| Latest Published: | 2020-12-27 08:55:50 (4 years ago) |
| Status: | SuspCPUMiner (on last analysis) | |
| Analysis Date: | 2020-12-27 08:55:50 (4 years ago) |
Common Places:
| %programfiles%\kings bounty-warriors of the north-ice and fire |
| %programfiles% |
| %sysdrive% |
| %programfiles% |
Geography:
| 100.0% |
OS Version:
| Windows 7 | 81.8% | |
| Windows 10 | 18.2% |
Analysis
| Subsystem: | Windows GUI |
| PE Type: | pe |
| OS Bitness: | 32 |
| Image Base: | 0x00400000 |
| Entry Address: | 0x0048cc41 |
PE Sections:
| Name | Size of data | MD5 |
| .text | 5081600 | 6d6011a39f5f71f934fc977ea3dea845 |
| .rdata | 7845376 | 62465dd499f07781bf8c9dd3197ac227 |
| .data | 3756544 | 33cdc53ec911020540963914bca4ba89 |
| .rsrc | 90624 | 2c9be68ecba906f3e68c82402670124d |
| .reloc | 501760 | 7782092b633383cd6236fc108925b05f |
More information:
Download GridinSoft
Anti-Malware - Removal tool for KBWotN.exe
