How to remove McMpEng.exe
- File Details
- Overview
- Analysis
McMpEng.exe
The module McMpEng.exe has been detected as Risk.CoinMiner
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
30619c2c8387c93e97c79c10d533ffb2 |
| Size: |
4 MB |
| First Published: |
2018-10-03 08:14:45 (6 years ago) |
| Latest Published: |
2018-10-03 09:10:50 (6 years ago) |
| Status: |
Risk.CoinMiner (on last analysis) |
|
| Analysis Date: |
2018-10-03 09:10:50 (6 years ago) |
| Windows Server 2008 R2 |
100.0% |
|
Analysis
| Subsystem: |
Windows CUI |
| PE Type: |
pe |
| OS Bitness: |
64 |
| Image Base: |
0x0000000000400000 |
| Entry Address: |
0x000014e0 |
| Name |
Size of data |
MD5 |
| .text |
3320832 |
4fc171ecce67f7c1d778ad2d62a4a786 |
| .data |
77824 |
2ff463ee3f082be45942b3f6eefecaae |
| .rdata |
638976 |
456a6bced7964b30a601332e2341c6d1 |
| .pdata |
128512 |
e3b6250581a18713a49146043992ff52 |
| .xdata |
151552 |
5497263e3f83c470df8a3921965371d4 |
| .bss |
0 |
00000000000000000000000000000000 |
| .idata |
14336 |
0180b28198afadb279cfd0761367d3cc |
| .CRT |
512 |
2d8bbf4a0129590113ac27a2adab9fa0 |
| .tls |
512 |
bf619eac0cdf3f68d496ea9344137e8b |
| .rsrc |
2560 |
5059aa3b3258d60a4f3b062a67514f58 |
