How to remove Microsoft.Windows.Simulator.exe
- File Details
- Overview
- Analysis
Microsoft.Windows.Simulator.exe
The module Microsoft.Windows.Simulator.exe has been detected as Trojan.CoinMiner
File Details
| MD5: |
26140a7705b78759b69c2484cece4175 |
| Size: |
301 KB |
| First Published: |
2017-10-30 13:12:13 (6 years ago) |
| Latest Published: |
2017-10-30 13:12:13 (6 years ago) |
| Status: |
Trojan.CoinMiner (on last analysis) |
|
| Analysis Date: |
2017-10-30 13:12:13 (6 years ago) |
| %commondir%\microsoft shared\windows simulator\14.0 |
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x000080e4 |
| Name |
Size of data |
MD5 |
| CODE |
29696 |
ca3464d4f08c9010e7ffa2fe3e890344 |
| DATA |
1024 |
7ffc3168a7f3103634abdf3a768ed128 |
| BSS |
0 |
00000000000000000000000000000000 |
| .idata |
2560 |
6e7a45521bfca94f1e506361f70e7261 |
| .tls |
0 |
00000000000000000000000000000000 |
| .rdata |
512 |
7e6c0f4f4435abc870eb550d5072bad6 |
| .reloc |
1536 |
16968c66d220638496d6b095f21de777 |
| .rsrc |
5120 |
18d0d23f080bf92a1a3ef82a0e9bb7e8 |
