How to remove NVIDIA_Cure.exe
- File Details
- Overview
- Analysis
NVIDIA_Cure.exe
The module NVIDIA_Cure.exe has been detected as Trojan.CoinMiner
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
f08ab58c8ed494fefff863247ca55462 |
| Size: |
7 MB |
| First Published: |
2018-08-26 15:09:31 (5 years ago) |
| Latest Published: |
2018-08-26 15:09:38 (5 years ago) |
| Status: |
Trojan.CoinMiner (on last analysis) |
|
| Analysis Date: |
2018-08-26 15:09:38 (5 years ago) |
| %temp%\{3bbbdacf-958e-11e8-b03b-806e6f6e6963} |
| %commonappdata% |
| %localappdata%\microsoft\windows\inetcache\ie |
| nvhwnd.exe |
| NVIDIA_Cure.exe |
| nvidia.vmp[1].exe |
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
64 |
| Image Base: |
0x0000000140000000 |
| Entry Address: |
0x012b4c0e |
| Name |
Size of data |
MD5 |
| .text |
0 |
00000000000000000000000000000000 |
| .rdata |
0 |
00000000000000000000000000000000 |
| .data |
0 |
00000000000000000000000000000000 |
| .pdata |
0 |
00000000000000000000000000000000 |
| .nv_fatb |
0 |
00000000000000000000000000000000 |
| .nvFatBi |
0 |
00000000000000000000000000000000 |
| .gfids |
0 |
00000000000000000000000000000000 |
| .tls |
512 |
1f354d76203061bfdd5a53dae48d5435 |
| .vmp0 |
0 |
00000000000000000000000000000000 |
| .vmp1 |
7427584 |
537308261e52eb4ab553e3e3888b8d4b |
| .reloc |
512 |
56e094063f108d1a9a1a0b5a55b15940 |
| .rsrc |
543744 |
3db7b2142a94708e04aa0b32f4a329ab |
