How to remove NsCpuCNMiner32.exe
- File Details
- Overview
- Analysis
NsCpuCNMiner32.exe
The module NsCpuCNMiner32.exe has been detected as Trojan.CoinMiner
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
e8e50cfa7f6fe0c3b54cb1e11e92960c |
| Size: |
2 MB |
| First Published: |
2019-03-06 04:03:47 (6 years ago) |
| Latest Published: |
2021-03-16 21:33:54 (4 years ago) |
| Status: |
Trojan.CoinMiner (on last analysis) |
|
| Analysis Date: |
2021-03-16 21:33:54 (4 years ago) |
| %appdata% |
| %appdata% |
| %appdata% |
| %appdata% |
| %appdata% |
| %appdata% |
| %appdata% |
| %appdata% |
| %appdata% |
| %appdata% |
|
15.0% |
|
|
11.1% |
|
|
8.9% |
|
|
8.9% |
|
|
8.3% |
|
|
6.7% |
|
|
6.1% |
|
|
6.1% |
|
|
5.0% |
|
|
2.8% |
|
|
2.2% |
|
|
2.2% |
|
|
1.7% |
|
|
1.7% |
|
|
1.7% |
|
|
1.1% |
|
|
1.1% |
|
|
1.1% |
|
|
1.1% |
|
|
1.1% |
|
|
0.6% |
|
|
0.6% |
|
|
0.6% |
|
|
0.6% |
|
|
0.6% |
|
|
0.6% |
|
|
0.6% |
|
|
0.6% |
|
|
0.6% |
|
|
0.6% |
|
|
0.6% |
|
| Windows 7 |
64.6% |
|
| Windows Server 2008 R2 |
19.7% |
|
| Windows 10 |
5.1% |
|
| Windows 8.1 |
4.5% |
|
| Windows Vista |
3.9% |
|
| Windows Server 2012 R2 |
1.7% |
|
| Windows 8 |
0.6% |
|
Analysis
| Subsystem: |
Windows CUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x00001500 |
| Name |
Size of data |
MD5 |
| .text |
2187264 |
da1421ed054a74167b4de760d3f69974 |
| .data |
6144 |
3f9958af39bcfb15d1ea5c8cfcca60b3 |
| .rdata |
121856 |
b334945ec9c7fe0f6bd6e0bd56bfe2b9 |
| .eh_fram |
341504 |
99f04145399c8ca814cc2bc2e943a7ba |
| .bss |
0 |
00000000000000000000000000000000 |
| .edata |
1536 |
314a5973abe95732aa9ba6e756c7e274 |
| .idata |
9728 |
66a72d41a46c22cfb0cb4b2b97d6a26f |
| .CRT |
512 |
b1c78c04e595365fa20ec7e224da78fc |
| .tls |
512 |
a6562187239314f355e72188924d0da8 |
| .rsrc |
23816 |
5e2eb6d8d9e1a74ba0a486c12ef86876 |
| .reloc |
55296 |
fe34739691796d88e8a644140709b246 |
