How to remove Service.exe
- File Details
- Overview
- Analysis
Service.exe
The module Service.exe has been detected as Trojan.CoinMiner
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
aed1b16a98e91d5032b600551d64f120 |
| Size: |
13 MB |
| First Published: |
2017-08-31 02:07:56 (6 years ago) |
| Latest Published: |
2017-11-06 06:02:59 (6 years ago) |
| Status: |
Trojan.CoinMiner (on last analysis) |
|
| Analysis Date: |
2017-11-06 06:02:59 (6 years ago) |
| %windir%\syswow64 |
| %windir%\system32 |
|
25.0% |
|
|
12.5% |
|
|
12.5% |
|
|
12.5% |
|
|
12.5% |
|
|
12.5% |
|
|
12.5% |
|
| Windows 10 |
50.0% |
|
| Windows 8.1 |
25.0% |
|
| Windows 7 |
25.0% |
|
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x0057bb05 |
| Name |
Size of data |
MD5 |
| .textbss |
0 |
00000000000000000000000000000000 |
| .text |
11592704 |
fa552670c2bc5c7b07c101aa5365b5f0 |
| .rdata |
1852928 |
f4ffc0ece9f1096a82f1176a3d1ee7f1 |
| .data |
129536 |
afd2b921ea757765f10514d0c67350df |
| .idata |
31744 |
e9ee6241408fe5010a998c065e9956f8 |
| .tls |
1024 |
c573bd7cea296a9c5d230ca6b5aee1a6 |
| .00cfg |
512 |
e4ecb76b26af8c6e56b4ca72661f60e2 |
| .rsrc |
104960 |
fdb7ceaa90b6af3f53d0bd4baf9bf240 |
| .reloc |
489984 |
0bf8ac5855e35076922b94aa5df3cdae |
