How to remove ShKernel.exe
- File Details
- Overview
- Analysis
ShKernel.exe
The module ShKernel.exe has been detected as SuspCPUMiner
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
d67267b39d5da9161dbbb8f7c383f5ba |
| Size: |
10 MB |
| First Published: |
2019-05-12 17:07:07 (5 years ago) |
| Latest Published: |
2019-05-29 17:19:52 (5 years ago) |
| Status: |
SuspCPUMiner (on last analysis) |
|
| Analysis Date: |
2019-05-29 17:19:52 (5 years ago) |
Overview
| %programfiles%\enigmasoft |
| %programfiles%\enigmasoft |
| %programfiles%\enigmasoft |
| %programfiles%\enigmasoft |
| Windows 10 |
75.0% |
|
| Windows 8.1 |
25.0% |
|
Analysis
| Subsystem: |
Windows CUI |
| PE Type: |
pe |
| OS Bitness: |
64 |
| Image Base: |
0x0000000140000000 |
| Entry Address: |
0x0042a868 |
| Name |
Size of data |
MD5 |
| .text |
8123904 |
5fcd6c8e51233b385b3d2f0b3fae96fd |
| .rdata |
2613248 |
897f0f5c5ee4bea3410972980baed4aa |
| .data |
158208 |
1b2710daa7131ada3b12e00643eda604 |
| .pdata |
407552 |
cf2b9732ebfe92f02e38a8f43b56cd89 |
| .gfids |
3584 |
878889a59a1511dcce316bb0d788a4e6 |
| .tls |
512 |
1f354d76203061bfdd5a53dae48d5435 |
| .rsrc |
75776 |
535ac967488ceadb1a775feae967c17a |
| .reloc |
53248 |
ae02e4f961fbdd9cb354f3dcea391c95 |
