How to remove ShKernel.exe
- File Details
- Overview
- Analysis
ShKernel.exe
The module ShKernel.exe has been detected as SuspCPUMiner
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
dddecbfe80bbfd1abe57ffd5c1a1bead |
| Size: |
9 MB |
| First Published: |
2018-06-15 20:12:39 (6 years ago) |
| Latest Published: |
2020-04-04 16:53:14 (4 years ago) |
| Status: |
SuspCPUMiner (on last analysis) |
|
| Analysis Date: |
2020-04-04 16:53:14 (4 years ago) |
Overview
| %programfiles%\enigmasoft |
| %programfiles%\enigmasoft |
| %programfiles%\enigmasoft |
|
45.0% |
|
|
15.0% |
|
|
10.0% |
|
|
5.0% |
|
|
5.0% |
|
|
5.0% |
|
|
5.0% |
|
|
5.0% |
|
|
5.0% |
|
| Windows 7 |
50.0% |
|
| Windows 10 |
40.0% |
|
| Windows 8 |
5.0% |
|
| Windows 8.1 |
5.0% |
|
Analysis
| Subsystem: |
Windows CUI |
| PE Type: |
pe |
| OS Bitness: |
64 |
| Image Base: |
0x0000000140000000 |
| Entry Address: |
0x003420a8 |
| Name |
Size of data |
MD5 |
| .text |
6867968 |
a4ceb00d4c13ada9b603fd4b65a729ab |
| .rdata |
2095104 |
f63795cefcd23c0257a3f1b30fba77a1 |
| .data |
410112 |
ba6fb6eb04c5820fe7647b0903050c32 |
| .pdata |
364032 |
761e5e102a3aa7a7ea26105258539a83 |
| .gfids |
3584 |
838f670dd2e32703dc93be3fbc9551f0 |
| .tls |
512 |
1f354d76203061bfdd5a53dae48d5435 |
| .rsrc |
68608 |
b9a3a9899aac9b13212a2b68632f76e1 |
| .reloc |
48128 |
b3e5155dc073c22734df240e2e39fe6c |
