How to remove SystemOneDriveSvc64a.exe

SystemOneDriveSvc64a.exe

The module SystemOneDriveSvc64a.exe has been detected as Trojan.CoinMiner

SystemOneDriveSvc64a.exe
Remove SystemOneDriveSvc64a

File Details

MD5: 94938356e619c32cd4073ef9b00774ee
Size: 2 MB
First Published: 2025-05-31 23:03:21 (3 days ago)
Latest Published: 2025-05-31 23:03:21 (3 days ago)
Status: Trojan.CoinMiner (on last analysis)
Analysis Date: 2025-05-31 23:03:21 (3 days ago)

Common Places:

%system%\config\systemprofile\appdata\roaming\microsoft

Geography:

100.0%

OS Version:

Windows 10 100.0%

Analysis

Subsystem: Windows CUI
PE Type: pe
OS Bitness: 64
Image Base: 0x0000000140000000
Entry Address: 0x007c8218

PE Sections:

Name Size of data MD5
0 d41d8cd98f00b204e9800998ecf8427e
0 d41d8cd98f00b204e9800998ecf8427e
0 d41d8cd98f00b204e9800998ecf8427e
0 d41d8cd98f00b204e9800998ecf8427e
0 d41d8cd98f00b204e9800998ecf8427e
0 d41d8cd98f00b204e9800998ecf8427e
0 d41d8cd98f00b204e9800998ecf8427e
0 d41d8cd98f00b204e9800998ecf8427e
.rsrc 1536 b31fd42972976110de93dbf8dbf1e8de
145408 b3a07203e81d008770505ab95e971016

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for SystemOneDriveSvc64a.exe
copyright for information about SystemOneDriveSvc64a.exe