How to remove appmodule.exe
- File Details
- Overview
- Analysis
appmodule.exe
The module appmodule.exe has been detected as Trojan.CoinMiner
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
4f8cbcbe1ba5c66d2ff8472c7db3bd18 |
| Size: |
8 MB |
| First Published: |
2018-07-14 07:08:58 (6 years ago) |
| Latest Published: |
2018-11-13 11:11:34 (6 years ago) |
| Status: |
Trojan.CoinMiner (on last analysis) |
|
| Analysis Date: |
2018-11-13 11:11:34 (6 years ago) |
| AppModule.exe |
| appmodule.exe |
|
71.2% |
|
|
9.6% |
|
|
5.8% |
|
|
3.8% |
|
|
3.8% |
|
|
3.8% |
|
|
1.9% |
|
| Windows 10 |
60.8% |
|
| Windows 7 |
37.3% |
|
| Windows 8.1 |
2.0% |
|
Analysis
| Subsystem: |
Windows CUI |
| PE Type: |
pe |
| OS Bitness: |
64 |
| Image Base: |
0x0000000140000000 |
| Entry Address: |
0x0007181c |
| Name |
Size of data |
MD5 |
| .text |
619008 |
df0d5a29a4c6fe303f4a84542e947789 |
| .rdata |
198656 |
5b6ac80f4e8f81027b330da383b66ea8 |
| .data |
49664 |
18fb4d0d5349978da0f663bed07455ee |
| .pdata |
28672 |
c46025c8510c4acd929b10ae56b9eb29 |
| .nv_fatb |
7715840 |
1f17b8b92debb57e7e7066bdcb2e5a1f |
| .nvFatBi |
512 |
8ec85e6f28ef9fdf0f237f1ebff86872 |
| .gfids |
1024 |
16c38fbd4a3483abaab261e93b5b0f80 |
| .tls |
512 |
1f354d76203061bfdd5a53dae48d5435 |
| .rsrc |
48640 |
84003f20e9a43a21c5389474ee9e06fe |
| .reloc |
5632 |
74e370d393b2d2972373b532cd56fb94 |
