How to remove dether.exe
dether.exe
The module dether.exe has been detected as Risk.CoinMiner
File Details
| Product Name: | XMRig-NVIDIA |
| Company Name: | www.xmrig.com |
| MD5: | d72b71b5fefdd0d2e86cc20511c732f2 |
| Size: | 11 MB |
| First Published: | 2018-10-19 10:11:43 (6 years ago) |
| Latest Published: | 2019-05-04 19:20:42 (5 years ago) |
| Status: | Risk.CoinMiner (on last analysis) | |
| Analysis Date: | 2019-05-04 19:20:42 (5 years ago) |
Common Places:
| %appdata%\adobe |
| %appdata%\adobe |
| %appdata%\adobe |
Geography:
| 44.4% | ||
| 13.9% | ||
| 11.1% | ||
| 8.3% | ||
| 8.3% | ||
| 5.6% | ||
| 5.6% | ||
| 2.8% |
OS Version:
| Windows 7 | 69.4% | |
| Windows 10 | 22.2% | |
| Windows 8 | 5.6% | |
| Windows 8.1 | 2.8% |
Analysis
| Subsystem: | Windows CUI |
| PE Type: | pe |
| OS Bitness: | 64 |
| Image Base: | 0x0000000140000000 |
| Entry Address: | 0x001a2ba0 |
PE Sections:
| Name | Size of data | MD5 |
| .text | 1913856 | 67ec068972fea70719c4da7d1f7f0f59 |
| .rdata | 782848 | 4876f596939c44f4b98d090d1b70379f |
| .data | 70144 | c1dfca70e14357a9e79315c8129df8e8 |
| .pdata | 101888 | 0b9e780ead9bbe2a165999acb9dc1307 |
| .nv_fatb | 9185792 | 933b4bdf6d869d6e2b11ecc563a8ea13 |
| .nvFatBi | 512 | e11b0e34c934f8ee842043d0c5bba850 |
| .gfids | 1024 | db65b05eecff2a0ca3a8f1042281b948 |
| .tls | 512 | 1f354d76203061bfdd5a53dae48d5435 |
| .rsrc | 23552 | 3c2d49ab733399d03b02c16891ca5693 |
| .reloc | 29696 | 8ff92c0cab6534aa17d71d71c89a4a5a |
More information:
Download GridinSoft
Anti-Malware - Removal tool for dether.exe
