How to remove isMiner.exe
- File Details
- Overview
- Analysis
isMiner.exe
The module isMiner.exe has been detected as Trojan.CoinMiner
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
38c5fa172844048e8cbf8b6a01313350 |
| Size: |
2 MB |
| First Published: |
2017-08-23 03:06:12 (7 years ago) |
| Latest Published: |
2017-10-07 08:12:40 (7 years ago) |
| Status: |
Trojan.CoinMiner (on last analysis) |
|
| Analysis Date: |
2017-10-07 08:12:40 (7 years ago) |
| %localappdata%\temp |
| %appdata%\isminer |
| %sysdrive%\adwcleaner\quarantine\zmrf6ci6nx |
|
48.6% |
|
|
11.4% |
|
|
8.6% |
|
|
8.6% |
|
|
5.7% |
|
|
5.7% |
|
|
5.7% |
|
|
2.9% |
|
|
2.9% |
|
| Windows 7 |
79.5% |
|
| Windows 10 |
15.4% |
|
| Windows 8.1 |
5.1% |
|
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x00291650 |
| Name |
Size of data |
MD5 |
| .text |
2678784 |
5bad92c78a751b49995b8a0426aec661 |
| .itext |
10240 |
620ff066696ece365fa12e00ba48b0d6 |
| .data |
44544 |
36f8faf5e7a94ddaf77ec85f0053d54f |
| .bss |
0 |
00000000000000000000000000000000 |
| .idata |
14848 |
a745cf8ba96aea07088501186cc541a1 |
| .didata |
3072 |
3dbb9753a5ef6c06c0334da0a2bbcdec |
| .edata |
512 |
62efe94f8db6eda2dc9a19d89118a69c |
| .tls |
0 |
00000000000000000000000000000000 |
| .rdata |
512 |
5adf0571169900f658e38ecb6d002a48 |
| .rsrc |
267776 |
22e46a34c1f8a33734980a6314fe22e8 |
