How to remove ns.exe
ns.exe
The module ns.exe has been detected as Trojan.CoinMiner
File Details
| Product Name: | TODO: <产品名> |
| Company Name: | TODO: <公司名> |
| MD5: | ce398550802490629b47b3d771e43951 |
| Size: | 967 KB |
| First Published: | 2018-09-11 02:10:49 (6 years ago) |
| Latest Published: | 2021-03-30 20:40:37 (4 years ago) |
| Status: | Trojan.CoinMiner (on last analysis) | |
| Analysis Date: | 2021-03-30 20:40:37 (4 years ago) |
Common Places:
| %windir% |
| %windir% |
| %windir% |
Geography:
| 28.6% | ||
| 28.6% | ||
| 14.3% | ||
| 14.3% | ||
| 14.3% |
OS Version:
| Windows 7 | 85.7% | |
| Windows Server 2003 | 14.3% |
Analysis
| Subsystem: | Windows CUI |
| PE Type: | pe |
| OS Bitness: | 32 |
| Image Base: | 0x00400000 |
| Entry Address: | 0x0003336d |
PE Sections:
| Name | Size of data | MD5 |
| .text | 671232 | 72eba64ef61a097a4ff17dbb1841cd05 |
| .rdata | 247808 | a211a1e629acd85fd5e1e3e72ffb8f18 |
| .data | 23552 | 0d839607707e31f498e4b0eb6fecc1c9 |
| .rsrc | 1536 | 8229bee2733389e0bbccc7f30e32d384 |
| .reloc | 45568 | c121f4723e118cdd537ce00e0020a03e |
More information:
Download GridinSoft
Anti-Malware - Removal tool for ns.exe
