How to remove proxycheck.exe
- File Details
- Overview
- Analysis
proxycheck.exe
The module proxycheck.exe has been detected as Risk.CoinMiner
File Details
| Product Name: |
|
| MD5: |
4521bb0553cadf5dd2288cad2e4b6af1 |
| Size: |
2 MB |
| First Published: |
2021-10-20 20:52:03 (3 years ago) |
| Latest Published: |
2021-10-20 20:55:34 (3 years ago) |
| Status: |
Risk.CoinMiner (on last analysis) |
|
| Analysis Date: |
2021-10-20 20:55:34 (3 years ago) |
Overview
| %appdata%\agdata\stuff |
| %sysdrive%\restored files\c\users\golde\appdata\roaming\agdata\stuff |
| %sysdrive%\janice\backup set 2021-09-06 113718\backup files 2021-10-04 091535\c\users\golde\appdata\roaming\agdata\stuff |
| %desktop%\restored files\c\users\golde\appdata\roaming\agdata\stuff |
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
64 |
| Image Base: |
0x0000000140000000 |
| Entry Address: |
0x0020e554 |
| Name |
Size of data |
MD5 |
| .text |
2399232 |
fd9ba040aca7ac949ac0b5fc8dc2e694 |
| .rdata |
363008 |
c2850ebf9f5cb3a65e4be61e0e7a6cd7 |
| .data |
22016 |
081dd851c0cf66396af89d88e9b549eb |
| .pdata |
118784 |
38320b8d4a14bdead21f2c60c681d894 |
| _RDATA |
512 |
a63ef812dc654111c650e7ffd70df1fc |
| .rsrc |
91648 |
835339a77c710ebd83528e1c5673b332 |
| .reloc |
15872 |
e23241252110e4a6f5a03ae2304d1cc2 |
