How to remove rdpclip.exe
- File Details
- Overview
- Analysis
rdpclip.exe
The module rdpclip.exe has been detected as Trojan.CoinMiner
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
e1d84e3386aabc3daa0847cd9398a9c8 |
| Size: |
337 KB |
| First Published: |
2018-03-12 09:03:09 (6 years ago) |
| Latest Published: |
2020-11-21 18:13:49 (4 years ago) |
| Status: |
Trojan.CoinMiner (on last analysis) |
|
| Analysis Date: |
2020-11-21 18:13:49 (4 years ago) |
| %windir%\fonts\thumb\77c4ad3f3cb3d812d68fab7a354d4a63 |
| %windir%\help |
| %windir%\fonts\fonts\77c4ad3f3cb3d812d68fab7a354d4a79 |
| %windir%\fonts\thumb\77c4ad3f3cb3d812d68fab7a354d4a77 |
| %windir% |
| %windir% |
| %windir% |
| %windir% |
| %windir% |
|
22.2% |
|
|
22.2% |
|
|
16.7% |
|
|
11.1% |
|
|
11.1% |
|
|
11.1% |
|
|
5.6% |
|
| Windows 7 |
38.9% |
|
| Windows Server 2008 R2 |
22.2% |
|
| Windows Server 2012 R2 |
22.2% |
|
| Windows Server 2016 |
16.7% |
|
Analysis
| Subsystem: |
Windows CUI |
| PE Type: |
pe |
| OS Bitness: |
64 |
| Image Base: |
0x0000000140000000 |
| Entry Address: |
0x0001b9b0 |
| Name |
Size of data |
MD5 |
| .text |
144384 |
2565872698a60f8c25c6ff4e68066c85 |
| .rdata |
31232 |
06a27cf51bc80f1a474b60cc7c384652 |
| .data |
7680 |
ddca383eee9dc3b16d7032106dd9656e |
| .pdata |
7168 |
aa7f2a99869759897b445353eb04fe90 |
| .rsrc |
154112 |
f6086637f220701976fc2d868d88e904 |
