How to remove service.exe
- File Details
- Overview
- Analysis
service.exe
The module service.exe has been detected as Trojan.CoinMiner
File Details
Product Name: |
|
Company Name: |
|
MD5: |
7122ea0183d0d5c115ae4f02697fba91 |
Size: |
13 MB |
First Published: |
2017-08-26 16:01:45 (6 years ago) |
Latest Published: |
2020-06-18 08:26:17 (3 years ago) |
Status: |
Trojan.CoinMiner (on last analysis) |
|
Analysis Date: |
2020-06-18 08:26:17 (3 years ago) |
%windir%\system32 |
%windir%\syswow64 |
%sysdrive%\adwcleaner\quarantine\zpzrikypzg |
%system% |
Service.exe |
service.exe |
/service.exe |
|
16.7% |
|
|
13.0% |
|
|
13.0% |
|
|
7.4% |
|
|
6.5% |
|
|
5.6% |
|
|
3.7% |
|
|
3.7% |
|
|
2.8% |
|
|
2.8% |
|
|
2.8% |
|
|
2.8% |
|
|
1.9% |
|
|
1.9% |
|
|
1.9% |
|
|
1.9% |
|
|
1.9% |
|
|
0.9% |
|
|
0.9% |
|
|
0.9% |
|
|
0.9% |
|
|
0.9% |
|
|
0.9% |
|
|
0.9% |
|
|
0.9% |
|
|
0.9% |
|
|
0.9% |
|
|
0.9% |
|
Windows 10 |
50.9% |
|
Windows 7 |
31.5% |
|
Windows 8.1 |
9.3% |
|
Windows 8 |
7.4% |
|
Windows XP |
0.9% |
|
Analysis
Subsystem: |
Windows GUI |
PE Type: |
pe |
OS Bitness: |
32 |
Image Base: |
0x00400000 |
Entry Address: |
0x0057bb14 |
Name |
Size of data |
MD5 |
.textbss |
0 |
00000000000000000000000000000000 |
.text |
11592704 |
9518c9bcd59b03f2e01d8bbfbdcd672b |
.rdata |
1852928 |
90e0e0ceaa71f9c07e66073299a560db |
.data |
129536 |
8d22b510587e0451f5a4720f451e07cd |
.idata |
31744 |
e9ee6241408fe5010a998c065e9956f8 |
.tls |
1024 |
c573bd7cea296a9c5d230ca6b5aee1a6 |
.00cfg |
512 |
f9700d6a7ab0fab804873b4e4e190a2a |
.rsrc |
104960 |
fdb7ceaa90b6af3f53d0bd4baf9bf240 |
.reloc |
489984 |
9ddab4735b230d44101c2c54bdf9352a |