How to remove xmrig-amd.exe
- File Details
- Overview
- Analysis
xmrig-amd.exe
The module xmrig-amd.exe has been detected as Risk.CoinMiner
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
5e19c0123ce32ed09e092a813f835a1d |
| Size: |
2 MB |
| First Published: |
2018-12-23 21:08:50 (5 years ago) |
| Latest Published: |
2020-08-21 11:12:28 (4 years ago) |
| Status: |
Risk.CoinMiner (on last analysis) |
|
| Analysis Date: |
2020-08-21 11:12:28 (4 years ago) |
| %sysdrive%\$recycle.bin\s-1-5-21-641390051-2544432917-3116335679-1000\$rx7vqz9.exe |
| %sysdrive%\$recycle.bin\s-1-5-21-641390051-2544432917-3116335679-1000\$ripv7qy.exe |
| %sysdrive%\$recycle.bin\s-1-5-21-641390051-2544432917-3116335679-1000\$r7o1iay.exe |
| %temp%\rar$exa5024.28852 |
| %desktop% |
| %desktop%\xmrig-amd-2.8.4懶人包.zip |
| %temp%\rar$exa5024.29084 |
| Windows 10 |
57.1% |
|
| Windows 7 |
42.9% |
|
Analysis
| Subsystem: |
Windows CUI |
| PE Type: |
pe |
| OS Bitness: |
64 |
| Image Base: |
0x0000000140000000 |
| Entry Address: |
0x00165a24 |
| Name |
Size of data |
MD5 |
| .text |
1863680 |
61e21171cce81e6054937e909ff5132a |
| .rdata |
844800 |
258ed5b17f1ef668aba752a3b368927c |
| .data |
56832 |
e6c37582f11e243f2365c4ea95ccef56 |
| .pdata |
92160 |
3e25933eeba94f0a7b033682dc043493 |
| .rsrc |
23040 |
7fc19d82b74f04683a4243c58c700957 |
| .reloc |
28672 |
6b98f090cb63df185c9de81b7c8f66fd |
