Keygen_For_Fake_2021_11_by_ReverseCodez.exe Trojan CoinMiner - 扫描报告
在线病毒检测器 | v.1.0.183.174 |
数据库版本: | 2024-08-04 02:00:27 |
Trojan.Win32.CoinMiner.ns
CoinMiner是一种利用受害者的计算机资源(主要是CPU和RAM)进行加密货币挖掘(例如Monero或Zcash)的恶意软件。此恶意软件通过将开源挖掘工具集成到系统的启动例程中来建立持久性,而不需要用户的同意。高级的加密货币挖掘程序通常采用定时器配置或CPU使用限制等技术,以悄悄运行并避免检测。
File | Keygen_For_Fake_2021_11_by_ReverseCodez.exe |
已检查 | 2024-08-03 23:23:37 |
MD5 | 6da69b8791c12096042659efcca980c5 |
SHA1 | f0612c041b348a9c36af965257549e588eb8e319 |
SHA256 | 27faca387d9a8e5c7e43366b3eb4e0e108c9bc1bbfade960a7a41eb134f0eae0 |
SHA512 | bd752b04820e4aa862fb4fc9dcd1d2a6571eaf326f043d88544cd0fba953c8ee297be067a0a4c261847efd35896bc5f8b92c0612539f4ec3c5ccd53c2f3b58ff |
Imphash | f34d5f2d4577ed6d9ceec516c1f5a744 |
File Size | 159232 bytes |
Trojan.Win32.CoinMiner.ns 移除
![Trojan.Win32.CoinMiner.ns 移除](/img/antimalware-ad01.webp)
Gridinsoft能够识别并消除Trojan.Win32.CoinMiner.ns,无需进一步的用户干预。
- 首先下载Gridinsoft反恶意软件到您的计算机。
- 双击gsam-zh-install.exe文件,并按照屏幕上的说明安装程序。
- Gridinsoft反恶意软件安装完成后,程序将在扫描屏幕上打开。
- 点击"标准扫描"按钮。
- 扫描过程完成后,点击"立即清除"以移除检测到的威胁。
- 如果需要,重启系统以完成移除过程。
文件版本信息
Translation | 0x0000 0x04b0 |
Comments | |
CompanyName | |
FileDescription | Keygen |
FileVersion | 1.0.0.0 |
InternalName | Keygen2020.exe |
LegalCopyright | Copyright © 2021 |
LegalTrademarks | |
OriginalFilename | Keygen2020.exe |
ProductName | Keygen |
ProductVersion | 1.0.0.0 |
Assembly Version | 1.0.0.0 |
可移植可执行文件信息
![](data:image/png;base64,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) |
97d50cf5e83327b5ad43227830bd48f9
6c49fad5477be665e46394a07ad7e0bf
704dccd4e4e8f0d0 |
Image Base: | 0x00400000 |
Entry Point: | 0x0042c00a |
Compilation: | 2023-02-04 19:09:24 |
Checksum: | 0x00000000 (Actual: 0x00027aee) |
OS Version: | 4.0 |
PEiD: | PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows |
Sign: | The PE file does not contain a certificate table. |
Sections: | 5 |
Imports: |
mscoree,
|
Exports: |
0
|
Resources: | 7 |
区块
名称 |
虚拟地址 |
虚拟大小 |
原始大小 |
MD5 |
熵 |
e^JyB5 ] |
0x00002000 |
0x00014300 |
0x00014400 |
1946f7fdfa4b736fa222126f2a7ccae0 |
8.00 |
.text |
0x00018000 |
0x0000bbcc |
0x0000bc00 |
89c073f6f8030d39cccbc5d7bcb1ad98 |
5.22 |
.rsrc |
0x00024000 |
0x000064a6 |
0x00006600 |
b08970d19f57e9ba3e2026b2bab9cc95 |
4.14 |
|
0x0002c000 |
0x00000010 |
0x00000200 |
6f55453efde4923a1b69cef6bf806365 |
0.14 |
.reloc |
0x0002e000 |
0x0000000c |
0x00000200 |
99cd0cb485d94d155a53d4dd92c3c62f |
0.10 |