Xmrig.exe Risk B - 扫描报告
| 在线病毒检测器 | v.1.0.172.174 |
| 数据库版本: | 2024-04-20 13:00:34 |
Risk.CoinMiner.B.vl!yf
| File | xmrig.exe |
| 已检查 | 2024-04-20 13:23:19 |
| MD5 | 72061021a062ab5f5985635eb6dbd510 |
| SHA1 | ba71f867fa785f4709e988d62e47d7c5b1e40836 |
| SHA256 | 60ad648c1e48af06869573320bc25d824c10d141e4f919d1e45aa4992445db85 |
| SHA512 | 70e0cbad9c93a6220a8622c43d4cad07268964f5b16915a3a9e9b1cfa819299f8d32865dbc369faabd452ba6fac31dee6ab818bb24f700324550280222418467 |
| Imphash | d27adcc63481fa934ef3ba9e672732b2 |
| File Size | 9507840 bytes |
Risk.CoinMiner.B.vl!yf 移除
Gridinsoft能够识别并消除Risk.CoinMiner.B.vl!yf，无需进一步的用户干预。
- 首先下载Gridinsoft反恶意软件到您的计算机。
- 双击gsam-zh-install.exe文件，并按照屏幕上的说明安装程序。
- Gridinsoft反恶意软件安装完成后，程序将在扫描屏幕上打开。
- 点击"标准扫描"按钮。
- 扫描过程完成后，点击"立即清除"以移除检测到的威胁。
- 如果需要，重启系统以完成移除过程。
文件版本信息
| Translation | 0x0000 0x04b0 |
| Comments | *Description* |
| CompanyName | D7YJ2A2Q22S2 |
| FileDescription | K6E6P |
| FileVersion | 3.1.4.6 |
| InternalName | X8IF523W57C2.exe |
| LegalCopyright | EYGE7U546FR4 |
| LegalTrademarks | X8IF523W57C2 |
| OriginalFilename | X8IF523W57C2.exe |
| ProductName | UTJY4E424LI4 |
| ProductVersion | 3.1.4.6 |
| Assembly Version | 6.3.1.5 |
| CompanyName | www.xmrig.com |
| FileDescription | XMRig miner |
| FileVersion | 6.21.2 |
| LegalCopyright | Copyright (C) 2016-2024 xmrig.com |
| OriginalFilename | xmrig.exe |
| ProductName | XMRig |
| ProductVersion | 6.21.2 |
| Translation | 0x0000 0x04b0 |
可移植可执行文件信息
 |
4d7f8487110b81d4a3ea3eab06140b06 3b5d3c7d207e37dceeedd301e35e2e58 0000000000000000 |
| Image Base: | 0x140000000 |
| Entry Point: | 0x1400013f0 |
| Compilation: | 2024-03-23 06:42:51 |
| Checksum: | 0x0091f74a (Actual: 0x009164fa) |
| OS Version: | 4.0 |
| PEiD: | PE32+ executable (console) x86-64 (stripped to external PDB), for MS Windows |
| Sign: | The PE file does not contain a certificate table. |
| Sections: | 11 |
| Imports: | ADVAPI32, CRYPT32, dbghelp, IPHLPAPI, KERNEL32, msvcrt, ole32, SHELL32, USER32, USERENV, WS2_32, |
| Exports: | 0 |
| Resources: | 10 |
区块
| 名称 | 虚拟地址 | 虚拟大小 | 原始大小 | MD5 | 熵 |
|---|---|---|---|---|---|
| .text | 0x00001000 | 0x006c85f0 | 0x006c8600 | af7194cc1211cb2589f1d591fd763810 | 6.49 |
| .data | 0x006ca000 | 0x00010f20 | 0x00011000 | 01188a4af98f169c876a9c1a560b71be | 3.26 |
| .rdata | 0x006db000 | 0x001a09d0 | 0x001a0a00 | 7bbed45385f0bef4e928c6bb77642880 | 6.08 |
| .pdata | 0x0087c000 | 0x00039d44 | 0x00039e00 | 324278a2f676474bbbad3209450b303d | 6.41 |
| .xdata | 0x008b6000 | 0x00044bac | 0x00044c00 | 4127c4c8faf99066866d71f16310f6f8 | 4.90 |
| .bss | 0x008fb000 | 0x0031f770 | 0x00000000 | d41d8cd98f00b204e9800998ecf8427e | 0.00 |
| .idata | 0x00c1b000 | 0x000048f4 | 0x00004a00 | bc8a38fe7bbe081bd6ee259ebf9a5389 | 4.75 |
| .CRT | 0x00c20000 | 0x00000068 | 0x00000200 | 47ecdc2c29eedae9067863b81868f3a4 | 0.41 |
| .tls | 0x00c21000 | 0x00000010 | 0x00000200 | bf619eac0cdf3f68d496ea9344137e8b | 0.00 |
| .rsrc | 0x00c22000 | 0x00007158 | 0x00007200 | 9c280ce53efae7baea9646e232e7e8da | 5.16 |
| .reloc | 0x00c2a000 | 0x0000c5f8 | 0x0000c600 | d778e1d7e6657fd18c843c23b4e3c045 | 5.46 |
