在线病毒检测器 | v.1.0.182.174 |
数据库版本: | 2024-07-17 04:00:25 |
CoinMiner是一种利用受害者的计算机资源(主要是CPU和RAM)进行加密货币挖掘(例如Monero或Zcash)的恶意软件。此恶意软件通过将开源挖掘工具集成到系统的启动例程中来建立持久性,而不需要用户的同意。高级的加密货币挖掘程序通常采用定时器配置或CPU使用限制等技术,以悄悄运行并避免检测。
File | dogecoin-1.14.7-win64-setup-unsigned (1).exe |
已检查 | 2024-07-17 01:12:59 |
MD5 | 8fafae1ae90dc8dbf3d675f202611dc7 |
SHA1 | 717a605fdd3d9ffd58b5b5fc7f213c0d44644560 |
SHA256 | e1bc8be88d22af22bb26c2d87cfe497a808fc54817921ced416392a1ed78c0a2 |
SHA512 | 9f89408a8fd9460abad5b4343971ab006e1002878bc652de23f963e2740ac6fe5ba000ebff12c0df901f1459a7327f1bb2dd8c0e44e062e05f5f491339a748a9 |
Imphash | 2e2e377f6342cd8e55c65e7d5fb0d752 |
File Size | 18219281 bytes |
Gridinsoft能够识别并消除Risk.Win32.CoinMiner.vl!n,无需进一步的用户干预。
CompanyName | Dogecoin Core project |
CompanyWebsite | https://dogecoin.com/ |
FileDescription | |
FileVersion | 1.14.7 |
LegalCopyright | |
ProductName | Dogecoin Core |
ProductVersion | 1.14.7 |
Translation | 0x0409 0x04e4 |
be3f430d0825f98c9ab74dc75469a6c2 e01d78ad4e812cf8ae6683dca25e862c f0f0e8cacae8e4f0 |
|
Image Base: | 0x00400000 |
Entry Point: | 0x0040433c |
Compilation: | 2020-03-31 18:05:25 |
Checksum: | 0x00020cb7 (Actual: 0x011666ef) |
OS Version: | 4.0 |
PEiD: | PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows, Nullsoft Installer self-extracting archive |
Sign: | The PE file does not contain a certificate table. |
Sections: | 7 |
Imports: | ADVAPI32, COMCTL32, GDI32, KERNEL32, ole32, SHELL32, USER32, |
Exports: | 0 |
Resources: | 15 |
名称 | 虚拟地址 | 虚拟大小 | 原始大小 | MD5 | 熵 |
---|---|---|---|---|---|
.text | 0x00001000 | 0x00008f54 | 0x00009000 | f71817a41c2b4fd6e049a4cc6fc8ee39 | 5.96 |
.data | 0x0000a000 | 0x000000c0 | 0x00000200 | dc5ad88ad7a5abfbb93f86af0de9f73f | 1.42 |
.rdata | 0x0000b000 | 0x0000736c | 0x00007400 | 7eb48fb024a95830fbb6c6258f17c88c | 7.28 |
.bss | 0x00013000 | 0x0001a500 | 0x00000000 | d41d8cd98f00b204e9800998ecf8427e | 0.00 |
.idata | 0x0002e000 | 0x0000133c | 0x00001400 | 64e1f11bb3a2df037fb0363fdd40b645 | 5.31 |
.ndata | 0x00030000 | 0x00015000 | 0x00000200 | bf619eac0cdf3f68d496ea9344137e8b | 0.00 |
.rsrc | 0x00045000 | 0x00064a60 | 0x00064c00 | 89bd5fd9de87a073dfb842b7cdbc8473 | 4.99 |