Gridinsoft Logo

MultiMiner-4.3.1.exe Trojan CoinMiner Analysis

Trojan CoinMiner
Updated on 2024-12-06 (11 days ago)
Checked by Online Virus Scanner
Online Virus Checker v.1.0.199.174
DB Version: 2024-12-06 10:00:24

Trojan.Win32.CoinMiner.cc

CoinMiner is a type of malware that harnesses the victim's computer resources, primarily CPU and RAM, to engage in cryptocurrency mining, such as for Monero or Zcash. This malware establishes persistence by integrating an open-source mining tool into the system's startup routine without the user's consent. Advanced coin miners often employ techniques like timer configurations or CPU usage limits to operate discreetly and avoid detection.

File MultiMiner-4.3.1.exe
Checked 2024-12-06 08:38:24
MD5 86f318bfbf48180956c1d65411a198ce
SHA1 5e7fb4e859f37a0a76a9f0687346f7a169eb4cd6
SHA256 605003d50ab9468473ab3a24c6462be3cf02a5bb83e23cd6d7ed8238dd2ccb69
SHA512 82b8df6ab46dde277a04740440cfa82dbb157444ba6fb61924ec2bb6870ecfe8264ff1f8aba37e7fa3ad1647c8c591a868a77369f1b3da0dd084ae4a5ae68c8c
Imphash 2fb819a19fe4dee5c03e8c6a79342f79
File Size 1055761 bytes

Trojan.Win32.CoinMiner.cc Removal

Trojan.Win32.CoinMiner.cc Removal

Gridinsoft has the capability to identify and eliminate Trojan.Win32.CoinMiner.cc without requiring further user intervention.

  • Start by downloading Gridinsoft Anti-Malware to your computer.
  • Double-click on the gsam-en-install.exe file and follow the on-screen instructions to install the program.
  • Once the installation of Gridinsoft Anti-Malware is complete, the program will open on the Scan screen.
  • Click on the "Standard Scan" button.
  • After the scanning process is finished, click on "Clean Now" to remove any detected threats.
  • If prompted, restart your system to complete the removal process.

File Version Information

Comments This installation was built with Inno Setup.
CompanyName Nate Woolls
FileDescription MultiMiner Setup
FileVersion
LegalCopyright
ProductName MultiMiner
ProductVersion 4.3.1
Translation 0x0000 0x04b0

Portable Executable Info

30adcb5c0b2e3c35eaec2c110733c9f8
c98f96d6ffe5af8d4eb0870c1dc20826
92e0b496a6cada72
Image Base: 0x00400000
Entry Point: 0x0040aa98
Compilation: 1992-06-19 22:22:17
Checksum: 0x00000000 (Actual: 0x0011025c)
OS Version: 1.0
PEiD: PE32 executable (GUI) Intel 80386, for MS Windows
Sign: No valid SignedData structure was found.
Sections: 8
Imports: kernel32, user32, oleaut32, advapi32, comctl32,
Exports: 0
Resources: 14

Sections

Name Virtual Address Virtual Size Raw Size MD5 Entropy
CODE 0x00001000 0x0000a1d0 0x0000a200 b7ea439d9c6d5ec722056c9243fb3054 6.64
DATA 0x0000c000 0x00000250 0x00000400 9b2268ed5360951559d8041925d025fb 2.74
BSS 0x0000d000 0x00000e94 0x00000000 d41d8cd98f00b204e9800998ecf8427e 0.00
.idata 0x0000e000 0x0000097c 0x00000a00 df5f31e62e05c787fd29eed7071bf556 4.49
.tls 0x0000f000 0x00000008 0x00000000 d41d8cd98f00b204e9800998ecf8427e 0.00
.rdata 0x00010000 0x00000018 0x00000200 14dfa4128117e7f94fe2f8d7dea374a0 0.19
.reloc 0x00011000 0x0000091c 0x00000000 d41d8cd98f00b204e9800998ecf8427e 0.00
.rsrc 0x00012000 0x00002c00 0x00002c00 b6403abfd6c6b8ef72338e34ad1eac2c 4.58

Leave a comment *

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware