VolDriver.exe Trojan Miner Analysis

Trojan Miner
Updated on 2024-08-03 (1 month ago)
Checked by Online Virus Scanner
Online Virus Checkerv.1.0.183.174
DB Version:2024-08-03 14:00:29

Trojan.Win32.Miner.cld

Miner is a type of malware that harnesses the victim's computer resources, primarily CPU and RAM, to engage in cryptocurrency mining, such as for Monero or Zcash. This malware establishes persistence by integrating an open-source mining tool into the system's startup routine without the user's consent. Advanced miners often employ techniques like timer configurations or CPU usage limits to operate discreetly and avoid detection.

FileVolDriver.exe
Checked2024-08-03 11:58:41
MD5cd84f15d0665079a3d84ce70538934da
SHA1d6475c25de1df7706be69a1f02bf555849ed31d1
SHA256789dcb2ef828eee82749c3ff3d08ac19d68ff06ad13ca1718c2ea47953775b3a
SHA512fa6c3ed76a074bf448d88d5d4caf1e1878260f60529937f7d2e02e2c8d025034977b2cc86fbd67d4ee165bb85f9f3dc784b2907aab1e50316ec4b7669941e58d
Imphash2ffdf0a1519d1adada787fd4df5a5fec
File Size81920 bytes

Trojan.Win32.Miner.cld Removal

Trojan.Win32.Miner.cld Removal

Gridinsoft has the capability to identify and eliminate Trojan.Win32.Miner.cld without requiring further user intervention.

  • Start by downloading Gridinsoft Anti-Malware to your computer.
  • Double-click on the gsam-en-install.exe file and follow the on-screen instructions to install the program.
  • Once the installation of Gridinsoft Anti-Malware is complete, the program will open on the Scan screen.
  • Click on the "Standard Scan" button.
  • After the scanning process is finished, click on "Clean Now" to remove any detected threats.
  • If prompted, restart your system to complete the removal process.

Portable Executable Info

Image Base:0x00400000
Entry Point:0x00405e50
Compilation:2023-10-29 19:39:42
Checksum:0x00000000 (Actual: 0x0001e9e7)
OS Version:5.0
PEiD:PE32 executable (GUI) Intel 80386, for MS Windows
Sign:The PE file does not contain a certificate table.
Sections:3
Imports: WS2_32, SHLWAPI, urlmon, WININET, ntdll, msvcrt, KERNEL32, USER32, ADVAPI32, SHELL32, ole32, OLEAUT32,
Exports: 0
Resources:0

Sections

Name Virtual Address Virtual Size Raw Size MD5 Entropy
.text 0x00001000 0x0000e19c 0x0000e200 908775bbb1c1c1e5284b9f1ef74360f2 6.13
.rdata 0x00010000 0x00003124 0x00003200 a4fe08979266f9bdea25d0f34067306d 5.59
.data 0x00014000 0x00003980 0x00002800 47da8a7d3bb960b2da58fe5c733cdda5 4.98

Leave a comment*

Share your thoughts or insights about this file. Do you align with our conclusion?

*Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Please Wait...

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Gridinsoft Anti-Malware