Online Virus Checker | v.1.0.210.174 |
DB Version: | 2025-03-06 02:00:41 |
Miner is a type of malware that harnesses the victim's computer resources, primarily CPU and RAM, to engage in cryptocurrency mining, such as for Monero or Zcash. This malware establishes persistence by integrating an open-source mining tool into the system's startup routine without the user's consent. Advanced miners often employ techniques like timer configurations or CPU usage limits to operate discreetly and avoid detection.
File | Backpack Hero.exe |
Checked | 2025-03-06 00:43:28 |
MD5 | 5df11a71753ca3fe47dac2220a81b1b1 |
SHA1 | 4fe8dfa38858bc049af97f9b4a1bcf005a6f0ad8 |
SHA256 | e12d6a7452dd56cfb058ac5a364f0d008870b900b0da53b12c0c58f782488924 |
SHA512 | b6a5e1d610b7c5968b5e327ee3ed6d721fcd97ccf8f1fc974dd5907fdd6d1194e92056301ed66d3f69d95605a318d28e39b24b52f80c14f87c925ef2a91b2a76 |
Imphash | 5f74a5c747508e2822fdb9b687deaf42 |
File Size | 653824 bytes |
Gridinsoft has the capability to identify and eliminate Trojan.Win64.Miner.cld without requiring further user intervention.
FileVersion | 2021.3.22.11978065 |
LegalCopyright | (c) 2023 Unity Technologies ApS. All rights reserved. |
ProductVersion | 2021.3.22f1 (b6c551784ba3) |
Translation | 0x0409 0x04b0 |
7be4aa1af16986267ac37f7c0de953ad 66b1143c29783e3ff7c5e87c9037e1e7 73ccaa7055456917 |
|
Image Base: | 0x140000000 |
Entry Point: | 0x140001260 |
Compilation: | 2023-03-21 22:03:32 |
Checksum: | 0x00000000 (Actual: 0x000a550d) |
OS Version: | 6.0 |
PDB Path: | C:\build\output\unity\unity\artifacts\WindowsPlayer\Win64_VS2019_nondev_m_r\WindowsPlayer_player_Master_mono_x64.pdb |
PEiD: | PE32+ executable (GUI) x86-64, for MS Windows |
Sign: | No valid SignedData structure was found. |
Sections: | 7 |
Imports: | UnityPlayer, KERNEL32, |
Exports: | 2 |
Resources: | 12 |
Name | Virtual Address | Virtual Size | Raw Size | MD5 | Entropy |
---|---|---|---|---|---|
.text | 0x00001000 | 0x0000a140 | 0x0000a200 | 4190b7be9f5f4eb52c040a688e61a250 | 6.40 |
.rdata | 0x0000c000 | 0x00008cce | 0x00008e00 | fc7c11845455463fa83cd710f0876370 | 4.65 |
.data | 0x00015000 | 0x00001ce8 | 0x00000c00 | 2e9924c581c86e57e2e2b0ac87e1aa45 | 1.68 |
.pdata | 0x00017000 | 0x00000c54 | 0x00000e00 | 2717431295e555cdae3fb602e2bd957e | 4.35 |
_RDATA | 0x00018000 | 0x00000094 | 0x00000200 | 1960efd573f3d23522c840210d59fb7e | 1.09 |
.rsrc | 0x00019000 | 0x0008a198 | 0x0008a200 | 54c16cb8743ed7ec6b28ef34347ab07e | 3.83 |
.reloc | 0x000a4000 | 0x00000638 | 0x00000800 | 687aa942cda2e64adc67a829f1587240 | 4.79 |