Application.CoinMiner.63 (B) (file analysis)

The Application.CoinMiner.63 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Application.CoinMiner.63 (B) virus can do?

Dynamic (imported) function loading detected
Reads data out of its own binary image
Authenticode signature is invalid

How to determine Application.CoinMiner.63 (B)?


File Info:
name: AC9534F21443E82A22D1.mlw
path: /opt/CAPEv2/storage/binaries/d4786cd53704cf107598858c8f2329d6a017e0ebc40cbd430b51740659b4fb3a
crc32: 4AFBEF65
md5: ac9534f21443e82a22d1d5cb99a5e726
sha1: 196f9d23bf6612810b1b88a5b5c00e95462f70ae
sha256: d4786cd53704cf107598858c8f2329d6a017e0ebc40cbd430b51740659b4fb3a
sha512: 3a628e1d9cc3644c990e10b8752178ef5fc89bbd3e90e2cee73e6ca925fb31fcd997e0d640ea8690386f3b7785380a3e3a1bd398e90cf2ec4ce435c09614cee0
ssdeep: 24576:ytnCFE2z4ROu33EuCjw5UPgkggD18h2g7c9dsHcyP9EpnnKZJWsCcbKI7lDw1O0h:qnME2MpHKwHkL8hxARyPKncwiDN0K3SR
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T17685331325F381B3C6708331B5F7ABDECB31FA12A141168596CCBF0AB5975EE485C6A1
sha3_384: 9c0afcb553d43cf7523a67746f693aaf51fff502620b46f018f971754b6c5e07fd525299f70f3f7db380387cb229eb60
ep_bytes: 81ec8401000053565733db6801800000
timestamp: 2018-01-30 03:57:45

Version Info:
0: [No Data]

Application.CoinMiner.63 (B) also known as:

MicroWorld-eScan	Gen:Variant.Application.CoinMiner.63
FireEye	Gen:Variant.Application.CoinMiner.63
McAfee	Artemis!AC9534F21443
Cylance	Unsafe
Sangfor	PUP.MSIL.CoinMiner.V@gen
Alibaba	RiskWare:Script/BitMiner.b910fcd8
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:Malware-gen
Kaspersky	VHO:Trojan.Win32.Agent.gen
BitDefender	Gen:Variant.Application.CoinMiner.63
Sophos	Generic PUA BJ (PUA)
Comodo	ApplicUnwnt@#3sducktf9l0dj
McAfee-GW-Edition	BehavesLike.Win32.Browser.tc
Emsisoft	Gen:Variant.Application.CoinMiner.63 (B)
Paloalto	generic.ml
GData	MSIL.Application.CoinMiner.V@gen
Webroot	W32.Trojan.Dropper
Gridinsoft	Ransom.Win32.Miner.sa
Arcabit	Zum.BitCoinMiner.1
ZoneAlarm	not-a-virus:HEUR:RiskTool.Script.BitMiner.gen
Microsoft	PUA:Win32/Presenoker
ALYac	Zum.BitCoinMiner.1
VBA32	Trojan.MSIL.gen.m
Malwarebytes	Malware.AI.1430629181
AVG	Win32:Malware-gen
Cybereason	malicious.21443e

How to remove Application.CoinMiner.63 (B)?

Application.CoinMiner.63 (B) removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X