Trojan.Win32.Miner.abgup (file analysis)

The Trojan.Win32.Miner.abgup is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan.Win32.Miner.abgup virus can do?

Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
The binary likely contains encrypted or compressed data.
The executable is compressed using UPX

How to determine Trojan.Win32.Miner.abgup?


File Info:
crc32: 77EF9776
md5: 1aae09954910c25e25dedff4ffcb0f50
name: 1AAE09954910C25E25DEDFF4FFCB0F50.mlw
sha1: e4f86fff64a8083f45c567bc5f841e66d71ab798
sha256: 4c4dc91fec4c1e6386022a5784b54b92963956a37537ab8713099e4721b450d2
sha512: 7baf71bc1895e2ecfcf2de344cd8b0f36f94373dfb12ae1dd2b1f7a0c510ef9a60d51914db1a6078c23b902abdc4d844910b786eb19387210ff98a11695266ac
ssdeep: 12288:QmRZrtTCS3IMK3D6VC/vUrP+lmg/eaN1ww0FZM+fO1V70t/7CG6XsP0:QmRZAeI1lUrPGeaATFZMAOmuXsM
type: PE32+ executable (GUI) x86-64, for MS Windows

Version Info:
LegalCopyright: Copyright xa9 2006-2019 ITSK.com, All Rights Reserved.
InternalName: Easy Sysprep v5 - Deploy
FileVersion: 5.19.802.192
CompanyName: ITx5929x7a7a(ITSK.COM)
Comments: Deploy - ITSK.com
ProductName: Easy Sysprep v5 - Deploy
ProductVersion: 5.0.0.0
FileDescription: Easy Sysprep v5 - Deploy
OriginalFilename: EsDeploy.exe
Compiler: SKAEv2 Pro+ (v2.19.723.70) - 2019/08/02 16:51:49
Translation: 0x0804 0x04b0

Trojan.Win32.Miner.abgup also known as:

MicroWorld-eScan	Trojan.GenericKD.32781211
CAT-QuickHeal	Trojan.Miner
ALYac	Trojan.GenericKD.32781211
Cylance	Unsafe
Zillya	Trojan.Miner.Win32.9328
CrowdStrike	win/malicious_confidence_60% (W)
Alibaba	Trojan:Win32/Miner.ee4eef94
TrendMicro	TROJ_GEN.R011C0WLF19
Cyren	W64/Trojan.QRTT-9123
APEX	Malicious
Avast	Win64:Trojan-gen
GData	Trojan.GenericKD.32781211
Kaspersky	Trojan.Win32.Miner.abgup
BitDefender	Trojan.GenericKD.32781211
Tencent	Win32.Trojan.Miner.Eaoc
Ad-Aware	Trojan.GenericKD.32781211
Sophos	Mal/Generic-S
McAfee-GW-Edition	BehavesLike.Win64.DLSponsor.cc
FireEye	Generic.mg.1aae09954910c25e
Emsisoft	Trojan.GenericKD.32781211 (B)
Endgame	malicious (moderate confidence)
Microsoft	Trojan:Win32/Wacatac.C!ml
Jiangmin	Trojan.Miner.iqf
Arcabit	Trojan.Generic.D1F4339B
ZoneAlarm	Trojan.Win32.Miner.abgup
McAfee	Artemis!1AAE09954910
MAX	malware (ai score=86)
Panda	Trj/CI.A
TrendMicro-HouseCall	TROJ_GEN.R011C0WLF19
Fortinet	W32/Miner.ABGUP!tr
AVG	Win64:Trojan-gen

How to remove Trojan.Win32.Miner.abgup?

Trojan.Win32.Miner.abgup removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X