UDS:RiskTool.Win32.Miner (file analysis)

The UDS:RiskTool.Win32.Miner is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What UDS:RiskTool.Win32.Miner virus can do?

• A file was accessed within the Public folder.
• Sample contains Overlay data
• Uses Windows utilities for basic functionality
• Reads data out of its own binary image
• Drops a binary and executes it
• Uses Windows utilities to enumerate running processes
• Authenticode signature is invalid
• Creates a copy of itself
• Deletes executed files from disk
• Uses suspicious command line tools or Windows utilities

How to determine UDS:RiskTool.Win32.Miner?

File Info:
name: 009435B0933D8603632A.mlw
path: /opt/CAPEv2/storage/binaries/125f51cb0ddec48e805a87d206d8fa99296467e969e87f3e0709c9270e61aaa1
crc32: AFD3DDC0
md5: 009435b0933d8603632a363882e63682
sha1: 467c441bfb0b5d5a3cf45992c27e660107ec435b
sha256: 125f51cb0ddec48e805a87d206d8fa99296467e969e87f3e0709c9270e61aaa1
sha512: 566a475ed666a4f9e42652f91ebf5d4c9eb860b0df122b7be3ed3c6b3c282d30d678d3e84547c73414dcc69df79da5c40e16fd86c55e4c3f3697f5a097faa7d3
ssdeep: 6144:S740Ik1RIa2T2UIvKXNFwqq4Fs2t0EyL+ya5:gjcXNFwqeRKJ5
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T199A4D5507B01AA03C9250B3D91D017D467BDDE96D3AA7F2741F0333A2DB6A889A056FB
sha3_384: 0b0d454b190d817d8031c75ee57324e59cd0cf9e107a373f4ad5de9e07a9fa3a1ca818d94444d6ea677e4712706f169f
ep_bytes: 81ecd40200005356576a205f33db6801
timestamp: 2018-12-15 22:26:14

Version Info:
CompanyName: EO Finance
FileDescription: EO Miner
FileVersion: 4.9.17.91
LegalCopyright: Copyright © 2023 EO Finance
ProductName: eo-miner
ProductVersion: 4.9.17
Translation: 0x0409 0x04e4

UDS:RiskTool.Win32.Miner also known as:

How to remove UDS:RiskTool.Win32.Miner?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.