https://www.virustotal.com/de/file/b196746691336474928556007abc6f7d6a61911099544925d01cd093c5c8bc6a/analysis/1533549147/

scan of the .exe, obviously this is considered a miner

https://www.virustotal.com/de/file/fc24bcf38f399d712a6c48e809bc1ce19b1a4595740892a2038e9bab800e0086/analysis/1533549194/

settings.dat

https://www.virustotal.com/de/file/d1f098cb0e86cbecf9552ec8abdfad5c1593afc9c3dd22559d9678cf03d6cd55/analysis/1533549207/

data0.res this looks a bit suspicious because Microsoft identifies it as    Trojan:Script/Cloxer.D!cl

https://www.virustotal.com/de/file/3ef416c6a6fdc4ef51baa5445ca543a39658febb9c9ea43a40afc4a55026a08f/analysis/1533549243/

data1.res

https://www.virustotal.com/de/file/0e77299345b5e66c84d9c32d9591bd52871515162bc544565c61284f646d62a7/analysis/1533549251/

data2.res