How to remove VMProtectss.exe
- File Details
- Overview
- Analysis
VMProtectss.exe
The module VMProtectss.exe has been detected as Risk.CoinMiner
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
438b29fb127c4326e46503d0c0be4d55 |
| Size: |
429 KB |
| First Published: |
2017-08-28 22:05:45 (6 years ago) |
| Latest Published: |
2017-09-03 04:06:20 (6 years ago) |
| Status: |
Risk.CoinMiner (on last analysis) |
|
| Analysis Date: |
2017-09-03 04:06:20 (6 years ago) |
| %commonappdata%\vmprotect |
|
42.9% |
|
|
14.3% |
|
|
14.3% |
|
|
14.3% |
|
|
14.3% |
|
| Windows 10 |
50.0% |
|
| Windows 8.1 |
25.0% |
|
| Windows 7 |
25.0% |
|
Analysis
| Subsystem: |
Windows CUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x00014b56 |
| Name |
Size of data |
MD5 |
| .text |
334848 |
3a1c057e682f6991e13ffa8b8348b583 |
| .rdata |
61440 |
b691b1dab75fcffbfb317ae993ca8de0 |
| .data |
6144 |
1822c9bb97700b00794577132bfbc576 |
| .gfids |
512 |
3ee71bafceb13b3f5f8f7482a0c15d25 |
| .rsrc |
16896 |
ba8b25d12dc9f1f70a0a5e07e8c50eeb |
| .reloc |
18944 |
29625b8c00bdb3e81b6bc8876b0dab63 |
