How to remove nssm.exe

nssm.exe

The module nssm.exe has been detected as Risk.CoinMiner

nssm.exe
Product Name:

NSSM 64-bit

MD5: aa2d30992087047ef638674198209948
Size: 331 KB
First Published: 2018-02-01 14:15:13 (6 years ago)
Latest Published: 2018-02-02 15:09:12 (6 years ago)
Status: Risk.CoinMiner (on last analysis)
Analysis Date: 2018-02-02 15:09:12 (6 years ago)
Signed By: Express Vpn LLC
Status: Valid
%programfiles%\expressvpn\bootstrap
28.6%
14.3%
14.3%
14.3%
14.3%
14.3%
Windows 10 71.4%
Windows 7 28.6%
Subsystem: Windows CUI
PE Type: pe
OS Bitness: 64
Image Base: 0x0000000140000000
Entry Address: 0x000189a0

PE Sections:

Name Size of data MD5
.text 132096 6b9da9b3af829181411e1f4e9bc9e02f
.rdata 28160 cc275d47891f4edeefe92205296be5cf
.data 7680 12c0638d9bbd762feed41fb94a045a03
.pdata 6656 7936e3d95bbe6c52b78154fcb6315229
.rsrc 155648 7d0713d09edaf755397e6807b9021dd3

More information:

Download GridinSoft Anti-Malware - Removal tool for nssm.exe