How to remove nssm.exe
nssm.exe
The module nssm.exe has been detected as Risk.CoinMiner
File Details
Product Name: | NSSM 64-bit |
MD5: | aa2d30992087047ef638674198209948 |
Size: | 331 KB |
First Published: | 2018-02-01 14:15:13 (6 years ago) |
Latest Published: | 2018-02-02 15:09:12 (6 years ago) |
Status: | Risk.CoinMiner (on last analysis) | |
Analysis Date: | 2018-02-02 15:09:12 (6 years ago) |
Overview
Signed By: | Express Vpn LLC |
Status: | Valid |
Common Places:
%programfiles%\expressvpn\bootstrap |
Geography:
28.6% | ||
14.3% | ||
14.3% | ||
14.3% | ||
14.3% | ||
14.3% |
OS Version:
Windows 10 | 71.4% | |
Windows 7 | 28.6% |
Analysis
Subsystem: | Windows CUI |
PE Type: | pe |
OS Bitness: | 64 |
Image Base: | 0x0000000140000000 |
Entry Address: | 0x000189a0 |
PE Sections:
Name | Size of data | MD5 |
.text | 132096 | 6b9da9b3af829181411e1f4e9bc9e02f |
.rdata | 28160 | cc275d47891f4edeefe92205296be5cf |
.data | 7680 | 12c0638d9bbd762feed41fb94a045a03 |
.pdata | 6656 | 7936e3d95bbe6c52b78154fcb6315229 |
.rsrc | 155648 | 7d0713d09edaf755397e6807b9021dd3 |
More information:
Download GridinSoft
Anti-Malware - Removal tool for nssm.exe