How to remove nssm.exe
nssm.exe
The module nssm.exe has been detected as General Threat
File Details
Product Name: | NSSM 64-bit |
MD5: | beceae2fdc4f7729a93e94ac2ccd78cc |
Size: | 323 KB |
First Published: | 2017-07-31 10:02:31 (7 years ago) |
Latest Published: | 2023-12-20 23:20:51 (11 months ago) |
Status: | General Threat (on last analysis) | |
Analysis Date: | 2023-12-20 23:20:51 (11 months ago) |
Common Places:
%windir%\fonts |
%programfiles%\expressvpn\bootstrap\amd64 |
%windir%\system32 |
%windir%\appdata |
%sysdrive%\windows |
%windir%\vss |
%windir%\64bit |
%windir%\fones |
%windir% |
%sysdrive%\onekey_v13.4.5.203 |
File Names:
taskhost.exe |
nssm.exe |
crss.exe |
taskmon.exe |
mmc.exe |
Network.exe |
TrustedInstellers.exe |
nssm_64.exe |
taskmgr.exe |
Interrupts.exe |
svchost.exe |
notepad.exe |
dwm.exe |
spoolsv.exe |
TrustedInstaller.exe |
TaskHost.exe |
LoginUi.exe |
IEXPL0RE.EXE |
dllhost.exe |
winlogon.exe |
ServiceManager64.exe |
Microsoft.exe |
Geography:
54.7% | ||
19.7% | ||
8.2% | ||
3.2% | ||
2.3% | ||
1.8% | ||
1.4% | ||
1.0% | ||
1.0% | ||
0.9% | ||
0.9% | ||
0.6% | ||
0.4% | ||
0.4% | ||
0.4% | ||
0.3% | ||
0.3% | ||
0.2% | ||
0.2% | ||
0.2% | ||
0.2% | ||
0.2% | ||
0.2% | ||
0.1% | ||
0.1% | ||
0.1% | ||
0.1% | ||
0.1% | ||
0.1% | ||
0.1% | ||
0.1% | ||
0.1% |
OS Version:
Windows Server 2008 R2 | 35.8% | |
Windows 10 | 24.7% | |
Windows Server 2012 R2 | 20.9% | |
Windows 7 | 10.8% | |
Windows Server 2016 | 4.7% | |
Windows Server 2012 | 2.6% | |
Windows 8.1 | 0.3% |
Analysis
Subsystem: | Windows CUI |
PE Type: | pe |
OS Bitness: | 64 |
Image Base: | 0x0000000140000000 |
Entry Address: | 0x000189a0 |
PE Sections:
Name | Size of data | MD5 |
.text | 132096 | 6b9da9b3af829181411e1f4e9bc9e02f |
.rdata | 28160 | cc275d47891f4edeefe92205296be5cf |
.data | 7680 | 12c0638d9bbd762feed41fb94a045a03 |
.pdata | 6656 | 7936e3d95bbe6c52b78154fcb6315229 |
.rsrc | 155648 | 7d0713d09edaf755397e6807b9021dd3 |
More information:
Download GridinSoft
Anti-Malware - Removal tool for nssm.exe