How to remove nssm.exe
nssm.exe
The module nssm.exe has been detected as General Threat
File Details
| Product Name: | NSSM 64-bit |
| MD5: | beceae2fdc4f7729a93e94ac2ccd78cc |
| Size: | 323 KB |
| First Published: | 2017-07-31 10:02:31 (7 years ago) |
| Latest Published: | 2023-12-20 23:20:51 (a year ago) |
| Status: | General Threat (on last analysis) | |
| Analysis Date: | 2023-12-20 23:20:51 (a year ago) |
Common Places:
| %windir%\fonts |
| %programfiles%\expressvpn\bootstrap\amd64 |
| %windir%\system32 |
| %windir%\appdata |
| %sysdrive%\windows |
| %windir%\vss |
| %windir%\64bit |
| %windir%\fones |
| %windir% |
| %sysdrive%\onekey_v13.4.5.203 |
File Names:
| taskhost.exe |
| nssm.exe |
| crss.exe |
| taskmon.exe |
| mmc.exe |
| Network.exe |
| TrustedInstellers.exe |
| nssm_64.exe |
| taskmgr.exe |
| Interrupts.exe |
| svchost.exe |
| notepad.exe |
| dwm.exe |
| spoolsv.exe |
| TrustedInstaller.exe |
| TaskHost.exe |
| LoginUi.exe |
| IEXPL0RE.EXE |
| dllhost.exe |
| winlogon.exe |
| ServiceManager64.exe |
| Microsoft.exe |
Geography:
| China | 54.7% | |
| Taiwan | 19.7% | |
| Puerto Rico | 8.2% | |
| Hong Kong | 3.2% | |
| Russia | 2.3% | |
| France | 1.8% | |
| Brazil | 1.4% | |
| Australia | 1.0% | |
| South Korea | 1.0% | |
| United States | 0.9% | |
| Switzerland | 0.9% | |
| United Kingdom | 0.6% | |
| Netherlands | 0.4% | |
| Thailand | 0.4% | |
| Morocco | 0.4% | |
| Malaysia | 0.3% | |
| Czech Republic | 0.3% | |
| Poland | 0.2% | |
| Canada | 0.2% | |
| Vietnam | 0.2% | |
| Germany | 0.2% | |
| Lithuania | 0.2% | |
| Benin | 0.2% | |
| Ukraine | 0.1% | |
| Italy | 0.1% | |
| Israel | 0.1% | |
| Brunei | 0.1% | |
| Spain | 0.1% | |
| Portugal | 0.1% | |
| Indonesia | 0.1% | |
| Bosnia and Herzegovina | 0.1% | |
| Cuba | 0.1% |
OS Version:
| Windows Server 2008 R2 | 35.8% | |
| Windows 10 | 24.7% | |
| Windows Server 2012 R2 | 20.9% | |
| Windows 7 | 10.8% | |
| Windows Server 2016 | 4.7% | |
| Windows Server 2012 | 2.6% | |
| Windows 8.1 | 0.3% |
Analysis
| Subsystem: | Windows CUI |
| PE Type: | pe |
| OS Bitness: | 64 |
| Image Base: | 0x0000000140000000 |
| Entry Address: | 0x000189a0 |
PE Sections:
| Name | Size of data | MD5 |
| .text | 132096 | 6b9da9b3af829181411e1f4e9bc9e02f |
| .rdata | 28160 | cc275d47891f4edeefe92205296be5cf |
| .data | 7680 | 12c0638d9bbd762feed41fb94a045a03 |
| .pdata | 6656 | 7936e3d95bbe6c52b78154fcb6315229 |
| .rsrc | 155648 | 7d0713d09edaf755397e6807b9021dd3 |
More information:
Download GridinSoft
Anti-Malware - Removal tool for nssm.exe
