How to remove nvidia.vmp[1].exe
- File Details
- Overview
- Analysis
nvidia.vmp[1].exe
The module nvidia.vmp[1].exe has been detected as Trojan.CoinMiner
File Details
Product Name: |
|
Company Name: |
|
MD5: |
5b512799e42d3bee69e2e5de245abb15 |
Size: |
7 MB |
First Published: |
2018-08-27 22:09:43 (6 years ago) |
Latest Published: |
2018-08-27 22:12:03 (6 years ago) |
Status: |
Trojan.CoinMiner (on last analysis) |
|
Analysis Date: |
2018-08-27 22:12:03 (6 years ago) |
%temp%\{407c2e9a-82ff-11e8-bc86-806e6f6e6963} |
%localappdata%\microsoft\windows\inetcache\ie |
%commonappdata% |
nvhwnd.exe |
nvidia.vmp[1].exe |
NVIDIA_Cure.exe |
Analysis
Subsystem: |
Windows GUI |
PE Type: |
pe |
OS Bitness: |
64 |
Image Base: |
0x0000000140000000 |
Entry Address: |
0x012f9a4b |
Name |
Size of data |
MD5 |
.text |
0 |
00000000000000000000000000000000 |
.rdata |
0 |
00000000000000000000000000000000 |
.data |
0 |
00000000000000000000000000000000 |
.pdata |
0 |
00000000000000000000000000000000 |
.nv_fatb |
0 |
00000000000000000000000000000000 |
.nvFatBi |
0 |
00000000000000000000000000000000 |
.gfids |
0 |
00000000000000000000000000000000 |
.tls |
512 |
1f354d76203061bfdd5a53dae48d5435 |
.vmp0 |
0 |
00000000000000000000000000000000 |
.vmp1 |
7418880 |
cbcaf7855c442233d726f567e48dc911 |
.reloc |
512 |
d479fa36f693054268d2d411c5feb1ed |
.rsrc |
543744 |
d2906ff3b67f3ede0c53b8ee98801c1b |