How to remove vmpagedown.exe
- File Details
- Overview
- Analysis
vmpagedown.exe
The module vmpagedown.exe has been detected as PUP.Gen
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
7a723777557554049694cd558d95bbc7 |
| Size: |
376 KB |
| First Published: |
2017-10-01 04:00:36 (7 years ago) |
| Latest Published: |
2018-10-14 13:15:16 (6 years ago) |
| Status: |
PUP.Gen (on last analysis) |
|
| Analysis Date: |
2018-10-14 13:15:16 (6 years ago) |
Overview
| %localappdata%\temp |
| %temp%\2\nsqb5b6.tmp |
| %temp% |
| geedownloader.exe |
| vmpagedown.exe |
|
61.9% |
|
|
9.5% |
|
|
9.5% |
|
|
9.5% |
|
|
4.8% |
|
|
4.8% |
|
| Windows 8.1 |
33.3% |
|
| Windows 7 |
28.6% |
|
| Windows 10 |
14.3% |
|
| Windows 8 |
14.3% |
|
| Windows Server 2008 R2 |
9.5% |
|
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x00032df0 |
| Name |
Size of data |
MD5 |
| .text |
288256 |
e0b278c5208e3401725cc68454fa1554 |
| .rdata |
56320 |
714cc9812004cc7660734b1202e6b048 |
| .data |
5632 |
9e3184d35ba80e4149f60391d228d1d8 |
| .rsrc |
7168 |
a26d53b96385790efadc567a559e9b54 |
| .reloc |
15872 |
bb01ed350cc4fdac90169d5c32480e4d |
