How to remove vsubst.exe
vsubst.exe
The module vsubst.exe has been detected as Possible Threat
File Details
Product Name: | Visual Subst |
Company Name: | NTWind Software |
MD5: | 0657eef33d170e283f766167dad81538 |
Size: | 136 KB |
First Published: | 2018-04-24 02:08:45 (6 years ago) |
Latest Published: | 2018-12-06 11:10:22 (6 years ago) |
Status: | Possible Threat (on last analysis) | |
Analysis Date: | 2018-12-06 11:10:22 (6 years ago) |
Overview
Signed By: | Alexander Avdonin |
Status: | Valid |
Common Places:
%desktop% |
%profile%\.nimi places\containers\quick access\utilitaires |
%sysdrive%\drived |
%profile% |
%sysdrive% |
%sysdrive% |
%sysdrive% |
Geography:
37.5% | ||
25.0% | ||
12.5% | ||
12.5% | ||
12.5% |
OS Version:
Windows 10 | 100.0% |
Analysis
Subsystem: | Windows GUI |
PE Type: | pe |
OS Bitness: | 32 |
Image Base: | 0x00400000 |
Entry Address: | 0x00005356 |
PE Sections:
Name | Size of data | MD5 |
.text | 68608 | 88fb9906966388513eaa595daaed0da1 |
.rdata | 20992 | 4b5b1199cac235146c0eff2f55dc060e |
.data | 5632 | 9a69341a332857491c8d0091b533b697 |
.rsrc | 39936 | 2961e4e2c2affc892ca62b61cc110570 |
More information:
Download GridinSoft
Anti-Malware - Removal tool for vsubst.exe