home

agent.vmp.dll

MD5:
dbfd1e68abdcf08882ce5e064de5193b

SHA-1:
45373af80928e71f46022e780562fb7d686178e2

SHA-256:
cb622cd957425fabf439cfb6f5c2a028a36de0ca2cec2f7573bef588e072ca13

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/15/2024 3:03:16 AM UTC  (today)

File size:
6.6 MB (6,880,256 bytes)

File type:
Dynamic link library (Win32 DLL)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\inetcache\ie\{random}\agent.vmp.dll

File PE Metadata
Compilation timestamp:
4/26/2016 5:53:12 PM

OS version:
6.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
14.0

CTPH (ssdeep):
196608:fqtuegqrBaVZNwSZTfigqY7EB73mwFxoI/YjnbT:fGrBUZTjz6xoAYjH

Entry address:
0x76D70F

Entry point:
E8, F4, D8, FF, FF, 8D, 64, 24, 10, 0F, 87, 07, 00, 00, 00, 0F, 9A, C3, 41, FE, C3, 41, 80, E3, A4, B3, 7C, 95, D2, C3, F8, F5, F6, DB, 89, E8, 0F, 95, C3, 66, 0F, BA, E3, 0A, C0, EB, 03, C0, EB, 06, B3, 01, 66, 85, D4, 60, 9C, 87, 74, 24, 20, 66, D3, E6, F5, 66, 81, DE, 40, 3D, 66, 0F, AC, F6, 0E, 89, FE, 83, C4, 20, 0F, 89, 74, 16, 02, 00, F8, 9C, 29, C6, FF, 34, 24, F3, A4, 9C, E9, 38, F6, 06, 00, 5C, 4F, 8A, CD, C3, FE, 50, 99, A1, 44, 92, 65, 91, B3, 8C, F2, C3, 64, B1, 92, 97, 60, A5, 5E, 08, F9, 67...
 
[+]

Code size:
1.4 MB (1,457,152 bytes)

The file agent.vmp.dll has been seen being distributed by the following URL.

http://puu.sh/.../8d225d5f44.dll

Scan agent.vmp.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.