home

agent.vmp.dll

MD5:
0eff4bbaae650b7537eefac6114696fd

SHA-1:
7decdaf36e35eb554547b760a3125736c9b13d46

SHA-256:
fd876e25ba8e52cbc4fc3121f8e937b58fb190712e5510de3591223b5194b8d0

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/15/2024 2:56:48 AM UTC  (today)

File size:
7.1 MB (7,442,944 bytes)

File type:
Dynamic link library (Win32 DLL)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\inetcache\ie\{random}\agent.vmp.dll

File PE Metadata
Compilation timestamp:
7/6/2016 5:25:34 PM

OS version:
6.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
14.0

CTPH (ssdeep):
196608:ZdDOrUqRAVkwHvu+pa9/6yl+GqdOPJs8fL/LsysQVnlCTw98:CrUTkwf9y+GqdmJsuL/Ls5rw

Entry address:
0xEBD00B

Entry point:
9C, C7, 04, 24, 15, C8, 8A, 10, E9, 9A, 06, F7, FF, 21, C7, 49, 36, 01, 50, FF, E2, EA, 60, 86, 5B, 7F, 1B, FD, 50, 4C, 68, 64, 24, 10, 1C, AA, 13, 0F, 1F, 33, 27, 0B, 53, C3, 2D, AD, 3B, 91, 6A, 94, 8D, 9D, AD, 56, 97, 7C, 72, AC, A5, 0A, 2D, E9, DD, F1, D9, 1A, 2C, 64, 07, 73, 0D, A1, 96, 92, D2, 7A, EF, 28, 5F, 6C, 80, D8, 9E, 9A, B0, 68, F9, 76, 07, 2F, 83, F0, E4, C1, 27, 03, 39, 1E, E7, B2, 00, CC, 0B, 8C, 06, 91, E6, C8, 7D, 6E, C8, 8C, 5B, 7F, 73, B4, 3A, 6E, 90, 79, F5, 3D, 03, F8, 05, 1D, 8A, C7...
 
[+]

Code size:
1.4 MB (1,451,008 bytes)

The file agent.vmp.dll has been seen being distributed by the following URL.

http://puu.sh/.../6d0da1e7af.dll

Scan agent.vmp.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.