home

agent.vmp.dll

MD5:
723088d7c9937207aba80230bdbade8a

SHA-1:
9e3a2950bece60227b84df8c2926c059bf40cb7d

SHA-256:
8d149cad1d9dac08fde3162cabaf284532fc2af16f7e62a97d08342fb29d0b5c

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 12:28:50 PM UTC  (today)

File size:
6.8 MB (7,088,640 bytes)

File type:
Dynamic link library (Win32 DLL)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\inetcache\ie\{random}\agent.vmp.dll

File PE Metadata
Compilation timestamp:
6/21/2016 6:50:21 PM

OS version:
6.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
14.0

CTPH (ssdeep):
98304:O3qGul3UZUTxHhgZ2pV9qGfyFmfpwbOJzkFzC1NqpeBvN9lBKssaV/JsAL:O3qGufHhg0jqAKm0YZUex5aA

Entry address:
0xDB1139

Entry point:
E8, B4, FA, 09, 00, 66, 0F, C1, F1, 89, F9, 54, 29, D9, 5E, 89, E6, 66, 85, FC, 0F, BA, E2, 04, F9, 83, EF, 04, E8, 5D, 09, 00, 00, A4, 5B, 98, 83, BC, 9F, 5A, 2F, 2A, 18, 40, D0, D3, C6, 8C, D3, 1C, 10, 73, F7, 65, 3A, E8, 68, A9, 26, 8C, 68, 71, 76, CA, 07, 33, 71, D3, 6E, 86, C5, 46, 0E, 75, 57, 16, E2, 9B, 41, 05, 98, CB, 30, BB, 40, C5, 1E, AD, D9, 6A, 91, 5E, FD, 5E, DD, 76, A5, F2, B4, 9B, 80, 4B, 1B, D8, 23, 62, 3C, 49, 57, 70, 29, 0C, 38, D3, 1A, 53, 25, 55, B7, 22, BB, C9, 95, 15, 55, CF, 01, 81...
 
[+]

Entropy:
7.8712  (probably packed)

Code size:
1.4 MB (1,457,152 bytes)

The file agent.vmp.dll has been seen being distributed by the following 2 URLs.

http://puu.sh/.../9a50e1b88a.dll0

http://puu.sh/.../9a50e1b88a.dll

Scan agent.vmp.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.