How to remove NIInstallAction.dll
- File Details
- Overview
- Analysis
NIInstallAction.dll
The module NIInstallAction.dll has been detected as Worm.Ramnit
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
2586623bab0d108a004ac1b2f134d160 |
| Size: |
2 MB |
| First Published: |
2018-08-12 04:18:42 (6 years ago) |
| Latest Published: |
2018-08-12 04:18:42 (6 years ago) |
| Status: |
Worm.Ramnit (on last analysis) |
|
| Analysis Date: |
2018-08-12 04:18:42 (6 years ago) |
| %sysdrive%\1111111\transient master\data\data\offline |
Analysis
| Subsystem: |
Windows CUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x10000000 |
| Entry Address: |
0x00800000 |
| Name |
Size of data |
MD5 |
| .text |
1466368 |
f56587202d3167e21116d209b8c62711 |
| .rdata |
331776 |
db3b28be21c24212199bd7248969c110 |
| .data |
542208 |
a10a4adb1a3997646c39401ec2afd09f |
| .rsrc |
76800 |
8bfa3382f350ad6ce576d89e4865cc49 |
| .reloc |
110592 |
226bc69abef499ad25814573fc972a30 |
| .text |
159744 |
6733e400d97a297e2e4fac0ef17f386b |
