How to remove NIInstallAction.dll
- File Details
- Overview
- Analysis
NIInstallAction.dll
The module NIInstallAction.dll has been detected as Worm.Ramnit
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
5b9af83e26f454021e689def1902d781 |
| Size: |
2 MB |
| First Published: |
2018-02-11 13:08:30 (6 years ago) |
| Latest Published: |
2018-02-11 13:08:30 (6 years ago) |
| Status: |
Worm.Ramnit (on last analysis) |
|
| Analysis Date: |
2018-02-11 13:08:30 (6 years ago) |
| %sysdrive%\21.08.17\fl\новая папка (8)\data\data\offline |
Analysis
| Subsystem: |
Windows CUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x10000000 |
| Entry Address: |
0x00800000 |
| Name |
Size of data |
MD5 |
| .text |
1466368 |
f56587202d3167e21116d209b8c62711 |
| .rdata |
331776 |
db3b28be21c24212199bd7248969c110 |
| .data |
542208 |
a10a4adb1a3997646c39401ec2afd09f |
| .rsrc |
76800 |
8bfa3382f350ad6ce576d89e4865cc49 |
| .reloc |
110592 |
226bc69abef499ad25814573fc972a30 |
| .text |
99840 |
de296b9a40107229ced401516988754f |
