How to remove NVCOSMB.DLL
- File Details
- Overview
- Analysis
NVCOSMB.DLL
The module NVCOSMB.DLL has been detected as Worm.Ramnit
File Details
Product Name: |
|
Company Name: |
|
MD5: |
77406f92087f1c58a9ef83ed4a2ec7c6 |
Size: |
228 KB |
First Published: |
2021-01-09 11:56:11 (3 years ago) |
Latest Published: |
2021-01-09 11:56:11 (3 years ago) |
Status: |
Worm.Ramnit (on last analysis) |
|
Analysis Date: |
2021-01-09 11:56:11 (3 years ago) |
%sysdrive%\new folder (4)\new folder\data backup\double driver backup\mura-c8552657ec 2-18-2012 7-05-10 pm\system |
Analysis
Subsystem: |
Windows GUI |
PE Type: |
pe |
OS Bitness: |
32 |
Image Base: |
0x10000000 |
Entry Address: |
0x00020000 |
Name |
Size of data |
MD5 |
.text |
73728 |
10d72b3cbc3affeba0f220bb0198110b |
.rdata |
24576 |
d119a137a7459e0d2739b1790f51816d |
.data |
8192 |
593a05ba09da7455b912eafc411a054c |
.rsrc |
4096 |
43d6f02c153b4f305d9fc7a25fb6c89d |
.reloc |
8192 |
e2b87517d8af5b9b0abd5fd8afb4f5ff |
.text |
110592 |
07d19276dce3acaf53c9452120ff33fa |