How to remove NVCOSMB.DLL
- File Details
- Overview
- Analysis
NVCOSMB.DLL
The module NVCOSMB.DLL has been detected as Worm.Ramnit
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
77406f92087f1c58a9ef83ed4a2ec7c6 |
| Size: |
228 KB |
| First Published: |
2021-01-09 11:56:11 (4 years ago) |
| Latest Published: |
2021-01-09 11:56:11 (4 years ago) |
| Status: |
Worm.Ramnit (on last analysis) |
|
| Analysis Date: |
2021-01-09 11:56:11 (4 years ago) |
| %sysdrive%\new folder (4)\new folder\data backup\double driver backup\mura-c8552657ec 2-18-2012 7-05-10 pm\system |
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x10000000 |
| Entry Address: |
0x00020000 |
| Name |
Size of data |
MD5 |
| .text |
73728 |
10d72b3cbc3affeba0f220bb0198110b |
| .rdata |
24576 |
d119a137a7459e0d2739b1790f51816d |
| .data |
8192 |
593a05ba09da7455b912eafc411a054c |
| .rsrc |
4096 |
43d6f02c153b4f305d9fc7a25fb6c89d |
| .reloc |
8192 |
e2b87517d8af5b9b0abd5fd8afb4f5ff |
| .text |
110592 |
07d19276dce3acaf53c9452120ff33fa |
