How to remove donglein.dll
- File Details
- Overview
- Analysis
donglein.dll
The module donglein.dll has been detected as Worm.Ramnit
File Details
Product Name: |
|
Company Name: |
|
MD5: |
39d0ab5a5be7afa0a518792873ccafd0 |
Size: |
304 KB |
First Published: |
2018-08-21 06:12:50 (6 years ago) |
Latest Published: |
2018-08-21 06:12:50 (6 years ago) |
Status: |
Worm.Ramnit (on last analysis) |
|
Analysis Date: |
2018-08-21 06:12:50 (6 years ago) |
%sysdrive%\setool\drivers\smartcard_drivers |
Analysis
Subsystem: |
Windows GUI |
PE Type: |
pe |
OS Bitness: |
32 |
Image Base: |
0x10000000 |
Entry Address: |
0x0000d000 |
Name |
Size of data |
MD5 |
.text |
20480 |
b3338f8085baa141a90b11c18449b870 |
.rdata |
4096 |
86b54537286c482437383f89a22538fa |
.data |
12288 |
d728308f724ac0a34efda771304347a4 |
.rsrc |
4096 |
f280099ec057f2b03d84ff5ed4507bf3 |
.reloc |
4096 |
b0f2b0f55e8c48275f6d6c1eba9de85d |
.text |
262144 |
9edf14262f8f28c9f73fc834b6013d37 |