home

NiceApplications.SystemAdministrator.Common.dll

Version:
9.10.6.519

MD5:
6c14815dfd1dcae1981b59e208a483ee

SHA-1:
f866a7ae51c48ecb02a729ff0f383658be573378

SHA-256:
d6defda4001126038772711ffde33d0af42e0a33d67fdb654d6b1dafb9cc6638

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/14/2024 10:01:02 PM UTC  (today)

File size:
300 KB (307,200 bytes)

Product version:
9.10.6.519

Original file name:
NiceApplications.SystemAdministrator.Common.dll

File type:
Dynamic link library (Win32 DLL)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\niceapplications.systemadministrator.common.dll

File PE Metadata
Compilation timestamp:
2/7/2011 10:36:59 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
3072:2ZSxiQOtnqVHkQYxXY8lQvNShyZdhCu/vfdWS8r5IhzmqyxDQRAirbnHKE+pNldN:kRrZ9lYwYZhMXNQfqokMk7

Entry address:
0x49D6E

Entry point:
FF, 25, 00, 20, 00, 11, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
5.7234

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
288 KB (294,912 bytes)

The file NiceApplications.SystemAdministrator.Common.dll has been seen being distributed by the following 3 URLs.

http://totnice/NiceApplications/.../NiceApplications.SystemAdministrator.Common.DLL

http://sehan5744as14hu/NiceApplications/.../NiceApplications.SystemAdministrator.Common.DLL

https://13nce03p.daksh.local/NiceApplications/.../NiceApplications.SystemAdministrator.Common.DLL

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.