C:\Program Files (x86)\SolarWinds\Orion\Interfaces\.dl.C:\Program Files (x86)\SolarWinds\Orion\DPA\.dll.
C:\Program Files (x86)\SolarWinds\Orion\NCM\.dll.C:\Program Files (x86)\SolarWinds\Orion\DPI\.dll.C:\Program Files (x86)\SolarWinds\Orion\.dll.C:\Program Files (x86)\Solarwinds\Network Topology Mapper\Service\.dll.C:\Program Files (x86)\Solarwinds\Network Topology Mapper\.dll.
#Sunburst solarwinds software
#Sunburst solarwinds .dll
The DLL in question is .dll and was signed as a ligitimate part of the SolarWinds suite, bypassing application control technologies. Block DLLs mentioned in MSRC Guidance from Loading.įor guidance on the solarwinds issue please see DHS, SolarWinds, FireEYE, MSRC, CrowdStrike and Microsoft.Īdvanced users, please see the FireEYE repo on this issue.