How to remove RCursor.dll
- File Details
- Overview
- Analysis
RCursor.dll
The module RCursor.dll has been detected as Risk.RemoteAdmin
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
a8a3c98d50f6cb33f95416e459641d43 |
| Size: |
83 KB |
| First Published: |
2017-10-17 05:06:08 (7 years ago) |
| Latest Published: |
2018-08-28 09:14:26 (6 years ago) |
| Status: |
Risk.RemoteAdmin (on last analysis) |
|
| Analysis Date: |
2018-08-28 09:14:26 (6 years ago) |
Overview
| %system%\rserver30 |
| %sysdrive%\$windows.~bt\newos\windows\syswow64\rserver30 |
| %system% |
| %temp%\rserv35.tmp\system32 |
| %profile%\lgat.capital\local settings\temp\rserv35.tmp\system32 |
|
38.7% |
|
|
16.1% |
|
|
16.1% |
|
|
12.9% |
|
|
3.2% |
|
|
3.2% |
|
|
3.2% |
|
|
3.2% |
|
|
3.2% |
|
| Windows 7 |
58.1% |
|
| Windows 10 |
29.0% |
|
| Windows XP |
6.5% |
|
| Windows 8.1 |
3.2% |
|
| Windows Server 2008 R2 |
3.2% |
|
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x50870000 |
| Entry Address: |
0x00004b24 |
| Name |
Size of data |
MD5 |
| .text |
45056 |
0d5aac033e53ba29ac416a0afb5e5ea3 |
| .rdata |
12288 |
e391afb0f1f9965325de155ae7f7ef08 |
| .data |
4096 |
f5392cda8bb7ddeb2e7f0c1f7edf4f50 |
| .rsrc |
4096 |
511e6dcafab9f773ba0a4526209c3ca5 |
| .reloc |
8192 |
0334f8a30c72de51319d72a5cd35cf6e |
