How to remove RDPConf.exe
- File Details
- Overview
- Analysis
RDPConf.exe
The module RDPConf.exe has been detected as Risk.RemoteAdmin
File Details
Product Name: |
|
Company Name: |
|
MD5: |
c8e9b030031fd1ddb1e6bd087beed676 |
Size: |
1 MB |
First Published: |
2018-09-24 19:25:51 (5 years ago) |
Latest Published: |
2020-12-18 13:29:30 (3 years ago) |
Status: |
Risk.RemoteAdmin (on last analysis) |
|
Analysis Date: |
2020-12-18 13:29:30 (3 years ago) |
%sysdrive%\учебаа |
%sysdrive%\documentos\dropbox\tools\rdpwrapper.rar |
%profile%\dropbox\tools\rdpwrapper.rar |
%system% |
%desktop%\old-xavier-old\downloads |
%desktop%\kazkas |
%desktop%\kazkas |
%sysdrive%\temp1 |
%sysdrive%\my files(aaadom02)\native\c\temp |
%sysdrive%\soft\www |
|
18.2% |
|
|
18.2% |
|
|
18.2% |
|
|
18.2% |
|
|
18.2% |
|
|
9.1% |
|
Windows 10 |
63.6% |
|
Windows 7 |
18.2% |
|
Windows Server 2012 R2 |
18.2% |
|
Analysis
Subsystem: |
Windows GUI |
PE Type: |
pe |
OS Bitness: |
32 |
Image Base: |
0x00400000 |
Entry Address: |
0x000bbc78 |
Name |
Size of data |
MD5 |
.text |
758272 |
6c2ef03dfa04983d45d849b1b95bb194 |
.itext |
3584 |
c4ae5d346b48e30910fd358681f5ff69 |
.data |
9728 |
c0dbf7b91a24888630dc5bd4e350fdb0 |
.bss |
0 |
00000000000000000000000000000000 |
.idata |
12800 |
dc07bd3052bbc0a802dcf7af0bfd4f3d |
.didata |
1024 |
f0e42002630e07dab413d85d699eea57 |
.tls |
0 |
00000000000000000000000000000000 |
.rdata |
512 |
dc1b7e655b1f90a291d2062b840f6f13 |
.reloc |
69632 |
06a627ef175cf13f78de1e777e87247a |
.rsrc |
193536 |
895f117920493c0a02ed4ca7e4d23249 |