How to remove ROMFUSClient.exe
- File Details
- Overview
- Analysis
ROMFUSClient.exe
The module ROMFUSClient.exe has been detected as PUP.RemoteAdmin
File Details
| MD5: |
48dff3439715f8bf6c329cd477eb889f |
| Size: |
4 MB |
| First Published: |
2017-07-25 12:28:05 (6 years ago) |
| Latest Published: |
2018-12-05 16:04:24 (5 years ago) |
| Status: |
PUP.RemoteAdmin (on last analysis) |
|
| Analysis Date: |
2018-12-05 16:04:24 (5 years ago) |
Overview
| %programfiles%\litemanager pro - server |
| %programfiles%\litemanager pro - viewer\server |
| %programfiles%\litemanager pro - viewer |
| %programfiles% |
| %programfiles%\litemanager pro - viewer |
| %programfiles% |
|
33.3% |
|
|
22.2% |
|
|
22.2% |
|
|
11.1% |
|
|
11.1% |
|
| Windows 10 |
66.7% |
|
| Windows 7 |
33.3% |
|
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x00384c28 |
| Name |
Size of data |
MD5 |
| .text |
3670528 |
7f870f73407d769eed74b5a04525d63a |
| .itext |
11776 |
8928b3fac0f6122c368c32e1eea56fff |
| .data |
74240 |
3a1feae23a83adde04bf6df6c0d844a6 |
| .bss |
0 |
00000000000000000000000000000000 |
| .idata |
18432 |
0517e14400d1e7e84d6277222efc16fb |
| .didata |
3072 |
fdcb66501f9a024870fa3994e671b8eb |
| .edata |
512 |
e0275defba27cb333f77c3bdeac45f0c |
| .tls |
0 |
00000000000000000000000000000000 |
| .rdata |
512 |
51c3c5792583328c11f45ad2d62a2a22 |
| .reloc |
327168 |
52e65df6dbbe914816112599ee6c8af6 |
| .rsrc |
844800 |
f1f020e411dabe7b0ab68a17e69f3702 |
