How to remove ROMFUSClient.exe
- File Details
- Overview
- Analysis
ROMFUSClient.exe
The module ROMFUSClient.exe has been detected as Risk.Presenoker
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
5e1bb1ef11e8c0fd2100ef94066edd6b |
| Size: |
3 MB |
| First Published: |
2017-07-12 21:05:22 (8 years ago) |
| Latest Published: |
2021-01-15 10:12:51 (4 years ago) |
| Status: |
Risk.Presenoker (on last analysis) |
|
| Analysis Date: |
2021-01-15 10:12:51 (4 years ago) |
| %programfiles%\litemanager pro - server |
| %programfiles%\litemanagerfree - server |
| %programfiles% |
| %programfiles%\litemanager pro - viewer |
| %programfiles% |
| %programfiles% |
| %programfiles% |
| %programfiles%\litemanager pro - viewer |
| %programfiles% |
| Windows 7 |
44.4% |
|
| Windows 10 |
22.2% |
|
| Windows XP |
16.7% |
|
| Windows Server 2008 R2 |
16.7% |
|
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x0025ff70 |
| Name |
Size of data |
MD5 |
| .text |
2477056 |
b302b4cb7a184b054b364aef218d2d52 |
| .itext |
8704 |
db0cd041e1384f56990801073b6402b2 |
| .data |
65536 |
1ec7d6a54f7658cf7283ee31f80d2447 |
| .bss |
0 |
00000000000000000000000000000000 |
| .idata |
19456 |
e2800afce259ce93ea3361ee537dc2b8 |
| .didata |
1024 |
a4471d1c2fa06316e49c45e2140153e8 |
| .tls |
0 |
00000000000000000000000000000000 |
| .rdata |
512 |
629769dc22eb257f3cf087d6d53f8654 |
| .reloc |
213504 |
75bd7af5e7a39aba433a773f6fb4e841 |
| .rsrc |
538624 |
d126a201f87873da41105d32d2207707 |
