How to remove ROMFUSClient.exe
- File Details
- Overview
- Analysis
ROMFUSClient.exe
The module ROMFUSClient.exe has been detected as PUP.RemoteAdmin
File Details
Product Name: |
|
MD5: |
76ea1225fec913ff8e891eabf91e8223 |
Size: |
5 MB |
First Published: |
2017-11-15 01:10:53 (7 years ago) |
Latest Published: |
2018-07-13 20:27:55 (6 years ago) |
Status: |
PUP.RemoteAdmin (on last analysis) |
|
Analysis Date: |
2018-07-13 20:27:55 (6 years ago) |
Overview
%programfiles%\litemanager pro - server |
%programfiles%\litemanager pro - viewer\server |
%sysdrive%\programmi\litemanager pro - viewer |
%sysdrive%\programmi |
%programfiles% |
%programfiles%\litemanager pro - viewer |
|
38.5% |
|
|
15.4% |
|
|
15.4% |
|
|
15.4% |
|
|
7.7% |
|
|
7.7% |
|
Windows 10 |
53.8% |
|
Windows 7 |
30.8% |
|
Windows XP |
15.4% |
|
Analysis
Subsystem: |
Windows GUI |
PE Type: |
pe |
OS Bitness: |
32 |
Image Base: |
0x00400000 |
Entry Address: |
0x003e4d90 |
Name |
Size of data |
MD5 |
.text |
4067328 |
d4e7580ff19f19f0d711e09c2026dd6b |
.itext |
12288 |
29d091f7ba89e65caeb539066f37840f |
.data |
76800 |
e7d7ca8bbfdfa63cc1aaf2e49d9ee5e5 |
.bss |
0 |
00000000000000000000000000000000 |
.idata |
18944 |
1de3f6366ba86533d87186b236bc6c44 |
.didata |
3072 |
b31df2de670008b4cb1f8ac56ecbe3f5 |
.edata |
512 |
a26e5cb0a611a210c29970b4f3b82094 |
.tls |
0 |
00000000000000000000000000000000 |
.rdata |
512 |
f5a32dabb60aff9b7d582f19d7ccc696 |
.reloc |
357376 |
57658673aa4f30ab3b4501b4afdb1ce5 |
.rsrc |
855040 |
e0d62fe9671070816f8f3b649670d25a |