How to remove ROMServer.exe
- File Details
- Overview
- Analysis
ROMServer.exe
The module ROMServer.exe has been detected as PUP.RemoteAdmin
File Details
MD5: |
1a0c89dc5d3814c030dcac5bd88349f9 |
Size: |
5 MB |
First Published: |
2017-06-27 13:09:22 (6 years ago) |
Latest Published: |
2019-09-18 09:34:01 (4 years ago) |
Status: |
PUP.RemoteAdmin (on last analysis) |
|
Analysis Date: |
2019-09-18 09:34:01 (4 years ago) |
Overview
%programfiles%\litemanager pro - server |
%programfiles%\litemanager pro - viewer |
%profile% |
%programfiles% |
%programfiles% |
%programfiles% |
%programfiles%\litemanager pro - viewer |
ROMServer.exe |
ROMServer___212.107.200.196_.exe |
|
61.9% |
|
|
19.0% |
|
|
9.5% |
|
|
4.8% |
|
|
4.8% |
|
Windows 10 |
57.1% |
|
Windows 7 |
28.6% |
|
Windows Server 2008 R2 |
9.5% |
|
Windows 8.1 |
4.8% |
|
Analysis
Subsystem: |
Windows GUI |
PE Type: |
pe |
OS Bitness: |
32 |
Image Base: |
0x00400000 |
Entry Address: |
0x0044bc6c |
Name |
Size of data |
MD5 |
.text |
4487680 |
82fcd7410d9fec55bf78c08a443550a3 |
.itext |
11776 |
0b04d5f2c99e49b688833cbf2c0bda4e |
.data |
79872 |
d0727672e2683032c5ee257d868fbd0b |
.bss |
0 |
00000000000000000000000000000000 |
.idata |
21504 |
c4495a0f07e5a606614f82e1a443aa05 |
.didata |
3072 |
1efe32645e4d5bce43e2779ae9f262c9 |
.edata |
512 |
d81c25052fea05de221323bd78e9924a |
.tls |
0 |
00000000000000000000000000000000 |
.rdata |
512 |
c648bf962c4f729f5540a56b99d73a1e |
.reloc |
386560 |
bba72d15d5bafa479915608fb07b336a |
.rsrc |
892928 |
9bb84b8dd1c56a7948c1a645ae5dfae5 |