How to remove ROMServer_1___185.10.129.26_5651.exe
- File Details
- Overview
- Analysis
ROMServer_1___185.10.129.26_5651.exe
The module ROMServer_1___185.10.129.26_5651.exe has been detected as PUP.RemoteAdmin
File Details
| Product Name: |
|
| MD5: |
63790443df60d1ca5f1a4f2c66dbcf86 |
| Size: |
6 MB |
| First Published: |
2018-04-23 16:12:03 (6 years ago) |
| Latest Published: |
2019-12-04 03:57:16 (4 years ago) |
| Status: |
PUP.RemoteAdmin (on last analysis) |
|
| Analysis Date: |
2019-12-04 03:57:16 (4 years ago) |
Overview
| %desktop% |
| %programfiles% |
| %programfiles%\litemanager pro - viewer |
| %sysdrive%\programms\viewer |
| %sysdrive%\спецпо\удаленный доступ |
| ROMServer.exe |
| ROMServer_1___185.10.129.26_5651.exe |
|
47.6% |
|
|
23.8% |
|
|
19.0% |
|
|
4.8% |
|
|
4.8% |
|
| Windows 10 |
50.0% |
|
| Windows 7 |
45.8% |
|
| Windows Server 2012 R2 |
4.2% |
|
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x004bce34 |
| Name |
Size of data |
MD5 |
| .text |
4951040 |
98d4ff283cc6e14d870ce96a36dbc3dc |
| .itext |
12288 |
ed650e017380640c9ccee6236f6af40a |
| .data |
80384 |
0119b0576428dc0dfd954db08c16c97c |
| .bss |
0 |
00000000000000000000000000000000 |
| .idata |
21504 |
188ba6ca9922c456d7da11627a1c265c |
| .didata |
3072 |
b8e7a419d578d98999ac0cda125eeb67 |
| .edata |
512 |
2fd19282a84027934a392653bf7c032d |
| .tls |
0 |
00000000000000000000000000000000 |
| .rdata |
512 |
52f9926e6b468328546e3ca6a8449d0f |
| .reloc |
420352 |
c687c35a17dbd17bc79c542de06036dc |
| .rsrc |
960512 |
d80ae87b9a1a9112abbcdddc1b176581 |
