How to remove romserver.exe
- File Details
- Overview
- Analysis
romserver.exe
The module romserver.exe has been detected as PUP.RemoteAdmin
File Details
| Product Name: |
|
| MD5: |
cf6f82977c8ca48e50ac48778b3f3986 |
| Size: |
6 MB |
| First Published: |
2017-11-24 17:02:01 (6 years ago) |
| Latest Published: |
2018-11-19 10:07:48 (5 years ago) |
| Status: |
PUP.RemoteAdmin (on last analysis) |
|
| Analysis Date: |
2018-11-19 10:07:48 (5 years ago) |
Overview
| %programfiles%\litemanager pro - viewer\server |
| %programfiles%\litemanager pro - viewer |
| %programfiles% |
| %desktop% |
| ROMServer.exe |
| romserver.exe |
| Windows 10 |
40.0% |
|
| Windows XP |
26.7% |
|
| Windows 7 |
20.0% |
|
| Windows 8.1 |
6.7% |
|
| Windows 8 |
6.7% |
|
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x004b7e34 |
| Name |
Size of data |
MD5 |
| .text |
4930560 |
c0e2be5f55da8e6f17a2aa1d024ebb84 |
| .itext |
12288 |
dc3b628a1d8a78b3780e878f706929f2 |
| .data |
80384 |
390644690f9a250cbd713b24173afbc2 |
| .bss |
0 |
00000000000000000000000000000000 |
| .idata |
21504 |
127b95e0a39f6ba3b4ab639ff8189c99 |
| .didata |
3072 |
3e82e1fb8ea6ba290212ae52741221e1 |
| .edata |
512 |
2c993fd87361fb0c53d779b7caec7f68 |
| .tls |
0 |
00000000000000000000000000000000 |
| .rdata |
512 |
85bc46bfadb02ce7b930da0f1f74eff1 |
| .reloc |
419328 |
adad9d5ef572a5dfd6d2da8870a4c1ad |
| .rsrc |
958464 |
982c7c757cc5429ccceb0bcc30911880 |
