How to remove rschatx.dll
- File Details
- Overview
- Analysis
rschatx.dll
The module rschatx.dll has been detected as Risk.RemoteAdmin
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
6413afa96ff705ef0b1d5fc384fee8b5 |
| Size: |
147 KB |
| First Published: |
2017-10-17 05:06:08 (7 years ago) |
| Latest Published: |
2018-08-28 09:14:26 (6 years ago) |
| Status: |
Risk.RemoteAdmin (on last analysis) |
|
| Analysis Date: |
2018-08-28 09:14:26 (6 years ago) |
Overview
| %system%\rserver30 |
| %sysdrive%\$windows.~bt\newos\windows\syswow64\rserver30 |
| %system% |
| %temp%\rserv35.tmp\system32 |
| %profile%\lgat.capital\local settings\temp\rserv35.tmp\system32 |
|
40.0% |
|
|
16.7% |
|
|
13.3% |
|
|
13.3% |
|
|
3.3% |
|
|
3.3% |
|
|
3.3% |
|
|
3.3% |
|
|
3.3% |
|
| Windows 7 |
56.7% |
|
| Windows 10 |
30.0% |
|
| Windows XP |
6.7% |
|
| Windows 8.1 |
3.3% |
|
| Windows Server 2008 R2 |
3.3% |
|
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x508f0000 |
| Entry Address: |
0x0000b7a9 |
| Name |
Size of data |
MD5 |
| .text |
98304 |
b0d142481dce19abaa35d46d635a9d61 |
| .rdata |
16384 |
9da32d630920b791d36c229581007229 |
| .data |
8192 |
129e3936c19fa63b8ec8ed79c54fe476 |
| .rsrc |
4096 |
1dd4f653d3b59aca3468adfc88355592 |
| .reloc |
12288 |
2272ce8bb8ffb661e96d8b30c7252e95 |
