How to remove rutserv.exe
- File Details
- Overview
- Analysis
rutserv.exe
The module rutserv.exe has been detected as Risk.RemoteAdmin
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
17cde1da8735b709075feeecd6fd686d |
| Size: |
8 MB |
| First Published: |
2017-06-10 22:08:23 (7 years ago) |
| Latest Published: |
2020-09-07 11:42:33 (4 years ago) |
| Status: |
Risk.RemoteAdmin (on last analysis) |
|
| Analysis Date: |
2020-09-07 11:42:33 (4 years ago) |
Overview
| %programfiles%\remote utilities - host |
| %programfiles%\remote utilities - viewer\server |
| %appdata%\rut-agent\65008\7eb963e4ab |
| %appdata%\rut-agent\65008 |
| %desktop%\удаленные утилиты для windows\viewer6.5.portable\ru.viewer.portable |
| %desktop%\удаленные утилиты для windows |
| %programfiles% |
| %programfiles% |
| %programfiles% |
| %programfiles% |
|
20.0% |
|
|
20.0% |
|
|
20.0% |
|
|
13.3% |
|
|
13.3% |
|
|
6.7% |
|
|
6.7% |
|
| Windows 10 |
46.7% |
|
| Windows 8 |
20.0% |
|
| Windows Server 2012 R2 |
20.0% |
|
| Windows 7 |
13.3% |
|
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x00664558 |
| Name |
Size of data |
MD5 |
| .text |
6673920 |
ccad2f86ccfca9653a041558e06e5133 |
| .itext |
22016 |
4cd95e3964212d5d23742453699cff27 |
| .data |
125440 |
98386684bd304b4c4200b36374d94a65 |
| .bss |
0 |
00000000000000000000000000000000 |
| .idata |
24576 |
101826bd098f05014b2d1f0f04fa6b2b |
| .didata |
3584 |
ff86c74798c23453d945e4cf8e63b3fb |
| .edata |
512 |
b856fd2662f02c718d81961028f98acd |
| .tls |
0 |
00000000000000000000000000000000 |
| .rdata |
512 |
c5ef5e848c7d30df3ba894c03d302b53 |
| .vmp0 |
2560 |
4fafd08fff7e89574e9a455dc0c47076 |
| .reloc |
579584 |
8f99a7c08d7b55e838e0116a67b524a7 |
| .rsrc |
1115648 |
8c59e56615491573742c31f38b5052d7 |
