How to remove rutserv.exe
- File Details
- Overview
- Analysis
rutserv.exe
The module rutserv.exe has been detected as Risk.RemoteAdmin
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
3c5850ef227bb206e507551c471ee8df |
| Size: |
9 MB |
| First Published: |
2017-09-21 00:02:25 (7 years ago) |
| Latest Published: |
2020-04-08 17:04:28 (4 years ago) |
| Status: |
Risk.RemoteAdmin (on last analysis) |
|
| Analysis Date: |
2020-04-08 17:04:28 (4 years ago) |
Overview
| %programfiles%\remote utilities - host |
| %programfiles% |
| %sysdrive%\viewer6.8.portable.zip\ru.viewer.portable |
| %programfiles%\remote utilities - viewer |
| %appdata%\rut-agent\68001 |
| %sysdrive%\inst\viewer6.8.portable\ru.viewer.portable |
|
41.3% |
|
|
23.8% |
|
|
7.9% |
|
|
4.8% |
|
|
3.2% |
|
|
3.2% |
|
|
3.2% |
|
|
3.2% |
|
|
1.6% |
|
|
1.6% |
|
|
1.6% |
|
|
1.6% |
|
|
1.6% |
|
|
1.6% |
|
| Windows 10 |
60.9% |
|
| Windows 7 |
17.2% |
|
| Windows 8.1 |
7.8% |
|
| Windows 8 |
7.8% |
|
| Windows Server 2012 R2 |
4.7% |
|
| Windows Server 2008 R2 |
1.6% |
|
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x00780a64 |
| Name |
Size of data |
MD5 |
| .text |
7836672 |
104bc9af52d0c4a29d0c6d2cdaaa5317 |
| .itext |
23552 |
70e7f1c0600fdca4c9c51fe4f1595eef |
| .data |
128000 |
b2b6c3c0860300ac73c8693bdd5fbce2 |
| .bss |
0 |
00000000000000000000000000000000 |
| .idata |
22528 |
7e422af78e0ad6aa7bc9b4c38bc56b22 |
| .didata |
25088 |
97bf0d6d98a3a15eb44641a8e58d5f8b |
| .edata |
512 |
3c6dd8196a2d6024b7b9f350478b951f |
| .tls |
0 |
00000000000000000000000000000000 |
| .rdata |
512 |
b9fea28d71e213ca8bcc4d29d27d82f9 |
| .vmp0 |
2560 |
6eea5a54434fefe1354f34881132f789 |
| .reloc |
684032 |
2fdb28fd8a1a503292b3d52f93e89ec5 |
| .rsrc |
1223168 |
747e893cc7d05cebb29dd84345a6b1d5 |
