How to remove rutserv.exe
- File Details
- Overview
- Analysis
rutserv.exe
The module rutserv.exe has been detected as PUP.RemoteAdmin
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
fc8f34472b518aa60ada2b76304a140d |
| Size: |
8 MB |
| First Published: |
2018-03-27 08:05:54 (6 years ago) |
| Latest Published: |
2019-04-16 17:12:31 (5 years ago) |
| Status: |
PUP.RemoteAdmin (on last analysis) |
|
| Analysis Date: |
2019-04-16 17:12:31 (5 years ago) |
Overview
| %sysdrive%\buhphone\update |
| %desktop%\мои документы\1c-connect\update |
| %mydoc%\client\update |
| %mydoc%\1c-connect\update |
| %sysdrive%\1c-connectsfx\1c-connectsfx.exe\1c-connect\bin\bph_rda |
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x006b7648 |
| Name |
Size of data |
MD5 |
| .text |
7015936 |
c9a608fe0391e30be17c0b7861a2c551 |
| .itext |
22528 |
907d5be7efd4da37097a34b020126a53 |
| .data |
126464 |
dbac58770b2488015498cf8fccec13c7 |
| .bss |
0 |
00000000000000000000000000000000 |
| .idata |
24576 |
6ef50012f0bd9c96f131a03213c2f08a |
| .didata |
3584 |
76cf11fc33699b8db696a926b4886b3f |
| .edata |
512 |
92d0cc1e2422dcfdd1ccae69bda49a03 |
| .tls |
0 |
00000000000000000000000000000000 |
| .rdata |
512 |
b6c1d2f47c9c0cee44bdc4e80dd147d2 |
| .reloc |
610816 |
84ca87d666f35960beb3ab44549264ba |
| .rsrc |
1138688 |
ed70ce69d6b5d3e79eb2389f4f81fba2 |
