home

RACSessionService.exe

PCNetSoftware

Monika Novotna

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘RAC User Help Service’.
Publisher:
Monika Novotna  (signed and verified)

Product:
PCNetSoftware

Description:
Remote Administrator Control User Help Service

Version:
1, 0, 0, 1

MD5:
1b57044e53c184e02e9f04a890089f95

SHA-1:
4e4f95884a35c665bd99b8b205289d20f2502d21

SHA-256:
27353b5861fbfeb0cace6ce8cd6f2a697ac43d9a510ec363ca0aafe09aae21c9

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 11:12:40 AM UTC  (today)

File size:
157.9 KB (161,648 bytes)

Product version:
1, 0, 0, 1

Copyright:
Copyright (C) 2000 - 2011 Monika Novotna

Original file name:
RACSessionService.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\pcnetsoftware\rac server\racsessionservice.exe

Digital Signature
Signed by:
Monika Novotna

Authority:
VeriSign, Inc.

Valid from:
12/22/2011 2:00:00 AM

Valid to:
12/22/2012 1:59:59 AM

Subject:
CN=Monika Novotna, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Monika Novotna, L=Chrudim IV., S=Pardubicky kraj, C=CZ

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
5B27D79341922F1F7C419EF2239150D4

File PE Metadata
Compilation timestamp:
7/15/2012 6:50:26 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
1536:qbmNu967UQzNk/68xB+TgQT1TelMqAM5NXu9fE19opPwLCSZkzkZaH/:qbQu9nR/ZQhTI7e9fEfopPKXkzII

Entry address:
0x71C7

Entry point:
55, 8B, EC, 6A, FF, 68, 20, A2, 41, 00, 68, EC, B6, 40, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 58, 53, 56, 57, 89, 65, E8, FF, 15, E4, 80, 41, 00, 33, D2, 8A, D4, 89, 15, 04, 50, 42, 00, 8B, C8, 81, E1, FF, 00, 00, 00, 89, 0D, 00, 50, 42, 00, C1, E1, 08, 03, CA, 89, 0D, FC, 4F, 42, 00, C1, E8, 10, A3, F8, 4F, 42, 00, 6A, 01, E8, 4D, 32, 00, 00, 59, 85, C0, 75, 08, 6A, 1C, E8, C3, 00, 00, 00, 59, E8, 45, 1A, 00, 00, 85, C0, 75, 08, 6A, 10, E8, B2, 00, 00, 00, 59, 33, F6, 89, 75...
 
[+]

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
92 KB (94,208 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
RAC User Help Service

Command:
"C:\Program Files\pcnetsoftware\rac server\racsessionservice.exe" -service


Scan RACSessionService.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.