» rfusclient.exe
Overview
Analysis
File Details
Programs (1)

rfusclient.exe

Remote Utilities

Usoris Systems

The application rfusclient.exe by Usoris Systems has been detected as a potentially unwanted program by 7 anti-malware scanners. This file is typically installed with the program Remote Utilities - Host by Usoris Systems LLC.

File name:

rfusclient.exe

Publisher:

Usoris Systems LLC (signed by Usoris Systems)

Product:

Remote Utilities

Version:

5.5.2.0

MD5:

da234708897b23c0e6c8826f89e3ab23

SHA-1:

684ff4a128d59e3a602f643d6adf5728678ca773

SHA-256:

cbe1398765b269b56c31c83068a9a5986539c3194f0891e5bb2d89a42856d85d

Scanner detections:

7 / 68

Status:

Potentially unwanted

Analysis date:

4/25/2024 7:18:13 AM UTC (today)

Scan engine

Detection

Engine version

Agnitum Outpost

Riskware.RemoteAdmin.DI

7.1.1

Avira AntiVirus

APPL/MonitorTool.Gen

7.11.182.180

Clam AntiVirus

Win.Trojan.Rfusclient

0.98/21411

ESET NOD32

Win32/RemoteAdmin.RemoteUtilities (variant)

9.10655

Kaspersky

not-a-virus:RemoteAdmin.Win32.Agent

14.0.0.1602

Rising Antivirus

PE:Malware.InstallMonstr!6.38

23.00.65.15808

Trend Micro House Call

TROJ_GEN.F47V0201

7.2.222

File size:

4.8 MB (5,001,984 bytes)

Product version:

5.5.2.0

Trademarks:

Usoris Systems LLC, Remote Utilities

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\remote utilities - host\rfusclient.exe

Digital Signature

Signed by:

Usoris Systems

Authority:

VeriSign, Inc.

Valid from:

2/10/2013 9:00:00 PM

Valid to:

2/11/2014 8:59:59 PM

Subject:

CN=Usoris Systems, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Usoris Systems, L=Victoria, S=Mahe, C=SC

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

67FD5AEC0D8F9F6F1CAA40589F568A0C

File PE Metadata

Compilation timestamp:

6/30/2013 12:09:53 PM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

49152:1lvUBIO6u/KOm/qSLI2l1j0CIEgH3LDFWTHFC7xnAbA6oW4/09TvT0TIaXHYkh9i:1lsIO1/44AbA6LFm5kF

Entry address:

0x3CFFAC

Entry point:

55, 8B, EC, 83, C4, F0, 53, B8, 88, A0, 7B, 00, E8, 73, F4, C3, FF, 8B, 1D, AC, 5B, 7E, 00, A1, 94, 54, 7E, 00, 83, 38, 06, 7C, 05, E8, EA, 4B, C4, FF, E8, 61, A0, FE, FF, 8B, 03, B2, 01, E8, D8, DE, E3, FF, 8B, 03, E8, 8D, C1, E3, FF, 8B, 03, BA, 4C, 00, 7D, 00, E8, 31, BB, E3, FF, 8B, 03, C6, 40, 67, 00, 8B, 0D, A8, 57, 7E, 00, 8B, 03, 8B, 15, 38, 05, 7B, 00, E8, 80, C1, E3, FF, 8B, 0D, 34, 58, 7E, 00, 8B, 03, 8B, 15, 74, E2, 71, 00, E8, 6D, C1, E3, FF, 8B, 0D, FC, 61, 7E, 00, 8B, 03, 8B, 15, 9C, 37, 76... 
[+]

Developed / compiled with:

Microsoft Visual C++

Code size:

3.8 MB (3,993,600 bytes)

The file rfusclient.exe has been discovered within the following program.

Remote Utilities - Host by Usoris Systems LLC

www.remoteutilities.com

About 8% of users remove it

Remove rfusclient.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.