rapportmgmtservice.exe
Rapport by Trusteer (Signed)
Version: | 3.5.1205.17 |
MD5: | 4d7b30001787a7e36b899be4693c8769 |
SHA1: | e5636ee9b1ecc882ff2feb65bdddcedb65d73f86 |
SHA256: | d83effb4aa81b60ef431c175c230b2eb1252bafa3fea47ed6997eaabaf6f6fd2 |
What is rapportmgmtservice.exe?
Trusteer Rapport is lightweight security software designed to protect confidential data, such as account credentials, from being stolen by malicious software (malware) and via phishing. To achieve this goal, the software first includes anti-phishing measures to protect against misdirection and attempts to prevent malicious screen scraping.
Overview
rapportmgmtservice.exe runs as a service under the name Rapport Management Service (RapportMgmtService) with extensive SYSTEM privileges (full administrator access). The file is digitally signed by Trusteer which was issued by the VeriSign certificate authority (CA).
Details
File name: | rapportmgmtservice.exe |
Publisher: | Trusteer Ltd. |
Product name: | Rapport |
Description: | RapportMgmtService |
Typical file path: | C:\Program Files\trusteer\rapport\bin\rapportmgmtservice.exe |
Original name: | RapportMgmtService |
File version: | 3.5.1205.17 |
Size: | 953.84 KB (976,728 bytes) |
Certificate |
Issued to: | Trusteer |
Authority (CA): | VeriSign |
Effective date: | Friday, February 12, 2010 |
Expiration date: | Thursday, May 1, 2014 |
Digital DNA |
PE subsystem: | Windows GUI |
File packed: | No |
Code language: | Microsoft Visual C++ 8.0 |
.NET CLR: | No |
More details
Behaviors
Services
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
- 'RapportMgmtService' (Rapport Management Service)
- RapportMgmtService
Network connections
[UDP] listens on port 50614
[UDP] listens on port 56888
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
CPU |
Total CPU: | 0.00060459% | |
Kernel CPU: | 0.00030064% | |
User CPU: | 0.00030394% | |
Kernel CPU time: | 25,951 ms/min | |
Context switches: | 6/sec | |
Memory |
Private memory: | 38.99 MB | |
Private (maximum): | 47.77 MB | |
Private (minimum): | 7.95 MB | |
Non-paged memory: | 38.99 MB | |
Virtual memory: | 189.76 MB | |
Virtual memory (peak): | 216.63 MB | |
Working set: | 18.56 MB | |
Working set (peak): | 89.89 MB | |
Resource allocations |
Threads: | 18 | |
Handles: | 338 | |
Process properties
Integrety level: | System |
Platform: | 64-bit |
Command line: | "C:\Program Files\trusteer\rapport\bin\rapportmgmtservice.exe" |
Owner: | SYSTEM |
Windows Service |
Service name: | RapportMgmtService |
Display name: | Rapport Management Service |
Description: | “Central Rapport Management and Monitoring Service” |
Type: | Win32OwnProcess |
Parent process: | services.exe (Services and Controller app by Microsoft) |
Threads
Averages
RapportMgmtService.exe (main module) |
Total CPU: | 0.01806198% | |
Kernel CPU: | 0.00582409% | |
User CPU: | 0.01223789% | |
CPU cycles: | 715,108/sec | |
Context switches: | 1/sec | |
Memory: | 964 KB | |
wow64.dll |
Total CPU: | 0.00006338% | |
Kernel CPU: | 0.00006338% | |
User CPU: | 0.00000000% | |
CPU cycles: | 1,709/sec | |
Memory: | 252 KB | |
ntdll.dll |
Total CPU: | 0.00002850% | |
Kernel CPU: | 0.00002850% | |
User CPU: | 0.00000000% | |
CPU cycles: | 2,242/sec | |
Memory: | 1.66 MB | |
Distribution by Windows OS
OS version | distribution |
Windows 7 Home Premium |
54.35% |
|
Microsoft Windows XP |
13.04% |
|
Windows 7 Professional |
8.70% |
|
Windows Vista Home Premium |
8.70% |
|
Windows 8 Pro |
8.70% |
|
Windows 7 Ultimate |
6.52% |
|
Distribution by country
United States installs about 42.22% of Rapport.
Distribution by PC manufacturer
PC Manufacturer | distribution |
Sony |
31.25% |
|
Dell |
25.00% |
|
Hewlett-Packard |
12.50% |
|
Intel |
12.50% |
|
GIGABYTE |
6.25% |
|
ASUS |
6.25% |
|
Toshiba |
6.25% |
|