rapportmgmtservice.exe
Rapport by Trusteer (Signed)
| Version: | 3.5.1205.12 |
| MD5: | 65aa99cb303ba21f9acc8c1374a14798 |
| SHA1: | b542120e47e77e864e15b6cc5f0fea8775628151 |
| SHA256: | bd0056eb9308dd3e2b4e0c8cf689979f734b73c9a99dae9d90eb52fde1c33508 |
What is rapportmgmtservice.exe?
Trusteer Rapport is lightweight security software designed to protect confidential data, such as account credentials, from being stolen by malicious software (malware) and via phishing. To achieve this goal, the software first includes anti-phishing measures to protect against misdirection and attempts to prevent malicious screen scraping.
Overview
rapportmgmtservice.exe runs as a service under the name Rapport Management Service (RapportMgmtService) with extensive SYSTEM privileges (full administrator access). The file is digitally signed by Trusteer which was issued by the VeriSign certificate authority (CA).
Details
| File name: | rapportmgmtservice.exe |
| Publisher: | Trusteer Ltd. |
| Product name: | Rapport |
| Description: | RapportMgmtService |
| Typical file path: | C:\Program Files\trusteer\rapport\bin\rapportmgmtservice.exe |
| Original name: | RapportMgmtService |
| File version: | 3.5.1205.12 |
| Size: | 953.84 KB (976,728 bytes) |
| Build date: | 9/22/2012 6:21 AM |
| Certificate |
| Issued to: | Trusteer |
| Authority (CA): | VeriSign |
| Effective date: | Friday, February 12, 2010 |
| Expiration date: | Thursday, May 1, 2014 |
| Digital DNA |
| PE subsystem: | Windows GUI |
| File packed: | No |
| Code language: | Microsoft Visual C++ 8.0 |
| .NET CLR: | No |
More details
Behaviors
Services
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
- 'RapportMgmtService' (Rapport Management Service)
- RapportMgmtService
Network connections
[UDP] listens on port 1089
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
| CPU |
| Total CPU: | 0.00114539% | |
| Kernel CPU: | 0.00062510% | |
| User CPU: | 0.00052028% | |
| Kernel CPU time: | 26,672 ms/min | |
| Context switches: | 6/sec | |
| Memory |
| Private memory: | 25.87 MB | |
| Private (maximum): | 19.87 MB | |
| Private (minimum): | 12 MB | |
| Non-paged memory: | 25.87 MB | |
| Virtual memory: | 213.59 MB | |
| Virtual memory (peak): | 224.19 MB | |
| Working set: | 16.11 MB | |
| Working set (peak): | 92.25 MB | |
| Page faults: | 220,451/min | |
| I/O |
| I/O read transfer: | 42.26 KB/sec | |
| I/O read operations: | 7/sec | |
| I/O write transfer: | 45.75 KB/sec | |
| I/O write operations: | 6/sec | |
| I/O other transfer: | 13.53 KB/sec | |
| I/O other operations: | 248/sec | |
| Resource allocations |
| Threads: | 12 | |
| Handles: | 301 | |
| GUI GDI count: | 4 | |
| GUI USER count: | 12 | |
Process properties
| Integrety level: | Undefined |
| Platform: | 32-bit |
| Command line: | "C:\Program Files\trusteer\rapport\bin\rapportmgmtservice.exe" |
| Owner: | SYSTEM |
| Windows Service |
| Service name: | RapportMgmtService |
| Display name: | Rapport Management Service |
| Description: | “Central Rapport Management and Monitoring Service” |
| Type: | Win32OwnProcess |
| Parent process: | services.exe (Services and Controller app by Microsoft) |
Threads
Common loaded modules
These are modules that are typiclaly loaded within the context of this process.
Distribution by Windows OS
| OS version | distribution |
| Windows 7 Home Premium |
54.35% |
|
| Microsoft Windows XP |
13.04% |
|
| Windows 7 Professional |
8.70% |
|
| Windows Vista Home Premium |
8.70% |
|
| Windows 8 Pro |
8.70% |
|
| Windows 7 Ultimate |
6.52% |
|
Distribution by country
United States installs about 42.22% of Rapport.
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| Sony |
31.25% |
|
| Dell |
25.00% |
|
| Hewlett-Packard |
12.50% |
|
| Intel |
12.50% |
|
| GIGABYTE |
6.25% |
|
| ASUS |
6.25% |
|
| Toshiba |
6.25% |
|
