rapportmgmtservice.exe
Rapport by Trusteer (Signed)
Version: | 3.5.1208.24 |
MD5: | 9b0e9af5c264521c635a3c3cb966af85 |
SHA1: | 2888e004375d61aa9345c9eb1a3e76460da6f30b |
SHA256: | b558a2dcd6a7fc50cb2ddfb284a27403973db7c5c1858bde799b1f28ca37347e |
What is rapportmgmtservice.exe?
Trusteer Rapport is lightweight security software designed to protect confidential data, such as account credentials, from being stolen by malicious software (malware) and via phishing. To achieve this goal, the software first includes anti-phishing measures to protect against misdirection and attempts to prevent malicious screen scraping.
Overview
rapportmgmtservice.exe runs as a service under the name Rapport Management Service (RapportMgmtService) with extensive SYSTEM privileges (full administrator access). The file is digitally signed by Trusteer which was issued by the VeriSign certificate authority (CA).
Details
File name: | rapportmgmtservice.exe |
Publisher: | Trusteer Ltd. |
Product name: | Rapport |
Description: | RapportMgmtService |
Typical file path: | C:\Program Files\trusteer\rapport\bin\rapportmgmtservice.exe |
Original name: | RapportMgmtService |
File version: | 3.5.1208.24 |
Size: | 1.07 MB (1,124,184 bytes) |
Certificate |
Issued to: | Trusteer |
Authority (CA): | VeriSign |
Effective date: | Friday, February 12, 2010 |
Expiration date: | Thursday, May 1, 2014 |
Digital DNA |
PE subsystem: | Windows GUI |
File packed: | No |
Code language: | Microsoft Visual C++ 8.0 |
.NET CLR: | No |
More details
Behaviors
Services
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
- 'RapportMgmtService' (Rapport Management Service)
- RapportMgmtService
Network connections
[TCP] ec2-23-23-109-202.compute-1.amazonaws.com (23.23.109.202:80)
[UDP] listens on port 49152
[UDP] listens on port 50386
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
CPU |
Total CPU: | 0.00040052% | |
Kernel CPU: | 0.00007584% | |
User CPU: | 0.00032468% | |
Kernel CPU time: | 54,374 ms/min | |
CPU cycles: | 1,421,794/sec | |
Memory |
Private memory: | 45.65 MB | |
Private (maximum): | 23.28 MB | |
Private (minimum): | 7.76 MB | |
Non-paged memory: | 45.65 MB | |
Virtual memory: | 213.32 MB | |
Virtual memory (peak): | 237.28 MB | |
Working set: | 16.89 MB | |
Working set (peak): | 102.84 MB | |
I/O |
I/O read transfer: | 26.67 KB/sec | |
I/O read operations: | 8/sec | |
I/O write transfer: | 36.56 KB/sec | |
I/O write operations: | 4/sec | |
I/O other transfer: | 13.6 KB/sec | |
I/O other operations: | 172/sec | |
Resource allocations |
Threads: | 20 | |
Handles: | 378 | |
Process properties
Integrety level: | System |
Platform: | 32-bit |
Command line: | "C:\Program Files\trusteer\rapport\bin\rapportmgmtservice.exe" |
Owner: | SYSTEM |
Windows Service |
Service name: | RapportMgmtService |
Display name: | Rapport Management Service |
Description: | “Central Rapport Management and Monitoring Service” |
Type: | Win32OwnProcess |
Parent process: | services.exe (Services and Controller app by Microsoft) |
Threads
Averages
ntdll.dll |
Total CPU: | 0.05454982% | |
Kernel CPU: | 0.01855252% | |
User CPU: | 0.03599730% | |
CPU cycles: | 604,597/sec | |
Memory: | 1.23 MB | |
RapportMgmtService.exe (main module) |
Total CPU: | 0.00475006% | |
Kernel CPU: | 0.00162236% | |
User CPU: | 0.00312770% | |
CPU cycles: | 140,035/sec | |
Memory: | 1.08 MB | |
rapportcerberus.dll (Rapport by Trusteer Ltd) |
Total CPU: | 0.00278181% | |
Kernel CPU: | 0.00052987% | |
User CPU: | 0.00225194% | |
CPU cycles: | 73,394/sec | |
Memory: | 696 KB | |
rapportutil.dll (Rapport by Trusteer Ltd) |
Total CPU: | 0.00041299% | |
Kernel CPU: | 0.00019195% | |
User CPU: | 0.00022104% | |
CPU cycles: | 18,688/sec | |
Memory: | 2.93 MB | |
WININET.dll |
Total CPU: | 0.00002327% | |
Kernel CPU: | 0.00002327% | |
User CPU: | 0.00000000% | |
CPU cycles: | 4,056/sec | |
Memory: | 1.11 MB | |
wow64.dll (Win32 Emulation on NT64 by Microsoft) |
Total CPU: | 0.00001067% | |
Kernel CPU: | 0.00001067% | |
User CPU: | 0.00000000% | |
CPU cycles: | 2,744/sec | |
Memory: | 252 KB | |
Common loaded modules
These are modules that are typiclaly loaded within the context of this process.
Distribution by Windows OS
OS version | distribution |
Windows 7 Home Premium |
54.35% |
|
Microsoft Windows XP |
13.04% |
|
Windows 7 Professional |
8.70% |
|
Windows Vista Home Premium |
8.70% |
|
Windows 8 Pro |
8.70% |
|
Windows 7 Ultimate |
6.52% |
|
Distribution by country
United States installs about 42.22% of Rapport.
Distribution by PC manufacturer
PC Manufacturer | distribution |
Sony |
31.25% |
|
Dell |
25.00% |
|
Hewlett-Packard |
12.50% |
|
Intel |
12.50% |
|
GIGABYTE |
6.25% |
|
ASUS |
6.25% |
|
Toshiba |
6.25% |
|