How to remove $RSWW386.exe
- File Details
- Overview
- Analysis
$RSWW386.exe
The module $RSWW386.exe has been detected as PUP.SlimWare
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
6e9da1b8b4dd2c36538b783aac2f315f |
| Size: |
906 KB |
| First Published: |
2017-05-31 00:05:52 (7 years ago) |
| Latest Published: |
2020-11-15 12:39:36 (4 years ago) |
| Status: |
PUP.SlimWare (on last analysis) |
|
| Analysis Date: |
2020-11-15 12:39:36 (4 years ago) |
Overview
| %profile%\downloads\- programas\- drivers - |
| %sysdrive%\$recycle.bin\s-1-5-21-3374661373-3967677714-2574385326-11168 |
| %profile%\downloads |
| %desktop%\masaüstü\programlar\pc programları |
| %profile%\downloads\新增資料夾 |
| %profile%\ser\my documents\downloads |
| %profile% |
| %mydoc%\documentos\cp2014 |
| %sysdrive%\驅動 |
| %sysdrive% |
| SlimDrivers-setup.exe |
| $RSWW386.exe |
| SlimDrivers-setup (2016_09_15 19_33_49 UTC).exe |
| SlimDrivers-setup (2).exe |
| SlimDrivers-setup (1).exe |
| SlimDrivers-setup (3).exe |
|
23.3% |
|
|
20.0% |
|
|
16.7% |
|
|
6.7% |
|
|
6.7% |
|
|
6.7% |
|
|
6.7% |
|
|
3.3% |
|
|
3.3% |
|
|
3.3% |
|
|
3.3% |
|
| Windows 10 |
66.7% |
|
| Windows 7 |
26.7% |
|
| Windows 8.1 |
6.7% |
|
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x0002ecdb |
| Name |
Size of data |
MD5 |
| .text |
303104 |
e05eaba63511c186ac9954dedfccad2e |
| .rdata |
86016 |
ad581b250449afc843d9e2bdc9ff4bfb |
| .data |
16384 |
34b57bfbcdfe2a062f10fdab68029ed8 |
| .rsrc |
512000 |
bcf468ce35896681956adf12ea428ea6 |
