How to remove rw5post.exe
- File Details
- Overview
- Analysis
rw5post.exe
The module rw5post.exe has been detected as General Threat
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
4343c3d31d9fd2019eea68f3429a4984 |
| Size: |
1 MB |
| First Published: |
2020-02-21 07:31:54 (5 years ago) |
| Latest Published: |
2020-02-21 07:31:54 (5 years ago) |
| Status: |
General Threat (on last analysis) |
|
| Analysis Date: |
2020-02-21 07:31:54 (5 years ago) |
Overview
| %sysdrive%\kkk\diamond angkor\backup today\new folder\roommastersystem\program files |
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x0000157c |
| Name |
Size of data |
MD5 |
| .text |
487936 |
3d465ddd25abfc35f1c4706bc74a97db |
| .data |
50688 |
a9ba9749db30e45a0562ae6dca720dcf |
| .cwtls |
2048 |
5ac6637c722df408486765413fd160a7 |
| .idata |
15360 |
b9415b78ee58b8120e0be8e00285ccfd |
| .rsrc |
287744 |
2253de8075257a5cfde5241f85cd2394 |
| .reloc |
52224 |
b691c214e74b4f104f7d5ed9ea73c269 |
| .cwdebug |
512 |
8613cf1cbe1fdb3defb998adfbfe1220 |
