How to remove rwcbu.exe
rwcbu.exe
The module rwcbu.exe has been detected as Suspicious Object
File Details
Product Name: | SystemaxFork |
Company Name: | www.sopcast.com |
MD5: | cf90bfb5f3b6bbe2af061d57dcf93d4f |
Size: | 64 KB |
First Published: | 2017-07-17 06:07:21 (7 years ago) |
Latest Published: | 2021-01-11 18:11:05 (3 years ago) |
Status: | Suspicious Object (on last analysis) | |
Analysis Date: | 2021-01-11 18:11:05 (3 years ago) |
Common Places:
%profile% |
%profile% |
%profile% |
File Names:
yki.exe |
rwcbu.exe |
snin.exe |
mli.exe |
msf.exe |
Geography:
33.3% | ||
33.3% | ||
16.7% | ||
16.7% |
OS Version:
Windows 8.1 | 50.0% | |
Windows 7 | 50.0% |
Analysis
Subsystem: | Windows GUI |
PE Type: | pe |
OS Bitness: | 32 |
Image Base: | 0x00400000 |
Entry Address: | 0x000041ef |
PE Sections:
Name | Size of data | MD5 |
.text | 15360 | 29a13c26611361bd4695752e03c495ab |
.rdata | 19968 | 6a3d8be6fe03fc27300214c01bc79183 |
.data | 4096 | 7bdcc35a041e05b6c3627517dd32e3d8 |
.rsrc | 21504 | ef90785086165a7f63fe0d91fcd1332b |
.reloc | 4096 | 0cfb7097c99cabc158a4e1127cde067d |
More information:
Download GridinSoft
Anti-Malware - Removal tool for rwcbu.exe