How to remove rwcbu.exe
rwcbu.exe
The module rwcbu.exe has been detected as Suspicious Object
File Details
| Product Name: | SystemaxFork |
| Company Name: | www.sopcast.com |
| MD5: | cf90bfb5f3b6bbe2af061d57dcf93d4f |
| Size: | 64 KB |
| First Published: | 2017-07-17 06:07:21 (8 years ago) |
| Latest Published: | 2021-01-11 18:11:05 (4 years ago) |
| Status: | Suspicious Object (on last analysis) | |
| Analysis Date: | 2021-01-11 18:11:05 (4 years ago) |
Common Places:
| %profile% |
| %profile% |
| %profile% |
File Names:
| yki.exe |
| rwcbu.exe |
| snin.exe |
| mli.exe |
| msf.exe |
Geography:
| 33.3% | ||
| 33.3% | ||
| 16.7% | ||
| 16.7% |
OS Version:
| Windows 8.1 | 50.0% | |
| Windows 7 | 50.0% |
Analysis
| Subsystem: | Windows GUI |
| PE Type: | pe |
| OS Bitness: | 32 |
| Image Base: | 0x00400000 |
| Entry Address: | 0x000041ef |
PE Sections:
| Name | Size of data | MD5 |
| .text | 15360 | 29a13c26611361bd4695752e03c495ab |
| .rdata | 19968 | 6a3d8be6fe03fc27300214c01bc79183 |
| .data | 4096 | 7bdcc35a041e05b6c3627517dd32e3d8 |
| .rsrc | 21504 | ef90785086165a7f63fe0d91fcd1332b |
| .reloc | 4096 | 0cfb7097c99cabc158a4e1127cde067d |
More information:
Download GridinSoft
Anti-Malware - Removal tool for rwcbu.exe