How to remove wrwOBVOtD.exe

wrwOBVOtD.exe

The module wrwOBVOtD.exe has been detected as Trojan.Wacatac

wrwOBVOtD.exe
Remove wrwOBVOtD.exe

File Details

MD5: c4456ff45de65b53c288bba0f730de1c
Size: 114 KB
First Published: 2025-07-24 23:01:10 (a month ago)
Latest Published: 2025-07-24 23:01:18 (a month ago)
Status: Trojan.Wacatac (on last analysis)
Analysis Date: 2025-07-24 23:01:18 (a month ago)

Common Places:

%startup%
%startup%
%commonappdata%
%commonappdata%
%startup%
%startup%
%commonappdata%
%startup%
%commonappdata%
%startup%

Geography:

100.0%

OS Version:

Windows 10 100.0%

Analysis

Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x000066c2

PE Sections:

Name Size of data MD5
.text 73728 707a05f19733fe6fd7bb3125d3b0dc1c
.rdata 31232 8a8fd6404c89cdf1a453528d5cc6e5f2
.data 3072 d3f8c22acf2cdda6ad5291f369b940fe
.gfids 512 eb2d016e438c42bf2edd2ce6e20d4ac5
.tls 512 1f354d76203061bfdd5a53dae48d5435
.rsrc 1536 dfd149f56e161d36efdb6add9546cd7f
.reloc 5120 9429f2f3c127db5a0a66f2770fbd954e

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for wrwOBVOtD.exe
copyright for information about wrwOBVOtD.exe