home

rkiwrtK.exe

RKiwrtK Application

PFU LIMITED

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘Rkiwrtk’. This is installed with Rack2-Viewer (This application may be deleted by deleting Rack2-Filer).
Publisher:
PFU LIMITED  (signed and verified)

Product:
RKiwrtK Application

Version:
1, 0, 10, 1

MD5:
2632ab081e8e86958ef768625fbc4db6

SHA-1:
ea176b73a7fd17da6c099e0b975b7629ae30dff6

SHA-256:
185f9a0a7cb17ab4737824d27e2f9fcdb3a730d07323e5f67e965b34bf084405

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/24/2024 5:56:40 AM UTC  (today)

File size:
65.4 KB (66,952 bytes)

Product version:
1, 0, 10, 1

Copyright:
Copyright (C) PFU LIMITED 2003-2007

Original file name:
rkiwrtK.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\pfu\rack2v5\rkiwrtk.exe

Digital Signature
Signed by:
PFU LIMITED

Authority:
VeriSign, Inc.

Valid from:
4/5/2010 2:00:00 AM

Valid to:
4/6/2011 1:59:59 AM

Subject:
CN=PFU LIMITED, OU=Software Product Division, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=PFU LIMITED, L=Kahoku City, S=Ishikawa, C=JP

Issuer:
CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
2C2EC90ED4D2774CC240FB15059F8028

File PE Metadata
Compilation timestamp:
11/1/2010 2:28:32 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
768:NKL//hTWoonxa0XwsCk7eZZvFiB9ydnjlMJh5inlKafLWobC/9:NKDZTWoow0eF1tj2VElpfacC/9

Entry address:
0x42F8

Entry point:
55, 8B, EC, 6A, FF, 68, 70, A1, 40, 00, 68, C4, 40, 40, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 58, 53, 56, 57, 89, 65, E8, FF, 15, E8, A0, 40, 00, 33, D2, 8A, D4, 89, 15, 44, DF, 40, 00, 8B, C8, 81, E1, FF, 00, 00, 00, 89, 0D, 40, DF, 40, 00, C1, E1, 08, 03, CA, 89, 0D, 3C, DF, 40, 00, C1, E8, 10, A3, 38, DF, 40, 00, 33, F6, 56, E8, 55, 02, 00, 00, 59, 85, C0, 75, 08, 6A, 1C, E8, B0, 00, 00, 00, 59, 89, 75, FC, E8, 91, 16, 00, 00, FF, 15, EC, A0, 40, 00, A3, 68, E4, 40, 00, E8...
 
[+]

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
36 KB (36,864 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
Rkiwrtk

Command:
"C:\Program Files\pfu\rack2v5\rkiwrtk.exe"


The file rkiwrtK.exe has been discovered within the following programs.

Rack2-Viewer (This application may be deleted by deleting Rack2-Filer)  by PFU LIMITED
Publisher's description - “Rack2 is an application that allows you to manage all of your electronic files and scanned paper documents in easy to navigate digital binders. Users can effectively and efficiently find specific files by searching "titles", "sticky note" contents etc.”
www.pfu.fujitsu.com
About 2% of users remove it
 
Powered by Should I Remove It?

Scan rkiwrtK.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.