rcplugin.exe

By KORAM GAMES LIMITED (Signed)

Remove rcplugin.exe

MD5:	faaf85630b5af987a90d89bd4cc4581c
SHA1:	bd783731701c75b65a0607bd7ef4ef07a28d8102
SHA256:	0668c9871b718795b14cc623384e1a1e8a9558852c6c4a449240683d6b0fac44

Overview

rcplugin.exe executes as a process with the local user's privileges typically within the context of its parent raidcall.exe (raidcall by KORAM GAMES LIMITED). It has been configured with a firewall exception which allows both inbound and outbound network communication without being blocked. The file is digitally signed by KORAM GAMES LIMITED which was issued by the VeriSign certificate authority (CA).

Details

File name:	rcplugin.exe
Typical file path:	C:\rc語音\rcplugin.exe
Size:	191.68 KB (196,280 bytes)
Build date:	4/15/2013 1:12 PM
Certificate
Issued to:	KORAM GAMES LIMITED
Authority (CA):	VeriSign
Digital DNA
PE subsystem:	Windows GUI
File packed:	No
Code language:	Microsoft Visual C++ 7.1
.NET CLR:	No

More details

Behaviors

Windows firewall allowed programs

Exceptions allow programs to access to the Internet through an outbound connections

Firewall exception for 'C:\Program Files\RC語音\rcplugin.exe'
Firewall exception for 'C:\Program Files\RC語音\rcplugin.exe'
Firewall exception for 'C:\RC語音\rcplugin.exe'

Network connections

Access through an approved Windows firewall exception

[UDP] listens on port 1991

Resource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)

Averages

CPU
Total CPU:	0.00205794%	0.028634%
Kernel CPU:	0.00052445%	0.013761%
User CPU:	0.00153349%	0.014873%
Kernel CPU time:	30,328 ms/min	100,923,805ms/min
Context switches:	140/sec	284/sec
Memory
Private memory:	72.48 MB	21.59 MB
Private (maximum):	28.7 MB
Private (minimum):	276 KB
Non-paged memory:	72.48 MB	21.59 MB
Virtual memory:	171.4 MB	140.96 MB
Virtual memory (peak):	171.59 MB	169.69 MB
Working set:	14.12 MB	18.61 MB
Working set (peak):	44.75 MB	37.95 MB
Page faults:	8,501,848/min	2,039/min
I/O
I/O read transfer:	12.57 KB/sec	1.02 MB/min
I/O read operations:	1/sec	343/min
I/O write transfer:	223 Bytes/sec	274.99 KB/min
I/O write operations:	1/sec	227/min
I/O other transfer:	1.18 KB/sec	448.09 KB/min
I/O other operations:	74/sec	1,671/min
Resource allocations
Threads:	12	12
Handles:	323	600
GUI GDI count:	35	103
GUI USER count:	20	49

Process properties

Integrety level:	Undefined
Platform:	32-bit
Command line:	C:\Documents and Settings\user\Application data\rctw\\log\plughost_7.2.2.log
Owner:	User
Parent process:	raidcall.exe (raidcall by KORAM GAMES LIMITED)

Threads

Averages

rcplugin.exe (main module)
Total CPU:	0.46865631%	0.272967%
Kernel CPU:	0.06168255%	0.107585%
User CPU:	0.40697376%	0.165382%
Context switches:	42/sec	79/sec
Memory:	192 KB	1.16 MB
flash32_11_7_700_202.ocx (Shockwave Flash by Adobe Systems)
Total CPU:	0.03836900%
Kernel CPU:	0.00115317%
User CPU:	0.03721584%
Context switches:	5/sec
Memory:	16.12 MB
wbprotect.dll (Rising AntiVirus 2012 by Beijing Rising Information Technology Co., Ltd)
Total CPU:	0.00028665%
Kernel CPU:	0.00000000%
User CPU:	0.00028665%
Memory:	468 KB
WININET.dll
Total CPU:	0.00020968%
Kernel CPU:	0.00010484%
User CPU:	0.00010484%
Memory:	924 KB