Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

9c051 31.58%
4ed75 5.26%
7f460 42.11%
3b520 5.26%
a8247 5.26%
d933c 5.26%
b51c3 5.26%
(Note, the developer publishes each variation of this file with the same version, but the hashes are unique.)

Relationships


PE structurePE file structure

Show functions
Import table
advapi32.dll
RegCreateKeyExW, CheckTokenMembership, RegQueryValueW, RegEnumKeyW, RegDeleteKeyW, RegSetValueExW, AllocateAndInitializeSid, RegOpenKeyExW, RegOpenKeyW, RegQueryValueExW, RegCloseKey, FreeSid, OpenSCManagerW, OpenServiceW, GetUserNameW, CloseServiceHandle
comctl32.dll
InitCommonControlsEx, ImageList_ReplaceIcon, ImageList_SetBkColor
comdlg32.dll
GetFileTitleW
crypt32.dll
CertEnumCertificatesInStore, CertGetNameStringW, CertOpenSystemStoreW, CertGetCertificateContextProperty
gdi32.dll
SetWindowExtEx, ScaleWindowExtEx, ExtSelectClipRgn, CreateBitmap, LineTo, CreateRectRgnIndirect, GetMapMode, DPtoLP, GetBkColor, GetTextColor, GetRgnBox, SetWindowOrgEx, GetClipBox, ScaleViewportExtEx, SetViewportExtEx, OffsetViewportOrgEx, GetWindowExtEx, GetViewportExtEx, SetTextAlign, CreateCompatibleDC, SetMapMode, SetTextColor, SetBkMode, SetBkColor, RestoreDC, SaveDC, Escape, ExtTextOutW, TextOutW, RectVisible, PtVisible, PatBlt, CreateDIBSection, Ellipse, GetBkMode, CreatePen, Rectangle, SetViewportOrgEx, GetViewportOrgEx, CreateSolidBrush, DeleteObject, DeleteDC, SelectObject, CreateFontW, CreateRoundRectRgn, GetTextExtentPoint32W, CreateFontIndirectW, GetDeviceCaps, GetStockObject, GetObjectW, BitBlt, CreateCompatibleBitmap, MoveToEx, GetTextMetricsW
gdiplus.dll
GdipDisposeImage, GdipAlloc, GdipFree, GdipGetImageWidth, GdipDrawImageRectI, GdipSetInterpolationMode, GdipDeleteGraphics, GdipCreateFromHDC, GdipLoadImageFromStream, GdipGetImageHeight, GdiplusStartup, GdiplusShutdown, GdipCloneImage, GdipDrawLine, GdipDeletePen, GdipCreatePen1
kernel32.dll
HeapFree, TerminateProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, ExitThread, RaiseException, RtlUnwind, HeapReAlloc, HeapSize, VirtualProtect, VirtualAlloc, VirtualQuery, GetStdHandle, GetModuleFileNameA, FreeEnvironmentStringsW, GetEnvironmentStringsW, GetCommandLineW, SetHandleCount, GetFileType, GetStartupInfoA, HeapCreate, VirtualFree, QueryPerformanceCounter, HeapAlloc, GetACP, GetOEMCP, IsValidCodePage, InitializeCriticalSectionAndSpinCount, LCMapStringW, GetTimeZoneInformation, GetConsoleCP, GetConsoleMode, LCMapStringA, GetStringTypeA, GetStringTypeW, GetLocaleInfoA, SetStdHandle, WriteConsoleA, GetConsoleOutputCP, WriteConsoleW, CreateFileA, SetEnvironmentVariableA, ExitProcess, GetStartupInfoW, GetTickCount, GetFileTime, GetFileSizeEx, FileTimeToLocalFileTime, SetErrorMode, FileTimeToSystemTime, TlsFree, DeleteCriticalSection, LocalReAlloc, TlsSetValue, TlsAlloc, InitializeCriticalSection, GlobalHandle, GlobalReAlloc, EnterCriticalSection, TlsGetValue, LeaveCriticalSection, LocalAlloc, InterlockedIncrement, GlobalFlags, GetCurrentThread, ConvertDefaultLocale, EnumResourceLanguagesW, lstrcmpA, GetLocaleInfoW, CompareStringA, InterlockedExchange, CreateFileW, GetFullPathNameW, GetVolumeInformationW, GetCurrentProcess, DuplicateHandle, GetFileSize, SetEndOfFile, UnlockFile, LockFile, FlushFileBuffers, SetFilePointer, WriteFile, ReadFile, GetThreadLocale, InterlockedDecrement, GetCurrentThreadId, GlobalAddAtomW, GlobalFindAtomW, GlobalDeleteAtom, CompareStringW, LoadLibraryA, lstrcmpW, GetVersionExA, FormatMessageW, LocalFree, lstrlenW, GetCurrentProcessId, GetModuleHandleA, WritePrivateProfileStringW, GetSystemInfo, GetModuleHandleW, SetLastError, GetCPInfo, lstrlenA, GetVersionExW, GetVersion, GetPrivateProfileSectionNamesW, GetPrivateProfileStringW, GetPrivateProfileIntW, ResetEvent, FreeResource, ResumeThread, MulDiv, WideCharToMultiByte, lstrcpyW, GetCurrentDirectoryW, GetProcAddress, LoadLibraryW, GetFileAttributesW, WaitForSingleObjectEx, GetLastError, FreeLibrary, GlobalFree, GlobalUnlock, GlobalLock, GlobalAlloc, WaitForSingleObject, Sleep, MultiByteToWideChar, ReleaseMutex, CreateMutexW, GetModuleFileNameW, CloseHandle, CreateEventW, FindClose, CreateDirectoryW, FindFirstFileW, SetEvent, CreateThread, FindResourceW, LoadResource, LockResource, GetSystemTimeAsFileTime, SizeofResource, FindNextFileW, GetLocalTime, OpenEventW, GetSystemDirectoryW, CreateProcessW, GetDateFormatW, GetTimeFormatW
mfc42u.dll
DllMain
msvcrt.dll
DllMain
ole32.dll
CLSIDFromProgID, CoTaskMemAlloc, CLSIDFromString, CoTaskMemFree, CreateStreamOnHGlobal, CoGetClassObject, StgOpenStorageOnILockBytes, StgCreateDocfileOnILockBytes, CreateILockBytesOnHGlobal, OleUninitialize, CoFreeUnusedLibraries, OleInitialize, CoRevokeClassObject, OleIsCurrentClipboard, OleFlushClipboard, CoRegisterMessageFilter, CoUninitialize, CoInitialize, CoCreateInstance, CoInitializeEx, CoSetProxyBlanket, CoInitializeSecurity
oledlg.dll
OleUIBusyW
shell32.dll
ShellExecuteExW, ShellExecuteW, Shell_NotifyIconW, SHGetSpecialFolderPathW
shlwapi.dll
PathIsUNCW, PathFindExtensionW, PathFindFileNameW, PathStripToRootW
user32.dll
DllMain, GetSubMenu, GetMenu, CheckMenuItem, InsertMenuW, CreatePopupMenu, GetMenuItemCount, CopyRect, GetSysColor, UpdateWindow, RedrawWindow, GetMenuItemID, CloseWindow, SetRectEmpty, GetWindowRect, TrackPopupMenu, GetCursorPos, SetMenuDefaultItem, LoadIconW, SendMessageW, EnableWindow, WinHelpW, GetMenuStringW, LoadBitmapW, ModifyMenuW, SetTimer, KillTimer, GetClientRect, PostMessageW, GetWindowTextW, EnumWindows, RegisterWindowMessageW, MessageBoxW, SetForegroundWindow, IsWindow, GetParent, LoadImageW, RemoveMenu, DeleteMenu, GetWindow, IsWindowVisible, SetActiveWindow, GetSystemMenu, AppendMenuW, EnableMenuItem, LoadMenuW, SetMenu, DestroyIcon
wgapi.dll
WgLoadAPI
winspool.drv
DocumentPropertiesW, ClosePrinter, OpenPrinterW

twcu.exe

Remove twcu.exe
MD5:   3b5200167b63b0f48a7240d7d8df4da1
SHA1:   936b9df6a6ecbc98ad45289e7e57a560bd8b5fbd
SHA256:   387cd75c211c6c4014f8cc2769acfc268fe08a53c67ac0eafec1339f3bff7ad6

Overview

twcu.exe executes as a process with the local user's privileges usually within the context of Windows Explorer. It is set to be start when the PC boots and any user logs into Windows (added to the Run registry key for the all users under the local machine). It is installed with a couple of know programs including TP-LINK Wireless Configuration Utility published by TP-LINK, TP-LINK TL-WN727N Driver from TP-LINK and TP-LINK TL-WN727N Driver by TP-LINK.

DetailsDetails

File name:twcu.exe
Typical file path:C:\Program Files\tp-link\tp-link wireless configuration utility\twcu.exe
Size:821.5 KB (841,216 bytes)
Build date:3/20/2012 10:01 AM
Digital DNA
PE subsystem:Windows GUI
File packed:No
Code language:Microsoft Visual C++
.NET CLR:No
More details

ResourcesPrograms

The following programs will install this file
TP-LINK
8% remove
TP-LINK Wireless Configuration Utility is a software that was designed in order to provide you with a simple means of managing wireless network adapters.
TP-LINK
1% remove
Base on the IEEE 802.11n technology, TL-WN727N shows more excellent abilities of mitigating data loss over long distances and through obstacles in a small office or a large apartment, even in a steel-and-concrete building. Above all, you could easily pick up the wireless network during long-distance connection where legacy 11g products may not! Wireless N USB Adapter TL-WN727N allows you to connect a desktop or notebook computer to a wi...
TP-LINK
1% remove
TP-LINK 150Mbps Mini Wireless N USB Adapter Driver is a utility that comes via the driver download or on the included CD. The application helps users complete the software installation and wireless network settings, including security configurations and wireless connection.

BehaviorsBehaviors

User start menu folder
Shortcut pointer placed in '%appdata%\Microsoft\Windows\Start Menu'
  • Shortcut to 'twcu.exe'
Startup files (all users) run
Runs under the registry key 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'
  • 'TWCU' → "C:\Program Files\TP-LINK\TP-LINK Wireless Client Utility\TWCU.exe" -nogui

ResourcesResource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
CPU
Total CPU:0.00029568%
0.028634%
Kernel CPU:0.00014860%
0.013761%
User CPU:0.00014709%
0.014873%
Kernel CPU time:23,197 ms/min
100,923,805ms/min
CPU cycles:2,995,713/sec
17,470,203/sec
Context switches:147/sec
284/sec
Memory
Private memory:23.95 MB
21.59 MB
Private (maximum):31.47 MB
Private (minimum):1.72 MB
Non-paged memory:23.95 MB
21.59 MB
Virtual memory:115.18 MB
140.96 MB
Virtual memory (peak):116.18 MB
169.69 MB
Working set:17.99 MB
18.61 MB
Working set (peak):31.47 MB
37.95 MB
Page faults:22,688/min
2,039/min
I/O
I/O read transfer:5.34 KB/sec
1.02 MB/min
I/O read operations:1/sec
343/min
I/O other transfer:2 Bytes/sec
448.09 KB/min
I/O other operations:2/sec
1,671/min
Resource allocations
Threads:7
12
Handles:167
600
GUI GDI count:1745
103
GUI GDI peak:1763
142
GUI USER count:1443
49
GUI USER peak:1456
71

BehaviorsProcess properties

Integrety level:High
Platform:32-bit
Command line:"C:\Program Files\tp-link\tp-link wireless configuration utility\twcu.exe" -nogui
Owner:User
Parent process:explorer.exe (Windows Explorer by Microsoft Corporation)

ResourcesThreads

Averages
 
dc_wff.dll
Total CPU:0.25690943%
0.272967%
Kernel CPU:0.10330003%
0.107585%
User CPU:0.15360940%
0.165382%
CPU cycles:7,880,597/sec
5,741,424/sec
Context switches:136/sec
79/sec
Memory:488 KB
1.16 MB
TWCU.exe (main module)
Total CPU:0.00282239%
Kernel CPU:0.00162288%
User CPU:0.00119952%
CPU cycles:665,262/sec
Context switches:3/sec
Memory:864 KB

Common loaded modules

These are modules that are typiclaly loaded within the context of this process.

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Microsoft Windows XP 68.42%
Windows 7 Ultimate 26.32%
Windows 8 Pro 5.26%

Distribution by countryDistribution by country

Hungary installs about 15.79% of twcu.exe.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Compaq 25.00%
Dell 25.00%
MSI 25.00%
American Megatrends 18.75%
GIGABYTE 6.25%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE