How to remove totalcmd.exe
- File Details
- Overview
- Analysis
totalcmd.exe
The module totalcmd.exe has been detected as Possible Threat
File Details
Product Name: |
|
Company Name: |
|
MD5: |
e171e387ad9cb492437df4a3ae8d2f7b |
Size: |
4 MB |
First Published: |
2018-06-17 08:04:08 (6 years ago) |
Latest Published: |
2018-11-08 20:03:58 (6 years ago) |
Status: |
Possible Threat (on last analysis) |
|
Analysis Date: |
2018-11-08 20:03:58 (6 years ago) |
%sysdrive%\_sys\sysnort |
%sysdrive% |
TOTALCMD.EXE |
totalcmd.exe |
Windows 10 |
71.4% |
|
Windows 7 |
28.6% |
|
Analysis
Subsystem: |
Windows GUI |
PE Type: |
pe |
OS Bitness: |
32 |
Image Base: |
0x00400000 |
Entry Address: |
0x0035a7c0 |
Name |
Size of data |
MD5 |
CODE |
3513856 |
5a8f2401d7b7b40b0f81f971819224ab |
DATA |
37888 |
8174675313b6b1bf3b80f54d9f8ffcd7 |
BSS |
0 |
00000000000000000000000000000000 |
.idata |
16896 |
047f443c48d361ff0f4aade073add8c5 |
.tls |
0 |
00000000000000000000000000000000 |
.rdata |
512 |
2293699984ad58a1f8ec50f39ca268cb |
.reloc |
144896 |
f851914e5c4570a2f9ffcb5fe78012b3 |
.rsrc |
852992 |
1d0d7d4e9e73910a16edaeb92ec33173 |