How to remove tucl.dll.vir
- File Details
- Overview
- Analysis
tucl.dll.vir
The module tucl.dll.vir has been detected as Trojan.Agent
File Details
MD5: |
1fa609bc0d252ca0915d6aed2df7ccc2 |
Size: |
6 KB |
First Published: |
2017-07-18 23:06:47 (6 years ago) |
Latest Published: |
2024-03-23 23:02:53 (5 days ago) |
Status: |
Trojan.Agent (on last analysis) |
|
Analysis Date: |
2024-03-23 23:02:53 (5 days ago) |
%appdata%\ltdltd61\ea |
%appdata%\notifynotify82\ea |
%windir%\setup\fou |
%system%\mfen.exe |
%commonappdata%\rundll |
%windir%\system32 |
%commonappdata%\svhost |
%temp%\5\rarsfx1 |
%sysdrive%\$recycle.bin\s-1-5-21-2570348591-2767011175-3200952900-1016\$ro0c72t.rar\445\run\specials |
%commonappdata%\temp\445.zip\run\specials |
|
39.5% |
|
|
12.4% |
|
|
8.9% |
|
|
8.2% |
|
|
3.7% |
|
|
3.6% |
|
|
2.8% |
|
|
2.5% |
|
|
1.7% |
|
|
1.7% |
|
|
1.5% |
|
|
1.4% |
|
|
0.9% |
|
|
0.9% |
|
|
0.8% |
|
|
0.7% |
|
|
0.7% |
|
|
0.6% |
|
|
0.6% |
|
|
0.5% |
|
|
0.4% |
|
|
0.4% |
|
|
0.3% |
|
|
0.3% |
|
|
0.3% |
|
|
0.3% |
|
|
0.3% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
Windows 7 |
86.2% |
|
Windows 10 |
8.9% |
|
Windows Server 2008 R2 |
2.3% |
|
Windows 8.1 |
1.1% |
|
Windows XP |
0.7% |
|
Windows Vista |
0.4% |
|
Windows Server 2012 R2 |
0.3% |
|
Windows Web Server 2008 R2 |
0.1% |
|
Windows Server 2003 |
0.1% |
|
Windows 8 |
0.1% |
|
Analysis
Subsystem: |
Windows GUI |
PE Type: |
pe |
OS Bitness: |
32 |
Image Base: |
0x10000000 |
Entry Address: |
0x00001575 |
Name |
Size of data |
MD5 |
.text |
2560 |
40197c0c95411770a66d1df825d4b358 |
.rdata |
1536 |
ba732bcf5b4d089ebfd0aef873c8342d |
.data |
512 |
8fe55a0fd6f8d7370eec49f0fcfe9707 |
.reloc |
512 |
1075d07c9e34499e6396e8397e9490c6 |