How to remove tvcshell.exe
- File Details
- Overview
- Analysis
tvcshell.exe
The module tvcshell.exe has been detected as Worm.Ramnit
File Details
Product Name: |
|
MD5: |
821bb234958daaa17c473f5e19ea8745 |
Size: |
548 KB |
First Published: |
2017-12-18 12:05:58 (6 years ago) |
Latest Published: |
2017-12-18 12:05:58 (6 years ago) |
Status: |
Worm.Ramnit (on last analysis) |
|
Analysis Date: |
2017-12-18 12:05:58 (6 years ago) |
Analysis
Subsystem: |
Windows GUI |
PE Type: |
pe |
OS Bitness: |
32 |
Image Base: |
0x00400000 |
Entry Address: |
0x00062000 |
Name |
Size of data |
MD5 |
.text |
4096 |
1a4b7634080ac4500d2bddfcb6e3b4b2 |
.rdata |
4096 |
304850e60f95ba6031fe50c25cf611d3 |
.data |
4096 |
27f91d0b12ed843df7d3b5bed5b48f4f |
.rsrc |
32768 |
3631eb780c1fa95f768a1935a4ee62fb |
wwznndv |
77824 |
1f13c1e71b7d9fac4c9326b98d4662ed |
.text |
188416 |
70ea1b9c65095a8f1f330c6840ad1c83 |
kdcbdxd |
86016 |
3f5fcd84b95e0907c0eba97b14d275bc |
.text |
159744 |
520d1411e65520b513d3cc605aa9625f |