» CV.EXE
Overview
Analysis
File Details
Programs (2)
Downloads (15)

CV.EXE

CommView

TamoSoft

This is a setup program which is used to install the application. The file has been seen being downloaded from download2109.mediafire.com and multiple other hosts.

File name:

CV.EXE

Publisher:

TamoSoft

Product:

CommView

Description:

CommView Packet Analyzer

Version:

6.0.0.590

MD5:

e6f0dd488bb8e1f2824fc87f460c7b74

SHA-1:

86830803bf625f2fd1f6a9076b56becd2855ff44

SHA-256:

859dc00a10c0b11e0c2bd92b5c018b9c05ff33e3039719e9645ddc41a5f77266

Scanner detections:

1 / 68

Status:

Clean (1 probable false positive detection)

Explanation:

This is mosty likely a false positive detection, the file is probably clean.

Analysis date:

4/26/2024 7:41:38 PM UTC (today)

Scan engine

Detection

Engine version

Bkav FE

HW32.CDB

1.3.0.4959

File size:

3.8 MB (3,940,864 bytes)

Product version:

Trademarks:

CommView is a registered trademark of TamoSoft

Original file name:

CV.EXE

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\commview\cv.exe

File PE Metadata

Compilation timestamp:

6/20/1992 2:52:17 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

98304:YLzvzplqWDnB3VruyCiPiBK3cKXa/eTYyQu+hH7Fb:4zruYnB3puziPMCa8Yhjl7B

Entry address:

0x1000

Entry point:

68, 01, 60, 0B, 01, E8, 01, 00, 00, 00, C3, C3, 6A, 0B, 3F, E8, 65, 9B, 12, 54, B2, D3, 2E, 4E, D9, C3, EF, FA, 66, 49, 42, 0E, DD, 63, F4, D7, B4, D6, BE, 37, 08, E4, 30, 7D, 91, 51, 1C, 42, 3C, CA, 59, 6F, 31, 95, 39, 42, F9, 32, 2F, 12, 0F, B2, 84, 48, D0, B2, 07, D1, BF, D5, C9, 6C, E5, 48, E5, 0A, D2, 46, EF, AE, 2C, 83, 90, D7, 04, 27, 84, F4, C2, CC, 12, 83, 97, B0, 7D, 4C, DE, C8, A1, 49, 26, BE, E2, EC, 74, 37, 20, 29, 53, 8A, 5E, CF, 85, CE, CB, EB, D2, 6E, 15, BC, 87, 65, 18, BE, 64, 9C, CB, 75... 
[+]

Entropy:

7.9878

Packer / compiler:

ASProtect v1.2x (New Strain)

Code size:

4.5 MB (4,686,848 bytes)

The file CV.EXE has been discovered within the following programs.

CommView by TamoSoft

Publisher's description - “CommView is a program for monitoring Internet and Local Area Network (LAN) activity capable of capturing and analyzing network packets. It gathers information about data passing through your dial-up connection or Ethernet card and decodes the analyzed data.”

www.tamos.com/products/commview

6% remove it

CommView for WiFi by TamoSoft

A program for capturing traffic on 802.11a/b/g networks.

www.tamos.com/products/commwifi

4% remove it

The file CV.EXE has been seen being distributed by the following 15 URLs.

http://download2109.mediafire.com/zxho3lcvffqg/.../CV.exe

http://download2109.mediafire.com/g09qy538u4gg/.../CV.exe

http://download2109.mediafire.com/25xheweqmang/.../CV.exe

http://download2109.mediafire.com/aw9ddm89y7og/.../CV.exe

http://download1885.mediafire.com/2a4a3sf9bn1g/.../CV.exe

http://download2109.mediafire.com/wcpb7wmxakgg/.../CV.exe

http://download732.mediafire.com/fnthji7oimng/.../CV.exe

http://download1473.mediafire.com/4q3r45843bcg/.../CV.exe

http://download1724.mediafire.com/n3vyd6tkznog/.../CV.exe

http://download1435.mediafire.com/2a8rkaf7q54g/.../CV.exe

http://download1989.mediafire.com/f4a7j7qx2afg/.../CV.exe

http://download1989.mediafire.com/3szw1z84cayg/.../CV.exe

http://download1673.mediafire.com/hmgexd5n672g/.../CV.exe

http://download1989.mediafire.com/yxgxfpk08a6g/.../CV.exe

http://download1894.mediafire.com/2kz08fpen2ng/.../CV.exe

Scan CV.EXE - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.