home

tcap.exe

TCActive! v9

MooSoft Development LLC

It is set to automatically start when a user logs into Windows via the current user run registry key under the display name ‘tcactive’.
Publisher:
MooSoft Development LLC  (signed and verified)

Product:
TCActive! v9

Description:
TCActive! GUI

Version:
9.0.0.2030

MD5:
79642af996a26f422afdf994d8a95e91

SHA-1:
3b76408727be17780e51972dd8a60ced3d205532

SHA-256:
2deb4e24b9b66b7ad015e3029975323a728ddf1268a71129c65b8599fd1299a7

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 3:36:16 PM UTC  (today)

File size:
5.9 MB (6,156,904 bytes)

Product version:
9.0.0.0

Copyright:
(c) MooSoft Development LLC

Original file name:
tcap.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\the cleaner\tcap.exe

Digital Signature
Signed by:
MooSoft Development LLC

Authority:
COMODO CA Limited

Valid from:
7/15/2013 3:00:00 AM

Valid to:
7/16/2014 2:59:59 AM

Subject:
CN=MooSoft Development LLC, O=MooSoft Development LLC, STREET=4401 Montgomery Blvd NE, STREET="#77", L=Albuquerque, S=NM, PostalCode=87109, C=US

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00DAA30383BDFA137176CAC875B87843D3

File PE Metadata
Compilation timestamp:
3/23/2014 10:06:46 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
98304:rVGzEAmHjTyBnJkC+sIDL8LSf9LMtT7DlIjtCHN/v8EQVfXGJ9Bm1YGDKn4zzJAp:IpmDgnJkOIDL8LTtT7pIjtQ9WRXFi4fa

Entry address:
0x4A7ACC

Entry point:
55, 8B, EC, 83, C4, F0, 53, 56, 57, B8, 84, 39, 8A, 00, E8, A5, 20, B6, FF, 8B, 3D, 04, 09, 8D, 00, 68, B0, 7B, 8A, 00, 6A, FF, 6A, 00, E8, DD, 26, B6, FF, 8B, D8, 85, DB, 74, 59, E8, 72, 29, B6, FF, 3D, B7, 00, 00, 00, 75, 4D, 6A, 00, 68, C4, 7B, 8A, 00, E8, 3F, 34, B6, FF, 8B, F0, 83, FE, FF, 74, 2F, 6A, F8, 56, E8, 08, 36, B6, FF, A3, 8C, D8, 95, 00, A1, 8C, D8, 95, 00, 50, E8, C0, 36, B6, FF, 85, C0, 74, 0D, 6A, 01, A1, 8C, D8, 95, 00, 50, E8, 67, 39, B6, FF, 56, E8, 99, 38, B6, FF, 53, E8, FB, 25, B6...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
4.6 MB (4,875,264 bytes)

Startup File (User Run)
Registry location:
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
tcactive

Command:
C:\Program Files\the cleaner\tcap.exe


Scan tcap.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.