home

tvrc.exe

NEC Remote Controller

NEC Corporation

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘NECTVRC’.
Publisher:
NEC Corporation, NEC Personal Products, Ltd.  (signed by NEC Corporation)

Product:
NEC Remote Controller

Description:
tvrc

Version:
4, 0, 0, 6

MD5:
c39b085edc706acf9afbd2bab2c9e609

SHA-1:
046c8b45c03af824c8938f280e7c62c8e497cb52

SHA-256:
1f5d334e2a59395352997a07250c316fa7ba69220b2045e4ee57fab190e9f3fb

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/19/2024 7:19:15 AM UTC  (today)

File size:
173.6 KB (177,720 bytes)

Product version:
4, 0, 0, 6

Copyright:
Copyright (C) NEC Corporation, NEC Personal Products, Ltd. 2001-2007

Trademarks:
NEC

Original file name:
tvrc.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\nectvrc\tvrc.exe

Digital Signature
Signed by:
NEC Corporation

Authority:
VeriSign, Inc.

Valid from:
7/6/2006 9:00:00 AM

Valid to:
7/7/2007 8:59:59 AM

Subject:
CN=NEC Corporation, OU=NECP PC Operation Unit, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=NEC Corporation, L="2-6-80 Shimohanazawa, Yonezawa", S=Yamagata, C=JP

Issuer:
CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
31891D4F7A98DBCEB35A99E77593B828

File PE Metadata
Compilation timestamp:
1/13/2007 5:59:34 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
1536:GQAw1gBcJGHjDF4bTqzVyEmJr/oWyQ+ldF+eydSSeytiEiYPFFfWj/YK9OZuG3jA:SBc0DZLzVyE8wW+fH5NJQZucjHws1UZ

Entry address:
0x12A22

Entry point:
E8, 2A, 6E, 00, 00, E9, 16, FE, FF, FF, 55, 8B, EC, 81, EC, 28, 03, 00, 00, A3, 90, 25, 45, 00, 89, 0D, 8C, 25, 45, 00, 89, 15, 88, 25, 45, 00, 89, 1D, 84, 25, 45, 00, 89, 35, 80, 25, 45, 00, 89, 3D, 7C, 25, 45, 00, 66, 8C, 15, A8, 25, 45, 00, 66, 8C, 0D, 9C, 25, 45, 00, 66, 8C, 1D, 78, 25, 45, 00, 66, 8C, 05, 74, 25, 45, 00, 66, 8C, 25, 70, 25, 45, 00, 66, 8C, 2D, 6C, 25, 45, 00, 9C, 8F, 05, A0, 25, 45, 00, 8B, 45, 00, A3, 94, 25, 45, 00, 8B, 45, 04, A3, 98, 25, 45, 00, 8D, 45, 08, A3, A4, 25, 45, 00, 8B...
 
[+]

Entropy:
6.2340

Code size:
124 KB (126,976 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
NECTVRC

Command:
C:\Program Files\nectvrc\tvrc.exe


Scan tvrc.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.