home

mirc.exe

mIRC

mIRC Co. Ltd.

Publisher:
mIRC Co. Ltd.

Product:
mIRC

Version:
7.36.0.0

MD5:
6737ae0654f6aac60337bf0154f3b794

SHA-1:
62c0cd00c66cfdfc20d5f7498bc6a64a129b830a

Scanner detections:
3 / 68

Status:
Inconclusive  (not enough data for an accurate detection)

Analysis date:
4/25/2024 11:29:08 AM UTC  (today)

Scan engine
Detection
Engine version

Avira AntiVirus
SPR/mIRC.Gen
7.11.168.26

Bkav FE
HW32.CDB
1.3.0.4959

Trend Micro House Call
Suspicious_GEN.F47V0818
7.2.232

File size:
1.6 MB (1,635,328 bytes)

Product version:
7.36

Copyright:
Copyright © 1995-2014 mIRC Co. Ltd.

Trademarks:
mIRC® is a Registered Trademark of mIRC Co. Ltd.

Original file name:
mirc.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\mirc\mirc.exe

File PE Metadata
Compilation timestamp:
8/14/2014 4:54:34 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
49152:3HaV1CoucyJjVyF7zl+KWQuTjJ/cH+HB8:X+E27xJWQux/DHe

Entry address:
0x1000

Entry point:
B8, 18, 00, 9C, 00, 50, 64, FF, 35, 00, 00, 00, 00, 64, 89, 25, 00, 00, 00, 00, 33, C0, 89, 08, 54, 57, 49, 53, 54, 45, 44, 2D, 31, 34, 00, B4, 24, 04, 21, 57, 56, FF, 15, 34, 58, 69, 00, 8B, F8, 85, FF, 0F, 84, 17, 00, 10, 2D, 69, 01, 53, 55, 8D, 44, 24, 38, 50, 6A, 02, 8B, C8, 68, D0, 17, 40, BF, 4C, 51, 1A, 7C, AB, 8B, 9C, 24, 24, BD, 90, 2D, 74, 83, C4, 0C, 0D, 53, 2C, 0A, 96, 27, 38, 6A, 31, 40, B1, E0, C9, 3C, 8B, 2D, C4, 51, 50, 57, FF, D5, A0, 61, E2, 5F, 89, 24, 8D, 48, 02, 0B, B5, 0B, 00, 90, 66...
 
[+]

Entropy:
7.9129  (probably packed)

Code size:
2.6 MB (2,700,800 bytes)

Windows Firewall Allowed Program
Name:
C:\Program Files\mIRC\mirc.exe


The file mirc.exe has been discovered within the following programs.

mIRC  by mIRC Co. Ltd.
Publisher's description - “mIRC is a full featured Internet Relay Chat client for Windows that can be used to communicate, share, play or work with others on IRC networks around the world, either in multi-user group conferences or in one-to-one private discussions.”
11% remove it
 
Powered by Should I Remove It?

The executing file has been seen to make the following network communications in live environments.

TCP (HTTP):
Connects to mirc.co.uk  (31.25.190.198:80)

TCP (HTTP):
Connects to mirc.com  (50.28.34.67:80)

TCP:
Connects to quakenet.underworld.no  (158.38.8.251:6667)

TCP:
Connects to binaryvision.co.il  (109.74.197.108:6667)

Scan mirc.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.