home

mpqte.exe

The executable mpqte.exe has been detected as malware by 27 anti-virus scanners.
MD5:
3b5b9e98798f369db65726338cc38d4d

SHA-1:
75039575ac815d2056c6927b708a10f408ad7c1b

SHA-256:
c8931c13aef8490b13900394be5274e0e81cbde8cc9f608c6fd19bc0de1ebe09

Scanner detections:
27 / 68

Status:
Malware

Analysis date:
4/24/2024 3:52:15 AM UTC  (today)

Scan engine
Detection
Engine version

AhnLab V3 Security
Win-Trojan/Fakeav.321536.B
2010.12.29

Avira AntiVirus
TR/FakeAV.xon
7.11.0.211

avast!
Win32:FakeSysdef-H
2014.9-170316

AVG
Cryptic
2018.0.2438

Bitdefender
Trojan.Generic.KD.91549
1.0.20.375

Comodo Security
UnclassifiedMalware
7220

Emsisoft Anti-Malware
Trojan.Win32.FakeAV!IK
8.17.03.16.10

ESET NOD32
Win32/Kryptik.JBR (variant)
11.5740

Fortinet FortiGate
W32/FakeAV.XON!tr
3/16/2017

F-Secure
Trojan.Generic.KD.91549
11.2017-16-03_5

G Data
Trojan.Generic.KD.91549
17.3.21

IKARUS anti.virus
Trojan.Win32.FakeAV
t3scan.1.1.90.0

K7 AntiVirus
Riskware
13.75.3372

Kaspersky
Trojan.Win32.FakeAV
14.0.0.-1317

McAfee
FakeAlert-SpyPro.gen.bb
5600.6094

Microsoft Security Essentials
Rogue:Win32/FakeSpypro
1.163.1557.0

Norman
W32/FakeAV.ACDF
11.20170316

nProtect
Trojan/W32.FakeAV.321536.B
10.12.28.01

Panda Antivirus
Trj/CI.A
17.03.16.10

Prevx
Medium Risk Malware Dropper
3.0

Quick Heal
Trojan.FakeAV.xon
3.17.11.00

Sophos
Mal/FakeAV-DO
4.60

SUPERAntiSpyware
Rogue.Agent/Gen
8532

Trend Micro House Call
TROJ_FAKEAV.SMEE
7.2.75

Trend Micro
TROJ_FAKEAV.SMEE
10.465.16

Vba32 AntiVirus
Trojan.FakeAV.01212
3.12.14.2

VIPRE Antivirus
Trojan.Win32.Generic.pak!cobra
7867

File size:
314 KB (321,536 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\windows\temp\mpqte.exe

File PE Metadata
Compilation timestamp:
11/28/2005 2:04:13 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
3.6

Entry address:
0x6A78

Entry point:
33, C0, 55, 8B, EC, 81, EC, BC, 01, 00, 00, 64, A1, 00, 00, 00, 00, 8B, 40, 04, A9, 82, 6C, 66, 00, 75, 01, CA, FF, 15, 78, 90, 43, 00, 8D, 45, 70, 50, 6A, 00, E8, 5E, 00, 00, 00, 48, 23, C8, 0B, C8, 83, E2, 0E, 83, CA, 07, 03, CA, 83, C1, 0A, 8B, C5, 83, EC, 04, 89, 04, 24, 83, EC, 04, 89, 0C, 24, 81, 04, 24, C7, 6A, 40, 00, E8, 3C, 00, 00, 00, 50, E8, 28, 00, 00, 00, C9, C3, 8B, 0C, 24, 0F, B7, 09, 0F, B6, C9, 8B, 84, 8C, E4, FD, FF, FF, 2D, C8, 01, 00, 00, 33, C9, BA, E4, 00, 00, 00, 03, CA, F7, D1, 41...
 
[+]

Entropy:
7.6567

Code size:
220.5 KB (225,792 bytes)

Remove mpqte.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.