home

msttcoaj.exe

The executable msttcoaj.exe has been detected as malware by 34 anti-virus scanners. According to AVG, this software downloads additional adware offers during setup.
MD5:
9f231dc3847f7706d8171b964e4aace5

SHA-1:
8e80a8d5e8998a7a5104b4dc8b8cf471d41bc7e1

SHA-256:
12ae04eb0a58c53ffd87edf34a45bd379a73ddeac9599a27b5d667b67c561bd7

Scanner detections:
34 / 68

Status:
Malware

Analysis date:
4/25/2024 9:50:10 AM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Trojan.GenericKD.1671083
926

Agnitum Outpost
Backdoor.Androm
7.1.1

AhnLab V3 Security
Trojan/Win32.Zbot
2014.06.17

Avira AntiVirus
TR/Crypt.Xpack.64010
7.11.155.58

avast!
Win32:Trojan-gen
2014.9-140723

AVG
Downloader.Generic13
2015.0.3404

Baidu Antivirus
Trojan.Win32.Wauchos
4.0.3.14723

Bitdefender
Trojan.GenericKD.1671083
1.0.20.1020

Comodo Security
UnclassifiedMalware
18575

Dr.Web
Trojan.Hottrend
9.0.1.0204

Emsisoft Anti-Malware
Trojan.GenericKD.1671083
8.14.07.23.12

ESET NOD32
Win32/TrojanDownloader.Wauchos.AD
8.9955

Fortinet FortiGate
W32/Tiny.NKL!tr.dldr
7/23/2014

F-Prot
W32/Trojan2.OEIG
v6.4.7.1.166

F-Secure
Trojan.GenericKD.1671083
11.2014-23-07_4

G Data
Trojan.GenericKD.1671083
14.7.24

IKARUS anti.virus
Trojan-Downloader.Win32.Wauchos
t3scan.1.6.1.0

K7 AntiVirus
Trojan-Downloader
13.1712422

Kaspersky
Backdoor.Win32.Androm
14.0.0.3517

Malwarebytes
Trojan.Downloader.Wauchos
v2014.07.23.12

McAfee
PWSZbot-FTY!9F231DC3847F
5600.7060

Microsoft Security Essentials
TrojanDownloader:Win32/Wauchos.A
1.10600

MicroWorld eScan
Trojan.GenericKD.1671083
15.0.0.612

Norman
Suspicious_Gen4.GHPNR
11.20140723

nProtect
Trojan.GenericKD.1671083
14.06.16.01

Panda Antivirus
Trj/WLT.A
14.07.23.12

Qihoo 360 Security
HEUR/Malware.QVM10.Gen
1.0.0.1015

Quick Heal
TrojanDownloader.Wauchos.rw4
7.14.14.00

Sophos
Troj/Wonton-CR
4.98

Total Defense
Win32/Tnega.AUMJ
37.0.11003

Trend Micro House Call
TROJ_SPNR.09EM14
7.2.204

Trend Micro
TROJ_SPNR.09EM14
10.465.23

Vba32 AntiVirus
Backdoor.Androm
3.12.26.0

VIPRE Antivirus
Trojan.Win32.Generic
30356

File size:
72 KB (73,728 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\ProgramData\lkwxi\msttcoaj.exe

File PE Metadata
Compilation timestamp:
5/8/2014 8:57:56 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
768:Kj4GTwBChLp9S9/GN8End7KFsqpjmY4MHGFXafcOf640IJfh+4rUeA8ZJQx4JN3I:KM1Cd8YxKFLpSLFKfcODbnE4VeBCvw9

Entry address:
0x66D1

Entry point:
E8, 19, 16, 00, 00, E9, 89, FE, FF, FF, 8B, FF, 55, 8B, EC, 8B, 45, 08, 8B, 00, 81, 38, 63, 73, 6D, E0, 75, 2A, 83, 78, 10, 03, 75, 24, 8B, 40, 14, 3D, 20, 05, 93, 19, 74, 15, 3D, 21, 05, 93, 19, 74, 0E, 3D, 22, 05, 93, 19, 74, 07, 3D, 00, 40, 99, 01, 75, 05, E8, 73, 16, 00, 00, 33, C0, 5D, C2, 04, 00, 68, DB, 66, 40, 00, FF, 15, 20, D1, 40, 00, 33, C0, C3, 8B, FF, 55, 8B, EC, 68, 78, E4, 40, 00, FF, 15, B0, D0, 40, 00, 85, C0, 74, 15, 68, 68, E4, 40, 00, 50, FF, 15, 24, D1, 40, 00, 85, C0, 74, 05, FF, 75...
 
[+]

Entropy:
6.3331

Code size:
46.5 KB (47,616 bytes)

User Start Menu Item
Name:
msttcoaj.exe


Remove msttcoaj.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.