u.exe.tmp
Ultrareach Internet Corp.
The file u.exe.tmp by Ultrareach Internet has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. This executable runs as a local area network (LAN) Internet proxy server listening on port 9666 and has the ability to intercept and modify all inbound and outbound Internet traffic on the local host.
MD5:
c3e15dadfb0ab0c5145553ba6e8f2294
SHA-1:
667a6501345d4c9d54f3fb6bd16e16b97e2b4677
Scanner detections:
1 / 68
Status:
Potentially unwanted
Analysis date:
4/29/2024 9:21:31 PM UTC (today)
Scan engine
Detection
Engine version
Reason Heuristics
Win64.Generic
17.3.16.0
File size:
1.5 MB (1,601,279 bytes)
Common path:
C:\users\{user}\downloads\u\utmp\u.exe.tmp
Authority:
GlobalSign nv-sa
Valid from:
10/14/2015 10:26:22 PM
Valid to:
1/14/2019 10:26:22 PM
Subject:
CN=Ultrareach Internet Corp., O=Ultrareach Internet Corp., L=Cheyenne, S=Wyoming, C=US
Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE
Serial number:
112100B48FCB5938306938B171E279305E27
Local Proxy Server
Proxy for:
Internet Settings
Local host address:
http://127.0.0.1:9666/