» xtreme mu x6.exe
Overview
Analysis
File Details

xtreme mu x6.exe

Skype: terro.zrm ^^

DARKTERRO

The executable xtreme mu x6.exe has been detected as malware by 25 anti-virus scanners.

File name:

xtreme mu x6.exe

Publisher:

DARKTERRO

Product:

Skype: terro.zrm ^^

Version:

1.0.0.0

MD5:

0b0295b0fac796536a176a87d6f25e09

SHA-1:

4a23a910dac1f404b39df48ac629e7c9b8019816

SHA-256:

78db0c334040204f4887bcae75ae557af20fc3fbed1d41a81190036e3d63831d

Scanner detections:

25 / 68

Status:

Malware

Analysis date:

4/20/2024 3:24:38 PM UTC (today)

Scan engine

Detection

Engine version

Lavasoft Ad-Aware

Trojan.Generic.12929673

368

Agnitum Outpost

Trojan.Agent

7.1.1

AhnLab V3 Security

ASD.Reputation

2015.10.11

Arcabit

Trojan.Generic.DC54A89

1.0.0.582

avast!

Win32:Malware-gen

2014.9-160201

AVG

Atros

2017.0.2846

Bitdefender

Trojan.Generic.12929673

1.0.20.160

Bkav FE

HW32.Packed

1.3.0.7237

Emsisoft Anti-Malware

Trojan.Generic.12929673

8.16.02.01.05

ESET NOD32

Win32/Packed.Enigma.AAF (variant)

10.12388

Fortinet FortiGate

W32/Generic!tr

2/1/2016

F-Secure

Trojan.Generic.12929673

11.2016-01-02_2

G Data

Trojan.Generic.12929673

16.2.25

IKARUS anti.virus

Virus.Win32.Heur

t3scan.1.9.5.0

K7 AntiVirus

Trojan

13.210.17495

Kaspersky

HEUR:Trojan.Win32.Generic

14.0.0.726

McAfee

Artemis!0B0295B0FAC7

5600.6502

MicroWorld eScan

Trojan.Generic.12929673

17.0.0.96

NANO AntiVirus

Trojan.Win32.LQGJ1250.dqeezc

0.30.26.3947

nProtect

Trojan.Generic.12929673

15.10.08.01

Panda Antivirus

Trj/Chgt.O

16.02.01.05

Quick Heal

Trojan.Generic.gb

2.16.14.00

Sophos

Mal/Generic-S

4.98

Trend Micro

TROJ_GEN.R0C1C0VDR15

10.465.01

Zillya! Antivirus

Trojan.Packed.Win32.69955

2.0.0.2438

File size:

1.3 MB (1,376,768 bytes)

Product version:

5.0.0.0

Skype: terro.zrm ^^

Trademarks:

Skype: terro.zrm ^^

Original file name:

Skype: terro.zrm ^^

File type:

Executable application (Win32 EXE)

Language:

Portugués (Brasil)

File PE Metadata

Compilation timestamp:

6/19/1992 5:52:17 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

24576:2cohW8dbOMFmp+8sp+7iTdjJwQlyEvO1jc+8PCY7Ck:L2W5wDp+GTdjJle1jc+86Y

Entry address:

0x644D0

Entry point:

55, 8B, EC, 83, C4, F0, B8, 00, 10, 40, 00, E8, 01, 00, 00, 00, 9A, 83, C4, 10, 8B, E5, 5D, E9, 1C, 21, 61, 00, 80, 84, 1D, 5F, 44, 57, 9C, C5, 81, 8A, 5C, EA, E7, 78, FE, 3F, CB, 6C, BC, CE, EF, 1A, 05, A2, 6D, 27, 18, 32, 92, 6A, 14, CE, FB, 49, BE, 45, 5A, AC, 82, 10, F9, BA, 22, D5, 0A, BC, C6, 7F, BF, B5, F0, A7, 44, AA, FD, E8, D6, 1E, 4E, 06, B5, 92, C6, 57, 82, 48, E2, B0, E4, 08, 4B, B5, AE, 51, 90, 5F, F2, 06, FA, EA, A2, 8C, 48, E8, AB, 71, EC, 4A, 25, CB, B2, AB, E0, E9, 08, 07, F9, CA, 6B, 5A... 
[+]

Developed / compiled with:

Microsoft Visual C++

Code size:

1.1 MB (1,149,952 bytes)

Remove xtreme mu x6.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.