home

mirc62.exe

mIRC

mIRC Co. Ltd.

The application mirc62.exe has been detected as a potentially unwanted program by 6 anti-malware scanners. The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer, however the file is not signed with an authenticode signature from a trusted source. The file has been seen being downloaded from software.oldversion.com and multiple other hosts.
Publisher:
mIRC Co. Ltd.

Product:
mIRC

Version:
6.2

MD5:
fe6c730edf0747f2965997599245bc8f

SHA-1:
e38a64d787f7fc321a0f5a5cbf102f2684516d99

SHA-256:
adadc485f3c61b08d6884bfe4914a0399ddca88025b9c0f9f1992196a1a16253

Scanner detections:
6 / 68

Status:
Potentially unwanted

Analysis date:
11/23/2024 10:24:31 AM UTC  (today)

Scan engine
Detection
Engine version

avast!
Win32:Mirc-Z [PUP]
2014.9-140329

Baidu Antivirus
HackTool.Win32.mIRC
4.0.3.14329

Comodo Security
ApplicUnsaf.Win32.IRC.Mirc.~kkt
18008

IKARUS anti.virus
not-a-virus:Client-IRC.Win32.mIRC
t3scan.2.2.29

Kaspersky
not-a-virus:Client-IRC.Win32.mIRC
14.0.0.4099

NANO AntiVirus
Riskware.Win32.MIRC.cbjdn
0.28.0.58720

File size:
1.1 MB (1,121,693 bytes)

Product version:
6.2

Copyright:
Copyright © 1995-2006 mIRC Co. Ltd.

Trademarks:
mIRC® is a Registered Trademark of mIRC Co. Ltd.

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\mirc62.exe

File PE Metadata
Compilation timestamp:
7/1/2006 3:05:54 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
24576:HJWpZM4yUeGD9ZfJ+ZdbJRmK4ZxCppLamIU9NpM44rr8Q+PiQou:AXN9YJVmxGpemnjK3TbHu

Entry address:
0x32D9

Entry point:
81, EC, 7C, 01, 00, 00, 53, 55, 56, 33, F6, 57, 89, 74, 24, 18, BD, 70, 91, 40, 00, C6, 44, 24, 10, 20, FF, 15, 30, 70, 40, 00, 56, FF, 15, 70, 72, 40, 00, A3, 10, 48, 42, 00, 56, 8D, 44, 24, 30, 68, 60, 01, 00, 00, 50, 56, 68, 20, FD, 41, 00, FF, 15, 58, 71, 40, 00, 68, 94, 92, 40, 00, 68, 60, 3F, 42, 00, E8, 3B, 28, 00, 00, BB, 00, B4, 42, 00, 53, 68, 00, 04, 00, 00, FF, 15, B8, 70, 40, 00, E8, 64, FF, FF, FF, 85, C0, 75, 24, 68, FB, 03, 00, 00, 53, FF, 15, B4, 70, 40, 00, 68, 8C, 92, 40, 00, 53, E8, 26...
 
[+]

Packer / compiler:
Nullsoft install system v2.x

Code size:
23 KB (23,552 bytes)

The file mirc62.exe has been seen being distributed by the following 16 URLs.

http://software.oldversion.com/download.php?f=YTo1OntzOjQ6InRpbWUiO2k6MTQ2NzA5MzQyMztzOjI6ImlkIjtpOjI4ODtzOjQ6ImZpbGUiO3M6MTA6Im1pcmM2Mi5leGUiO3M6MzoidXJsIjtzOjQyOiJodHRwOi8vd3d3Lm9sZHZlcnNpb24uY29tL3dpbmRvd3MvbWlyYy02LTIiO3M6NDoicGFzcyI7czozMjoiZmFiMTg2NGJjN2I0NTMyMGJjOWE2ZTI4YTc0MDI1MzEiO30=

http://filehippo.com/es/download/file/.../

http://software.oldversion.com/download.php?f=YTo1OntzOjQ6InRpbWUiO2k6MTQ1NDM1Mzg3MztzOjI6ImlkIjtpOjI4ODtzOjQ6ImZpbGUiO3M6MTA6Im1pcmM2Mi5leGUiO3M6MzoidXJsIjtzOjQxOiJodHRwOi8vdHIub2xkdmVyc2lvbi5jb20vd2luZG93cy9taXJjLTYtMiI7czo0OiJwYXNzIjtzOjMyOiIzNzZlNmMwZDI5YzUzNGYyZGY5NTgwMWEyNTlhZTM3MCI7fQ==

http://software.oldversion.com/download.php?f=YTo1OntzOjQ6InRpbWUiO2k6MTQ2NTQ5NTMwNjtzOjI6ImlkIjtpOjI4ODtzOjQ6ImZpbGUiO3M6MTA6Im1pcmM2Mi5leGUiO3M6MzoidXJsIjtzOjQyOiJodHRwOi8vd3d3Lm9sZHZlcnNpb24uY29tL3dpbmRvd3MvbWlyYy02LTIiO3M6NDoicGFzcyI7czozMjoiY2ZhYzJiMzNmN2ViOWRkZjkwMDNlYjkxYTlhMjNjYzgiO30=

http://software.oldversion.com/download.php?f=YTo1OntzOjQ6InRpbWUiO2k6MTQ3MDgyNDEyODtzOjI6ImlkIjtpOjI4ODtzOjQ6ImZpbGUiO3M6MTA6Im1pcmM2Mi5leGUiO3M6MzoidXJsIjtzOjQyOiJodHRwOi8vd3d3Lm9sZHZlcnNpb24uY29tL3dpbmRvd3MvbWlyYy02LTIiO3M6NDoicGFzcyI7czozMjoiNWViOTQ4ZjE5ZDYxNzFjYWFmZjcyYjM2ZTg3NzI3MjEiO30=

http://software.oldversion.com/download.php?f=YTo1OntzOjQ6InRpbWUiO2k6MTQ2NjMyMjU5MDtzOjI6ImlkIjtpOjI4ODtzOjQ6ImZpbGUiO3M6MTA6Im1pcmM2Mi5leGUiO3M6MzoidXJsIjtzOjQyOiJodHRwOi8vd3d3Lm9sZHZlcnNpb24uY29tL3dpbmRvd3MvbWlyYy02LTIiO3M6NDoicGFzcyI7czozMjoiNjY3OGI1OTBjMjRiNzRhZTA4YjE0ZjAzOWVmMDdkODMiO30=

http://filehippo.com/es/download/file/.../

http://software.oldversion.com/download.php?f=YTo1OntzOjQ6InRpbWUiO2k6MTQ1ODk1OTk0NTtzOjI6ImlkIjtpOjI4ODtzOjQ6ImZpbGUiO3M6MTA6Im1pcmM2Mi5leGUiO3M6MzoidXJsIjtzOjQyOiJodHRwOi8vd3d3Lm9sZHZlcnNpb24uY29tL3dpbmRvd3MvbWlyYy02LTIiO3M6NDoicGFzcyI7czozMjoiZWU0ZWRlNzQxZDk1YjQzNTZiNzFkMmJkOTExODgzOTgiO30=

http://software.oldversion.com/download.php?f=YTo1OntzOjQ6InRpbWUiO2k6MTQ1NzYwMTMyMztzOjI6ImlkIjtpOjI4ODtzOjQ6ImZpbGUiO3M6MTA6Im1pcmM2Mi5leGUiO3M6MzoidXJsIjtzOjQyOiJodHRwOi8vd3d3Lm9sZHZlcnNpb24uY29tL3dpbmRvd3MvbWlyYy02LTIiO3M6NDoicGFzcyI7czozMjoiOTc4YTk1M2VjMzM2MzY2NTM4YzczYWZlNmZhZTNjMzEiO30=

http://software.oldversion.com/download.php?f=YTo1OntzOjQ6InRpbWUiO2k6MTQ1ODkyMzEyOTtzOjI6ImlkIjtpOjI4ODtzOjQ6ImZpbGUiO3M6MTA6Im1pcmM2Mi5leGUiO3M6MzoidXJsIjtzOjQyOiJodHRwOi8vd3d3Lm9sZHZlcnNpb24uY29tL3dpbmRvd3MvbWlyYy02LTIiO3M6NDoicGFzcyI7czozMjoiN2FjMjcxZDI3YmI5Y2VkOTg5YzYxMDgxZDA2NTlmNDciO30=

ftp://ftp.freenet.de/pub/.../mirc62.exe

http://dw.uptodown.com/dwn/3GFaQZvzdFfxCONd2CO_gkQiP2UbvP4lm3lHiu_I-ivjI4iuXnDhvBhBUIBFKXtZYRwIf_VW_vTpD5JWXOr9ySDozRWPJ13FqO7SUrpVQ_TPmHMwypZGy2x9uREZU2YP/6vmcRtkr_eL5A55--5QwMPZ-L43kCcHRSjyJWuomz1Y6CCNgI8FePbMYS5_AJs3r73stsHdryjgrBVhiMDD1s4MJQygezpNmpgjRQ6jgJ0rFJd_yhj2SE3BAcLOBT4J4/.../

ftp://szmaragd.futuro.pl/pub/linux/irc/clients/windows/.../mirc62.exe

ftp://147.52.159.12/mirrors/irc/.../mirc62.exe

http://www.oldversion.com/main_download.php?sid=1141

http://www.efnet.org/clients/win32/.../mirc62.exe

Remove mirc62.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.