u.exe.tmp

Ultrareach Internet Corp.

The file u.exe.tmp by Ultrareach Internet has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. This executable runs as a local area network (LAN) Internet proxy server listening on port 9666 and has the ability to intercept and modify all inbound and outbound Internet traffic on the local host.
Publisher:
Ultrareach Internet Corp.  (signed and verified)

MD5:
c3e15dadfb0ab0c5145553ba6e8f2294

SHA-1:
667a6501345d4c9d54f3fb6bd16e16b97e2b4677

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
12/23/2024 11:55:58 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
Win64.Generic
17.3.16.0

File size:
1.5 MB (1,601,279 bytes)

Common path:
C:\users\{user}\downloads\u\utmp\u.exe.tmp

Digital Signature
Authority:
GlobalSign nv-sa

Valid from:
10/14/2015 10:26:22 PM

Valid to:
1/14/2019 10:26:22 PM

Subject:
CN=Ultrareach Internet Corp., O=Ultrareach Internet Corp., L=Cheyenne, S=Wyoming, C=US

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
112100B48FCB5938306938B171E279305E27

Local Proxy Server
Proxy for:
Internet Settings

Local host address:
http://127.0.0.1:9666/

Local host port:
9666

Default credentials:
No


Remove u.exe.tmp - Powered by Reason Core Security