home

ultravnc_1_2_09_x64_setup.zip

The file ultravnc_1_2_09_x64_setup.zip has been detected as a potentially unwanted program by 2 anti-malware scanners. The file has been seen being downloaded from mex06.emailsrvr.com.
MD5:
6c5bbef342e39129ca26e8309ee44ae7

SHA-1:
7f8155fe2be64d867e1e8db41adec8e3d6a3d280

SHA-256:
8582c5df6fb983563e75dea58f4da3561ac3b93984e23e5021504dfbe473e159

Scanner detections:
2 / 68

Status:
Potentially unwanted

Analysis date:
11/15/2024 3:10:06 AM UTC  (today)

Scan engine
Detection
Engine version

ESET NOD32
Detection.Undefined
7.0.302.0

Kaspersky
not-a-virus:RemoteAdmin.Win32.WinVNC
15.0.0.562

File size:
2.5 MB (2,593,825 bytes)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\ultravnc_1_2_09_x64_setup.zip

The file ultravnc_1_2_09_x64_setup.zip has been seen being distributed by the following URL.

https://mex06.emailsrvr.com/owa/service.svc/s/.../VvZGlSYBwCTCQXqy gKRYLbnSmVx9xHAAAAAAENAACTCQXqy gKRYLbnSmVx9xHAAFd92vfAAABBgAEAAEAAAA=&X-OWA-CANARY=2C29Aqsa10mj7EHEIDMH8U8iw2jZ69IIcnj98hXHdxWF5rQ8OJbln9B0oRlwQHlwpwlgBkp0TDQ.

Remove ultravnc_1_2_09_x64_setup.zip - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.