home

эль кондор паса.exe

WindowsFormsApplication2

RECORD LLC

The application эль кондор паса.exe by RECORD has been detected as adware by 6 anti-malware scanners. This is a setup program which is used to install the application. The file has been seen being downloaded from setup.dj-reserve.com and multiple other hosts.
Publisher:
RECORD LLC  (signed and verified)

Product:
WindowsFormsApplication2

Version:
1.0.0.0

MD5:
e7a40e96e78b9b862c421e7a72ddb603

SHA-1:
babc1366dd9e696c55206e09f659eb4d1a8228e7

SHA-256:
a9e20ddf0c355423b7c5c6ddb50de3dc14eb9d8750af6a9c4c727ed525eef219

Scanner detections:
6 / 68

Status:
Adware

Analysis date:
1/8/2025 3:27:31 PM UTC  (today)

Scan engine
Detection
Engine version

AVG
VkontakteDJ
2016.0.3140

Bkav FE
W32.HfsAdware
1.3.0.6379

Dr.Web
Adware.Downware.10568
9.0.1.0104

herdProtect (fuzzy)
variant of vkontaktedjd.exe (Adware)
2015.7.15.22

McAfee
Artemis!20CF604ABDA3
5600.6796

Trend Micro House Call
Suspicious_GEN.F47V0414
7.2.104

File size:
167.7 KB (171,704 bytes)

Product version:
1.0.0.0

Copyright:
Copyright © 2014

Original file name:
VkdjDownloader.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\??? ?????? ????.exe

Digital Signature
Signed by:
RECORD LLC

Authority:
COMODO CA Limited

Valid from:
2/17/2015 3:00:00 AM

Valid to:
2/17/2018 2:59:59 AM

Subject:
CN=RECORD LLC, O=RECORD LLC, STREET="Kolomyazhsky 33, liter A", L=Saint-Petersburg, S=Saint-Petersburg, PostalCode=197341, C=RU

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
58EE01AAB8D97EDC88B98056655D1841

File PE Metadata
Compilation timestamp:
3/31/2015 4:32:42 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
3072:fx0z0+8UmPeRQmxaSZ2XXjGiZdxbc3efwhbHihfIZmwAJAfSWkPvJRBd9kucl:GFmPEJgykjDc3F2nrAw

Entry address:
0x26F6E

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
148 KB (151,552 bytes)

The file эль кондор паса.exe has been seen being distributed by the following 2 URLs.

http://setup.dj-reserve.com/.../?advert_key=ZWMwMDAxMDBiMzAwMDEyMjAwMDAwMGY1MDAwMGY1MDAwMGY1NTlkN2M5YjYzNw==

http://muzofon.com/dmaster.php?id=22

Remove эль кондор паса.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.