441040

CinemaHd For Pro 2.4cV17.01

Berta Dress Apps (Bright Circle Investments Ltd)

This adware is a web browser extension that will inject advertising in the browser in the form of unwanted banners and text-links which may link to malware sites and install unwanted software. The file 441040, “CinemaHd For Pro 2.4cV17.01 exe” by Berta Dress Apps (Bright Circle Investments) has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. It is also typically executed from the user's temporary directory. It is part of the Brightcircle group of web-extensions that inject advertisements in the browser.
Publisher:
Cinema HDV17.01  (signed by Berta Dress Apps (Bright Circle Investments Ltd))

Product:
CinemaHd For Pro 2.4cV17.01

Description:
CinemaHd For Pro 2.4cV17.01 exe

Version:
1000.1000.1000.1000

MD5:
a24fbe6ec8ac46bb1c0cdf7bce3072df

SHA-1:
298f5f5aabc17710265c6338bf286c867b848d36

SHA-256:
2c14f832d7d2499a9ba3db640f2e29368d6b10bc00ee46c3d1104c9181f3d512

Scanner detections:
1 / 68

Status:
Adware

Note:
Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Analysis date:
12/24/2024 4:27:37 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
Adware.BrightCircle (M)
17.3.13.21

File size:
1.4 MB (1,476,064 bytes)

Product version:
1000.1000.1000.1000

Copyright:
Copyright 2016

Original file name:
CinemaHd For Pro 2.4cV17.01.exe

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\441040

Digital Signature
Authority:
COMODO CA Limited

Valid from:
12/16/2014 12:00:00 AM

Valid to:
12/16/2015 11:59:59 PM

Subject:
CN=Berta Dress Apps (Bright Circle Investments Ltd), O=Berta Dress Apps (Bright Circle Investments Ltd), STREET=Athinodorou 3, STREET=Dasoupoli Strovolos, L=Nicosia, S=Nicosia, PostalCode=2025, C=CY

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
009C113F566DE374D0EF1F22B0B717D3DC

File PE Metadata
Compilation timestamp:
1/16/2015 11:06:03 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

Entry address:
0xBA2BD

Entry point:
E8, 14, 01, 01, 00, E9, 00, 00, 00, 00, 6A, 14, 68, 60, D9, 52, 00, E8, 6D, 76, 00, 00, E8, 34, 53, 00, 00, 0F, B7, F0, 6A, 02, E8, A7, 00, 01, 00, 59, B8, 4D, 5A, 00, 00, 66, 39, 05, 00, 00, 40, 00, 74, 04, 33, DB, EB, 33, A1, 3C, 00, 40, 00, 81, B8, 00, 00, 40, 00, 50, 45, 00, 00, 75, EB, B9, 0B, 01, 00, 00, 66, 39, 88, 18, 00, 40, 00, 75, DD, 33, DB, 83, B8, 74, 00, 40, 00, 0E, 76, 09, 39, 98, E8, 00, 40, 00, 0F, 95, C3, 89, 5D, E4, E8, B6, 8D, 00, 00, 85, C0, 75, 08, 6A, 1C, E8, DC, 00, 00, 00, 59, E8...
 
[+]

Code size:
971.5 KB (994,816 bytes)

Remove 441040 - Powered by Reason Core Security