home

audrey assad free mp3 download.exe

The application audrey assad free mp3 download.exe has been detected as a potentially unwanted program by 22 anti-malware scanners. This is a setup program which is used to install the application. The file has been seen being downloaded from b.allstate-final.xyz.
MD5:
e0505e17d034ee777c129c9e9eddac57

SHA-1:
34053c603ac5316b22910d04076a136dc0d16201

SHA-256:
75b2515fbf585408e1a4b89146062c3995f19889409891fdcc9f9df1211eba6b

Scanner detections:
22 / 68

Status:
Potentially unwanted

Analysis date:
12/28/2024 11:02:14 AM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Adware.Mplug.JF
5582599

AhnLab V3 Security
PUP/Win32.MultiPlug
2015.05.17

Avira AntiVirus
TR/Crypt.XPACK.Gen
8.3.1.6

avast!
Win32:MultiPlug-ZC [PUP]
150423-1

AVG
Adware Generic6.AKBT
2014.0.4311

Bitdefender
Adware.Mplug.JF
1.0.20.680

Dr.Web
Trojan.DownLoader13.2509
9.0.1.05190

Emsisoft Anti-Malware
Adware.Mplug.JF
10.0.0.5366

ESET NOD32
Win32/Adware.MultiPlug.JI application
7.0.302.0

F-Prot
W32/S-6e476ff7
v6.4.7.1.166

F-Secure
Adware.Mplug.JF
5.13.68

G Data
Adware.Mplug.JF
15.5.25

IKARUS anti.virus
not-a-virus:AdWare.MultiPlug
t3scan.1.8.9.0

K7 AntiVirus
Unwanted-Program
13.204.15934

Malwarebytes
PUP.Optional.MultiPlug
v2015.05.16.07

McAfee
MultiPlug-FWG
5600.6763

MicroWorld eScan
Adware.Mplug.JF
16.0.0.408

NANO AntiVirus
Riskware.Win32.MultiPlug.dqzjrx
0.30.24.1357

nProtect
Adware.Mplug.JF
15.05.15.01

Reason Heuristics
Threat.Win.Reputation.IMP
15.5.16.15

Sophos
PUA 'MultiPlug' (of type Adware)
5.14

Vba32 AntiVirus
suspected of Heur.Malware-Cryptor.Multiplug
3.12.26.4

File size:
348 KB (356,352 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\ProgramData\{9ea71ab0-06e0-b9b5-9ea7-71ab006e6ac0}\audrey assad free mp3 download.exe

File PE Metadata
Compilation timestamp:
1/11/2012 3:41:23 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
6144:s65pRe6QNzGvZiq6E5IzOjKyYQrGWO61FINGkSlN9kI7i/jPg/:sFBovZsCRw0b

Entry address:
0x1FDBB

Entry point:
E8, 55, 12, 00, 00, E9, 00, 00, 00, 00, 6A, 14, 68, D0, C8, 43, 00, E8, 5F, 17, 00, 00, E8, 22, 14, 00, 00, 0F, B7, F0, 6A, 02, E8, E8, 11, 00, 00, 59, B8, 4D, 5A, 00, 00, 66, 39, 05, 00, 00, 40, 00, 74, 04, 33, DB, EB, 33, A1, 3C, 00, 40, 00, 81, B8, 00, 00, 40, 00, 50, 45, 00, 00, 75, EB, B9, 0B, 01, 00, 00, 66, 39, 88, 18, 00, 40, 00, 75, DD, 33, DB, 83, B8, 74, 00, 40, 00, 0E, 76, 09, 39, 98, E8, 00, 40, 00, 0F, 95, C3, 89, 5D, E4, E8, C9, 0B, 00, 00, 85, C0, 75, 08, 6A, 1C, E8, DC, 00, 00, 00, 59, E8...
 
[+]

Code size:
148 KB (151,552 bytes)

The file audrey assad free mp3 download.exe has been seen being distributed by the following URL.

http://b.allstate-final.xyz/hp/?q=9p7P2vzivP8mABCDWYRL34XzqapoClloFTwKRuWlXljla5bHS mh MuuRYAYGUyqUL6Lh08nEzEB4ifnI BQePi9W9DTY5zsN6ovtPhTevkuxyxYwNCkrolLOv4uaHZSGOUW49vDWsOIPVDpPdeIH4AaT6zuACb5Po0yk/LdE0HI4B7mcYa8pFTvei/kwv2eJC2R/NFMiwQ D4DJ/peHieUs4tcA6/WtkC09Eag0zLI hYraHRL7ub0VrJyei 1/SEcd MsiCamz112E4hxyMV76gl3xMQ hrUdz3zDD9Xq3aasmI cpiNhBTC2z/AJ047gH81J1qBKVZsMTGW4xllqLyePzyGs0C5F6ibtyoqs7AQBOHOMaRzTPVkMO4zk/fqx6hZ4Pv6VE9gn8noagUlhB0PFPK92Gb8FqwZWEzCJQ7 jRznOO5r1jtQbZqfahaSnSXZerRmtDMaaHzsbLT4UL O9iRj1uVupx80tCH6BZrzN6LXxZpFUsbXGBaPkupeo4J Gbs1HS6hX sRyAV6iaBZphfN4jOBb 5WTqmFFM6335W86cYA/lbR1fcgJ11jrLf9b1BWAouBV8gK1tc1N1jIXpU15bdnZ2TS00l0nmnKJZ2GKOu2vhBEWzLzWGPItLHOrdiQHLPV73OnQU96i4U24N1c2lcvBt4Lz 8Vai5u/.../HbtsUQN32I9pHW qMQ6QP41y2ZLhtswdj6kGGH&external_id=1429864925897116028&uuid=9pBt95Awud0PLUVxeOGIk8Oeow3QT6DBUKMCT1niM7HI3WzktmELEDBCbjDjdDgU50h19MR0iTDAn3njLuv28VCnTPKqw5fzsHwmvbX6n55RtoXzetVpLCbdPTC1wvkqoRowmbnFkLTmkUqpWGJfF5Cc

Remove audrey assad free mp3 download.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.