home

baixar cd as mais tocadas de outubro 2012 - download - paranoá fm 98.1 mhz - baixe musicas gráti

Download Helper

New IT Limited

This is a bundle installer which bundles applications with offers for additional 3rd party software, mostly unwanted adware, and may be installed with minimal consent. The file baixar cd as mais tocadas de outubro 2012 - download - paranoá fm 98.1 mhz - baixe musicas gráti by New IT Limited has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the New IT Desktop Setup installer. The file has been seen being downloaded from dc105.4shared.com.
Publisher:
New IT Limited  (signed and verified)

Product:
Download Helper

Version:
1, 1, 0, 0

MD5:
f0b0341f888d09732f5f28baebbba6d7

SHA-1:
e3fa3e24119734e44c49b5090d35932ec2ab4379

SHA-256:
47d88056aefcf511f4da601153d22e96b6bafdd6b209537cc09f93045fa45912

Scanner detections:
1 / 68

Status:
Adware

Note:
Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Description:
This 'download manager' is also considered bundleware, a utility designed to download software (possibly legitimate or opensource) and bundle it with a number of optional offers including ad-supported utilities, toolbars, shopping comparison tools and browser extensions.

Analysis date:
12/27/2024 11:59:58 PM UTC  (a few moments ago)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.New IT Limited.NewIT.Bundler (M)
16.6.5.23

File size:
652.9 KB (668,528 bytes)

Product version:
1, 1, 0, 0

Copyright:
Copyright (C) 2013

Bundler/Installer:
New IT Desktop Setup

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\baixar cd as mais tocadas de outubro 2012 - download - paranoá fm 98.1 mhz - baixe musicas grátis.exe

Digital Signature
Signed by:
New IT Limited

Authority:
GoDaddy.com, Inc.

Valid from:
11/16/2012 3:16:05 PM

Valid to:
11/16/2013 1:30:34 PM

Subject:
CN=New IT Limited, O=New IT Limited, L=Nicosia, S=Nicosia, C=CY

Issuer:
SERIALNUMBER=07969287, CN=Go Daddy Secure Certification Authority, OU=http://certificates.godaddy.com/repository, O="GoDaddy.com, Inc.", L=Scottsdale, S=Arizona, C=US

Serial number:
2B2A165690BBAA

File PE Metadata
Compilation timestamp:
3/13/2013 5:25:14 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
12288:i0SlJmmF99W7CQV1POhmmp+ZGnTtmg3Fxx7JvdakTNacsvH:rJw9g7CQjcmi+QnTN3vJxdjpaD

Entry address:
0x9ADD

Entry point:
E8, BB, 45, 00, 00, E9, 79, FE, FF, FF, 8B, FF, 55, 8B, EC, 81, EC, 28, 03, 00, 00, A1, 14, E4, 41, 00, 33, C5, 89, 45, FC, F6, 05, E4, E3, 41, 00, 01, 56, 74, 08, 6A, 0A, E8, 4C, 35, 00, 00, 59, E8, 75, 46, 00, 00, 85, C0, 74, 08, 6A, 16, E8, 77, 46, 00, 00, 59, F6, 05, E4, E3, 41, 00, 02, 0F, 84, CA, 00, 00, 00, 89, 85, E0, FD, FF, FF, 89, 8D, DC, FD, FF, FF, 89, 95, D8, FD, FF, FF, 89, 9D, D4, FD, FF, FF, 89, B5, D0, FD, FF, FF, 89, BD, CC, FD, FF, FF, 66, 8C, 95, F8, FD, FF, FF, 66, 8C, 8D, EC, FD, FF...
 
[+]

Code size:
90.5 KB (92,672 bytes)

The file baixar cd as mais tocadas de outubro 2012 - download - paranoá fm 98.1 mhz - baixe musicas gráti has been seen being distributed by the following URL.

https://dc105.4shared.com/downloadhelper/named/trinity/.../Baixar CD As Mais Tocadas de Outubro 2012 - Download - Paranoá FM 98.1 Mhz - Baixe Musicas Grátis.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.