home

BlueSize.exe

BlueSize

Anthony Puppo

The application BlueSize.exe has been detected as a potentially unwanted program by 15 anti-malware scanners. This is a setup program which is used to install the application. The file has been seen being downloaded from mega.nz and multiple other hosts.
Publisher:
Anthony Puppo

Product:
BlueSize

Version:
1.0.0

MD5:
39b7e2867a4908689f4183c4f6240311

SHA-1:
d2963d645f9adf3b314dd76bdae084f1a814e940

SHA-256:
4337d761ae076996d76667d11ea1f03097a6c7460c50e2f06ef0ee6eb826f36f

Scanner detections:
15 / 68

Status:
Potentially unwanted

Analysis date:
11/24/2024 3:37:38 AM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Gen:Variant.Kazy.602102
640

avast!
Win32:Malware-gen
2014.9-150505

AVG
Packed2_c
2016.0.3118

Baidu Antivirus
Hacktool.MSIL.Confuser
4.0.3.1555

Bitdefender
Gen:Variant.Kazy.602102
1.0.20.625

Emsisoft Anti-Malware
Gen:Variant.Kazy.602102
8.15.05.05.08

ESET NOD32
MSIL/Packed.Confuser.J suspicious (variant)
9.11578

F-Secure
Gen:Variant.Kazy.602102
11.2015-05-05_3

G Data
Gen:Variant.Kazy.602102
15.5.25

IKARUS anti.virus
PUA.MSIL.Confuser
t3scan.1.8.9.0

McAfee
Artemis!39B7E2867A49
5600.6774

MicroWorld eScan
Gen:Variant.Kazy.602102
16.0.0.375

Norman
Suspicious_Gen5.BHCZZ
11.20150505

Trend Micro House Call
TROJ_GEN.R047H09DQ15
7.2.125

VIPRE Antivirus
Trojan.Win32.Generic
39960

File size:
123.5 KB (126,464 bytes)

Product version:
1.0.0

Copyright:
Copyright © Anthony Puppo 2015

Original file name:
BlueSize.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\bluesize.exe

File PE Metadata
Compilation timestamp:
4/19/2015 7:23:01 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
3072:G77BqpaEdfFuHk9Ujasxr2FYqZWpBcu0+:G/B3/HkIVKHWq+

Entry address:
0x1D21E

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
7.7814

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
109 KB (111,616 bytes)

The file BlueSize.exe has been seen being distributed by the following 4 URLs.

https://mega.nz/temporary/.../H0lUlbDL

http://clashbot.org/.../BlueSize.exe

http://s6.uplod.ir:182/d/.../BlueSize.exe

https://www.dropbox.com/s/.../BlueSize.exe

Remove BlueSize.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.