home

download microsoft office 2010 portugues completo atualizado dezembro 2012 ativador.exe

MIDIA TECHNOLOGIES LLC

The application download microsoft office 2010 portugues completo atualizado dezembro 2012 ativador.exe by MIDIA TECHNOLOGIES has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the Midia Downloader installer. The file has been seen being downloaded from www.netcoolery.net.
Publisher:
MIDIA TECHNOLOGIES LLC  (signed and verified)

MD5:
0d769511f298807542ad8f720e2761f5

SHA-1:
0265184e4de3cb8ef46fcc42388a4620ef6f5753

SHA-256:
ae48b6d4ae4bb82e1b1aecf1826629e37ca5078c6d0ea43e98dd16c9f8dc805d

Scanner detections:
1 / 68

Status:
Adware

Note:
Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Description:
This is also known as bundleware, or downloadware, which is an downloader designed to simply deliver ad-supported offers in the setup routine of an otherwise legitimate software.

Analysis date:
11/1/2024 7:27:22 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.Midia Technologies (M)
17.2.7.23

File size:
52.1 KB (53,312 bytes)

File type:
Executable application (Win32 EXE)

Bundler/Installer:
Midia Downloader (using Nullsoft Install System)

Common path:
C:\users\{user}\downloads\download microsoft office 2010 portugues completo atualizado dezembro 2012 ativador.exe

Digital Signature
Signed by:
MIDIA TECHNOLOGIES LLC

Authority:
Starfield Technologies, Inc.

Valid from:
10/24/2014 9:20:12 AM

Valid to:
4/11/2015 2:45:06 PM

Subject:
CN=MIDIA TECHNOLOGIES LLC, O=MIDIA TECHNOLOGIES LLC, L=Lewes, S=Delaware, C=US

Issuer:
SERIALNUMBER=10688435, CN=Starfield Secure Certification Authority, OU=http://certificates.starfieldtech.com/repository, O="Starfield Technologies, Inc.", L=Scottsdale, S=Arizona, C=US

Serial number:
2B017CE6B21DDA

File PE Metadata
Compilation timestamp:
12/5/2009 7:50:35 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

Entry address:
0x323F

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, 30, 91, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, B4, 70, 40, 00, 53, FF, 15, 7C, 72, 40, 00, 6A, 08, A3, 98, 27, 7A, 00, E8, 09, 2C, 00, 00, A3, E4, 26, 7A, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, 98, DC, 79, 00, FF, 15, 58, 71, 40, 00, 68, B8, 91, 40, 00, 68, E0, 1E, 7A, 00, E8, BC, 28, 00, 00, FF, 15, B0, 70, 40, 00, BF, 00, 80, 7A, 00, 50, 57, E8, AA, 28, 00, 00...
 
[+]

Packer / compiler:
Nullsoft install system v2.x

Code size:
23 KB (23,552 bytes)

The file download microsoft office 2010 portugues completo atualizado dezembro 2012 ativador.exe has been seen being distributed by the following URL.

http://www.netcoolery.net/ids/.../Download Microsoft Office 2010 Portugues Completo Atualizado Dezembro 2012 Ativador.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.