home

erra-dreamcatcher free mp3 download.exe

The application erra-dreamcatcher free mp3 download.exe has been detected as a potentially unwanted program by 20 anti-malware scanners. It runs as a scheduled task under the Windows Task Scheduler triggered daily at a specified time. The file has been seen being downloaded from b.websited.link.
MD5:
fe22e8e49b5a04c1790864b0dd811a90

SHA-1:
b9bb7a00a1cc669fa80dbf7ebaa91c2ae669e873

SHA-256:
d4076bc697be3ae2f90d65cf8215c3153479c055a92c15dee79370ffcfce8f1e

Scanner detections:
20 / 68

Status:
Potentially unwanted

Analysis date:
4/26/2025 2:44:27 AM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Gen:Variant.Adware.Mplug.36
5774816

AhnLab V3 Security
PUP/Win32.MultiPlug
2015.05.13

avast!
Win32:MultiPlug-ZD [PUP]
150423-1

AVG
Adware Generic6.ANAL
2014.0.4311

Bitdefender
Gen:Variant.Adware.Mplug.36
1.0.20.660

Dr.Web
Trojan.DownLoader13.7574
9.0.1.05190

Emsisoft Anti-Malware
Gen:Variant.Adware.Mplug.36
10.0.0.5366

ESET NOD32
Win32/Adware.MultiPlug.JS application
7.0.302.0

Fortinet FortiGate
Riskware/Badur
5/12/2015

F-Prot
W32/S-2ee7ee7f
v6.4.7.1.166

F-Secure
Gen:Variant.Adware.Mplug
11.2015-12-05_3

G Data
Gen:Variant.Adware.Mplug.36
15.5.25

IKARUS anti.virus
not-a-virus:AdWare.MultiPlug
t3scan.1.8.9.0

K7 AntiVirus
Unwanted-Program
13.203.15889

McAfee
Program.MultiPlug-FXP
17.6.569.0

MicroWorld eScan
Gen:Variant.Adware.Mplug.36
16.0.0.396

NANO AntiVirus
Riskware.Win32.MultiPlug.dreocb
0.30.24.1357

Reason Heuristics
Threat.Win.Reputation.IMP
15.5.12.18

Sophos
PUA 'MultiPlug' (of type Adware)
5.14

Vba32 AntiVirus
suspected of Heur.Malware-Cryptor.Multiplug
3.12.26.3

File size:
293.5 KB (300,544 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\ProgramData\{4ebdd08b-219c-925b-4ebd-dd08b219422c}\erra-dreamcatcher free mp3 download.exe

File PE Metadata
Compilation timestamp:
5/19/2012 1:55:31 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
6144:t1v4ZSBY7DPgA73T9LIFQdCAn+jQ9x2YHh7p8ipt9Me4T:kZd773T9Qyf7nZh7X4T

Entry address:
0x2017B

Entry point:
E8, 54, 12, 00, 00, E9, 00, 00, 00, 00, 6A, 14, 68, 00, CD, 43, 00, E8, 5F, 17, 00, 00, E8, 21, 14, 00, 00, 0F, B7, F0, 6A, 02, E8, E7, 11, 00, 00, 59, B8, 4D, 5A, 00, 00, 66, 39, 05, 00, 00, 40, 00, 74, 04, 33, DB, EB, 33, A1, 3C, 00, 40, 00, 81, B8, 00, 00, 40, 00, 50, 45, 00, 00, 75, EB, B9, 0B, 01, 00, 00, 66, 39, 88, 18, 00, 40, 00, 75, DD, 33, DB, 83, B8, 74, 00, 40, 00, 0E, 76, 09, 39, 98, E8, 00, 40, 00, 0F, 95, C3, 89, 5D, E4, E8, C8, 0B, 00, 00, 85, C0, 75, 08, 6A, 1C, E8, DC, 00, 00, 00, 59, E8...
 
[+]

Entropy:
6.8394

Code size:
148.5 KB (152,064 bytes)

Scheduled Task
Task name:
Bidaily Synchronize Task

Trigger:
Daily (Runs daily at 10:53 PM)


The file erra-dreamcatcher free mp3 download.exe has been seen being distributed by the following URL.

http://b.websited.link/hp/?q=NfBQcoh8rphRW xztvgAeiOcMoVs42bEomsm0fXHviWjG8UvuxnXzEm0vWHr3jwX3nfzDIZ4VSQGLyrn97vEJQbVtW IdI4k8dQ86DjBJYCmzYxL/lMWev3eUA0S9bBj8HEQsocs3cta3yWpZE7waE0QPj/r6fDDSehEzQQ9CS3jU9Rxv6P4vRGMSs3mdIbPtp V2BTplJ/7eUfxNZKdzCLBapEUBt20KVItS/oBGt5Rv00CMi3q8351CPOKjERitPJ1etDjD2WgSEzf4OZllz1Mo7JWZt18SCO6YpqrvdIeH5eDT8924Iw5maCXMGAskJI8QwoPezzXKFs9xSw3toY jRCOYvZseznsS55R MDx verld3MkRQZP8b9SPCYCF4MSpNn2xXGg0pVnWJw/Ef4FHYg95irwpTuT28YToRaIlm6HrvUA6CisqN44SMoy8IOJY1PJslj5dqGGPhUG/1M/yknfn6GVxRdZoeRiLYhHphNw3UvCciWipNmVYew5rp7MT2AQYy3z4VpaIX3U3E5BnOTbUGs2xDZq6yyfkFSXMGt8vaJkba3lX5kM4tOpA bflxqI1hh5HppQB7oMp bYlPCrOsydMTKzPvIIgZYqVXshTB9aSvAgeJ9OjdDW2HSVh3UbjvdPxX0pcoEUTFKMgIdXhAEDuSJj9VnNKTLMMYLtXMUuuuuR2QeCzguA ihdH9FQGC92E1KCGVupsjl5H81/.../dD0Is5f5FMe5IgMkGgdcDLp 3jAU6f5gLRjYy CXHlvf4O4Fj&external_id=1430585602705917283&uuid=y5oo6cIZVC293KbRQPMlYF5sMAln0KK5h2dr7xAPQ9CgIqg4A0tsfn7KcmO6Wn0HN1YYVxCFVjXw6ikdoq4Ja6NfF5HsZYwyogL5kM9JK1SL9Ux2yQQiVu72WKhcz

Remove erra-dreamcatcher free mp3 download.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.