home

freeway - what we do (feat. jay-z.exe

Vkontakte DJ Installer

RECORD LLC

The application freeway - what we do (feat. jay-z.exe by RECORD has been detected as adware by 7 anti-malware scanners. The file has been seen being downloaded from muzloader.biz and multiple other hosts.
Publisher:
RECORD LLC  (signed and verified)

Product:
Vkontakte DJ Installer

Version:
1.9.1.21

MD5:
aa2bce4c97c0fc8a9b36f237d874c080

SHA-1:
d5a4d6e7dd2c66a28deea060f0cbe937e132a3d6

SHA-256:
07f6d322b93bad2b1166ea1e11b83739a6b764c4ce549bc2e0cd84257222eb5f

Scanner detections:
7 / 68

Status:
Adware

Analysis date:
11/27/2024 6:34:07 AM UTC  (today)

Scan engine
Detection
Engine version

Bkav FE
W32.HfsAdware
1.3.0.7383

Dr.Web
Program.VKontakteDJ.1
9.0.1.0308

ESET NOD32
MSIL/VKontakteDJ.A potentially unwanted (variant)
9.12514

McAfee
Artemis!AA2BCE4C97C0
5600.6591

Reason Heuristics
PUP.RECORD.Installer (M)
15.11.4.20

Rising Antivirus
PE:Trojan.Wajam!1.A257 [F]
23.00.65.151102

Zillya! Antivirus
Trojan.AutoRun.Win32.699
2.0.0.2493

File size:
572.2 KB (585,912 bytes)

Product version:
1.9.1.21

Copyright:
Copyright © 2015

Original file name:
DjLoader.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\freeway - what we do (feat. jay-z.exe

Digital Signature
Signed by:
RECORD LLC

Authority:
COMODO CA Limited

Valid from:
2/16/2015 6:00:00 PM

Valid to:
2/16/2018 5:59:59 PM

Subject:
CN=RECORD LLC, O=RECORD LLC, STREET="Kolomyazhsky 33, liter A", L=Saint-Petersburg, S=Saint-Petersburg, PostalCode=197341, C=RU

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
58EE01AAB8D97EDC88B98056655D1841

File PE Metadata
Compilation timestamp:
10/21/2015 4:55:49 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
6144:zH+BtFl4P7qsKQ0jnAt4BknkA3F2nDwZs4JBtFC:zH+Jl4DBKQ0jnpBknk62DUsaJC

Entry address:
0x6AEBE

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
5.5472

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
420 KB (430,080 bytes)

The file freeway - what we do (feat. jay-z.exe has been seen being distributed by the following 18 URLs.

http://muzloader.biz/.../ZWMwMDAxMDA2NzAwMDMxNjAwMDAwMzIyMDAwMzIyMDAwMzIyN2ZiNWJiNmRmNQ==?name=???????? - ? ???????? ????

http://muzloader.biz/.../ZWMwMDAxMDA2NzAwMDMxNjAwMDAwMzIyMDAwMzIyMDAwMzIyN2ZiNWJiNmRmNQ==?name=Ronamtik - Romantic collection - Saxophone & Guitar ( Sad Melody 2011 )

http://bun.downloadappscom.biz/yjwwr21.html??group=vkdjsite&name=-undefined&parameter=btn22

http://muzloader.biz/.../ZWMwMDAxMDA2NzAwMDMxNjAwMDAwMzIyMDAwMzIyMDAwMzIyN2ZiNWJiNmRmNQ==?name=null - null

http://muzloader.biz/.../ZWMwMDAxMDA2NzAwMDMxNjAwMDAwMzIyMDAwMzIyMDAwMzIyN2ZiNWJiNmRmNQ==?name=Har kisi ko nahi milta - Jaanbaaz karaoke track

http://muzloader.biz/.../ZWMwMDAxMDA2NzAwMDMxNjAwMDAwMzIyMDAwMzIyMDAwMzIyN2ZiNWJiNmRmNQ==?name=????? ? ????? - ?? ???-??-??! ?? ?????? ?? ????? ?? ???????? ????

http://muzloader.biz/.../ZWMwMDAxMDA2NzAwMDMxNjAwMDAwMzIyMDAwMzIyMDAwMzIyN2ZiNWJiNmRmNQ==?name=$HIND FBGM - FULL ALBUM - FREE DOWNLOAD !!! BESCHREIBUNG LESEN

http://muzloader.biz/.../ZWMwMDAxMDA2NzAwMDMxNjAwMDAwMzIyMDAwMzIyMDAwMzIyN2ZiNWJiNmRmNQ==?name=?? ???????? - ?? ?????? ?????? ???? ???????

http://muzloader.biz/.../ZWMwMDAxMDA2NzAwMDMxNjAwMDAwMzIyMDAwMzIyMDAwMzIyN2ZiNWJiNmRmNQ==?name=Mikayil - Ana seiri - Sol terefim agrayir - Sevimli Sou

http://muzloader.biz/.../ZWMwMDAxMDA2NzAwMDMxNjAwMDAwMzIyMDAwMzIyMDAwMzIyN2ZiNWJiNmRmNQ==?name=Hevenu Shalom Aleichem, Hava Nagila - Rzeszów Klezmer Band

http://muzloader.biz/.../ZWMwMDAxMDA2NzAwMDMxNjAwMDAwMzIyMDAwMzIyMDAwMzIyN2ZiNWJiNmRmNQ==?name=The Foggy Dew - Irish Song- Flute and Guitar duo

http://muzloader.biz/.../ZWMwMDAxMDA2NzAwMDMxNjAwMDAwMzIyMDAwMzIyMDAwMzIyN2ZiNWJiNmRmNQ==?name=Yak Gel - Med Cezir Orkestrasi Canli

http://muzloader.biz/.../ZWMwMDAxMDA2NzAwMDMxNjAwMDAwMzIyMDAwMzIyMDAwMzIyN2ZiNWJiNmRmNQ==?name=???? ? ??????? - ?????? ???????

http://muzloader.biz/.../ZWMwMDAxMDA2NzAwMDMxNjAwMDAwMzIyMDAwMzIyMDAwMzIyN2ZiNWJiNmRmNQ==?name=Marat MC ft. Black Mura - ???????? (Numb mix)

http://muzloader.biz/.../ZWMwMDAxMDA2NzAwMDMxNjAwMDAwMzIyMDAwMzIyMDAwMzIyN2ZiNWJiNmRmNQ==?name=??????? ? ?? ?????? – ?????? ?????????? ?? ?????? - ????? ??? - ??????? ?????

http://muzloader.biz/.../ZWMwMDAxMDA2NzAwMDMxNjAwMDAwMzIyMDAwMzIyMDAwMzIyN2ZiNWJiNmRmNQ==?name=Nazareth - Hang On To A Dream

http://muzloader.biz/.../ZWMwMDAxMDA2NzAwMDMxNjAwMDAwMzIyMDAwMzIyMDAwMzIyN2ZiNWJiNmRmNQ==?name=??????? ????? - ????? ??????

http://muzloader.biz/.../ZWMwMDAxMDA2NzAwMDMxNjAwMDAwMzIyMDAwMzIyMDAwMzIyN2ZiNWJiNmRmNQ==?name=Freeway - What We Do (feat. Jay-Z & Beanie Sigel)

Remove freeway - what we do (feat. jay-z.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.