» grampo sargento em angulo para.exe
Overview
Analysis
File Details

grampo sargento em angulo para.exe

MIDIA TECHNOLOGIES LLC

The application grampo sargento em angulo para.exe by MIDIA TECHNOLOGIES has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the Midia Downloader installer.

File name:

Publisher:

. (signed by MIDIA TECHNOLOGIES LLC)

Product:

Version:

1.0.0

MD5:

49f92bb4d1122286d19133f6bd61cfce

SHA-1:

cdf9943c8ff68be695932e85006c98646e46b25f

SHA-256:

f6f4ea82cabfb4760a56b81ba1304ea81ab700f14f8c8627bfced8001f5260a0

Scanner detections:

1 / 68

Status:

Adware

Note:

Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Description:

This 'download manager' is also considered bundleware, a utility designed to download software (possibly legitimate or opensource) and bundle it with a number of optional offers including ad-supported utilities, toolbars, shopping comparison tools and browser extensions.

Analysis date:

12/26/2024 6:44:04 AM UTC (today)

Scan engine

Detection

Engine version

Reason Heuristics

PUP.Midia Technologies.MIDIATEC.Bundler (M)

16.4.2.8

File size:

362.3 KB (371,032 bytes)

Product version:

1.0.0

Original file name:

termosdeuso_so_nsis.exe

File type:

Executable application (Win32 EXE)

Bundler/Installer:

Midia Downloader

Language:

English (United States)

Common path:

C:\users\{user}\downloads\grampo sargento em angulo para.exe

Digital Signature

Signed by:

MIDIA TECHNOLOGIES LLC

Authority:

GoDaddy.com, Inc.

Valid from:

8/21/2014 10:27:01 PM

Valid to:

4/11/2015 3:45:06 PM

Subject:

CN=MIDIA TECHNOLOGIES LLC, O=MIDIA TECHNOLOGIES LLC, L=Lewes, S=Delaware, C=US

Issuer:

SERIALNUMBER=07969287, CN=Go Daddy Secure Certification Authority, OU=http://certificates.godaddy.com/repository, O="GoDaddy.com, Inc.", L=Scottsdale, S=Arizona, C=US

Serial number:

043AB639CD00E5

File PE Metadata

Compilation timestamp:

5/6/2009 2:36:57 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

8.0

CTPH (ssdeep):

6144:OD+LsFV/+TjXLAVaE9kC4splJWWnVAtSrlOYXa+d19W3RFc8g2F5SNF6o+VwwAj4:ODPr/+j7i9kC4sbJhnVAtJH81iRFc8Zb

Entry address:

0xEF380

Entry point:

60, BE, 00, B0, 49, 00, 8D, BE, 00, 60, F6, FF, 57, EB, 0B, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, 0B, 75, 28, 8B, 1E, 83, EE, FC, 11, DB, 72, 1F, 48, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, EB, D4, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, EB, 52, 31, C9, 83, E8, 03, 72, 11, C1, E0, 08, 8A, 06, 46, 83, F0, FF, 74, 75, D1, F8, 89, C5, EB, 0B, 01, DB, 75, 07, 8B... 
[+]

Packer / compiler:

UPX v0.89.6 - v1.02 / v1.05 -v1.24

Code size:

340 KB (348,160 bytes)

Remove grampo sargento em angulo para.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.