home

let's be cops 2014 720p hdcam engish x264 pimp4003.exe

VenusApp Software

This uses the software InstalleRex download manager which bundles a number of adware plugin and browser extensions and is distributed via TusFiles. The application let's be cops 2014 720p hdcam engish x264 pimp4003.exe, “Installer for VenusApp Software” has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the Tarma Installer installer, however the file is not signed with an authenticode signature from a trusted source.
Publisher:
VenusApp Software

Product:
VenusApp Software

Description:
Installer for VenusApp Software

Version:
2014.8.20.1450

MD5:
e7e87ffd75b85bfadf3840038687642a

SHA-1:
6cdd7f9192db4d757e36484709d992229427d241

SHA-256:
c9ae391b04c37d6efe65bc698d1113f56b4db1e134cbaabb66dbb32065667193

Scanner detections:
1 / 68

Status:
Adware

Explanation:
Uses Web-Pick's 'File Product', an Installer which wraps various products and downloads and installs it silently through the process, hosted on TusFiles.

Analysis date:
11/15/2024 9:30:21 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
Adware (M)
16.7.29.22

File size:
310.9 KB (318,336 bytes)

Product version:
1.0.0.3

Copyright:
Copyright © 2014 VenusApp Software

Original file name:
TSULoader.exe

File type:
Executable application (Win32 EXE)

Installer:
Tarma Installer

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\let's be cops 2014 720p hdcam engish x264 pimp4003.exe

File PE Metadata
Compilation timestamp:
3/12/2013 4:51:45 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
6144:9rVbUzkuvcBYC47l2xwrVCvm4hnmVLQUT9z6pJPaNE1eoyKqY:9rGkuveY3170nmFg/y+e4qY

Entry address:
0x14DB

Entry point:
55, 8B, EC, 81, EC, 2C, 06, 00, 00, 53, 56, 33, DB, 57, 66, 89, 9D, DC, FB, FF, FF, 89, 5D, F4, 89, 5D, FC, FF, 15, 74, 30, 40, 00, A3, 08, 44, 40, 00, FF, 15, 70, 30, 40, 00, 8B, F8, 8D, 45, EC, 50, FF, 15, 6C, 30, 40, 00, FF, 15, 68, 30, 40, 00, 8B, F0, F7, D6, 33, F7, FF, 15, 64, 30, 40, 00, 33, F0, 8B, 45, F0, 33, 45, EC, 68, 04, 01, 00, 00, 33, F0, 8D, 85, D4, F9, FF, FF, 50, 53, FF, 15, 60, 30, 40, 00, 85, C0, 75, 41, FF, 15, 5C, 30, 40, 00, 83, F8, 78, 75, 1A, 68, A8, 32, 40, 00, E8, 43, FB, FF, FF...
 
[+]

Entropy:
7.9538

Developed / compiled with:
Microsoft Visual C++

Code size:
7.5 KB (7,680 bytes)

The file let's be cops 2014 720p hdcam engish x264 pimp4003.exe has been seen being distributed by the following URL.

http://maxdocumentsitefun.info/.../Let's Be Cops 2014 720p HDCAM ENGISH x264 Pimp4003.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.