home

lokalizacja.exe

Darmowa lokalizacja telefonów

Blue-Point Media Sp. z o.o.

The application lokalizacja.exe by Blue-Point Media Sp. z o.o has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. This is a setup program which is used to install the application. The file has been seen being downloaded from ksiazka-telefoniczna-prywatna.pl and multiple other hosts.
Publisher:
Blue-Point Media Sp. z o.o.  (signed and verified)

Product:
Darmowa lokalizacja telefonów

Version:
1.0.0.0

MD5:
7fc023617deb139c238026d480bad5df

SHA-1:
75e9c342d7ae5bec9c753685380b182056b35ff1

SHA-256:
56d3e0dcc4551f9f52038c75f1077517648dbec3238af5e3614d0e2a599824a4

Scanner detections:
1 / 68

Status:
Potentially unwanted

Note:
Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Analysis date:
12/26/2024 2:43:33 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.BluePointMediaSpzoo (M)
15.12.12.18

File size:
8.5 MB (8,897,864 bytes)

Product version:
1.0.0.0

Copyright:
Copyright Darmowa lokalizacja telefonów © 2014

Original file name:
LokalizatorTelefonow.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\lokalizacja.exe

Digital Signature
Signed by:
Blue-Point Media Sp. z o.o.

Authority:
SwissSign AG

Valid from:
5/5/2014 2:44:40 PM

Valid to:
5/5/2015 2:44:40 PM

Subject:
E=pomoc_pl@interia.pl, CN=Blue-Point Media Sp. z o.o., O=Blue-Point Media Sp. z o.o., C=PL

Issuer:
CN=SwissSign Personal Gold CA 2008 - G2, O=SwissSign AG, C=CH

Serial number:
348B68D1045224C7436D760CCCAB9E

File PE Metadata
Compilation timestamp:
3/30/2015 8:01:22 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
98304:9FqYbEr157sJcTHp7vE0hrH2UJCEmQeHGxKmZTT2SPzhv6Bkkk:dbEr77H17vE0hrH2ACEbemLtT2G

Entry address:
0x82231A

Entry point:
FF, 25, 28, 23, C2, 00, 00, 00, 00, 00, 00, 00, 00, 00, FC, 22, 82, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Code size:
8.1 MB (8,520,704 bytes)

The file lokalizacja.exe has been seen being distributed by the following 5 URLs.

http://ksiazka-telefoniczna-prywatna.pl/lokalizator.exe

http://phone-locator.pl/lokalizator.exe

http://darmowa-lokalizacja-telefonow.pl/lokalizator.exe

http://darmowe-namierzanie-telefonow.pl/lokalizator.exe

http://programy-za-darmo.pl/.../pobierz,64,lokalizacja-telefonu---lokalizacja-numeru-telefonu-komorkowego.html

Remove lokalizacja.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.