» manhattan+skyline+3000+us_10924_i68316066_il345.exe
Overview
Analysis
File Details

manhattan+skyline+3000+us_10924_i68316066_il345.exe

Google Chrome Portable

LLC BUDІMEKS

The application manhattan+skyline+3000+us_10924_i68316066_il345.exe by LLC BUDІMEKS has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. It bundles adware offers using the Amonetize, a Pay-Per-Install (PPI) monetization and distribution download manager. The software offerings provided are based on the PC's geo-location at the time of install.

File name:

Publisher:

PortableApps.com (signed by LLC BUDІMEKS)

Product:

Google Chrome Portable

Version:

43.0.2357.134

MD5:

568617e25b504fc6fb579999f3d44269

SHA-1:

6ed5656f2ab0d64428f9cb405650fead058b0e79

SHA-256:

5598eb47d9c98ac91a5994de27bebb0529c977090e744985bbd3f5839e25c2b1

Scanner detections:

1 / 68

Status:

Potentially unwanted

Analysis date:

11/6/2024 7:44:46 AM UTC (today)

Scan engine

Detection

Engine version

Reason Heuristics

PUP.Amonetize.Bundler (M)

17.2.19.20

File size:

1.4 MB (1,485,840 bytes)

Product version:

43.0.2357.134

2007-2015 PortableApps.com, PortableApps.com Installer 3.0.19.0

Trademarks:

PortableApps.com is a registered trademark of Rare Ideas, LLC.

Original file name:

GoogleChromePortable_43.0.2357.134_online.paf.exe

File type:

Executable application (Win32 EXE)

Language:

Language Neutral

Common path:

C:\users\{user}\downloads\manhattan+skyline+3000+us_10924_i68316066_il345.exe

Digital Signature

Signed by:

LLC BUDІMEKS

Authority:

COMODO CA Limited

Valid from:

8/27/2015 1:00:00 AM

Valid to:

8/27/2016 12:59:59 AM

Subject:

CN=LLC BUDІMEKS, O=LLC BUDІMEKS, STREET=Cvitna 34, L=Gorodockey area Galichani vilage, S=Lvovskaja, PostalCode=81523, C=UA

Issuer:

CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

00E9F1B23ADDECC133378F48EBB20F9E3D

File PE Metadata

Compilation timestamp:

10/7/2015 3:22:49 PM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

12.0

Entry address:

0x1FCD4E

Entry point:

68, 0C, 67, 30, 00, E8, 1B, D1, FC, FF, B2, 8E, A2, FF, 3C, C4, 21, CC, 77, 5F, 22, FB, 15, B2, 8E, A2, E6, 3A, C3, 3F, E3, 7D, 62, 2D, E1, 71, 73, 57, 12, D9, 64, 56, C1, 59, D9, 7D, 31, 26, 3F, 27, 02, 71, A6, 96, 27, 82, 77, E4, 22, D7, FD, 34, FC, C9, D8, FD, 2F, F8, 5C, D9, 7D, 48, 69, 44, 27, 02, 1A, 06, 71, 27, 02, D3, 9D, 5C, A8, 9C, DC, 57, 82, D3, E4, A8, FD, FC, F5, F5, A8, FD, 37, 18, 60, A8, 7D, 18, 69, 51, 57, 02, 0A, BF, F8, 57, 82, 7E, 4C, 35, A7, FD, 8A, D5, 1E, A9, 7D, E5, 49, D9, 57, 02... 
[+]

Entropy:

7.9576 (probably packed)

Code size:

1.3 MB (1,379,328 bytes)

Remove manhattan+skyline+3000+us_10924_i68316066_il345.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.