home

platoon dublado rmvb avi dual audio dvdrip.rar.exe

BR SOFTWARE LLC

The application platoon dublado rmvb avi dual audio dvdrip.rar.exe by BR SOFTWARE has been detected as adware by 19 anti-malware scanners. This is a setup program which is used to install the application. The file has been seen being downloaded from www.klumag.net.
Publisher:
BR SOFTWARE LLC  (signed and verified)

MD5:
f6ecfeb235f097043ea07fb429f1aaa6

SHA-1:
7313832a2c596786a6534e43468d7dabb2654fb1

SHA-256:
c289e5acf28867bb174d53d816e0896f708b5d5f1adef5cce5cabd4833968368

Scanner detections:
19 / 68

Status:
Adware

Analysis date:
11/5/2024 2:33:11 AM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Gen:Variant.Adware.Symmi.45132
705

Agnitum Outpost
PUA.Midia
7.1.1

Avira AntiVirus
Adware/AgentCV.A.38531
7.11.178.116

avast!
Win32:Adware-gen [Adw]
2014.9-150302

AVG
Generic
2016.0.3183

Bitdefender
Gen:Variant.Adware.Symmi.45132
1.0.20.305

Emsisoft Anti-Malware
Gen:Variant.Adware.Symmi.45132
8.15.03.02.11

ESET NOD32
Win32/AdWare.Midia (variant)
9.10566

Fortinet FortiGate
Riskware/Midia
3/2/2015

F-Prot
W32/A-5122c002
v6.4.7.1.166

F-Secure
Gen:Variant.Adware.Symmi.45132
11.2015-02-03_2

G Data
Gen:Variant.Adware.Symmi.45132
15.3.24

IKARUS anti.virus
AdWare.AgentCV
t3scan.1.7.8.0

Malwarebytes
PUP.Optional.Midia
v2015.03.02.11

McAfee
Midia
5600.6839

MicroWorld eScan
Gen:Variant.Adware.Symmi.45132
16.0.0.183

Reason Heuristics
PUP.BRSOFTWARE
15.3.2.11

VIPRE Antivirus
BRSoftware
33940

Zillya! Antivirus
Backdoor.PePatch.Win32.40441
2.0.0.1956

File size:
673.5 KB (689,688 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\platoon dublado rmvb avi dual audio dvdrip.rar.exe

Digital Signature
Signed by:
BR SOFTWARE LLC

Authority:
Unizeto Technologies S.A.

Valid from:
7/30/2014 2:33:38 AM

Valid to:
7/30/2015 2:33:38 AM

Subject:
E=brsoftwarellc@gmail.com, CN="Open Source Developer, BR SOFTWARE", O=BR SOFTWARE LLC, C=US

Issuer:
CN=Certum Level III CA, OU=Certum Certification Authority, O=Unizeto Technologies S.A., C=PL

Serial number:
1794379E94C170D3D7163C1D5D2C35CD

File PE Metadata
Compilation timestamp:
6/19/1992 7:22:17 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
12288:HOGhI6iU0IRGpsNPipFYM7fnScjgUf4+yYGab:u0CUjNwQSfl4CGab

Entry address:
0x7A794

Entry point:
55, 8B, EC, 83, C4, F0, B8, FC, A4, 47, 00, E8, 60, B8, F8, FF, A1, 38, D1, 47, 00, 8B, 00, E8, 5C, DF, FD, FF, A1, 38, D1, 47, 00, 8B, 00, BA, 0C, A8, 47, 00, E8, 5B, DB, FD, FF, 8B, 0D, 24, CE, 47, 00, A1, 38, D1, 47, 00, 8B, 00, 8B, 15, C0, 94, 47, 00, E8, 4B, DF, FD, FF, 8B, 0D, E8, CF, 47, 00, A1, 38, D1, 47, 00, 8B, 00, 8B, 15, E4, 8B, 47, 00, E8, 33, DF, FD, FF, A1, 38, D1, 47, 00, 8B, 00, E8, A7, DF, FD, FF, E8, 06, 96, F8, FF, 00, 00, FF, FF, FF, FF, 11, 00, 00, 00, 50, 72, 6F, 74, 65, 74, 6F, 72...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
486.5 KB (498,176 bytes)

The file platoon dublado rmvb avi dual audio dvdrip.rar.exe has been seen being distributed by the following URL.

http://www.klumag.net/ids/.../Platoon Dublado Rmvb Avi Dual Audio Dvdrip.rar

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.