home

roxio creator for_10924_i44321956_il345.exe

Runner Utility

BERSHNET LLC

The application roxio creator for_10924_i44321956_il345.exe by BERSHNET has been detected as adware by 18 anti-malware scanners. This is a setup program which is used to install the application. It bundles adware offers using the Amonetize, a Pay-Per-Install (PPI) monetization and distribution download manager. The software offerings provided are based on the PC's geo-location at the time of install. The file has been seen being downloaded from files.red-1-small-button.com and multiple other hosts.
Publisher:
Dummy, Ltd.  (signed by BERSHNET LLC)

Product:
Runner Utility

Version:
1.0.0.187

MD5:
857aaec4968eeda4177dd7f5a53c0536

SHA-1:
11ac2fa782430003a12d795728eb512d417fab12

SHA-256:
1bb03c437e79fb2d97fb91c3a19c4a953dcea0a70697723a10069aad6bec97cb

Scanner detections:
18 / 68

Status:
Adware

Analysis date:
11/28/2024 2:44:56 PM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Gen:Variant.Adware.Mikey.8247
6517743

AhnLab V3 Security
Trojan/Win32.LoadMoney
2015.03.18

Avira AntiVirus
ADWARE/Adware.Gen7
7.11.217.244

AVG
Generic
2016.0.3168

Bitdefender
Gen:Variant.Adware.Mikey.8247
1.0.20.380

Comodo Security
Application.Win32.LoadMoney.IARS
21443

Emsisoft Anti-Malware
Gen:Variant.Adware.Mikey.8247
9.0.0.4799

ESET NOD32
Win32/Amonetize.DW potentially unwanted application
7.0.302.0

F-Prot
W32/S-40484255
v6.4.7.1.166

F-Secure
Gen:Variant.Adware.Mikey
5.13.68

G Data
Gen:Variant.Adware.Mikey.8247
15.3.25

K7 AntiVirus
Unwanted-Program
13.201.15285

Kaspersky
not-a-virus:Downloader.Win32.Agent
15.0.0.543

Malwarebytes
PUP.Optional.Amonetize
v2015.03.17.09

MicroWorld eScan
Gen:Variant.Adware.Mikey.8247
16.0.0.228

Panda Antivirus
Trj/Genetic.gen
15.03.17.09

Reason Heuristics
PUP.BERSHNET
15.3.17.9

VIPRE Antivirus
Threat.4785227
37788

File size:
1.5 MB (1,553,936 bytes)

Product version:
1.0.0.187

Copyright:
Copyright (C) 2013

Original file name:
runner.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\roxio creator for_10924_i44321956_il345.exe

Digital Signature
Signed by:
BERSHNET LLC

Authority:
COMODO CA Limited

Valid from:
2/6/2015 12:00:00 AM

Valid to:
2/6/2016 11:59:59 PM

Subject:
CN=BERSHNET LLC, O=BERSHNET LLC, STREET="st. 600-richya b.66, of.10", L=Vinnitsya, S=Vinnitskaya, PostalCode=21027, C=UA

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00E2D6C6F8DDF832E09DCF766B299AD2A9

File PE Metadata
Compilation timestamp:
3/16/2015 1:43:11 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
12.0

CTPH (ssdeep):
24576:zyY8FjkJHCEeBSXLmoSuQl3ixYiQJ4y7CfA+m9u5MLziBsV/YO0MAv/u5xVg:zyDUCEgSXLU94qxJHufA+mS4gxkxm

Entry address:
0x308DB2

Entry point:
E8, 2E, 0E, F7, FF, 5D, A3, 3B, BA, B3, 48, F5, AE, 27, D1, 9D, 99, 2F, 01, 11, C2, 70, 01, 84, 1E, 61, 39, 1D, F2, 25, F7, 11, 6D, 71, FA, 31, 8D, 03, 30, AD, 62, 7C, 0A, 84, CB, C6, 8E, 06, 01, 3A, 9C, 56, C9, 75, DF, B7, E1, 0E, DF, BB, 9A, 14, 87, 33, 15, 8D, 11, 97, 07, 71, 2B, 19, 1F, A2, 7F, AB, AE, FE, FE, FF, 10, 9F, A8, 2B, CC, C3, 8E, 13, 2B, 0F, 1D, 69, 99, D2, CD, F9, 0E, 62, CF, 5F, 77, 38, EF, 9D, B1, AD, FE, D1, 38, D0, 98, B6, 4C, 86, 21, F4, 21, 3B, 95, 36, C8, EC, 77, 8A, C6, 87, 36, 1B...
 
[+]

Entropy:
7.9935  (probably packed)

Code size:
187.5 KB (192,000 bytes)

The file roxio creator for_10924_i44321956_il345.exe has been seen being distributed by the following 3 URLs.

http://files.red-1-small-button.com/p/.../driver toolkit 8.1.1 crack serial_10924_i44321506_il345.exe

http://downprov.brown1switch.com/p/.../driver toolkit 8.1.1 crack serial_10924_i44321506_il345.exe

http://downprov.brown1switch.com/direct?version=1.1.8.22&campid=10924&instid[appname]=driver toolkit 8.1.1 crack serial_Downloader&instid[appsetupurl]=http://go.mysoftwarelive.com/getfast/download.cgi?9&ti1=1405000&ti2=1&ti3=DD1_2015-03-16T13:49:10.262635 00:00&instid[cmdline]=/S /PERFORMINSTALL /NORUN&instid[appimageurl]=http://download.mysoftwarelive.com/d1/logo150x150.png&prefix=driver toolkit 8.1.1 crack serial&instid[thankyoupage]=http://download.mysoftwarelive.com/.../thank_you.php?ti1=1405000&ti2=1&ti3=DD1_2015-03-16T13:49:10.262635 00:00&parameter=driver toolkit 8.1.1 crack serial&instid[interrupted]=http://download.mysoftwarelive.com/.../interrupted.php?ti1=1405000&ti2=1&ti3=DD1_2015-03-16T13:49:10.262635 00:00&parameter=driver toolkit 8.1.1 crack serial&ti1=1405000&ti2=1&ti3=DD1_2015-03-16T13:49:10.26

Remove roxio creator for_10924_i44321956_il345.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.