» LUYARA FELIX DE ARAUJO 05168873359
Digital Signature
Analysis
Files (15)
Downloads (4)
Distribution (3)
Related (71)

LUYARA FELIX DE ARAUJO 05168873359

Publisher Information

LUYARA FELIX DE ARAUJO 05168873359 is a software publisher located in Imperatriz, Maranhao in Brazil*. There is one additional code signing certificate issued to this publisher.

Authority:

GlobalSign nv-sa

Valid from:

11/10/2014 1:19:06 PM

Valid to:

11/11/2015 1:19:06 PM

Subject:

CN=LUYARA FELIX DE ARAUJO 05168873359, OU=TI, O=LUYARA FELIX DE ARAUJO 05168873359, L=Imperatriz, S=Maranhao, C=BR

Issuer:

CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:

1121d20cd8af8ca0767e911ee22f03281f76

Scanner detections:

Malware distribution (87% detected)

Scan engine

Details

Detections

avast!

Win32:Banker-LTF [Trj], Win32:Malware-gen, Win32:GenMaliciousA-GKY [Trj], MSIL:Downloader-MU [Drp]

92.31%

McAfee

RDN/Generic Downloader.x!my, RDN/PWS-Banker!ds, RDN/Generic Downloader.x!na, Downloader-FAVK!B36F9DC3FE7B, RDN/PWS-Banker!dx

92.31%

Sophos

Virus 'Troj/MSIL-DBJ', Troj/MSIL-CCX, Mal/Generic-S, Mal/Generic-L

76.92%

MicroWorld eScan

Trojan.GenericKD.2219261, Trojan.GenericKD.2248882, Trojan.Generic.14615792, Trojan.GenericKD.2371551, Trojan.GenericKD.2213592, Trojan.GenericKD.2231189, Trojan.Generic.14901727, Trojan.GenericKD.2254274, Trojan.Generic.14897865, Trojan.GenericKD.2111749

76.92%

nProtect

Trojan-Downloader/W32.Agent.76808, Trojan.GenericKD.2248882, Trojan.Generic.14615792, Trojan.GenericKD.2371551, Trojan.GenericKD.2213592

76.92%

VIPRE Antivirus

Trojan.Win32.Generic, Trojan.Win32.Generic.pak!cobra, Win32.Malware!Drop

76.92%

ESET NOD32

MSIL/Spy.Banker.CN (variant), MSIL/Spy.Banker.CC (variant), Generik.EVEWPIP (variant), MSIL/Spy.Banker.CH, MSIL/TrojanDownloader.Agent.AIZ

76.92%

Kaspersky

Trojan-Downloader.MSIL.Banload, Trojan-Downloader.MSIL.Agent, UDS:DangerousObject.Multi.Generic, Trojan-Banker.MSIL.Banbra

76.92%

Bitdefender

Trojan.GenericKD.2219261, Trojan.GenericKD.2248882, Trojan.Generic.14615792, Trojan.GenericKD.2371551, Trojan.GenericKD.2213592

76.92%

Lavasoft Ad-Aware

Trojan.GenericKD.2219261, Trojan.GenericKD.2248882, Trojan.Generic.14615792, Trojan.GenericKD.2371551, Trojan.GenericKD.2213592

76.92%

33 / 68 (Malware)

resumo_pendencias.exe (28da9f2ffb04bdfbb86549b4288bb5c9)

0 / 68

doc8172812.exe (beb9b034affa7eab6c2fe2b53833a036)

27 / 68 (PUP)

fixutil.exe (WindowsFormsApplication1) (88473783c174f1bd7ff2128354b9760f)

33 / 68 (Malware)

pendencia_k232015.exe (WindowsFormsApplication1) (d5c4a559b911d0e3c39551d17ba53e5e)

27 / 68 (Malware)

pendencias.exe (ed53a9148461e52a3a648a3b9df7b148)

22 / 68 (Malware)

ir-pendencias.exe (WindowsFormsApplication1) (597b9e9c03b3085069e3572d13a246bb)

4 / 68 (Malware)

ChromeProtect.exe (42ad5c097db9b9df4585f307bf1c3ac0)

28 / 68 (Malware)

pendencia.exe (WindowsFormsApplication1) (dc24b9c28db9a6855e15ae1bfe0a3ed1)

28 / 68 (Malware)

receita_debito_2015-5544124.exe (WindowsFormsApplication1) (933e3efce91c145c9c65082328a8a291)

20 / 68 (PUP)

pendencias.exe (WindowsFormsApplication1) (b36f9dc3fe7bb667d5567f84b21903b0)

0 / 68

flash_setup.exe (LoaderVisual) (eab04b2f7095fe8a5f18164446c9c332)

27 / 68 (Malware)

pendencias.ir.2015.exe (WindowsFormsApplication1) (3d659120ac5521e20229571adbb5a1e4)

10 / 68 (Malware)

pendências.exe (3c487c30220d2d359bdd244f7244cfa1)

32 / 68 (Malware)

doc.exe (WindowsFormsApplication1) (a322074116707b7ba6bafc19eff23d97)

4 / 68 (Malware)

Online.exe (9386924f1b74d420b0d50de8634992c4)

Downloads URLs for files signed by LUYARA FELIX DE ARAUJO 05168873359.

27 / 68 (Malware)

http://vivoempresacorporativobh.com.br/_downloads/.../ (pendencias.ir.2015.exe)

28 / 68 (Malware)

http://www.prontogourmetnatal.com.br/wp-content/themes/twentyfourteen/inc/.../?debito (receita_debito_2015-5544124.exe)

20 / 68 (PUP)

http://vivoempresacorporativobh.com.br/_downloads/.../ (pendencias.exe)

32 / 68 (Malware)

http://storage.googleapis.com/.../doc.exe (a322074116707b7ba6bafc19eff23d97)

Distribution

The following websites host and distribute files published by LUYARA FELIX DE ARAUJO 05168873359.

www.prontogourmetnatal.com.br

vivoempresacorporativobh.com.br

storage.googleapis.com

The following certificate is also signed by LUYARA FELIX DE ARAUJO 05168873359.

1121A4206120E7E1BC80E5B42B4FABBDAF4A (Nov 13, 2015 to Dec 13, 2016)

The following publishers (by Authenticode signature organization name) are related.

IMALI – N.I. MEDIA LTD

DigiExam Solutions Sweden AB

Dinosaur

Power Software Limited

Adverts Technologies

Digital Vei,OOO

OOO Kod Intertainment

EVO DIGITAL MEDIA CONSULTORIA E TECNOLOGIA LTDA

OOO Digital

Code Sector

Adverts Alliance

think-cell Software GmbH

OOO DIGITAL ZON

Disc Soft Ltd

Telegram Messenger LLP

Switch Communications, Inc.

Motorola Mobility Inc.

Irfan Skiljan

30 of 71 publishers

* Note, the details and description above are based on the code signing digital signature issued to LUYARA FELIX DE ARAUJO 05168873359 by GlobalSign nv-sa on November 10, 2014 with the serial number '1121d20cd8af8ca0767e911ee22f03281f76'.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.