home

ماذا تتوقعين من طفلك حتى عمر السنتين.exe

Maxiget Limited

This is part of a bundled installer which provides applications with offers for additional 3rd party software, mostly unwanted adware, and may be installed with minimal consent. The application ماذا تتوقعين من طفلك حتى عمر السنتين.exe by Maxiget Limited has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. It is also typically executed from the user's temporary directory.
Publisher:
Maxiget Limited  (signed and verified)

Version:
3, 3, 55, 0

MD5:
95e3355155f4b066315fa68d8e938845

SHA-1:
1c6c25818cedeb342d3bcbc29feeab196e1c3e3f

SHA-256:
34e9c08f68046ca3aadbfa52de37b0bd1ecedc30592627ae992150b25ec53dd4

Scanner detections:
1 / 68

Status:
Adware

Explanation:
This is a modified installer version of the software and bundles additional offers including adware.

Analysis date:
4/27/2024 12:37:51 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.MaxigetLimited.e
14.8.28.22

File size:
438.1 KB (448,592 bytes)

Product version:
3, 3, 55, 0

Copyright:
2014

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\???? ??????? ?? ???? ??? ??? ???????.exe

Digital Signature
Signed by:
Maxiget Limited

Authority:
GoDaddy.com, Inc.

Valid from:
6/3/2014 11:41:06 AM

Valid to:
8/15/2016 9:41:32 AM

Subject:
CN=Maxiget Limited, O=Maxiget Limited, L=Limassol, S=Cyprus, C=CY

Issuer:
CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, S=Arizona, C=US

Serial number:
043F9C868704FA

File PE Metadata
Compilation timestamp:
8/8/2014 6:06:20 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
6144:IsV3WLR3WHchisdVDoqbjqY7D1EbUGJBJFEc29xc5Vz2KEbIeny:HZWdAkDvDoKeY7D1bG/zB2ELz2KFeny

Entry address:
0x2C16B

Entry point:
E8, F6, A3, 00, 00, E9, 78, FE, FF, FF, 8B, FF, 55, 8B, EC, 83, EC, 14, A1, B8, FD, 44, 00, 33, C5, 89, 45, FC, 53, 56, 33, DB, 57, 8B, F1, 39, 1D, 04, 16, 45, 00, 75, 38, 53, 53, 33, FF, 47, 57, 68, 94, 4F, 44, 00, 68, 00, 01, 00, 00, 53, FF, 15, 60, 21, 44, 00, 85, C0, 74, 08, 89, 3D, 04, 16, 45, 00, EB, 15, FF, 15, E4, 20, 44, 00, 83, F8, 78, 75, 0A, C7, 05, 04, 16, 45, 00, 02, 00, 00, 00, 39, 5D, 14, 7E, 22, 8B, 4D, 14, 8B, 45, 10, 49, 38, 18, 74, 08, 40, 3B, CB, 75, F6, 83, C9, FF, 8B, 45, 14, 2B, C1...
 
[+]

Entropy:
6.8736

Code size:
256.5 KB (262,656 bytes)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.