لا أنا بل المسيح.pdf.exe

Contumar Empresarial s.l.

This belongs to a Solimba product that may be bundled with additional PUPs or may be part of an ad-supported software program. The application لا أنا بل المسيح.pdf.exe by Contumar Empresarial s.l has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the Solimba DownloadMR installer. It uses the Solimba download manager to push adware offers during the download and setup process. Bundled adware includes search and shopping web browser toolbars.
Publisher:
Contumar Empresarial s.l.  (signed and verified)

MD5:
207a65d22528d7272988036733906249

SHA-1:
93e81b6e1df440cf394525a701999a2ab0d6fd3c

SHA-256:
e8e438b33df0254d6f50a45eec031cb48209d09a5f06ad81ea212aa6874303bf

Scanner detections:
1 / 68

Status:
Adware

Explanation:
Uses the Solimba installer to bundle adware offers.

Description:
This is also known as bundleware, or downloadware, which is an downloader designed to simply deliver ad-supported offers in the setup routine of an otherwise legitimate software.

Analysis date:
1/3/2026 4:38:37 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.Solimba.Contumar (M)
16.3.16.2

File size:
655.1 KB (670,816 bytes)

File type:
Executable application (Win32 EXE)

Bundler/Installer:
Solimba DownloadMR

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\لا أنا بل المسيح.pdf.exe

Digital Signature
Authority:
GlobalSign nv-sa

Valid from:
2/2/2015 4:00:38 PM

Valid to:
9/24/2016 6:00:25 PM

Subject:
CN=Contumar Empresarial s.l., O=Contumar Empresarial s.l., L=Barcelona, S=Barcelona, C=ES

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
112119FE6AFB4FA7129F4F594CD3E07D5B21

File PE Metadata
Compilation timestamp:
5/28/2015 3:37:40 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
12.0

CTPH (ssdeep):
12288:C1heIHTECcwLbmMkSxB2Filn+rKibmeeJC5LOFKGE3KoHKWfw0d7x1+ZR9XC:4eIfz3ajKZeeJrmKoHu+l0H9XC

Entry address:
0x10FEC

Entry point:
E8, 7E, 96, 00, 00, E9, 00, 00, 00, 00, 6A, 14, 68, F0, CB, 42, 00, E8, BE, 57, 00, 00, E8, 2C, 1D, 00, 00, 0F, B7, F0, 6A, 02, E8, 11, 96, 00, 00, 59, B8, 4D, 5A, 00, 00, 66, 39, 05, 00, 00, 40, 00, 74, 04, 33, DB, EB, 33, A1, 3C, 00, 40, 00, 81, B8, 00, 00, 40, 00, 50, 45, 00, 00, 75, EB, B9, 0B, 01, 00, 00, 66, 39, 88, 18, 00, 40, 00, 75, DD, 33, DB, 83, B8, 74, 00, 40, 00, 0E, 76, 09, 39, 98, E8, 00, 40, 00, 0F, 95, C3, 89, 5D, E4, E8, BD, 4D, 00, 00, 85, C0, 75, 08, 6A, 1C, E8, DC, 00, 00, 00, 59, E8...
 
[+]

Entropy:
7.4720

Code size:
139 KB (142,336 bytes)

The file لا أنا بل المسيح.pdf.exe has been seen being distributed by the following URL.

Remove لا أنا بل المسيح.pdf.exe - Powered by Reason Core Security