home

718adbba-43b3-dc2d-649d-1857bc591f5a_1d1e5937e9afc39

Jul Ink

The file 718adbba-43b3-dc2d-649d-1857bc591f5a_1d1e5937e9afc39 has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. It bundles adware offers using the Amonetize, a Pay-Per-Install (PPI) monetization and distribution download manager. The software offerings provided are based on the PC's geo-location at the time of install. The file has been seen being downloaded from 833145.superfastdownload000.site.
Publisher:
Jul Ink

Product:
Jul Ink

Description:
Jul

Version:
0.0.0.2

MD5:
dde9d2847ce5c6d839cda1e1798aafe6

SHA-1:
fbaa20ca3acd1c99213cf097c5b1838e12329a09

SHA-256:
9d55fcb4e1d167649efb4fa33df9bb1ed6a56339d3e08307bc78db58523bf07d

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
4/18/2024 11:49:32 PM UTC  (a few moments ago)

Scan engine
Detection
Engine version

Reason Heuristics
Adware.Amonetize (M)
16.7.24.13

File size:
721.2 KB (738,518 bytes)

Product version:
0.0.0.2

Original file name:
jul2.exe

Language:
English (United States)

Common path:
C:\ProgramData\microsoft\microsoft antimalware\scans\filesstash\718adbba-43b3-dc2d-649d-1857bc591f5a_1d1e5937e9afc39

File PE Metadata
Compilation timestamp:
7/23/2016 3:08:45 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
12288:2CYvUq0T66X7VMB4niP9yXoYiqMTF0JsM9kH27MmfX7MtcTW/b3ITm:c+TLJMB3K2qc1MiHRSLRTOcm

Entry address:
0x6A5A

Entry point:
E8, A4, 27, 00, 00, E8, 00, 00, 00, 00, 50, B8, 2D, FE, FF, FF, 03, 44, 24, 04, 89, 44, 24, 04, 58, C3, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 57, 56, 8B, 74, 24, 10, 8B, 4C, 24, 14, 8B, 7C, 24, 0C, 8B, C1, 8B, D1, 03, C6, 3B, FE, 76, 08, 3B, F8, 0F, 82, 78, 03, 00, 00, 0F, BA, 25, 2C, 04, 43, 00, 01, 73, 07, F3, A4, E9, 27, 03, 00, 00, 81, F9, 80, 00, 00, 00, 0F, 82, DE, 01, 00, 00, 8B, C7, 33, C6, A9, 0F, 00, 00, 00, 75, 0E, 0F, BA, 25, 50, F0, 42, 00, 01, 0F, 82, EA, 04, 00, 00, 0F...
 
[+]

Entropy:
7.5776

Code size:
131 KB (134,144 bytes)

The file 718adbba-43b3-dc2d-649d-1857bc591f5a_1d1e5937e9afc39 has been seen being distributed by the following URL.

http://833145.superfastdownload000.site/download3.php?x=9ef96bba56e66bd2065dd210c1359a6f&id=BenShallon42&title=AVOX&u=aHR0cDovL2F2b3gueHl6L2ZpbGVzL0F2b3hDbGllbnRJbnN0YWxsZXIuZXhl

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.