» auslogics boostspeed 5 rus.exe
Overview
Analysis
File Details
Downloads (1)

auslogics boostspeed 5 rus.exe

CORLEON GROUP LTD

The application auslogics boostspeed 5 rus.exe by CORLEON GROUP has been detected as adware by 26 anti-malware scanners. This is a setup program which is used to install the application. The file has been seen being downloaded from find-files.biz.

File name:

Publisher:

CORLEON GROUP LTD (signed and verified)

Version:

1.0.0.0

MD5:

f7ba96fd9746f5f33b22272f8cc15093

SHA-1:

319534bd30e3a62e0f4874848bc39b01f8d2f5e5

SHA-256:

e5a89ec40375a2157192f70e341a426e3a0093301579bf71eadf330c7ab00983

Scanner detections:

26 / 68

Status:

Adware

Analysis date:

4/18/2024 11:14:34 AM UTC (today)

Scan engine

Detection

Engine version

Lavasoft Ad-Aware

Gen:Variant.Strictor.53070

894

Agnitum Outpost

PUA.Downloader

7.1.1

Avira AntiVirus

TR/Fraud.Gen7

7.11.168.254

avast!

Win32:InstallMonstr-DL [PUP]

140813-1

AVG

Trojan horse PSW.Banker6.BGQL

2014.0.3986

Bitdefender

Gen:Variant.Strictor.53070

1.0.20.1180

Comodo Security

ApplicUnwnt.Win32.Hoax.ArchSMS.AGJ

19302

Dr.Web

Trojan.InstallMonster.38

9.0.1.05190

Emsisoft Anti-Malware

Gen:Variant.Strictor.53070

8.14.08.24.01

ESET NOD32

Win32/InstallMonstr.AF potentially unwanted application

7.0.302.0

F-Prot

W32/InstallMonster.A3.gen

v6.4.7.1.166

F-Secure

Gen:Variant.Strictor.53070

11.2014-24-08_1

G Data

Gen:Variant.Strictor.53070

14.8.24

IKARUS anti.virus

Trojan.SuspectCRC

t3scan.1.7.5.0

K7 AntiVirus

Adware

13.183.13139

Kaspersky

not-a-virus:HEUR:Downloader.Win32.Monstruos

15.0.0.463

Malwarebytes

PUP.Optional.InstallMonster

v2014.08.24.01

MicroWorld eScan

Gen:Variant.Strictor.53070

15.0.0.708

NANO AntiVirus

Trojan.Win32.ArchSMS.cwzene

0.28.2.61721

Panda Antivirus

PUP/InstallMonstr

14.08.24.01

Reason Heuristics

PUP.CORLEONGROUP.AA

14.8.24.9

Rising Antivirus

PE:Trojan.StartPage!6.216

23.00.65.14822

Sophos

Install Monster

4.98

Vba32 AntiVirus

BScope.Downware.InstallMonstr

3.12.26.3

VIPRE Antivirus

Threat.4845009

32210

Zillya! Antivirus

Tool.ArchSMS.Win32.19876

2.0.0.1900

File size:

2.8 MB (2,936,248 bytes)

Product version:

1.0.0.0

File type:

Executable application (Win32 EXE)

Common path:

C:\users\{user}\downloads\auslogics boostspeed 5 rus.exe

Digital Signature

Signed by:

CORLEON GROUP LTD

Authority:

VeriSign, Inc.

Valid from:

7/26/2013 6:00:00 AM

Valid to:

7/27/2014 5:59:59 AM

Subject:

CN=CORLEON GROUP LTD, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=CORLEON GROUP LTD, L=Victoria, S=Mahe, C=SC

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

3892391FD98598A279CE03AF7330DCFB

File PE Metadata

Compilation timestamp:

11/18/2013 7:30:02 PM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

49152:ZTtfLAMMwE7C2GbOo0TDSg9mpS1sRh7a6VlkiisGCXdYRGCX:7jApwH3bkV9mxWMlBiNgu

Entry address:

0xE742F0

Entry point:

60, BE, 00, 90, 04, 01, 8D, BE, 00, 80, 3B, FF, 57, 83, CD, FF, EB, 10, 90, 90, 90, 90, 90, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, 0B, 75, 28, 8B, 1E, 83, EE, FC, 11, DB, 72, 1F, 48, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, EB, D4, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, EB, 52, 31, C9, 83, E8, 03, 72, 11, C1, E0, 08, 8A, 06, 46, 83, F0, FF, 74, 75, D1, F8, 89... 
[+]

Packer / compiler:

UPX 2.90LZMA

Code size:

2.2 MB (2,277,376 bytes)

The file auslogics boostspeed 5 rus.exe has been seen being distributed by the following URL.

http://find-files.biz/.../?j=c2lkPTE1NjQmdXJsPWh0dHAlM0ElMkYlMkZ3d3cuaW5zdGEtY2FzaC5uZXQlMkZ0ZHMlMkYlM0Z4MjQxJTNEJTI2cSUzREF1c0xvZ2ljcytCb29zdFNwZWVkKzUrUnVzJTI2d21pZCUzRDIzOSUyNmNyeXB0JTNEdHJ1ZSZuYW1lPUF1c0xvZ2ljcytCb29zdFNwZWVkKzUrUnVzJnR5cGU9dW5kZWZpbmVkJnNpemU9dW5kZWZpbmVk

Remove auslogics boostspeed 5 rus.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.