home

avengers age of ultron 2015 720p hd ts new line x264 hq cpg.exe

Daily APps fOrfOR

The application avengers age of ultron 2015 720p hd ts new line x264 hq cpg.exe by Daily APps fOrfOR has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer.
Publisher:
IWQUX  (signed by Daily APps fOrfOR)

Product:
IWQUX

Version:
1916.1572.1241.2876

MD5:
1ab8106e325b24d5d64781ca40ffd570

SHA-1:
b504f17ea24197911a08240c7f45da3e9ff5a9e4

SHA-256:
30c2d9ffc77413dc9f38edd37ee27c0318da581b3acbbd1b382436219531170f

Scanner detections:
1 / 68

Status:
Adware

Note:
Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Analysis date:
11/4/2025 5:50:28 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.Outbrowse.DailyAPp.Installer (M)
16.7.4.3

File size:
659.6 KB (675,440 bytes)

Product version:
1916.1572.1241.2876

Copyright:
IWQUX

Trademarks:
IWQUX

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\avengers age of ultron 2015 720p hd ts new line x264 hq cpg.exe

Digital Signature
Signed by:
Daily APps fOrfOR

Authority:
thawte, Inc.

Valid from:
6/30/2015 7:00:00 AM

Valid to:
1/28/2016 6:59:59 AM

Subject:
CN=Daily APps fOrfOR, O=Daily APps fOrfOR, L=Dublin, S=Dublin, C=IE

Issuer:
CN=thawte SHA256 Code Signing CA, O="thawte, Inc.", C=US

Serial number:
26F81526E9C53E7493E6B73CC237AFA5

File PE Metadata
Compilation timestamp:
12/6/2009 5:52:12 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
12288:xoYsIdN9SrwF4gni652G7m5JwDk7LAELKLUXRPOtPE+n0EHZtvJrjfi/fc8vy4hQ:xoYssN9mWtx7mXwA7LASKY8J0Ef9jb8Y

Entry address:
0x30FA

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, 60, 91, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, B0, 70, 40, 00, 53, FF, 15, 7C, 72, 40, 00, 6A, 08, A3, 18, 1C, 45, 00, E8, F1, 2B, 00, 00, A3, 64, 1B, 45, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, 98, 37, 43, 00, FF, 15, 58, 71, 40, 00, 68, 54, 91, 40, 00, 68, 60, DB, 44, 00, E8, A4, 28, 00, 00, FF, 15, AC, 70, 40, 00, BF, 00, A0, 47, 00, 50, 57, E8, 92, 28, 00, 00...
 
[+]

Packer / compiler:
Nullsoft install system v2.x

Code size:
23.5 KB (24,064 bytes)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.