» bonzuna.exe
Overview
Analysis
File Details
Programs (2)

bonzuna.exe

Bonzuna

search core systems

The application bonzuna.exe, “Bonzuna Download Manager” by search core systems has been detected as adware by 2 anti-malware scanners. Additionally, the file is typically installed by a number of programs including Whales and Dolphins by W3i, LLC and Bible Scenes by W3i, LLC, both potentially unwanted software.

File name:

bonzuna.exe

Publisher:

Core Systems (signed by search core systems)

Product:

Bonzuna

Description:

Bonzuna Download Manager

Version:

1.0.0.0

MD5:

ac397ff7011e2826839f6716ff5111fc

SHA-1:

0fe4e4f564cb4693d09eb026e8e89c6aa2a14cc9

SHA-256:

0256251f51b91ecbac09b549ea53cd3ec2f51c0a9c8620ca661d7366fc9fb467

Scanner detections:

2 / 68

Status:

Adware

Analysis date:

4/25/2024 6:05:13 PM UTC (today)

Scan engine

Detection

Engine version

IKARUS anti.virus

Win32.SuspectCrc

t3scan.1.1.118.0

Reason Heuristics

PUP.searchcoresystems.H

14.8.8.3

File size:

1.1 MB (1,138,736 bytes)

Product version:

1.0.0.0

File type:

Executable application (Win32 EXE)

Language:

English (Canada)

Common path:

C:\Program Files\bonzuna\bonzuna.exe

Digital Signature

Signed by:

search core systems

Authority:

GlobalSign nv-sa

Valid from:

1/13/2012 7:23:55 PM

Valid to:

1/13/2013 7:23:55 PM

Subject:

CN=search core systems, O=search core systems, C=CA

Issuer:

CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:

112161BFE8B30B66C06A60ADF51015575814

File PE Metadata

Compilation timestamp:

2/12/2012 5:29:24 PM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

24576:nu9XNp/hvWUfCvFjsM9RKkOJBfcMMWTRMAzcDKkPA6EAXO:UvsUE2QSRVTiAThfAXO

Entry address:

0xBDAA4

Entry point:

55, 8B, EC, 83, C4, F0, 53, B8, 68, C3, 4B, 00, E8, 67, A3, F4, FF, 8B, 1D, 3C, 45, 4C, 00, 8B, 03, E8, 02, 79, FD, FF, 8B, 03, B2, 01, E8, 51, 94, FD, FF, 8B, 03, BA, 3C, DB, 4B, 00, E8, 7D, 73, FD, FF, 8B, 0D, BC, 42, 4C, 00, 8B, 03, 8B, 15, B0, 9A, 4B, 00, E8, F2, 78, FD, FF, 8B, 0D, 00, 47, 4C, 00, 8B, 03, 8B, 15, 84, 82, 4B, 00, E8, DF, 78, FD, FF, 8B, 0D, B0, 44, 4C, 00, 8B, 03, 8B, 15, 88, 8E, 4B, 00, E8, CC, 78, FD, FF, 8B, 0D, 48, 45, 4C, 00, 8B, 03, 8B, 15, A0, 96, 4B, 00, E8, B9, 78, FD, FF, 8B... 
[+]

Entropy:

6.9149

Developed / compiled with:

Microsoft Visual C++

Code size:

753 KB (771,072 bytes)

The file bonzuna.exe has been discovered within the following programs.

Bible Scenes by W3i, LLC

Uses the InstallX download manager to include additional bundled offers including potentially unwanted toolbars.

www.freeze.com

75% remove it

Whales and Dolphins by W3i, LLC

74% remove it

Remove bonzuna.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.