» desafio-no-bronx-dublado.zip.exe
Overview
Analysis
File Details
Downloads (1)

desafio-no-bronx-dublado.zip.exe

BR SOFTWARE LLC

The application desafio-no-bronx-dublado.zip.exe by BR SOFTWARE has been detected as adware by 29 anti-malware scanners. This is a setup program which is used to install the application. During install, it bundles potentially unwanted software on a user's computer at the same time without adequate consent. The file has been seen being downloaded from www.onlinemidia.com.

File name:

Publisher:

Arquivo Solicitado (signed by BR SOFTWARE LLC)

Product:

Arquivo Solicitado

Version:

1.0.0.0

MD5:

878bf1c07b9b500526fd5e625a71cacd

SHA-1:

59dfe743feb7cf369cdece107748972f24567d14

SHA-256:

edfe3d08fd02a42c625977fb88f948e2a8fc03172f9733da250ec2aabc0293fd

Scanner detections:

29 / 68

Status:

Adware

Explanation:

May bundle additional potentially unwanted software such as adware during setup.

Analysis date:

4/25/2024 5:13:20 AM UTC (today)

Scan engine

Detection

Engine version

Lavasoft Ad-Aware

Gen:Variant.Adware.DealPly.1

797

Agnitum Outpost

Trojan.PWS.Agent

7.1.1

Avira AntiVirus

ADWARE/Adware.Gen8

7.11.189.146

avast!

Win32:Adware-BJA [PUP]

141119-1

AVG

Adware Generic5.AUFU

2014.0.4189

Baidu Antivirus

Adware.Win32.Midia

4.0.3.141129

Bitdefender

Gen:Variant.Adware.DealPly.1

1.0.20.1665

Bkav FE

W32.FamVT.Lohmys.Trojan

1.3.0.6267

Comodo Security

Application.Win32.Midia.BR

20235

Dr.Web

Trojan.Fraudster.1052

9.0.1.05190

Emsisoft Anti-Malware

Gen:Variant.Adware.DealPly

9.0.0.4570

ESET NOD32

Win32/AdWare.Midia.C application

7.0.302.0

Fortinet FortiGate

W32/Fraudster.AB!tr

11/29/2014

F-Prot

W32/A-217fac50

v6.4.7.1.166

F-Secure

Gen:Variant.Adware.DealPly.1

11.2014-29-11_7

G Data

Gen:Variant.Adware.DealPly

14.11.24

IKARUS anti.virus

PUA.Midia

t3scan.1.8.3.0

K7 AntiVirus

Unwanted-Program

13.186.14174

Kaspersky

Trojan-Banker.Win32.Lohmys

15.0.0.543

Malwarebytes

PUP.Optional.BundleInstaller.A

v2014.11.29.09

McAfee

PUP-FJK

5600.6931

MicroWorld eScan

Gen:Variant.Adware.DealPly.1

15.0.0.999

Quick Heal

TrojanBanker.Lohmys.B8

11.14.14.00

Reason Heuristics

PUP.BRSOFTWARE.BB

14.11.29.21

Sophos

PCMega

4.98

SUPERAntiSpyware

PUP.DealPly/Variant

10207

Vba32 AntiVirus

TrojanBanker.Agent

3.12.26.3

VIPRE Antivirus

Threat.4150696

35224

Zillya! Antivirus

Trojan.Lohmys.Win32.10

2.0.0.1995

File size:

548.5 KB (561,680 bytes)

Product version:

1.0.0.0

File type:

Executable application (Win32 EXE)

Language:

Brazilian Portuguese

Common path:

C:\users\{user}\downloads\desafio-no-bronx-dublado.zip.exe

Digital Signature

Signed by:

BR SOFTWARE LLC

Authority:

Unizeto Technologies S.A.

Valid from:

8/5/2013 2:53:16 AM

Valid to:

8/5/2014 2:53:16 AM

Subject:

E=brsoftwarellc@gmail.com, CN="Open Source Developer, BRSOFTWARE", O=BR SOFTWARE LLC, C=US

Issuer:

CN=Certum Level III CA, OU=Certum Certification Authority, O=Unizeto Technologies S.A., C=PL

Serial number:

31A16839BF246437971CE0D3DB836B1C

File PE Metadata

Compilation timestamp:

6/19/1992 7:22:17 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

12288:g/MDnauca2BGPbpHG6QPbk98JmtnTJnCzOeSWm7Wf189nPqtdArsK9KrUb:w+Dh2BKb5bebkGJmVTJjlWf189PeIb

Entry address:

0x15E070

Entry point:

60, BE, 00, D0, 4D, 00, 8D, BE, 00, 40, F2, FF, 57, 83, CD, FF, EB, 10, 90, 90, 90, 90, 90, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, 0B, 75, 28, 8B, 1E, 83, EE, FC, 11, DB, 72, 1F, 48, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, EB, D4, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, EB, 52, 31, C9, 83, E8, 03, 72, 11, C1, E0, 08, 8A, 06, 46, 83, F0, FF, 74, 75, D1, F8, 89... 
[+]

Packer / compiler:

UPX 2.90LZMA

Code size:

520 KB (532,480 bytes)

The file desafio-no-bronx-dublado.zip.exe has been seen being distributed by the following URL.

http://www.onlinemidia.com/ids/id53/.../desafio-no-bronx-dublado.zip

Remove desafio-no-bronx-dublado.zip.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.