home

download cd mega hits roberto carlos mp3.exe

GO SAFER LLC

The application download cd mega hits roberto carlos mp3.exe, “Download da Internet” by GO SAFER has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer.
Publisher:
yTVnQOo5hT6GbOusu  (signed by GO SAFER LLC)

Description:
Download da Internet

Version:
8.3.4.6

MD5:
9418ee6192ee25808b3f8b31fcfe2f43

SHA-1:
822e8e7a5feb0629c145efec79706ee9b6c7aec1

SHA-256:
bd1ba879207b83d23ef0b67505b3517d9990be94c8f352a4da638617f7f0017a

Scanner detections:
1 / 68

Status:
Adware

Note:
Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Analysis date:
5/20/2024 9:58:46 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.BR Software (M)
16.9.20.4

File size:
74.3 KB (76,080 bytes)

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\programs\download cd mega hits roberto carlos mp3.exe

Digital Signature
Signed by:
GO SAFER LLC

Authority:
GoDaddy.com, Inc.

Valid from:
5/5/2015 12:57:40 PM

Valid to:
12/1/2015 4:26:02 PM

Subject:
CN=GO SAFER LLC, O=GO SAFER LLC, L=Lewes, S=Delaware, C=US

Issuer:
CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, S=Arizona, C=US

Serial number:
009CE2E382903AD5EB

File PE Metadata
Compilation timestamp:
12/5/2009 8:50:35 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
1536:VoLDYsacy7mHMowHjXJF5BviSlqSyPhPmpJwPKbiGc5:VoPyys5jXJF5BaJzPqeyWB

Entry address:
0x323F

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, 30, 91, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, B4, 70, 40, 00, 53, FF, 15, 7C, 72, 40, 00, 6A, 08, A3, 98, 27, 7A, 00, E8, 09, 2C, 00, 00, A3, E4, 26, 7A, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, 98, DC, 79, 00, FF, 15, 58, 71, 40, 00, 68, B8, 91, 40, 00, 68, E0, 1E, 7A, 00, E8, BC, 28, 00, 00, FF, 15, B0, 70, 40, 00, BF, 00, 80, 7A, 00, 50, 57, E8, AA, 28, 00, 00...
 
[+]

Packer / compiler:
Nullsoft install system v2.x

Code size:
23 KB (23,552 bytes)

Remove download cd mega hits roberto carlos mp3.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.