home

download revista vip bruna marquezine novembro 2014.exe

MIDIA TECHNOLOGIES LLC

The application download revista vip bruna marquezine novembro 2014.exe by MIDIA TECHNOLOGIES has been detected as adware by 14 anti-malware scanners. The program is a setup application that uses the Midia Downloader installer.
Publisher:
MIDIA TECHNOLOGIES LLC  (signed and verified)

MD5:
2b307b3a78eebad871673cc5d4c07a7a

SHA-1:
2df64d20b812f296e580d00a6e18d08b21f4dd61

SHA-256:
af67df26120b4b71e3508fd413ca02940731ff17df21b4c7a5fd4aade632c79e

Scanner detections:
14 / 68

Status:
Adware

Description:
This 'download manager' is also considered bundleware, a utility designed to download software (possibly legitimate or opensource) and bundle it with a number of optional offers including ad-supported utilities, toolbars, shopping comparison tools and browser extensions.

Analysis date:
4/19/2024 7:49:02 PM UTC  (today)

Scan engine
Detection
Engine version

Avira AntiVirus
TR/Downloader.Gen2
7.11.189.70

avast!
Trojan-gen
141119-1

AVG
Generic
2015.0.3277

Baidu Antivirus
Adware.Win32.Midia
4.0.3.141128

Comodo Security
Application.Win32.Midia.F
20215

ESET NOD32
NSIS/TrojanDownloader.Agent.NRM trojan
7.0.302.0

Fortinet FortiGate
W32/Agent.NRM!tr.dldr
11/28/2014

G Data
Win32.Adware.Midia
14.11.24

K7 AntiVirus
Unwanted-Program
13.186.14161

Malwarebytes
Trojan.BHO
v2014.11.28.03

NANO AntiVirus
Trojan.Nsis.Agent.djgzai
0.28.6.63726

Qihoo 360 Security
Malware.QVM06.Gen
1.0.0.1015

Reason Heuristics
PUP.MIDIATECHNOLOGIES.t
14.11.28.3

VIPRE Antivirus
Threat.4150696
35088

File size:
52.3 KB (53,552 bytes)

File type:
Executable application (Win32 EXE)

Bundler/Installer:
Midia Downloader (using Nullsoft Install System)

Common path:
C:\users\{user}\downloads\download revista vip bruna marquezine novembro 2014.exe

Digital Signature
Signed by:
MIDIA TECHNOLOGIES LLC

Authority:
Starfield Technologies, Inc.

Valid from:
11/9/2014 3:20:01 AM

Valid to:
4/11/2015 3:45:06 PM

Subject:
CN=MIDIA TECHNOLOGIES LLC, O=MIDIA TECHNOLOGIES LLC, L=Lewes, S=Delaware, C=US

Issuer:
SERIALNUMBER=10688435, CN=Starfield Secure Certification Authority, OU=http://certificates.starfieldtech.com/repository, O="Starfield Technologies, Inc.", L=Scottsdale, S=Arizona, C=US

Serial number:
2B88A258013C49

File PE Metadata
Compilation timestamp:
12/5/2009 8:50:35 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
768:VMGnYmtcLDs/saQRy7rnzrKHgccoGv8uS08p44vGmjXO3XJ05puUja6poYYdXFf1:loLDYsacy7mHMowHjXJ05BjKd

Entry address:
0x323F

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, 30, 91, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, B4, 70, 40, 00, 53, FF, 15, 7C, 72, 40, 00, 6A, 08, A3, 98, 27, 7A, 00, E8, 09, 2C, 00, 00, A3, E4, 26, 7A, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, 98, DC, 79, 00, FF, 15, 58, 71, 40, 00, 68, B8, 91, 40, 00, 68, E0, 1E, 7A, 00, E8, BC, 28, 00, 00, FF, 15, B0, 70, 40, 00, BF, 00, 80, 7A, 00, 50, 57, E8, AA, 28, 00, 00...
 
[+]

Packer / compiler:
Nullsoft install system v2.x

Code size:
23 KB (23,552 bytes)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.