home

dream-giannisgx89.exe

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer.
MD5:
d80dbb8ce6b39570ba2d172bb4ba909b

SHA-1:
49a3cdec8c8ae23c12b729f250dc9e833fc88399

SHA-256:
7ca8e37dd4007550e00d426fa1d855eb32c6932f929e21c23a64760bdb36efd4

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 12:27:36 PM UTC  (today)

File size:
8.2 MB (8,590,792 bytes)

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Common path:
C:\users\{user}\downloads\dream-giannisgx89.exe

File PE Metadata
Compilation timestamp:
12/5/2009 11:50:52 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
196608:xkzvh4355Anh2qnFNg3Dq03uVCGvRFsj26CD2TzZBxpO9jTzf:xkzp1pTk3uIGpI26COPqNzf

Entry address:
0x30FA

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, 60, 91, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, B0, 70, 40, 00, 53, FF, 15, 7C, 72, 40, 00, 6A, 08, A3, 18, EC, 42, 00, E8, F1, 2B, 00, 00, A3, 64, EB, 42, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, 98, 8F, 42, 00, FF, 15, 58, 71, 40, 00, 68, 54, 91, 40, 00, 68, 60, E3, 42, 00, E8, A4, 28, 00, 00, FF, 15, AC, 70, 40, 00, BF, 00, 40, 43, 00, 50, 57, E8, 92, 28, 00, 00...
 
[+]

Packer / compiler:
Nullsoft install system v2.x

Code size:
23.5 KB (24,064 bytes)

The file dream-giannisgx89.exe has been discovered within the following program.

CustoPackTools  by neOceane
CustoPackTools has been seen bundling the Ask.com toolbar during installation as an option. "In partnership with Ask.com, CustoPack Tools can suggest you to install a free toolbar.
www.custopack.com
About 7% of users remove it
 
Powered by Should I Remove It?

The file dream-giannisgx89.exe has been seen being distributed by the following 2 URLs.

ftp://dl1.custopack.com/.../dream-giannisgx89.exe

ftp://dl2.custopack.com/.../dream-giannisgx89.exe

Scan dream-giannisgx89.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.