Highway Don't Care.mp3.exe

Nouns Or

Of Explain

The application Highway Don't Care.mp3.exe has been detected as a potentially unwanted program by 27 anti-malware scanners. This is a setup program which is used to install the application. It is built using the Crossrider cross-browser extension toolkit. While the file utilizes the Crossrider framework and delivery services, it is not owned by Crossrider. The file has been seen being downloaded from stylestylelife.com and multiple other hosts.
Publisher:
Of Explain

Product:
Nouns Or

Description:
Cultivated The

Version:
4.8.7.5

MD5:
f30822cdf272b9198cb6efba65708b54

SHA-1:
8e559646e1df4c8f0482d1dd6237d5cbf962ce46

SHA-256:
83d6cb1d404f2c2ad1f69dc6a1bd420dc99641a8c569dbaf1066fd4265b9c9bc

Scanner detections:
27 / 68

Status:
Potentially unwanted

Explanation:
The software may change the browser's home page and search provider settings as well as display advertisements.

Analysis date:
4/19/2024 2:16:01 AM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Gen:Variant.Application.Bundler.16
6330919

AhnLab V3 Security
PUP/Win32.MultiPlug
2015.01.10

Avira AntiVirus
ADWARE/MultiPlug.Gen7
7.11.200.120

avast!
Win32:MultiPlug-DA [PUP]
150102-1

AVG
Adware Generic5.BIMM
2014.0.4253

Bitdefender
Gen:Variant.Application.Bundler.16
1.0.20.45

Bkav FE
HW32.Packed
1.3.0.6267

Comodo Security
Application.Win32.MultiPlug.PNU
20659

Dr.Web
Trojan.Crossrider.31895
9.0.1.05190

Emsisoft Anti-Malware
Gen:Variant.Application.Bundler.16
9.0.0.4799

ESET NOD32
Win32/AdWare.MultiPlug.BS application
7.0.302.0

F-Prot
W32/A-90424497
v6.4.7.1.166

F-Secure
Riskware.Gen:Variant.Application.Bundler
5.13.68

G Data
Gen:Variant.Application.Bundler.16
15.1.24

IKARUS anti.virus
Win32.SuspectCrc
t3scan.1.8.6.0

K7 AntiVirus
Unwanted-Program
13.190.14599

Kaspersky
not-a-virus:AdWare.Win32.MultiPlug
15.0.0.543

Malwarebytes
PUP.Optional.MultiPlug
v2015.01.09.09

McAfee
Program.MultiPlug-FOQ
16.8.708.2

MicroWorld eScan
Gen:Variant.Application.Bundler.16
16.0.0.27

NANO AntiVirus
Riskware.Win32.MultiPlug.dekkbu
0.30.0.64448

Norman
Gen:Variant.Application.Bundler.16
03.12.2014 13:20:04

nProtect
Trojan-Clicker/W32.MultiPlug.747520
15.01.09.01

Panda Antivirus
Generic Suspicious
15.01.09.09

Rising Antivirus
PE:AdWare.Win32.MultiPlug.b!1075356081
23.00.65.15107

Sophos
PUA 'MultiPlug' (of type Adware)
5.09

Vba32 AntiVirus
Downware.MultiPlug.gen
3.12.26.3

File size:
730 KB (747,520 bytes)

Product version:
0.7.9.5

Copyright:
All rights reserved for Of Explain LTD.

Original file name:
Highway Don't Care.mp3.exe

File type:
Executable application (Win32 EXE)

Language:
English (United Kingdom)

Common path:
C:\users\{user}\downloads\highway don't care.mp3.exe

File PE Metadata
Compilation timestamp:
3/19/2012 6:44:47 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
12288:P25iATXr1oKyTG1nsUh+jltkFNk+AdPbOoT8EAGGNYLgF1jYv6S3DWc6gYYCwjBe:VUrmqh+UzcbOocGfgnA6ODWc6gYYCwjk

Entry address:
0x10CF7

Entry point:
E8, 9E, 3E, 00, 00, E9, 00, 00, 00, 00, 6A, 14, 68, F0, EF, 41, 00, E8, E3, 12, 00, 00, E8, 6B, 40, 00, 00, 0F, B7, F0, 6A, 02, E8, 31, 3E, 00, 00, 59, B8, 4D, 5A, 00, 00, 66, 39, 05, 00, 00, 40, 00, 74, 04, 33, DB, EB, 33, A1, 3C, 00, 40, 00, 81, B8, 00, 00, 40, 00, 50, 45, 00, 00, 75, EB, B9, 0B, 01, 00, 00, 66, 39, 88, 18, 00, 40, 00, 75, DD, 33, DB, 83, B8, 74, 00, 40, 00, 0E, 76, 09, 39, 98, E8, 00, 40, 00, 0F, 95, C3, 89, 5D, E4, E8, F0, 04, 00, 00, 85, C0, 75, 08, 6A, 1C, E8, DC, 00, 00, 00, 59, E8...
 
[+]

Entropy:
7.8562  (probably packed)

Code size:
101 KB (103,424 bytes)

The file Highway Don't Care.mp3.exe has been seen being distributed by the following 2 URLs.

Remove Highway Don't Care.mp3.exe - Powered by Reason Core Security