home

kritskaya sergeeva shmagina muzyka 3 klass.exe

Bunndle Stand-Alone Offer Manager, OM 2.4.0.0, 2013-09-18 11:24

Krund

The application kritskaya sergeeva shmagina muzyka 3 klass.exe, “Bunndle Stand-Alone Offer Manager” by Krund has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat.
Publisher:
Bunndle, Inc.  (signed by Krund)

Product:
Bunndle Stand-Alone Offer Manager, OM 2.4.0.0, 2013-09-18 11:24

Description:
Bunndle Stand-Alone Offer Manager

Version:
1.0.0.4

MD5:
76a5a5b64b2c6d7f6bc5ca5805c0562c

SHA-1:
86a83af19fadd9a52a14ad3dfd78a1bcc0cbebbd

SHA-256:
c040c997299de5d6fc20886408c9ae0c0fad4443e5dca1f9c5aae8709332cb4e

Scanner detections:
1 / 68

Status:
Adware

Note:
Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Analysis date:
4/19/2024 12:02:22 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.Krund (M)
16.2.9.3

File size:
505.4 KB (517,512 bytes)

Product version:
1.0.0.4

Copyright:
Copyright 2013 Bunndle, Inc. All rights reserved.

Original file name:
BunndleOfferManager

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\kritskaya sergeeva shmagina muzyka 3 klass.exe

Digital Signature
Signed by:
Krund

Authority:
COMODO CA Limited

Valid from:
12/11/2013 3:00:00 AM

Valid to:
12/12/2014 2:59:59 AM

Subject:
CN=Krund, O=Krund, STREET=66a ul.Nakhimova, L=Bor, S=Nijegorodskaya obl, PostalCode=606440, C=RU

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
0776444138B82422DF336D2BF7FD2968

File PE Metadata
Compilation timestamp:
6/20/1992 1:22:17 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
6144:T1Pn7rnY6O95r8yRb+8alPF0c/FjQR98kGTzOPWSViX/JZ5YWf5dbAXETQ/lw+VC:pPnJArz+8alvjQXGJ1Z5YWfcE0Z4Zy4

Entry address:
0x1280

Entry point:
83, 3D, 78, D0, 46, 00, F7, 75, 51, 89, 3D, AC, D0, 46, 00, B8, 43, 01, 00, 00, 89, 15, 6D, D0, 46, 00, 66, 3B, 1D, 93, D0, 46, 00, 7E, 1E, 87, 1D, 60, D0, 46, 00, 21, 3D, 4B, D0, 46, 00, 66, C7, 05, 53, D0, 46, 00, B2, AE, 66, C7, 05, F9, D0, 46, 00, 54, 13, 01, 0D, D0, D0, 46, 00, C6, 05, C2, D0, 46, 00, B6, 87, 05, 2C, D0, 46, 00, 89, 15, 3C, D0, 46, 00, BE, 78, 10, 40, 00, 89, 35, 10, 00, 47, 00, E9, 32, FF, FF, FF, 39, 15, 8B, D0, 46, 00, 7E, 11, 89, 1D, E4, D0, 46, 00, 8D, 3D, 46, D0, 46, 00, 01, 77...
 
[+]

Code size:
429 KB (439,296 bytes)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.