home

não confirmado 620630.crdownload

Grupo Hunter

The file não confirmado 620630.crdownload has been detected as malware by 8 anti-virus scanners. According to AVG, this software downloads additional adware offers during setup.
Publisher:
Grupo Hunter  (signed and verified)

MD5:
c4df5791ffad5fff85b72d87f1831fd3

SHA-1:
f684b8fd7830371b13d249260ef24a02bbf85d2e

SHA-256:
c6889bd1c32b9c6039fcfe2e3eda521f94e26d8152adcc007917027b59a8189d

Scanner detections:
8 / 68

Status:
Malware

Analysis date:
4/25/2024 6:09:28 AM UTC  (today)

Scan engine
Detection
Engine version

Avira AntiVirus
TR/Agent.1374720.4
7.11.84.114

avast!
Win32:Malware-gen
2014.9-160204

AVG
Downloader.Generic13
2017.0.2843

ESET NOD32
Win32/Downloader.Agent (variant)
10.8442

G Data
Win32:Malware-gen
16.2.22

IKARUS anti.virus
Win32.Malware
t3scan.2.0.3.0

McAfee
Artemis!C4DF5791FFAD
5600.6499

Panda Antivirus
Suspicious file
16.02.04.07

File size:
1.3 MB (1,380,944 bytes)

Common path:
C:\users\{user}\downloads\não confirmado 620630.crdownload

Digital Signature
Signed by:
Grupo Hunter

Authority:
COMODO CA Limited

Valid from:
11/26/2012 10:00:00 PM

Valid to:
11/27/2013 9:59:59 PM

Subject:
CN=Grupo Hunter, O=Grupo Hunter, STREET="R JOAO ROSA, 364, CENTRO", L=BIGUAÇU, S=SC, PostalCode=88160000, C=BR

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
10FB0BD016440D342DDC0ED91D16A744

File PE Metadata
Compilation timestamp:
5/27/2013 12:40:23 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:Ht13CIJgx7jPKBtRWN36BsSa8US1MLVgibgLdIKxQXqs:HDMEtuSlH1MLV3bgLddxds

Entry address:
0xF5268

Entry point:
55, 8B, EC, 83, C4, F0, B8, 00, D2, 4E, 00, E8, C8, 4F, F1, FF, A1, 88, B3, 4F, 00, 8B, 00, E8, 9C, 7B, FB, FF, A1, 88, B3, 4F, 00, 8B, 00, 33, D2, E8, CA, 98, FB, FF, 8B, 0D, 48, B6, 4F, 00, A1, 88, B3, 4F, 00, 8B, 00, 8B, 15, F8, C8, 4E, 00, E8, 8E, 7B, FB, FF, A1, 88, B3, 4F, 00, 8B, 00, E8, D2, 7C, FB, FF, E8, DD, 0C, F1, FF, 90, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
977 KB (1,000,448 bytes)

Remove não confirmado 620630.crdownload - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.