home

universalvirussnifferuv.exe

Setup

Dey yazilim ve internet hizmetleri san. tic. ltd. sti.

The application universalvirussnifferuv.exe by Dey yazilim ve internet hizmetleri san. tic. ltd. sti has been detected as adware by 7 anti-malware scanners. This is a setup and installation application and has been known to bundle potentially unwanted software. It is also typically executed from the user's temporary directory.
Publisher:
Microsoft  (signed by Dey yazilim ve internet hizmetleri san. tic. ltd. sti.)

Product:
Setup

Version:
1.0.0.0

MD5:
ded659a0de22cba597b09f708d175b66

SHA-1:
f7b31a6460c42f198e34afb85c081fd51f619ba9

SHA-256:
aca2eb06339ccd2f71985ea1b31b9d94bb48a1e2fdf12ccb3775642397f29b9c

Scanner detections:
7 / 68

Status:
Adware

Analysis date:
4/25/2024 1:41:13 PM UTC  (today)

Scan engine
Detection
Engine version

AVG
Generic
2016.0.3230

Dr.Web
Trojan.KillFiles.18730
9.0.1.013

ESET NOD32
MSIL/Adware.Joedown (variant)
9.11005

IKARUS anti.virus
not-a-virus:AdWare.MSIL.Agent
t3scan.1.8.6.0

McAfee
Artemis!DED659A0DE22
5600.6886

Panda Antivirus
Generic Suspicious
15.01.13.06

Reason Heuristics
PUP.Installer.Amonitize
15.2.14.11

File size:
554 KB (567,288 bytes)

Product version:
1.0.0.0

Copyright:
Copyright © Microsoft 2014

Trademarks:
Microsoft

Original file name:
SetupAdscube.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\appdata\local\temp\universalvirussnifferuv.exe

Digital Signature
Signed by:
Dey yazilim ve internet hizmetleri san. tic. ltd. sti.

Authority:
COMODO CA Limited

Valid from:
3/12/2014 4:00:00 AM

Valid to:
3/13/2015 3:59:59 AM

Subject:
CN=Dey yazilim ve internet hizmetleri san. tic. ltd. sti., O=Dey yazilim ve internet hizmetleri san. tic. ltd. sti., STREET=kuloglu mah alyon gecidi sok, STREET=beyoglu, L=istanbul, S=istanbul, PostalCode=34433, C=TR

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00FD3AA42CD883A6D47CC56CDA9837EB85

File PE Metadata
Compilation timestamp:
1/12/2015 8:06:48 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
6144:0MGsgL7GZOsLa30hTbeS/J1s0ldUmx/bLbYnwch3SdNMGsgL7GG:0/nGZY09KS/J1sGdUmx/bwnwccv/nGG

Entry address:
0x62F4E

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
388 KB (397,312 bytes)

Remove universalvirussnifferuv.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.