» adware-setup.exe
Overview
Analysis
File Details
Downloads (2)

adware-setup.exe

Video Downloader

Bundlore LTD

This is the Bundlore download manager which bundles applications with offers for additional 3rd party software, mostly unwanted adware, and may be installed with minimal consent. The application adware-setup.exe, “Video Downloader Setup ” by Bundlore has been detected as adware by 7 anti-malware scanners. The program is a setup application that uses the Bundlore Downloader installer. The file has been seen being downloaded from dka.freesongvideodownload.com and multiple other hosts.

File name:

adware-setup.exe

Publisher:

Bundlore LTD (signed and verified)

Product:

Video Downloader

Description:

Video Downloader Setup

MD5:

7fb005d055a5b161165254e43a0b1801

SHA-1:

239eb0c5c33541261f142f9f65e393bfba6823f4

SHA-256:

95d7a1fa89c4f4ff9e8feebea26de14c978b3a09d5d1c82a5787678d2f945ff1

Scanner detections:

7 / 68

Status:

Adware

Explanation:

Bundles the Conduit Toolbar and/or Conduit Search Protect.

Description:

This 'download manager' is also considered bundleware, a utility designed to download software (possibly legitimate or opensource) and bundle it with a number of optional offers including ad-supported utilities, toolbars, shopping comparison tools and browser extensions.

Analysis date:

12/26/2024 12:43:20 AM UTC (today)

Scan engine

Detection

Engine version

Bkav FE

W32.Clod4ab.Trojan

1.3.0.4613

Dr.Web

Adware.Downware.925

9.0.1.047

ESET NOD32

Win32/Toolbar.Conduit

8.9262

Malwarebytes

PUP.Optional.Bundlelore.A

v2014.02.16.09

Reason Heuristics

PUP.Installer.Bundlore.M

14.8.7.20

Trend Micro House Call

TROJ_GEN.F47V0902

7.2.47

VIPRE Antivirus

Bundlore

25204

File size:

1.3 MB (1,363,984 bytes)

Product version:

2.0

File type:

Executable application (Win32 EXE)

Bundler/Installer:

Bundlore Downloader

Common path:

C:\Program Files\virus\adware-setup.exe

Digital Signature

Signed by:

Bundlore LTD

Authority:

COMODO CA Limited

Valid from:

7/5/2012 2:00:00 AM

Valid to:

7/6/2014 1:59:59 AM

Subject:

CN=Bundlore LTD, O=Bundlore LTD, STREET=Beit Oved 9, L=Tel Aviv, S=Israel, PostalCode=67211, C=IL

Issuer:

CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

0C7A8094C56AAFE39F3CA37C7F65AC84

File PE Metadata

Compilation timestamp:

2/4/2013 7:24:57 PM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

24576:kxGoLA872oCg6B1sEhaAWi6jkAuZAkiLZFA668nTDcQiBiUmc+fB:JLIJCDBFjRZAkgFA6pnTeYUV+p

Entry address:

0x113BC

Entry point:

55, 8B, EC, 83, C4, A4, 53, 56, 57, 33, C0, 89, 45, C4, 89, 45, C0, 89, 45, A4, 89, 45, D0, 89, 45, C8, 89, 45, CC, 89, 45, D4, 89, 45, D8, 89, 45, EC, B8, 2C, 00, 41, 00, E8, E8, 51, FF, FF, 33, C0, 55, 68, 9E, 1A, 41, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 5A, 1A, 41, 00, 64, FF, 32, 64, 89, 22, A1, 48, 5B, 41, 00, E8, 16, D8, FF, FF, E8, 65, D3, FF, FF, 80, 3D, DC, 2A, 41, 00, 00, 74, 0C, E8, 2B, D9, FF, FF, 33, C0, E8, 80, 32, FF, FF, 8D, 55, EC, 33, C0, E8, E2, A3, FF, FF, 8B, 55, EC, B8, 50, 86... 
[+]

Code size:

63.5 KB (65,024 bytes)

The file adware-setup.exe has been seen being distributed by the following 2 URLs.

http://dka.freesongvideodownload.com/download/b122/.../video_downloader.exe

http://dke.videoconverterdownloadfree.com/download/b120/.../setup.exe

Remove adware-setup.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.