» adxloader64.dll
Overview
Analysis
File Details
Programs (1)

adxloader64.dll

2298491 Ontario Inc.

The module adxloader64.dll by 2298491 Ontario has been detected as adware by 2 anti-malware scanners. This file is typically installed with the program FoodBuzz by Lake Ventures, LLC. which is a potentially unwanted software program.

File name:

adxloader64.dll

Publisher:

2298491 Ontario Inc. (signed and verified)

Version:

8, 1, 5065, 0

MD5:

116ce1ece9f72c6f5d243eb4692954c7

SHA-1:

88facb57b750018e21cf0496ea77515b4522c017

SHA-256:

beae15ef6211287ea70c6b243a1ac18eb1825982e1bee7b2ca990b26bba641e0

Scanner detections:

2 / 68

Status:

Adware

Analysis date:

11/23/2024 9:28:19 AM UTC (today)

Scan engine

Detection

Engine version

Reason Heuristics

PUP.2298491Ontario.L

14.7.27.14

VIPRE Antivirus

FoodBuzz

19612

File size:

706.3 KB (723,208 bytes)

Product version:

8, 1, 5065, 0

Original file name:

adxloader.dll

File type:

Dynamic link library (Win64 DLL)

Language:

English (United States)

Common path:

C:\Program Files\foodbuzz\extension\adxloader64.dll

Digital Signature

Signed by:

2298491 Ontario Inc.

Authority:

GoDaddy.com, Inc.

Valid from:

2/15/2013 8:00:24 PM

Valid to:

2/15/2014 8:00:24 PM

Subject:

CN=2298491 Ontario Inc., O=2298491 Ontario Inc., L=Guelph, S=ON, C=CA

Issuer:

SERIALNUMBER=07969287, CN=Go Daddy Secure Certification Authority, OU=http://certificates.godaddy.com/repository, O="GoDaddy.com, Inc.", L=Scottsdale, S=Arizona, C=US

Serial number:

0781DF92848AC5

File PE Metadata

Compilation timestamp:

8/27/2012 6:14:18 AM

OS version:

4.0

OS bitness:

Win64

Subsystem:

Windows GUI

Linker version:

8.0

CTPH (ssdeep):

12288:YvTtC95qBTCW4yXtOzsLQYHMVh8yZpMor2BJlPG+G:YTtC95SUydC4QYHMVh8yZpMU2BfRG

Entry address:

0x5BB40

Entry point:

48, 89, 5C, 24, 08, 48, 89, 74, 24, 10, 57, 48, 83, EC, 20, 83, FA, 01, 49, 8B, F8, 8B, DA, 48, 8B, F1, 75, 05, E8, BF, DC, 00, 00, 4C, 8B, C7, 8B, D3, 48, 8B, CE, 48, 8B, 5C, 24, 30, 48, 8B, 74, 24, 38, 48, 83, C4, 20, 5F, E9, 83, FE, FF, FF, CC, CC, CC, 48, 89, 5C, 24, 08, 48, 89, 74, 24, 10, 57, 48, 83, EC, 20, 48, 8D, 59, 1C, 48, 8B, F1, BF, 01, 01, 00, 00, 48, 8B, CB, 4C, 8B, C7, 33, D2, E8, 78, C3, FF, FF, 45, 33, DB, 4C, 8D, 05, 9E, 94, 04, 00, 44, 89, 5E, 04, 44, 89, 5E, 08, 44, 89, 5E, 0C, 4C, 89... 
[+]

Entropy:

6.1277

Code size:

473.5 KB (484,864 bytes)

The file adxloader64.dll has been discovered within the following program.

FoodBuzz by Lake Ventures, LLC.

FoodBuzz (foodbuzz.net/2298491 Ontario Inc.) is a web browser extension and toolbar that delivers contextual based advertising as well as modify the user's web browser home and search pages to provide advertising and search.

foodbuzz.net

82% remove it

Remove adxloader64.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.