home

alldup.exe

AllDup

Michael Thummerer

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from files.giga-downloads.de and multiple other hosts.
Publisher:
Michael Thummerer Software Design   (signed by Michael Thummerer)

Product:
AllDup

Description:
AllDup Setup

Version:
3.4.0.24

MD5:
2bc3212144740b27b1b5bd3510706074

SHA-1:
65dee5f48e4dfac303cbf449c6e1c807a2ba0bfd

SHA-256:
18f7b97880f6b56c9dfa621d6b6c0ec04edbb1b7923c93bffd72952effdc91e2

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/27/2024 12:36:20 AM UTC  (today)

File size:
3.3 MB (3,503,200 bytes)

Product version:
3.4.24

Copyright:
Copyright © Michael Thummerer Software Design

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\alldup.exe

Digital Signature
Signed by:
Michael Thummerer

Authority:
The USERTRUST Network

Valid from:
10/22/2010 2:00:00 AM

Valid to:
10/23/2015 1:59:59 AM

Subject:
CN=Michael Thummerer, O=Michael Thummerer, STREET=Talstrasse 34-42 A3, L=Saarbruecken, S=Saarland, PostalCode=66119, C=DE

Issuer:
CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:
008B7F09084ED65A9C54BB2E18B705A664

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
98304:cDZm/hnYc6wRfKtQQ4hpKkPGCFP4AtfAS:C8hBfnTPGCFAsfAS

Entry address:
0xA5F8

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, CE, 8A, FF, FF, E8, D5, 9C, FF, FF, E8, 64, 9F, FF, FF, E8, 07, A0, FF, FF, E8, A6, BF, FF, FF, E8, 11, E9, FF, FF, E8, 78, EA, FF, FF, 33, C0, 55, 68, C9, AC, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 92, AC, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 26, F5, FF, FF, E8, 11, F1, FF, FF, 80, 3D, 34, B2, 40, 00, 00, 74, 0C, E8, 23, F6, FF, FF, 33, C0, E8, C4, 97, FF, FF, 8D, 55, F0, 33, C0, E8, B6, C5, FF, FF, 8B, 55...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
39.5 KB (40,448 bytes)

The file alldup.exe has been discovered within the following programs.

MyHarmony  by Logitech Inc.
3% remove it
Toolwiz Time Freeze 2014  by ToolWiz
www.Toolwiz.com
About 1% of users remove it
Toolwiz Time Freeze 2015  by ToolWiz
About 5% of users remove it
 
Powered by Should I Remove It?

The file alldup.exe has been seen being distributed by the following 23 URLs.

https://files.giga-downloads.de/.../alldup.exe

http://gsf-cf.softonic.com/65d/ee5/.../file?SD_used=0&channel=WEB&fdh=no&id_file=38707&instance=softonic_en&type=PROGRAM&Expires=1476289309&Signature=hQfgAkWUVOtFKKve3oTg873heEsESpwF291juy~pMcRFjJ9c0tv9bRaEsIcWCRQ0IrrOtLOMDg7pQnpWJufRviqBRGkd1qA0SLrIou3w0lEhjfTP0orswJ0s~hgRr7ctNvebsR7lr~z~9NeZS1bTZz3e4ChTQK7i7USSDHlkILk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=alldup_3-4-24.exe

http://gsf-cf.softonic.com/65d/ee5/.../file?SD_used=0&channel=WEB&fdh=no&id_file=38707&instance=softonic_br&type=PROGRAM&Expires=1478482925&Signature=O-GUz17te8BLH5jWzXy2XyF~5bzJqTYyhrOLKtTGbdvTyz45Qg8v1kGcsQuxZMPz37SSrUmTYKMUQzF3qIH9ThHtWzFJnV8KClWMRBBriLDxjCXswTYpPoQW8sUB-ujwpdel-2UWzlFlljj2Z2x-S-yfB9u0qsD3xeBZLIrB0y8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=alldup_3-4-24.exe

http://d.computerbild.de/downloads/.../alldup.exe

http://www.softportal.com/getsoft-39229-alldup-2.html

https://secure.giga-downloads.de/dl/.../

http://gsf-cf.softonic.com/65d/ee5/.../file?SD_used=0&channel=WEB&fdh=no&id_file=38707&instance=softonic_es&type=PROGRAM&Expires=1465612029&Signature=e5PlZJf1yqLO1CLzxTAcMlYg6nt3VuT-LLt7Y92VL-eI0Q-HIfBjM-E0sy~JHAd0ZpE-oJH3R94Tc2yKTRWYX9p9b9EyLAo6lCDHNizWdQmECNMCEZ-HgAK1aPS-vVRvB1UiiLnVb11UqVH2Gv5UtQavhWVKaHBdVA~zfJDWpcA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=alldup_3-4-24.exe

http://www.netzwelt.de/.../6136_2-alldup.html?sig=4d7b4138cfec9d0b25e7e96deaf55f08

https://secure.giga-downloads.de/dl/.../

http://gsf-cf.softonic.com/65d/ee5/.../file?SD_used=0&channel=WEB&fdh=no&id_file=38707&instance=softonic_en&type=PROGRAM&Expires=1454039015&Signature=KGofA9urmSTBA1g4He5YkQl2GXm5KnQ-7Wm6sfd-otMWSXd-9jr30mK6-ZoZZIckfFjnHGIfpXBKCRJR0yY7EnRBWk1gzE9yp1coQq6q0UzcCRLAYHk0wvz~1SnnjYNIaOcRO~WbeO28ItCwXUbphecXYVUfTlvCh21zbc0zMDw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=alldup_3-4-24.exe

https://secure.giga-downloads.de/dl/.../

http://gsf-cf.softonic.com/65d/ee5/.../file?SD_used=0&channel=WEB&fdh=no&id_file=38707&instance=softonic_en&type=PROGRAM&Expires=1456974712&Signature=CCV4aRiyzlkf8kRKXTq6ZbOfN8RTfimVsXAPM1ddzX6CWricZ2ZG6z5Y3YpBQLZThFnTewPgNgufvJgcEPOFWCasM~oX3hhb4HblAEZsMtftzn6wEQz1GyDpNU4Naxolx4goWS1f~BdA2pGdakyKmJHEmXZLmhsq3s-cpzonfe4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=alldup_3-4-24.exe

https://secure.giga-downloads.de/dl/.../

http://www.alldup.info/.../alldup.exe

http://www.alldup.de/.../alldup.exe

http://www.allsync.de/.../alldup.exe

http://filepony.de/.../alldup_3.4.24.exe

http://www.allsync.de/download//alldup.exe

http://r2.computerbild.de/exec/r2r.pl?m=w-cobi;u=http://d.computerbild.de/downloads/.../alldup.exe

http://www.allsync.biz/.../alldup.exe

http://dl.cdn.chip.de/downloads/.../alldup_3.4.24.exe

http://r2.computerbild.de/exec/r2r.pl?m=w-cobi;u=http://d.computerbild.de/downloads/755732/alldup.exe?__cbodl__=1388936262_411b181e5c1f87605015e787171c80ea&_chksum_=2bc3212144740b27b1b5bd3510706074;ct=1;thc=1;b=755732;c=929416;tit=AllDup 3.4.24;url=http://www.computerbild.de/.../AllDup-929416.html;sep=|;tce=|;tid=36474;tn=Doppelte Dateien finden & l?schen;tp=95|362;tc=95|362|36474;tpn=Software Kategorie|Tuning & System;cs=1

http://r2.computerbild.de/exec/r2r.pl?m=w-cobi;u=http://d.computerbild.de/downloads/755732/alldup.exe?__cbodl__=1388936262_411b181e5c1f87605015e787171c80ea&_chksum_=2bc3212144740b27b1b5bd3510706074;ct=1;thc=1;b=755732;c=929416;tit=AllDup 3.4.24;url=http://www.computerbild.de/.../AllDup-929416.html;sep=|;tce=|;tid=36474;tn=Doppelte Dateien finden & l?schen;tp=95|362;tc=95|362|36474;tpn=Software Kategorie|Tuning & System;cs=1

Scan alldup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.