asio directx full duplex driver.exe

Direct Download GTt

This is the OutBrowse Revenyou installer which bundles offers for additional third party applications that may be unwanted and installed without consent. The application asio directx full duplex driver.exe by Direct Download GTt has been detected as adware by 13 anti-malware scanners. The program is a setup application that uses the OutBrowse Revenyou installer. The setup routine uses the RevenYou.Com Pay Per Install platform (OutBrowse) which bundles additional software offers inclduing toolbars, extensions, PC utilities as well as other PUPs.
Publisher:
Direct Download GTt  (signed and verified)

MD5:
614e3ffc1cd30fc1dba6d9f47e887cd2

SHA-1:
9799940d505cef6cf2509027a456099584432270

SHA-256:
193b2a21eabbe5ff211db61075edf91000a016513dbba12f24a611f58ef220e1

Scanner detections:
13 / 68

Status:
Adware

Explanation:
Bundles additional adware offers during download and installation using the OutBrowse installer.

Description:
This is also known as bundleware, or downloadware, which is an downloader designed to simply deliver ad-supported offers in the setup routine of an otherwise legitimate software.

Analysis date:
1/13/2025 10:53:16 AM UTC  (today)

Scan engine
Detection
Engine version

AhnLab V3 Security
PUP/Win32.OutBrowse
2015.04.14

Avira AntiVirus
PUA/Outbrowse.Gen
3.6.1.96

avast!
OutBrowse-CT [PUP]
150319-1

AVG
Generic
2016.0.3140

Dr.Web
Trojan.OutBrowse.183
9.0.1.05190

ESET NOD32
NSIS/TrojanDownloader.Adload.AL
9.11468

Fortinet FortiGate
W32/ADLOAD.AL!tr
4/14/2015

K7 AntiVirus
Unwanted-Program
13.202.15581

NANO AntiVirus
Trojan.Nsis.Downloader.doqmxk
0.30.16.1110

Quick Heal
Adware.NSIS.OutBrowse.A
4.15.14.00

Reason Heuristics
PUP.Bundler.Outbrowse
15.4.14.0

Vba32 AntiVirus
suspected of Trojan.Downloader.gen.h
3.12.26.3

File size:
92.2 KB (94,408 bytes)

File type:
Executable application (Win32 EXE)

Bundler/Installer:
OutBrowse Revenyou (using Nullsoft Install System)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\asio directx full duplex driver.exe

Digital Signature
Authority:
thawte, Inc.

Valid from:
2/16/2015 7:00:00 PM

Valid to:
1/27/2016 6:59:59 PM

Subject:
CN=Direct Download GTt, O=Direct Download GTt, L=Dublin, S=Dublin, C=IE

Issuer:
CN=thawte SHA256 Code Signing CA, O="thawte, Inc.", C=US

Serial number:
0AD81318E83A71271977E435C3D52212

File PE Metadata
Compilation timestamp:
12/5/2009 5:50:52 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
1536:rpgpHzb9dZVX9fHMvG0D3XJ887NeYRNgKJ+BCydNnEDkqIzjbanyUXZf2mGq6ZHt:VgXdZt9P6D3XJveqgKJ+BCcED5K2Om9Q

Entry address:
0x30FA

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, 60, 91, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, B0, 70, 40, 00, 53, FF, 15, 7C, 72, 40, 00, 6A, 08, A3, 18, EC, 42, 00, E8, F1, 2B, 00, 00, A3, 64, EB, 42, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, 98, 8F, 42, 00, FF, 15, 58, 71, 40, 00, 68, 54, 91, 40, 00, 68, 60, E3, 42, 00, E8, A4, 28, 00, 00, FF, 15, AC, 70, 40, 00, BF, 00, 40, 43, 00, 50, 57, E8, 92, 28, 00, 00...
 
[+]

Entropy:
7.1033

Packer / compiler:
Nullsoft install system v2.x

Code size:
23.5 KB (24,064 bytes)

The file asio directx full duplex driver.exe has been seen being distributed by the following URL.

Remove asio directx full duplex driver.exe - Powered by Reason Core Security