home

betternetforwindows.exe

Betternet for Windows

Betternet Technologies Inc.

This is a setup and installation application. The file has been seen being downloaded from mailing.betternet.co and multiple other hosts.
Publisher:
Betternet Technologies Inc.

Product:
Betternet for Windows

Description:
Setup Launcher Unicode

Version:
3.6.0.0

MD5:
81024a3c77beeed7e9c558e522157ae2

SHA-1:
278359ec6cf3add3c3c15f9ff1a6ec81fedb74b7

SHA-256:
08d556744f7b93f3d749fb990b6885af6113217c0bd293a64e6adbf8d8c57c51

Scanner detections:
1 / 68

Status:
Inconclusive  (not enough data for an accurate detection)

Analysis date:
11/24/2024 9:45:56 PM UTC  (today)

Scan engine
Detection
Engine version

Dr.Web
Program.Unwanted.1118
9.0.1.0365

File size:
8.6 MB (8,973,864 bytes)

Product version:
3.6.0.0

Copyright:
Copyright (c) 2015 Flexera Software LLC. All Rights Reserved.

Original file name:
InstallShield Setup.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\betternetforwindows.exe

File PE Metadata
Compilation timestamp:
9/9/2015 1:00:09 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
196608:zG0DNwn1jGOS5bVkRPY/e/C3TJXYCzPAVEWhzWCd8:RojAVkCQgqCzoSWhzdW

Entry address:
0xA759C

Entry point:
E8, D6, 22, 01, 00, E9, 39, FE, FF, FF, 55, 8B, EC, 8B, 45, 14, 56, 85, C0, 74, 3C, 83, 7D, 08, 00, 75, 13, E8, B1, E6, FF, FF, 6A, 16, 5E, 89, 30, E8, F9, 74, 00, 00, 8B, C6, EB, 25, 83, 7D, 10, 00, 74, E7, 39, 45, 0C, 73, 09, E8, 93, E6, FF, FF, 6A, 22, EB, E0, 50, FF, 75, 10, FF, 75, 08, E8, 16, BD, FF, FF, 83, C4, 0C, 33, C0, 5E, 5D, C3, 55, 8B, EC, 33, D2, 8B, C2, 39, 45, 0C, 76, 11, 8B, 4D, 08, 66, 39, 11, 74, 09, 40, 83, C1, 02, 3B, 45, 0C, 72, F2, 5D, C3, 55, 8B, EC, 8B, 45, 08, 0F, B6, 08, 8B, 45...
 
[+]

Entropy:
7.9112  (probably packed)

Code size:
946 KB (968,704 bytes)

The file betternetforwindows.exe has been discovered within the following program.

Betternet for Windows  by Betternet Technologies Inc.
betternet.co
About 1% of users remove it
 
Powered by Should I Remove It?

The file betternetforwindows.exe has been seen being distributed by the following 50 URLs.

http://mailing.betternet.co/track/click/.../btnt.co?p=eyJzIjoiSVZoWXpIMktJaWZxVmRuNE5ZUUVhS1M0VTRZIiwidiI6MSwicCI6IntcInVcIjozMDUzNTIzMCxcInZcIjoxLFwidXJsXCI6XCJodHRwOlxcXC9cXFwvYnRudC5jb1xcXC8xUnZmMThmXCIsXCJpZFwiOlwiNzAyOTlkOTYzMDdmNDU3MTlkZDhmMGFkZGY5MTI1MDRcIixcInVybF9pZHNcIjpbXCIyMjA3NDI5ODAzYjFmZWY3NzE4MzZhMzBmN2Y5YTc3ZDgwYjc1YzJmXCJdfSJ9

http://www.conceptssafepresent.com/XHDWLD99DPx9epc5prG6h8LluYEVn4TEEKSQrZRBrcP5YbjhaExXefmMDWf5rcxJ3HcS1z3bTLmcdwAEUz_FO9X8lFSiOSAZEeUHlOi4Dz8OSJINP9JSWPFHiGgrEj5FO_pSZfg8g2zlOMj5e75urT6c9yM2F7EQjUruIz_Kg55bmpYiO9V7ZcvJbR5BbJUQNWv58S2eYxlIuSn6R0O3xTaIqcg9oQhdgTQcrlbe6J0GRsp7SbXJnTYxhbdDJGvieDe56ltA g0znET5GkhWAfAIjYk333bKKNw39dmM4U1HJSMRI5dNXf3X0160XVMuHWxqVGqoSe9OasvOozPR7Fek KZRghisQm6vM6iZzxOJSTnqVNIfZfkFjwglUO9w1sCXlskEaKskDJZHZ6bIJPg33nIdHiq4VIDt8HgsVcmoqXQsbHnZSHMRubFIwcVLkSZHSf1k0NtP8UeRqy4gnjU1QsY64WRgoH9LCxTT1IYTyo51thXOTEvvoLchSsY416Fb88R2B8p UoYW9rctYnCqst1CVKkspotTIhNmNTBez5_jVXo=-G3EAAGRwXmtvENMdynbbDQ5cAgrDNEwbTAYPWYnGwzO357kqgfrGunleypEoRYZfM7WqEk0e9F5nFHzoo83M1YnWy44O_MGqt9KPU438JGLbcOgrMP2_V42uO4wmUqkkI9ASkxYA-e

https://docs.google.com/uc?id=0BwXRgsTDtaJ4aUd0blE3N21SOXc&export=download

http://dl1.jetelecharge.com/up/FYI2Yi73Ou/.../betternet-vpn-8394-jetelecharge.exe

http://www.centralquickcity.com/mohya0JCzH5H8aBoOSOrpxdYofysU u9uJzqKTBO zna 1ZYD49_tauv EevNCjJezroo0XNf2sDhHFwRKkiZ8oBLxrnPGPY5UCochf_B1 bQVA52Qdx6HoQOPBBEOpi1q7BWeP7EMg8956B7PwvxhNnGu2hgBLAkCpD0f8RvFCiZAoo66ScF2wXjCO6UOq5m_IiQp1mjK3qE3lqXxHbZGp_MSN9G2aNGV zXyBOipD31I7P fJ172o6maCK_LUS0bbdeaVCWUiWaA6oAIU5Cw9EXbylhAvKtrSap2xVZQwmiG9H2gX4nel_lR7PNTb9gER0qIIzBxqT5KR5EvC s 4io6MAC0MTQfHxyJweUivjxN17O_MA93bMAR5IwYc65L_8jW4grLxGJ33hlIA_b2jlPNt5ESrps_oh5nNTJbn1_aDpPqV9_TQee_OPz4amk9CsdpuzKH2_pjN4aX_Ky3W18FaOXWnDiYexAQOSUr9YladUcYgdZuR2IbzoZIIWuqiSEZgH3ycoB65miiNb5fsWKRSx6ROgrSFMyfY5gUwRL8r6Ftw=-G3EAAGRgnq2tQUwAT3rAxY8paaUlboCHrMSPB5l2r9dtEohPaH 5XOeTkZMIfl sucwgOeDndgHHP_hoU5flBa7XB1jwCS2_RX6 xO59eJWO6d689x4hmJFyGD35AouIEgxGYRiOMg==-e

&onid=2144&oid=3001-2144_4-76276273&rsid=cbsidownloadcomsite&sl=en&sc=us&topicguid=security/privacy&topicbrcrm=&pid=14488293&mfgid=10180568&merid=10180568&ctype=dm&cval=NONE&devicetype=<!--esidesktop&pguid=1f129a6eb2987c4986873c28&viewguid=fe-5V0-XifXNU3KApRrmYbZRAzyToXMLx7dc&destUrl=http://files.downloadnow.com/s/software/14/48/82/.../BetternetForWindows.exe

http://www.cleantourscurrent.com/QcsBsORCa2rzHtllFjKp9PKD5DbxP0G3bQbM_RoS8WnOYmTfcRhIe zOQTUfCZ3FA8z1uwbO0SJQk_IAJbWNO7yQrfR8H_nRineGqImAnBKlTDtijqdY90lZdkdkptqB4gv xwvWqHX_NT1o8SbLyJ7tO_O_rwFeh58TkEc_xKxg459fz4gyf0hJtGfussJwVr7QkZeD_9xwC5Wc8iqSQB0QKzFAgeSEgynhGxdyDXdhqsnEkVJTY5dfEVhF17tOAyQQcwSsvVn8L7ezigvIqoebZFosL7AeH2fVUYLP uaKGTXLzNOHawmiEdae4aFqyeQIVTfQ5WqggTjd3RxtrHwo6byxiX01vj4z7VRQSIG9kgMklBAiZgYE3fg6lhG724h4Aofgkf3p7L1Qps1v63LRQb6XY2rzq1ymSrbkx3X3kp_u9TiX42 X5whZX91OgBfbDbmvJbFuLHx6JsxApm0N79uCFAy9u04jb P XrLne7EWJSAs1sYdkCEePsJ7VHC_Wf0bXWwN dSaYNJijqIwh_donVNecP9_l7arVUAt6eM TC0=-G3EAAGRwXmtvRnqT63TaAy5 TEkrLXEDPGQlfjzI1F3XNgnEJ9Mvy4omIxcZey_WxIgmh362hQY__WhTC75osh50wSeDP yel 3F1dwEGIfrccGWC1P_6oaWwjYvqbrEqzInAQ==-e

http://www.clearcentralmega.com/CDUeW1npykC1UlPivYfmMKQyGGCcdS chrYg2UFJ8_TmhEByfeoeeouR1pcIoacGKZohv1Xli yraPhFYoH7FYmwLqnaXBGS2ieTpKNXXjynN2LDzhwrikau2m19ujU 5Spj7gKZZsCMgFQDDy1A1wTVYFX3iz_ih150_m5c1Yh7fr4OcA1wgvDcusCaXm3MffRIksEswLaLWrtIfjvrJPnXFspJN9JSn9c03lkErD_G2A5tOcVgspOGq_nkD5SZrPKVJ 2bovNRaEp0cdYRDa3vQkDOesNY4s4Fyg3OfO4Rhv6Mr6yTDureF_ONCFeKlNRCO9VrJ4C69l3F3wc7igiud9RrBSh0ONSvydnfYCRTQB fl_yJfHxf9xbFKFSOk8dxQGq2eaantXY5QeQAmS6ZER1mEnmIwyTPtuJNSEnkuaLwzE BzplQvYjvoXAnz2QtrpYtmUwwS24mTLJsLaTfH4p vtms4V3vAteQKC_seYFvwk3DrMaR wtsWnJoG3k6XKZynmvZwN oPgXn2q_I7IbQWg==-Gx4AAAQccmiptINUUAtSyCa66I3zQN4Y WRVY5yNThw=-e

&onid=2144&oid=3001-2144_4-76276273&rsid=cbsidownloadcomsite&sl=en&sc=us&topicguid=security/privacy&topicbrcrm=&pid=14488293&mfgid=10180568&merid=10180568&ctype=dm&cval=NONE&devicetype=<!--esidesktop&pguid=c9b916237dcbe228e8dc5755&viewguid=gMj4kaogMh@q9CccKVpCqcXp6USH6UAa1ZoE&destUrl=http://files.downloadnow.com/s/software/14/48/82/.../BetternetForWindows.exe

http://filehippo.com/download/file/.../

&onid=2144&oid=3001-2144_4-76276273&rsid=cbsidownloadcomsite&sl=en&sc=us&topicguid=security/privacy&topicbrcrm=&pid=14488293&mfgid=10180568&merid=10180568&ctype=dm&cval=NONE&devicetype=<!--esidesktop&pguid=e07c6e683b8732be45ea61b6&viewguid=fmFobL1UiN8Bmy6v59BnKdgFvmyA0IYIXi3S&destUrl=http://files.downloadnow.com/s/software/14/48/82/.../BetternetForWindows.exe

http://m.en.softonic.com/app/betternet/windows/.../launch

http://filehippo.com/download/file/.../

http://filehippo.com/download/file/.../

&onid=2144&oid=3001-2144_4-76276273&rsid=cbsidownloadcomsite&sl=en&sc=us&topicguid=security/privacy&topicbrcrm=&pid=14488293&mfgid=10180568&merid=10180568&ctype=dm&cval=NONE&devicetype=desktop&pguid=bfa4ada391ff78f683ef742b&viewguid=ehy3MUnSHxbgLE3moM-ecauvfoRB4mXJFAnZ&destUrl=http://files.downloadnow.com/s/software/14/48/82/.../BetternetForWindows.exe

http://dl.cdn.chip.de/downloads/.../BetternetForWindows3.6.0.exe

&onid=2144&oid=3001-2144_4-76276273&rsid=cbsidownloadcomsite&sl=en&sc=us&topicguid=security/privacy&topicbrcrm=&pid=14488293&mfgid=10180568&merid=10180568&ctype=dm&cval=NONE&devicetype=desktop&pguid=799a7884df18285158190e3b&viewguid=dANVX8-zurNJ38FauDZkWdic0lqHwPYu4LIg&destUrl=http://files.downloadnow.com/s/software/14/48/82/.../BetternetForWindows.exe

&onid=2144&oid=3001-2144_4-76276273&rsid=cbsidownloadcomsite&sl=en&sc=us&topicguid=security/privacy&topicbrcrm=&pid=14488293&mfgid=10180568&merid=10180568&ctype=dm&cval=NONE&devicetype=<!--esidesktop&pguid=47f38b1f6458c265917f6cf5&viewguid=gfi@xqW65xp96AkFto8UYX9oyzGJ9a8@WKwm&destUrl=http://files.downloadnow.com/s/software/14/48/82/.../BetternetForWindows.exe

http://mailing.betternet.co/track/click/.../btnt.co?p=eyJzIjoiby12ZjVud3J4WUV2SzJiVXZfeE45Y2JBWWYwIiwidiI6MSwicCI6IntcInVcIjozMDUzNTIzMCxcInZcIjoxLFwidXJsXCI6XCJodHRwOlxcXC9cXFwvYnRudC5jb1xcXC8xUnZmMThmXCIsXCJpZFwiOlwiMzE4NjNkZWVhZjEwNGRhODhkOGYzNmMxNmEzYTk1ZDBcIixcInVybF9pZHNcIjpbXCIyMjA3NDI5ODAzYjFmZWY3NzE4MzZhMzBmN2Y5YTc3ZDgwYjc1YzJmXCJdfSJ9

http://www.clearcentralmega.com/YtdB oEsQ7v8fb8BJH5zYimKHp631rvaMxWx TmvfLYljLEwkiXAFDNWOhyWs Da NIHgM0gJUN3lT3jDednLBuyX52HSwzcG6SPWiV0Pw1yS2cr_kde7dor PWcTkMm_c8LTGCB65nZhZ2LBVhRDa 06XJhfdKB8LbL1L3KGQtBDd3geYwdzFcj5xv5p1RUChbD2S_y-Gx4AAAQccmiptINUUAtSyCa66I3zQN4Y WRVY5yNThw=

http://filehippo.com/download/file/.../

&onid=2144&oid=3001-2144_4-76276273&rsid=cbsidownloadcomsite&sl=en&sc=us&topicguid=security/privacy&topicbrcrm=&pid=14488293&mfgid=10180568&merid=10180568&ctype=dm&cval=NONE&devicetype=desktop&pguid=1b7cd1a9af26d86548e595dd&viewguid=ca-PmmhsF-n3jUjbXjAT8NxsLAJAajt4R3qJ&destUrl=http://files.downloadnow.com/s/software/14/48/82/.../BetternetForWindows.exe

http://filehippo.com/download/file/.../

http://filehippo.com/download/file/.../

http://www.clearcentralmega.com/MMD8qwBuE3JxUZ1meNCRTot_DHdmFso6H6t9f718Xd6QxSBGyPvPSoBLdYobqA2e00amnRGuePPmdYI9OjUDkI7DTTdFf0vx_iNdrf1sUXcxHH cw5VfML1TLTlTdIA4BmZ_3RsjBCWjZpgV7e8IR13pdxMYMaKeYM 1djyZcPfLyaJzLrV PKVfPOpnf4eHYfoOGyeK-Gx4AAAQccmiptINUUAtSyCa66I3zQN4Y WRVY5yNThw=

http://filehippo.com/download/file/.../

http://www.clearcentralmega.com/A1Z7EEPlXeIWRvG0V y1To8FnUoabG8auNSOeNoCxH7_0EKhh6MMn2F_Hti0WFfew_rS _zLHnWwnnvVHkWpdILfbc8M3irWSnrZS yjDGWQNHmtDjAt3 T8zYakGCRqDoBDZsufd RyuJWnKs3NoXuvlKUZev P01scQR080a1qy3IRni84D6GXGPNbEbjRweqlSgQBgDyyQLRjAd1zC2IvHcZ0ebMAKYdkQGKokWeDOTan7ipWis3H0eSRzQmyJwinOqomynwPi4miaBlVJpKeyzi9C90RbqcM5LjMaPagzYEPrXY2vh12Qmk3WqD bIBHDfJi42 X4iNb4MZuHAeMIEz8p1G50JiFSK85QMIUPTqOUejbAFy1xdVtk0lbJlpcFEzb 4W 6RUEV7x4rbU95twezGhx_vol5FTJbj1i ZtCjkeHXpM1cJ xWJxYjh8NThoZpJbwrW9t XCq9VxZ5yntpn7ljDQMT lZ fcg6rr6ci7KR3vigJ6wSBZdH8OJDe7LB5TxybYBjy6xncAEA3cMIg==-Gx4AAAQccmiptINUUAtSyCa66I3zQN4Y WRVY5yNThw=-e

&onid=2144&oid=3001-2144_4-76276273&rsid=cbsidownloadcomsite&sl=en&sc=us&topicguid=security/privacy&topicbrcrm=&pid=14488293&mfgid=10180568&merid=10180568&ctype=dm&cval=NONE&devicetype=<!--esidesktop&pguid=372ae599ec32a6c82d1525f2&viewguid=gJ8TDvBA6YWr3gk0x8-oLom0z34MmMmcx0Ni&destUrl=http://files.downloadnow.com/s/software/14/48/82/.../BetternetForWindows.exe

&onid=2144&oid=3001-2144_4-76276273&rsid=cbsidownloadcomsite&sl=en&sc=us&topicguid=security/privacy&topicbrcrm=&pid=14488293&mfgid=10180568&merid=10180568&ctype=dm&cval=NONE&devicetype=desktop&pguid=379f88528e1d2f6e438a3c37&viewguid=bjKH3EK5vt9OPUL8Vz5IDa4cZIZVTcw-DbYd&destUrl=http://files.downloadnow.com/s/software/14/48/82/.../BetternetForWindows.exe

&onid=2144&oid=3001-2144_4-76276273&rsid=cbsidownloadcomsite&sl=en&sc=us&topicguid=security/privacy&topicbrcrm=&pid=14488293&mfgid=10180568&merid=10180568&ctype=dm&cval=NONE&devicetype=desktop&pguid=ba2b33d2a58aecdcc6f02ca8&viewguid=e1MyIIsu4kt2cZxi59tqc@WUKckiYOrP4Efm&destUrl=http://files.downloadnow.com/s/software/14/48/82/.../BetternetForWindows.exe

Latest 30 of 130 download URLs

Scan betternetforwindows.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.