» foodbuzzupdate.exe
Overview
Analysis
File Details
Programs (1)

foodbuzzupdate.exe

2298491 Ontario Inc.

The application foodbuzzupdate.exe by 2298491 Ontario has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. This file is typically installed with the program FoodBuzz by Lake Ventures, LLC. which is a potentially unwanted software program.

File name:

foodbuzzupdate.exe

Publisher:

FoodBuzz (signed by 2298491 Ontario Inc.)

Description:

FoodBuzz Update

Version:

1.0.0.0

MD5:

9dbe0421ded66a3f6269021bbfcaf496

SHA-1:

3bba3ae54440b56c721b662d73d59e7dd0e03f3f

SHA-256:

62e4ce360d598cd5fd6812f69f6f2d6768f8bedd2f76a9d959e83eac88c9cba0

Scanner detections:

1 / 68

Status:

Adware

Note:

Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Analysis date:

11/23/2024 9:28:23 AM UTC (today)

Scan engine

Detection

Engine version

Reason Heuristics

PUP.2298491O (M)

16.5.8.20

File size:

542.3 KB (555,272 bytes)

Product version:

1.0.0.0

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\foodbuzz\update\foodbuzzupdate.exe

Digital Signature

Signed by:

2298491 Ontario Inc.

Authority:

GoDaddy.com, Inc.

Valid from:

2/15/2013 6:00:24 PM

Valid to:

2/15/2014 6:00:24 PM

Subject:

CN=2298491 Ontario Inc., O=2298491 Ontario Inc., L=Guelph, S=ON, C=CA

Issuer:

SERIALNUMBER=07969287, CN=Go Daddy Secure Certification Authority, OU=http://certificates.godaddy.com/repository, O="GoDaddy.com, Inc.", L=Scottsdale, S=Arizona, C=US

Serial number:

0781DF92848AC5

File PE Metadata

Compilation timestamp:

5/6/2013 2:41:09 PM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

12288:Do4sv5t0CdGfUcPM0I29OVcpsXmgQV6Eh8GXRZ3Rraw83/:Ml5t0RjPMCOV47j6EyGXxuwG

Entry address:

0x18A650

Entry point:

60, BE, 00, E0, 51, 00, 8D, BE, 00, 30, EE, FF, C7, 87, E8, 19, 13, 00, F3, B3, 2D, 69, 57, 83, CD, FF, EB, 0E, 90, 90, 90, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, 0B, 75, 28, 8B, 1E, 83, EE, FC, 11, DB, 72, 1F, 48, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, EB, D4, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, EB, 52, 31, C9, 83, E8, 03, 72, 11, C1, E0, 08, 8A, 06, 46... 
[+]

Entropy:

7.4876

Packer / compiler:

UPX v0.89.6 - v1.02 / v1.05 -v1.22 (Delphi) stub

Code size:

436 KB (446,464 bytes)

The file foodbuzzupdate.exe has been discovered within the following program.

FoodBuzz by Lake Ventures, LLC.

FoodBuzz (foodbuzz.net/2298491 Ontario Inc.) is a web browser extension and toolbar that delivers contextual based advertising as well as modify the user's web browser home and search pages to provide advertising and search.

foodbuzz.net

82% remove it

Remove foodbuzzupdate.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.