freedownloadmanager.exe

Freedownloadmanager

B-softwares.com

The application freedownloadmanager.exe by B-softwares.com has been detected as a potentially unwanted program by 29 anti-malware scanners. The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The installer uses the Solimba download manager to push adware offers during the download and setup process. Bundled adware includes search and shopping web browser toolbars.
Publisher:
B-softwares.com  (signed and verified)

Product:
Freedownloadmanager

Version:
2.1.480.0

MD5:
c9187d5dcfeb66359441cfe02264cfe9

SHA-1:
87f835b3b76de9a9d2fa985d7b22db5a66f1b913

SHA-256:
535a1569331b3354612b46a54993fd2d58ea598b184213fb4ce42ee3410d8708

Scanner detections:
29 / 68

Status:
Potentially unwanted

Explanation:
Uses the Solimba installer to bundle adware offers.

Analysis date:
2/25/2025 11:52:57 AM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Gen:Variant.Adware.Solimba.1
344

Agnitum Outpost
Trojan.Adware
7.1.1

AhnLab V3 Security
PUP/Win32.Solimba
2016.01.11

Avira AntiVirus
PUA/Solimba.Gen
8.3.2.4

Arcabit
Trojan.Adware.Solimba.1
1.0.0.642

avast!
MSIL:Solimba-C [PUP]
2014.9-160226

AVG
Generic7
2017.0.2822

Bitdefender
Gen:Variant.Adware.Solimba.1
1.0.20.285

Clam AntiVirus
Win.Adware.Solimba-6
0.98/21511

Comodo Security
UnclassifiedMalware
23952

Dr.Web
Tool.DownLoader.21
9.0.1.057

Emsisoft Anti-Malware
Gen:Variant.Adware.Solimba
8.16.02.26.10

ESET NOD32
MSIL/Solimba potentially unwanted
10.12847

Fortinet FortiGate
Adware/Fam.NB
2/26/2016

F-Prot
W32/Solimba.A.gen
v6.4.7.1.166

F-Secure
Gen:Variant.Adware.Solimba
11.2016-26-02_6

G Data
Gen:Variant.Adware.Solimba
16.2.25

IKARUS anti.virus
PUA.Solimba
t3scan.1.9.5.0

K7 AntiVirus
Unwanted-Program
13.212.18379

Kaspersky
not-a-virus:AdWare.MSIL.Solimba
14.0.0.603

Malwarebytes
Trojan.Repacked
v2016.02.26.10

McAfee
Artemis!C9187D5DCFEB
5600.6478

MicroWorld eScan
Gen:Variant.Adware.Solimba.1
17.0.0.171

NANO AntiVirus
Riskware.Win32.Solimba.dfsefh
1.0.14.5380

Quick Heal
PUA.Solimbaapl.Gen
2.16.14.00

Rising Antivirus
NS:Adware.Solimba!1.A379 [F]
23.00.65.16224

Sophos
Generic PUA OI (PUA)
4.98

Vba32 AntiVirus
AdWare.MSIL.Solimba
3.12.26.4

VIPRE Antivirus
Trojan.Win32.Generic
46416

File size:
111.3 KB (113,960 bytes)

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Common path:
C:\users\{user}\downloads\freedownloadmanager.exe

Digital Signature
Signed by:

Authority:
COMODO CA Limited

Valid from:
1/16/2012 1:00:00 AM

Valid to:
1/16/2013 12:59:59 AM

Subject:
CN=B-softwares.com, O=B-softwares.com, STREET=32 pinglewood, L=brampton, S=ontario, PostalCode=l6p1e3, C=CA

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00B98D17728133C0375F64DD24CB19957E

File PE Metadata
Compilation timestamp:
12/5/2009 11:50:46 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
1536:ZQpQ5EP0ijnRTXJn7NeYRNgKJ+BCyQCDD2tveaR3B8HFmKyeN2yxBAog2hPv:ZQIURTXJZeqgKJ+BCvCv2nIlmKjT5v

Entry address:
0x323C

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, 30, 91, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, B4, 70, 40, 00, 53, FF, 15, 7C, 72, 40, 00, 6A, 08, A3, 58, 3F, 42, 00, E8, 09, 2C, 00, 00, A3, A4, 3E, 42, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, 58, F4, 41, 00, FF, 15, 58, 71, 40, 00, 68, B8, 91, 40, 00, 68, A0, 36, 42, 00, E8, BC, 28, 00, 00, FF, 15, B0, 70, 40, 00, BF, 00, 90, 42, 00, 50, 57, E8, AA, 28, 00, 00...
 
[+]

Packer / compiler:
Nullsoft install system v2.x

Code size:
23 KB (23,552 bytes)

Remove freedownloadmanager.exe - Powered by Reason Core Security