home

freehdsport tv-buttonutil.exe

FreeHDSport TV

installdaddy

The application freehdsport tv-buttonutil.exe, “FreeHDSport TV exe” has been detected as adware by 9 anti-malware scanners. This file is typically installed with the program FreeHDSport TV by InstallDaddy Services Ltd. which is a potentially unwanted software program. It is built using the Crossrider cross-browser extension platform. While the file utilizes the Crossrider framework and delivery services, it is not owned by Crossrider.
Publisher:
installdaddy

Product:
FreeHDSport TV

Description:
FreeHDSport TV exe

Version:
1000.1000.1000.1000

MD5:
2df22430a6f1a197bef70043ca26cc34

SHA-1:
86305e48ed0e362dfe6fe7d52477bd5ccb81cc3c

SHA-256:
7f881dd3aa92f0c9536d06524dfd156f8dab4687bacca286bdf38f4e2d4468d9

Scanner detections:
9 / 68

Status:
Adware

Explanation:
InstallDaddy bunldes adware such as toolbars and unwanted browser extensions.

Analysis date:
11/30/2024 9:56:44 AM UTC  (today)

Scan engine
Detection
Engine version

Baidu Antivirus
Trojan.Win32.Toolbar.CrossRider
4.0.3.14123

Dr.Web
Trojan.Crossrider.1
9.0.1.023

ESET NOD32
Win32/Toolbar.CrossRider (variant)
8.8983

herdProtect (fuzzy)
variant of plus-hd-3.2-buttonutil.exe (Adware)
2014.3.14.21

Malwarebytes
PUP.Optional.FreeHDSportTV.A
v2014.01.23.01

Reason Heuristics
PUP.Crossrider.installdaddy.Z
14.2.25.7

SUPERAntiSpyware
Trojan.Agent/Gen-Packer
10828

Trend Micro House Call
TROJ_GEN.F47V0702
7.2.23

VIPRE Antivirus
Crossrider
20934

File size:
330.5 KB (338,432 bytes)

Product version:
1000.1000.1000.1000

Copyright:
Copyright 2011

Original file name:
FreeHDSport TV.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\freehdsport tv\freehdsport tv-buttonutil.exe

File PE Metadata
Compilation timestamp:
6/26/2013 3:08:35 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
6144:7lK94lgjfPkoDp3gejY5ib16ZciBiFiVUcbQf0JBnwGG6ecK3TB0YLZP:094lgwoDp3lM5ib16ZciBiFiVxy0DnwV

Entry address:
0x28C9E

Entry point:
E8, 1E, A1, 00, 00, E9, 89, FE, FF, FF, CC, CC, CC, CC, CC, CC, CC, CC, 57, 56, 53, 33, FF, 8B, 44, 24, 14, 0B, C0, 7D, 14, 47, 8B, 54, 24, 10, F7, D8, F7, DA, 83, D8, 00, 89, 44, 24, 14, 89, 54, 24, 10, 8B, 44, 24, 1C, 0B, C0, 7D, 14, 47, 8B, 54, 24, 18, F7, D8, F7, DA, 83, D8, 00, 89, 44, 24, 1C, 89, 54, 24, 18, 0B, C0, 75, 18, 8B, 4C, 24, 18, 8B, 44, 24, 14, 33, D2, F7, F1, 8B, D8, 8B, 44, 24, 10, F7, F1, 8B, D3, EB, 41, 8B, D8, 8B, 4C, 24, 18, 8B, 54, 24, 14, 8B, 44, 24, 10, D1, EB, D1, D9, D1, EA, D1...
 
[+]

Entropy:
6.4772

Code size:
251.5 KB (257,536 bytes)

The file freehdsport tv-buttonutil.exe has been discovered within the following program.

FreeHDSport TV  by InstallDaddy Services Ltd.
FreeHDSport TV uses the Installdaddy download and install manager which is designed to co-bundle additional offers which include toolbars, web browser extensions as well as various potentially unwanted applications.
www.installdaddy.com
84% remove it
 
Powered by Should I Remove It?

Remove freehdsport tv-buttonutil.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.