home

funmoodssetup.exe

Setup©

Setup ©

The application funmoodssetup.exe, “Setup ” has been detected as a potentially unwanted program by 14 anti-malware scanners. This is a self-extracting archive and installer, however the file is not signed with an authenticode signature from a trusted source. The file has been seen being downloaded from app.softimizer.com.
Publisher:
Setup ©

Product:
Setup©

Description:
Setup

Version:
2.2.1.407

MD5:
fa518c950febcec7adacc8e3c17ef4b2

SHA-1:
816966bd48e36282db53f5482eb9bc896e0a3d70

SHA-256:
4a891d0f52d5f19ff36019ff15197b1697e242d95f058cf734cf5f32934c45f9

Scanner detections:
14 / 68

Status:
Potentially unwanted

Analysis date:
12/24/2024 1:18:17 AM UTC  (today)

Scan engine
Detection
Engine version

AVG
Skodna.Generic
2015.0.3593

Dr.Web
Adware.Funmoods.1
9.0.1.015

Emsisoft Anti-Malware
Adware.Win32.Persi
8.14.01.15.06

ESET NOD32
Win32/Toolbar.Funmoods (variant)
8.9293

Fortinet FortiGate
Adware/Persi
1/15/2014

IKARUS anti.virus
not-a-virus:AdWare.Win32.Persi
t3scan.2.2.29

K7 AntiVirus
Trojan
13.175.10852

Kaspersky
not-a-virus:AdWare.Win32.Persi
14.0.0.4461

Malwarebytes
Adware.Funmoods
v2014.01.15.06

NANO AntiVirus
Trojan.Win32.Funmoods.bobotv
0.28.0.57029

Rising Antivirus
PE:Trojan.Win32.Generic.1499152E!345576750
23.00.65.14113

Vba32 AntiVirus
AdWare.Persi
3.12.24.3

VIPRE Antivirus
Adware.Win32.Persi
25450

XVirus List
Win.Detected
2.3.31

File size:
1.7 MB (1,833,984 bytes)

Product version:
2.2.1.407

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\funmoodssetup.exe

File PE Metadata
Compilation timestamp:
6/19/1992 7:22:17 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
49152:c8MO6flgTqahqp4RSBO7uaHJsOWeAwqrtzX+Yj4TfuXZ:BMOiEqp49uaHJhWeAwwtzPj46XZ

Entry address:
0x601F4

Entry point:
55, 8B, EC, B9, 0D, 00, 00, 00, 6A, 00, 6A, 00, 49, 75, F9, 53, 56, 57, B8, C4, FF, 45, 00, E8, C0, 6F, FA, FF, 33, C0, 55, 68, 62, 06, 46, 00, 64, FF, 30, 64, 89, 20, E8, F5, 2A, FA, FF, 85, C0, 0F, 84, C5, 03, 00, 00, E8, 4C, A9, FF, FF, A1, 5C, 53, 46, 00, 8B, 15, EC, 97, 46, 00, E8, FC, 48, FA, FF, A1, AC, 52, 46, 00, 8B, 15, F0, 97, 46, 00, E8, EC, 48, FA, FF, B8, 5C, 98, 46, 00, E8, 8E, 48, FA, FF, C6, 05, 60, 98, 46, 00, 00, 8D, 55, EC, B8, 7C, 06, 46, 00, E8, 46, 7F, FC, FF, 8B, 55, EC, B8, 0C, 98...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
382.5 KB (391,680 bytes)

The file funmoodssetup.exe has been seen being distributed by the following URL.

http://app.softimizer.com/funmoods_download.php

Remove funmoodssetup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.