home

ilivid-download-manager.exe

SoftwareVillaExe

Xportsoft Technologies

The application ilivid-download-manager.exe by Xportsoft Technologies has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. The file has been seen being downloaded from www.bitssigncurrent.com and multiple other hosts.
Publisher:
Xportsoft Technologies  (signed and verified)

Product:
SoftwareVillaExe

Version:
1.0.0.0

MD5:
0f7abcb3a545911fd038c627dbb01fde

SHA-1:
000319b6671fb474ee5cb00949f847d1910aa9c2

SHA-256:
3abffc243f5e94b18b6ccd0082a14d24af3db21a8c86fd91208f15f0107a591e

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
12/26/2024 1:48:58 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
Win32.Generic
16.2.9.1

File size:
289.1 KB (296,080 bytes)

Product version:
1.0.0.0

Copyright:
Copyright © 2015

Original file name:
SoftwareVillaExe.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\ilivid-download-manager.exe

Digital Signature
Signed by:
Xportsoft Technologies

Authority:
COMODO CA Limited

Valid from:
10/31/2013 7:00:00 AM

Valid to:
10/31/2016 6:59:59 AM

Subject:
CN=Xportsoft Technologies, O=Xportsoft Technologies, STREET=Khojkipur, STREET="Near Gugga Maadi, Kardhan Road", L=Ambala Cantt, S=Haryana, PostalCode=133001, C=IN

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
1AA2A20320AF27B7DB8E85BCA67CBE9A

File PE Metadata
Compilation timestamp:
11/16/2015 5:56:40 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
3072:7MFfHAuV+fazRGWQBmvJQPTSov8T2cQqwNinl/fLaNiVA:gFfHAuV+f+QT/YIma6A

Entry address:
0x3F67E

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
5.2000

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
246 KB (251,904 bytes)

The file ilivid-download-manager.exe has been seen being distributed by the following 13 URLs.

http://www.bitssigncurrent.com/c?x=3ZAn5kq6ZaoC4Zkh3yR 8nZpWeRstQoHpev/mCmjPS8=&c=DaG/uf90xLt415wt4E8ksjn6FtrgVs99eWaMJaUoL1rRtfx5KsquFXU7aOkPmPya1RJ8bIeH/EPJWTnv75y5b64jDBxAa2til/r9bwpSUwWXtPJ0yyFEUL1WwYVu9XHKgdS35X84uPOB8TlqKacEcEN2RhUmN1GPF 5ah0vXoq4=&e=0&fallback_url=https://secure.inndl.com/.../ilivid-download-manager.exe

http://www.giftchuckleflash.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

http://www.quicktowndl.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

http://www.giftchuckleflash.com/WVl6OTRQV2t4YVVaVWNYcEJRVWczT1hodlUwUmhVeVV5UmtZeGVuY3hRMEphYW0wMVVsTnZiSFpNTlVSWWJ6bHRheVV6UkNaalBXUjFWbEJTZW5Gd1lYQkhOMjVLVkVaVVl6TktkMnBqT1ZKQ1pXNXlZMFJ1WlVOVWIweE1SMDQwZEROcFlXWlBXSGw1YjB0cGFuRTVZazQxT1ZOT01FcENiMDQwY0ZoVWVEWWxNa0pYUXlVeVFubHBiR0Z6WTJkUllXOUdVeVV5UW14QmIyUkZZMHAwV1d4S2JUWXlObFI1ZW1sa1FYVjFaRVZwUjIwbE1rSXdVMGx0V2xSR1ZuTkpPSEkzYzFOeWJuaHdVVFY0TTFoeU4yOUdUamgzSlRORUpUTkVKbVU5TUNabVlXeHNZbUZqYTE5MWNtdzlhSFIwY0hNbE0wRWxNa1lsTWtaelpXTjFjbVV1YVc1dWIyUnNMbU52YlNVeVJsVlRKVEpHYVd4cGRtbGtMV1J2ZDI1c2IyRmtMVzFoYm1GblpYSXVaWGhsSlROR2MzUWxNMFE0VFRKcFdWWk1PVUYyYWpoSWNWaDVUVjgyU2xSM0pUSTJaU1V6UkRFME5qWXhOVE14TURjbVpHOTNibXh2WVdSQmN6MXBiR2wyYVdRdFpHOTNibXh2WVdRdGJXRnVZV2RsY2k1bGVHVT0=

http://www.bitssigncurrent.com/c?x=Nj1tLPZaZ39yYOru/JrKnKOKjcFTIA93zn/ULA3Aflo=&c=9ZEkujMEAl8aNicqzvhRGmzQPxFVTyN7QpEhtanZ/bQXKCGTwdOUM1rDBdkbJOq8nuuHn0/oDlySZl6MHv/5 VPgO4Po1H55hwZVxyNDCaGQicIaveEAft3783YV3Tga&fallback_url=https://secure.inndl.com/.../ilivid-download-manager.exe

http://www.giftchuckleflash.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

http://www.giftchuckleflash.com/c?x=Wo0lsd2VC8dMyXyNjCeE95TOeuO7q uxeTTVzcHSCy4=&c=F9cOosYPXem5uY5Rf0aZZ3eo4hKlXXRDl6O5QGw/w3FJO6FLjf0T8 asNb p6Glp8R J1zLU9nmngdmAr1XwVO9vNsA4jVYXrFOI2EzDQiwBTvsgv3XUNpvC3QURx YaSAyf15urrmoIB4bxCKkJR/BC2e1K0u5rDGF3dM TYZM=&fallback_url=https://secure.innodl.com/.../ilivid-download-manager.exe

http://www.giftchuckleflash.com/c?x=Rp1QyV0mrrqGnJuSyXIM21lO72P4DU9l5CR2y9h3jBc=&c=FaoNCt/ncMhyWRfqJZAlBv/9kkOF7L5W3PbVFvA3nGY9dSnkKQRnfz7RgEk9qs ED aHOM1Xcw7RSdvApAhYHq2YYsHMUZKgBOanfEzX1E7h04M0tnp3EAp2Q7sXTwQSlyg4WsCxQWeOMhCAUAPdaOUVCUdn1FdZHyOAJ 56meM=&fallback_url=https://secure.innodl.com/.../ilivid-download-manager.exe

https://www.softwarevilla.com/home/.../iLivid-Download-Manager.exe

http://www.bitssigncurrent.com/c?x=bxAq0Nqj27YK6NnQWuOezI6s7VacfFm1HJASLOln2aQ=&c=ozztgJZblm8Yy9na6AaGtPVpBNXs4/GTbY5/q/bboZ6j0xd17ssrezwrH0eokCbDO91qjxRwkMaIR3w2s58RBvyoHb4j52TnpsvPUdFNrXPhIPZCxpL9GH5SXTxhjY2cmhDw4DcGRlEhWRvCPK gIYc2t3OkEjN6Oof1mWDmNFRncFhV5NuiyRw7hVVN8fIJ&e=0&fallback_url=https://secure.inndl.com/.../ilivid-download-manager.exe

http://www.softwarevilla.com/home/.../iLivid-Download-Manager.exe

http://www.bitssigncurrent.com/c?x=A4T3EXyTjutVQfw8RiWEhFEZHcOUS yJibjghJ kkko=&c=6bsvLlRMf2xbozzxyTs6wVCmuTC3Ra8pt7tNvEC8VWauPhfjLmEZJzK8ST3BTeN9BKMQ28Y85L8XkDfFh8oWwodfYvlsZAme0CdtdgnlqABwEYMHUuuziZEkJC0JwQVnGbfKcqxW0pvKnM1 R02NwPJVBgi5rkfCbJ4JLe4e1X4=&e=0&fallback_url=https://secure.inndl.com/.../ilivid-download-manager.exe

http://www.softwarevilla.com/home//.../iLivid-Download-Manager.exe

Remove ilivid-download-manager.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.