ilividsetup.exe

The application ilividsetup.exe has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. This is a setup and installation application, however the file is not signed with an authenticode signature from a trusted source. The file has been seen being downloaded from download.cdn.ilivid.com.
MD5:
e401d6c87e8deb83220053d3104f508f

SHA-1:
834e92c3650a8f6065dd9877d987529f17d18474

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
12/25/2024 12:51:07 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.ILivid.WebBar (M)
16.10.13.9

File size:
705.4 KB (722,322 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\Documents and Settings\{user}\My documents\downloads\ilividsetup.exe

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
12288:Avu/InoH401a6WZkXH31rRxa4f8QkGOw3skriFgPFYDDHXrus5vAysAL6QcRyU:QuA5p6WZkXX1lxa4UQkwruz7us5vVtzc

Entry point:
06, 9B, DA, BD, 53, 32, 42, D1, AA, 2E, C0, 14, 63, 9D, 1B, 86, 6A, 62, E4, 3D, C0, 70, 53, EA, 12, 43, FF, 00, 6D, 79, 2B, 1F, 5A, 9F, 7B, 49, E1, 8E, E6, F5, F9, D0, F5, 05, 61, 26, EE, 50, 2D, FF, 3E, 50, C4, 8C, C2, 57, BF, A2, F0, 12, 1B, 6D, 27, 3C, D2, 31, 88, 92, 76, BC, C1, 36, 47, 5C, 8F, 5B, 5C, 38, 5D, C9, 98, 63, 80, 58, C8, FE, F6, 7A, 68, 5A, F7, 64, 46, A8, 01, C1, A7, A7, 13, 9D, AA, 0D, 98, 2D, 5C, 79, 25, D1, 5A, 27, 62, 43, 66, 26, 1D, F5, C2, 74, 26, B0, E9, 0E, 7D, F4, 86, C0, 5C, 7A...
 
[+]

Entropy:
7.9996  (probably packed)

The file ilividsetup.exe has been seen being distributed by the following URL.

Remove ilividsetup.exe - Powered by Reason Core Security