installer_age_of_empires_iii_patch_1_14_french.exe
Vittalia Internet S.L.
This is the Vittalia Filewon Installer which bundles applications with offers for additional 3rd party software, mostly unwanted adware, and may be installed with minimal consent. The application installer_age_of_empires_iii_patch_1_14_french.exe by Vittalia Internet S.L has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the Vittalia DM installer. While running, it connects to the Internet address services.upd4ter.com on port 80 using the HTTP protocol.
File name:
installer_age_of_empires_iii_patch_1_14_french.exe
MD5:
eb1341a5e977ec1bc7b7bd809803fb27
SHA-1:
3cbbc56c88202fb3df58a44bc74ad08d0770178a
SHA-256:
0dcc45ccaf285611a4354fad394a607c9f52f196c5e61fc785c21fe7870ecc67
Scanner detections:
1 / 68
Explanation:
Bundles additional software, mostly toolbars and other potentially unwanted applications using the Vittalia monitization installer.
Description:
This is also known as bundleware, or downloadware, which is an downloader designed to simply deliver ad-supported offers in the setup routine of an otherwise legitimate software.
Analysis date:
12/25/2024 5:15:53 AM UTC (today)
Scan engine
Detection
Engine version
Reason Heuristics
PUP.Vittalia (M)
17.3.15.22
File size:
333.9 KB (341,896 bytes)
File type:
Executable application (Win32 EXE)
Bundler/Installer:
Vittalia DM
Common path:
C:\users\{user}\downloads\bordel !\installer_age_of_empires_iii_patch_1_14_french.exe
Valid from:
6/5/2012 2:00:00 AM
Valid to:
5/9/2013 1:59:59 AM
Subject:
CN=Vittalia Internet S.L., OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Vittalia Internet S.L., L=Mostoles, S=Madrid, C=ES
Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US
Serial number:
7952CFD9EF040B59F3C140BA1DA97A60
Compilation timestamp:
12/5/2009 11:50:52 PM
Code size:
23.5 KB (24,064 bytes)
The executing file has been seen to make the following network communications in live environments.
http://download.upd4ter.com/installers/down.php