The file belongs to the Conduit API platform, a utility that bundles and monetizes search toolbars and web browser extensions. The application mario_forever_wpf.exe by Conduit has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the Conduit Setup Manager installer. It is also typically executed from an Internet Explorer cache folder. The file has been seen being downloaded from cht.tbccint.com. While running, it connects to the Internet address cms.distributionengine.conduit-services.com on port 80 using the HTTP protocol.