home

oovoo setup.exe

Internet program

Agile Funnel (Alpha Criteria Ltd.)

The application oovoo setup.exe, “Internet program Setup ” by Agile Funnel (Alpha Criteria) has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions. The file has been seen being downloaded from www.centertowernow.com and multiple other hosts.
Publisher:
Web Program   (signed by Agile Funnel (Alpha Criteria Ltd.))

Product:
Internet program

Description:
Internet program Setup

Version:
4.3.5.8

MD5:
c34617ab9838763f2ed941368ccac354

SHA-1:
68fa72736f95dbdb8269e65bad92647414d1b6db

SHA-256:
42b7e10e4d025b6e1bbdbdec062cf4d02b282d4f10ceb43576dc59b96e75bcbf

Scanner detections:
1 / 68

Status:
Adware

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Description:
This is an installer which may bundle legitimate applications with offers for additional 3rd-party applications that may be unwanted by the user. While the installer contains an 'opt-out' feature this is not set be defult and is usually overlooked.

Analysis date:
11/6/2024 10:30:51 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCore.Installer.Installer (M)
15.12.29.23

File size:
943.7 KB (966,376 bytes)

Product version:
5.7

Copyright:
Application Web installer

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\microsoft\windows\inetcache\ie\{random}\oovoo setup.exe

Digital Signature
Signed by:
Agile Funnel (Alpha Criteria Ltd.)

Authority:
GlobalSign nv-sa

Valid from:
12/16/2015 4:25:15 AM

Valid to:
9/2/2016 3:10:29 AM

Subject:
CN=Agile Funnel (Alpha Criteria Ltd.), O=Agile Funnel (Alpha Criteria Ltd.), L=Tel Aviv, C=IL

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121703663FFB88F568A112BD801328BD38D

File PE Metadata
Compilation timestamp:
6/19/1992 3:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:I5PtGKT3T947xcWA3V9qAS98gFN4fDjibF1vS:IdlTa9hAl9pSbF48

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, 53, C9, FF, FF, E8, 9A, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, 24, CE, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, 24, CE...
 
[+]

Entropy:
7.9273

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file oovoo setup.exe has been seen being distributed by the following 50 URLs.

http://www.centertowernow.com/c?x=UEDsZ8C78K8T/ nUDL//lEBxu9wO MEz6SbiIVt/NtE=&c=kQMQRljpuWElZKnAKIZcStWIy oWSH6ZX3BMznBtKVzOVJhNE3/1vkvSSS5545myrrhmrRRO76sARqIYfe/RyY//f33Ptc3ANaev2PQQ6cmXicFkDnc0xMD5Pow/4bbOhMb6 00Om2G2cpwydMfDwg==&downloadAs=ooVoo Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.grabpresentapplication.com/c?x=pZabii9k7bMgYOoW0wGLgWpygLdaQVvuRAbjTRqrAK0=&c=QksK8en9LaHRi4kX9co0esGy6SPkB1ZjEKLgimvsAZsufh8VEBTvTkEmu6sWYarxaME0EYg/yhvkMvjx a8h ew5NnMv1WUrJ5bqyGs1fGqO0GiTR7GZFfETpJGjUavSuF5jDIz06rcYR6knNMCx1w==&downloadAs=ooVoo Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.universecontentvault.com/c?x=7TehZ0b/lvzS2U/DfBIlUddFxuFr4mcvy35OUiEF5bE=&c=Q4cJnA/ccGkviPrTeNdwPqT5aiPXKP72n9sNMC1NTLRE59SGm9t7MK0EQ8/cjPfojKTNxjBWoQCe EGJZvN4dR0m9h/HDwcJH8qVQ0CZ1kjDvyrAUQTAxx/q0scfTd/nJMcaTo5 WYGxY3W4LzHung==&downloadAs=ooVoo Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.currentbundlescontent.com/c?x=GoIdHGvuGHgJtuTFDV5NT sKxxqey8C0FMgLbnvpcdc=&c=xzO228M5AWu0LxDbmPuxsy/5zsw7M9iJbe9qdxf2qRRn3f4cqWViep6NjvI8MOElkYftq4ATBrqlT fg04H8f/tIinwQkw8uGuiEM7e3Ixjw7DCQ/1mScw79MENdCkChelYiSl236jT6CXMTyIonxA==&downloadAs=ooVoo Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.vaultsfilespackage.com/c?x=GjboxOnHkFA7PVigTPIZleOJjG8f3RbG7D57uUIESiM=&c=NQI7q msZGjrBR8/kYDuxAkWBWg3tpTtUgJ2n95p7RTl72HiiR4emrVEAzOZ8KhSHOh9iGFWAK1DS/8nXY4Z9GuRCh61MNwW2D2iJF9Ztnf7EQweZcFRT/KvmM1nA4Nv82khkufw7styCsCZNA8wqg==&downloadAs=ooVoo Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.grabpresentapplication.com/c?x=wKyIalfUytiOWlB01Hs/DF2558JFC0ElaWtFGaKtBI4=&c=xIuPgztpWER rnMtAGuZUmRm4 eEm2zkvBQjxb5DWhnwyIFz9dyLAnBxSXB8s6VKdmCvLhmnGK1tZ0oyj5ngdSx5KBg7hHTU5bFtniXNhoDfNqdP93tZ8KC6pCQa/8XjR8WXE0QMTe2oVmVvJOPZvw==&downloadAs=ooVoo Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.grabpresentapplication.com/c?x=NuqaqV0DOsfGKYd1UVp/6JseglbYEAgXhyBLhFs9RUc=&c=EzJxI2PWH/bEjYO/LZ0b06ni08SeoqDrWtQPHScmC0ZaO4a4zdZTz42DiiW6N0WaXAkIBENCPcB3HRNspALTqLaQp74ZyBEb5j MTrgLKgPGDqdyISPe75kxfmcGKVTTptSiSvZjFshHNxfptkVNnA==&downloadAs=ooVoo Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.grabpresentapplication.com/c?x=RR3ThFrp5SVtwQlywah27gZGPr3FEFUHzgEerEirXKk=&c=tH8FhjZ9Bc4wHhnwTt6SuD12QVAL2w4dwK4j7dBf4BX1R2GJsM3CZ23325tuBtvF1HcEsotMl/BJiUQ5vDL6EMV/ZfS kakTKczPKx mvAG DFKsLR4G8/wn0h3yljF0hkHfIvnv3kl MakGH/Kw4Q==&downloadAs=ooVoo Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.filescleartag.com/c?x=g76z0uolqAc3a7ZoH9X fSxE gpJUSYn6WS1QjSgzsg=&c=Wa/b hUusOeT0TVsSmz8ZPoooaIGBLcTCxrSa kovPDxZuKFhuwjvVAjzAik3ZVDzVQ8XMv/1e64V1C4RPfAMhbI2i iUiR0qTAOE/SSuytWimTxBHDGGoEM9xERuXSj6HVg6TOKfmMXr2C/tgYLuw==&downloadAs=ooVoo Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.currentbundlescontent.com/c?x=0lawX0vsn6KaTPju9SgAt7Re7wlf7C/FyyAMo8O0ma4=&c=nyQnwSlemw5U1hgE67myRJaY28utUg hBXDgF6Y9RpFWbap19LAxx7Vw/qVPInBOxj9Z34PcxtsHfW51EnzPVHtuD4ZmKqwPkAlXkJAN96AWTsroQC8o r2dtCaklJVP5HNA2/9Vj25LYtei0qsucg==&downloadAs=ooVoo Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.filescleartag.com/c?x=SAY6mhzFKSdefmX6LEklK7aIL2lNaQSXq6hMTJ4dp5Y=&c=/lr6Wz8sBJEYa3vUqTSkXNQzEAv8OY1cs SR9vbCfszM7PpOr/d4TpshphGmIiMIm2FN1rnQJXz5K9vy aVcaX3isykfVnY3qtEIBwF pUgT3WrBR9SquVmFZrfPf16QC34rF FFs08xa6QHLZ3LOQ==&downloadAs=ooVoo Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.grabupdatebundles.com/c?x=//hZBB6D6ZSH H98HIEkSipSsyc9CPb8QGn21KGgJUY=&c=3Q3OpKmQQMflEjHL4Z3HEgG5KLo0Hw9 owj9i4iLMRLwkSuvEfOyAhA Ut3ZUiv5RVsk eFn8r3kbBS/rpRH4i9LE7lJLVJuLx9MZOaxKxjfiLrhZQ OPKSQaULNK6NQ1TasQJw WFsnnBzpHUpdkA==&downloadAs=ooVoo Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.grabpresentapplication.com/c?x=gTVcrcL48A8re3EbHgdCeNfQ86ttrEW8DXPp9PPMTQ8=&c=de1sLkj8T7gRd/te2T1/e8b6p7Avgvrm4Eph2JV/OtRTu9miegPJWalXVGppri3GHS18A1TUfuxCQ/niQJ4GKOAfPcEQtqG2dZV645RaYuyYUi3N7mbetMf0FINhS56UvIBryAfnXsWXa0BzFykGMA==&downloadAs=ooVoo Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.universecontentvault.com/c?x=g1PrGsh 3lggzOhxNT0HwrbM3hMRBN04xKvMXJcx7TI=&c=8OJdvCQouQWbnHNRo9J9dnKEUmomHiKeu3Fcuhv/XqMDkIdO8CNAiT5/H9qYhCsTEF2xgtkYfRacUMxkgy9vCenoi1 NJiMDdLvLOqTW/2Br5wNr13T qvul5V//Jy8ia28uNL327Rz4AprRQcM1Rg==&downloadAs=ooVoo Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.centertowernow.com/c?x=oN1xg8Ge qOaycMlGQpO6OZCOFkjWT/qY0ybPunQcPU=&c=UKkuEUh7V Xyf53rTEzm0yv/9DCodEhUxDGPXlSLDizzmRr0NZWa/EP2toO0ZdQGEu9XzxzRowoiJBeIOZLL6bQn4DSvywSZUtunjHcbFTGPC LA0RxQGjiuhD6D0D7 46SCGE2Onew9m/Vjj1C/mw==&downloadAs=ooVoo Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.vaulttowerssigns.com/c?x=lJE2yrAF54QTMWZDuzNC2Fe6oi2GUqj3lYVYccE0Oq0=&c=71Fsy398HQiziXfkBcQTYjJQchSjOQCjBulQfwypfXejER3Fz9itPngSUGjZjIc3rEoBwIkDxjDDIJCGoNZDRNiQ8CbKqerVcsUPdkVDWiM2Dgn27ki/Ol6cjawO927rAm5FGIkCSMkiRJWqvO5WXA==&downloadAs=ooVoo Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.chuckledownloadstag.com/c?x=Rg1gj9oRsc58pO vkWNo4R2Ha9drhl9coN2DwekpGV8=&c=0VzjRhQo2Z7XlIaH5hX7Gz8fH2Rx77qmjj0tf0HkIjMTQCqAUd9EtG1Bt5LzuJ4G/6HOS5ZOtnLqCDL7ukr10eCRCntOkKz8bLvuPemKlOuujVY7XoDL1pcE mdKPlOOOv/YLwL4RNdLrBH iaWwpQ==&downloadAs=ooVoo Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.chuckledownloadstag.com/c?x= G1gzyEBlRd5A6Lrtb6WEX36P7ec59x6wnlJPbUuJ3U=&c=4CqssnvImN2QPr1vwDkrqg8vsYDRXhk8 k4cG4mi9Uj04wsKhZV3qJxOD1CEuwyi1acWhY0tU35CzrLypZ7ipIFNB7HBcQWnW62LMC0lt tWQ9GNhrk55tmWr wNQSW3hYLM3tubA7zH9svvhvkEcA==&downloadAs=ooVoo Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.centertowernow.com/c?x=YvfHz7ZxsknHQrje3y3lE Yt6DlHrqpYsk9XRqxULAA=&c=elXfnVSEigX009lvRrg LO3iqDn6JRULCu/BlX7hc19vfC0i1eh feG1VAutbzHfcv1VBnZbyCuBTsWv9wXKxS5848e4Zl3VG5hlZWmhSb05yQPct PrsVMMmvsMkGd 6zwJRcTi xxd8oSIB6OSuQ==&downloadAs=ooVoo Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.centertowernow.com/c?x=8vYsa/Qv6UBrL7yyarA7L54qxEch5ELXEaAdMlsYSuI=&c=DxZVA986WV4M ZAWb4MsT9IsKSG0HO3CQSXqN/Qej1kD81HeA75AxwA9qP/w7z/PrRxZClXH5CvMChLdcPXigNt2Gy5Sk7kcrJ5jpPs4i01oz LWeLpZVf9wYr6hsoPQK3rwJsRVpXgHTw8oikQyLg==&downloadAs=ooVoo Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.filescleartag.com/c?x=4IFOKZ5W2cVdZBpjLdiCusFiUYRMu3uINibP5eteG5Y=&c=ES8NEAKbI1 xtA9K3aKi5Td5fWl5Ue4cDIx0b1nKociks9DgecxrHD059Jm0tqOT16FeZN5n35LgPAnUg3k2wSZa94xm4BbFsSjkHbxoZtuudlfZp9O z OvZDKu1eTDzuCkn a1HJkoCESDXm0Y Q==&downloadAs=ooVoo Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.currentbundlescontent.com/c?x=TIPUTB6nfqnr376Fuf MsdmTFfEWPFiYjwVoJMT8D8s=&c=cmCM5xEK8e2BwkFVUFDbU/qklm46cCjSpKNCZH54u2XrtXNjdCoel xVZ5AQo4fQlVLx4yW5iaXUfWbOJX5utksGBGeK8EGC5RWVXlPIQpOpGX tJYRhCEp4N1zkdmYZarshKbjwFRd/9nHtRb0/5w==&downloadAs=ooVoo Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.vaulttowerssigns.com/c?x=NZjXQodUVnXwy67RUoSpJbVmITl04hmaZmO6ATW61ww=&c=/WKf7c Jzf980CvuNcvedawgORXDpwTBkL55vDZYUPv2ug9SPfKde5RUNS3J6NMUqNBIMAntTwEaTGUo6/46BwX1hTqAWyTQWMqh9G ZWnL4J7NjRnDhaMUqgL1AoRnlyB6w4wIIU HpizV3Cxg20A==&downloadAs=ooVoo Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.chuckledownloadstag.com/c?x=0iNA7baWYx c1a IHsnZMvTbSZ1wa2Abqdu c38ViGI=&c=HUWzyYpAKxYi4yrgtE3okoG4fCEVP/HUwVdnxfO0xnM/764gJDftC6Jg7CBsvenuuuwpt Ha2oCpBn0k1oNZyOeAH8X6w/BheLr21ymCTIp1N2twJ3g/WPkfzmABo2oHD//aNNzkrwZIXmSmoR9 wQ==&downloadAs=ooVoo Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.universecontentvault.com/c?x=O4BpJLeQ1nTjTzINETHZ5ukuT63qIoHLjGXX t6BzQQ=&c=6zRaNDIoIugr8C4rNHBzB9O6j4WvTyeZGZuwcE3pv2RUuHgQZ6CQc9XYPu956YOV5DgXp BNyCITvyMUe KF9/YRGmJbrqY9iVrsb9T7qpLeq5OAEXjkV4jG5kwy0zk6iTdo1czBXIzGW6/UtrkcAw==&downloadAs=ooVoo Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.grabpresentapplication.com/c?x=y8Bk5weG6hxlp bO8TnQym/HDd YAdACX5kRcVXZvY=&c=8UaBIc68dWkRg8eiV6cMcti1c7UVPOOhk8/oVVpZ250a1v726qOutUeHbBohJHPMNqey8Xv/txULg8T yXUwRjlI4g/sPR07aKWRrmlAKXl7iB8Gms6sLF42Hhcug1li2MsEVgjBFjfWYNwuOz/CsQ==&downloadAs=ooVoo Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.grabpresentapplication.com/c?x=EOeC7epC3sqAQNLWutwUHD7nzAzGoR0BHbVGBjBjxC8=&c=SfYBIzxMqWgtS0XIq7eg8//dtnliC4sa04aFTn1tOW ilbV7jA3wkU5hb4e2imUGDPLtmGKHtY2ITGIBkOqJx7rvn/kePSse9zhxDZvlj3GPGYRS Ij4VKF4ESDBFSgCuRMk K/8zGJneIv09dNSDw==&downloadAs=ooVoo Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.chuckledownloadstag.com/c?x=kK/8mgxOoGxjq/yasQNJ28LD8bU3fNw8 MC10SpF2hY=&c=FrvEkvHFqPa1puQyB7XnvuaHtQhPav4GVg1YCpY7CLefcUcZjLGbMRPMMO8rhVmDzImjv4ztlawl/JwOFuJmQnADMunzmRtMLfSA3yeD1JoSP6R 9DfPWKEY/ucBULB Gx4qwM4SZMLKzAjeV5hOaw==&downloadAs=ooVoo Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.universecontentvault.com/c?x=lP5WrORa0v7rDbfcc9YpZbB/Luchdm3 6lsrtpZIwIg=&c=abdpa35UZk1Yp41u IKfJRpUWhCqOKbffay Y/PbwTnHMVQHaDDsQZaSe1HsaJn3oY3JAkf4GMbm5MNiNeSc F/Rnb ayhJ5GfAaMDbhp7erSPAT09WVRHKmNx2xexd7/3OrT45vcyb/J0WSXR8e1w==&downloadAs=ooVoo Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.grabupdatebundles.com/c?x=6CJZL2b9BB/Jg5rCfifmvpN DnEhJnYy4vdhGGGiMjY=&c=6JoZbUntd9Mcfocwpa5u3Mk57A2cAhXjdpyx5eqIWtsGbNZKux7AnbcsXZ2Z/QGGLi9ENnP6iEQJuREMtdxMMIDB5/nO9 VzSflDIxu0OaH8g/uGw8hp3T9dqGo 7EvLHLfqI66gY4bDrcKaDZvx1A==&downloadAs=ooVoo Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

Latest 30 of 126 download URLs

Remove oovoo setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.