home

PrivacyDRSetup.exe

Privacy DR

EuroTrade Ltd

The application PrivacyDRSetup.exe, “This installer database contains the logic and data required to install Privacy DR.” by EuroTrade has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. This is a setup and installation application and has been known to bundle potentially unwanted software. The file has been seen being downloaded from privacydr.com and multiple other hosts.
Publisher:
EuroTrade A.L. Ltd  (signed by EuroTrade Ltd)

Product:
Privacy DR

Description:
This installer database contains the logic and data required to install Privacy DR.

Version:
2.6.7

MD5:
5e7b0c1ad86547479438e20756bc412e

SHA-1:
326f1085abf5ef36731105823f369a9d1a674665

SHA-256:
6afc9bdb907b8cde27cea2929802c47a5888f4bd36fe2408eb39b8dce1e299cd

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
12/28/2024 2:49:43 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.EuroTrade.RegClean.Optional.Installer.Meta (L)
15.8.26.16

File size:
4.6 MB (4,838,232 bytes)

Product version:
2.6.7

Copyright:
Copyright (C) 2015 EuroTrade A.L. Ltd

Original file name:
PrivacyDRSetup.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\privacydrsetup.exe

Digital Signature
Signed by:
EuroTrade Ltd

Authority:
COMODO CA Limited

Valid from:
11/2/2014 4:00:00 PM

Valid to:
11/3/2015 3:59:59 PM

Subject:
CN=EuroTrade Ltd, O=EuroTrade Ltd, STREET=Izik Shtern 1, L=Tel Aviv, S=Hamerkaz, PostalCode=62153, C=IL

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
009B1A22ADB93727A6986684C4D58CF9BC

File PE Metadata
Compilation timestamp:
10/7/2014 8:05:58 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
98304:QG7cl1155MF19lA5YmUqzMK3BVeRTYTYivDcsGObb5fsQz62fCi:RuQK5kqz0+tJeQe4H

Entry address:
0xC87EC

Entry point:
E8, 4A, CC, 00, 00, E9, 79, FE, FF, FF, 8B, FF, 55, 8B, EC, 51, 53, 56, 8B, F0, 33, DB, 3B, F3, 75, 1E, E8, 5D, 4D, 00, 00, 6A, 16, 5E, 53, 53, 53, 53, 53, 89, 30, E8, C5, D5, FF, FF, 83, C4, 14, 8B, C6, E9, C2, 00, 00, 00, 57, 39, 5D, 0C, 77, 1E, E8, 39, 4D, 00, 00, 6A, 16, 5E, 53, 53, 53, 53, 53, 89, 30, E8, A1, D5, FF, FF, 83, C4, 14, 8B, C6, E9, 9D, 00, 00, 00, 33, C0, 39, 5D, 14, 66, 89, 06, 0F, 95, C0, 40, 39, 45, 0C, 77, 09, E8, 0A, 4D, 00, 00, 6A, 22, EB, CF, 8B, 45, 10, 83, C0, FE, 83, F8, 22, 77...
 
[+]

Entropy:
7.6406

Code size:
1021.5 KB (1,046,016 bytes)

The file PrivacyDRSetup.exe has been seen being distributed by the following 11 URLs.

http://privacydr.com/.../PrivacyDrSetup.exe

http://www.privacydr.com/.../PrivacyDrSetup.exe

http://en.softonic.com/sads/tracker.php?ev=c&co=RS&sid=e2c1f9dd696d3bec3a5270284926b86a&upv=b2ba23be1d7624f1dd25041641b24e5c&z=results&sk=0&abt=&eid=&params=F39B2A32BFC101987B1458170C278E0313858C8F8C1052086E0A941149460CE730E5266AC9C481B9A36E26842F9808A43A210B73DE2719D74066B313F89A2DE1948D32982ADF040BAA45283A6D4E10A7365CF56B774C1FFA95CB2A4FC7AA62D3E410435FD209F59A670DF27D8D33543518976E6A7308E371DEFBFBE6C4FA2FBA91A2526919519E11389EE606E7569F398F2F4DBFF0892776C7484B543EA834747117209CEE094044B2408333F16B53BA&h=7027AA3EB368B2A3607837FD943D1B45726F823B149A05B4B0734F42C0F0F0CD&directdownload=1&f=69667945&d=http://www.privacydr.com/.../PrivacyDrSetup.exe

http://en.softonic.com/sads/tracker.php?ev=c&co=SA&sid=f4d29c8802ff4e5c011a0f69545372f3&upv=79eb5892eec761509025db97f0895239&z=results&sk=0&abt=&eid=&params=F39B2A32BFC101987B1458170C278E0313858C8F8C1052086E0A941149460CE730E5266AC9C481B9A36E26842F9808A43A210B73DE2719D74066B313F89A2DE1948D32982ADF040BAA45283A6D4E10A7365CF56B774C1FFA95CB2A4FC7AA62D363B6BB7C343B8E2711C70C1DE7D29810F213005EA4F11754146470AF645DA5080E61A593D4D1D89E206F44DC27F95A74609AAC30FCDB3EFC9074B9DA05C0D9B333DC5E688237EF376F07710CF5FFE28A&h=FC468FDADA76DA987B6D7F51325460A6B3618B9EC98364A5EE49366FB386F797&directdownload=1&f=69667945&d=http://www.privacydr.com/.../PrivacyDrSetup.exe

http://en.softonic.com/sads/tracker.php?ev=c&co=RO&sid=69bfb78d2ac4124ec7eb5af75ede5672&upv=d24ba006145a31340832f82f61394571&z=results&sk=0&abt=&eid=&params=F39B2A32BFC101987B1458170C278E0313858C8F8C1052086E0A941149460CE730E5266AC9C481B9A36E26842F9808A458568D4167118F1AC25A44A5E427170134E0F4C745D507285EC4E43FF81CAE01A0ED51C3657B2EB21613B554D24C1947E089D30F0DC84CEEA43375B1329BE3B3D1ABD4309AC4C77AF4819E92F2365B0B58F1FA2A7D4909B768A34362E1010A352034C77ED44EAC864092C927E9E4D085&h=B1334CBE0A40746BA0B535259CCF9EECCC70054F926F7847031F253FAEA6A088&directdownload=1&f=69667945&d=http://www.privacydr.com/.../PrivacyDrSetup.exe

http://en.softonic.com/sads/tracker.php?ev=c&co=IL&sid=34f8e9b9ba6eef4373ffea3bbbc8dcd9&upv=bc49ae6319c702f6f760dd2fe1195015&z=results&sk=0&abt=&eid=&params=F39B2A32BFC101987B1458170C278E0313858C8F8C1052086E0A941149460CE730E5266AC9C481B9A36E26842F9808A4C709C4752C842FEC322EB9B38D734EF833AB1F20202347B7B953C29ECCFB783A0E3E11F04F26C2B89FC6A814315A0AED0CE6B2E4D146954FACEBC880825B1E24022F09F8EEEC60BA9089B8AE9442A27111B3B9A39D4768DB24953FD94B3129438ACE791F97991FA4659A656836E55DC222B6ED4CBC425B57C19F0E03137D803B&h=71CE65A41C502B49606C3B0347B442545AE7FA92A14AE0F174B72377C4663DAA&directdownload=1&f=69667945&d=http://www.privacydr.com/.../PrivacyDrSetup.exe

http://software-files-a.cnet.com/s/software/14/46/51/.../PrivacyDrSetup.exe

http://en.softonic.com/sads/tracker.php?ev=c&co=MY&sid=e90c3859ff40a831896aecf5c9fbaf72&upv=6a2fe85767328b9479c825ce7747d3ef&z=results&sk=0&abt=&eid=&params=F39B2A32BFC101987B1458170C278E0313858C8F8C1052086E0A941149460CE730E5266AC9C481B9A36E26842F9808A416059DFFDAFB9F75799D9E5276238373488150E4DDCE201A270C6A121A4D35E8D8C57722CB1BF18B775094E0538FF3F1FDBAAD4C8F195C16AAB72483F1C99545CED3696714679E7AAC806754FC44B7B607166B48012B65F5906110C8184449C422B4CF45CF3CC9B6FC7C7EA6F3DC053E0FEA8D55EEFF560AB1C6E1B8A58FA88C&h=378A349A3B3B9D96AAEB8B3F9CC17C67B81C56C6A032D10272EDA03EC903ADBB&directdownload=1&f=69667945&d=http://www.privacydr.com/.../PrivacyDrSetup.exe

http://promo.privacydr.com/.../privacydrsetup.exe

http://7500.biz/files/.../privacydrsetup.exe

https://downloads.upclick.com/download.aspx?id=479125db-b606-40b4-8920-ffd7c1e9485d&mkey1=1&mkey2=2&mkey3=30062&uid=1013123&wid=5518

Remove PrivacyDRSetup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.