home

setadobe_reader_10.exe

NewDownInstaller

QUALITY SCORE SL

The application setadobe_reader_10.exe by QUALITY SCORE SL has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. This is a setup and installation application and has been known to bundle potentially unwanted software. The file has been seen being downloaded from curriculum-vitae-europeo.programas.io and multiple other hosts.
Publisher:
QUALITY SCORE SL  (signed and verified)

Product:
NewDownInstaller

Version:
1.0.14.0409

MD5:
12b8c068dbeae0cb86665f3fc9e2bfd0

SHA-1:
ce17b3df7cdca6f52f555df65aff1386cdf6bcd5

SHA-256:
8ff97b246fe2260542e343f2b609a70d1707627b691697a5549e0149eebe64f5

Scanner detections:
1 / 68

Status:
Adware

Note:
Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Analysis date:
12/24/2024 4:27:29 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.QUALITYSCORE.Installer (M)
15.7.25.15

File size:
2.5 MB (2,632,384 bytes)

Product version:
1.0.14.0409

Copyright:
Copyright © 2013

Original file name:
NewDownInstaller.exe

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\downloads\setadobe_reader_10.exe

Digital Signature
Signed by:
QUALITY SCORE SL

Subject:
CN=QUALITY SCORE SL, O=QUALITY SCORE SL, STREET=CALLE SERRANO 213, L=MADRID, S=MADRID, PostalCode=28016, C=ES

Serial number:
4AB0F061E1C305B4B31A8ACE3AEA2E01

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
49152:WAbCIDIYvIpOZ4DOkpv9zqeEFf+ENvIpOrv5aWNtk6lDn3YQoKRcct:jbvkwIcZOPlzqe++OIc755NOkt

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C# / Basic .NET

The file setadobe_reader_10.exe has been seen being distributed by the following 26 URLs.

http://curriculum-vitae-europeo.programas.io/down.php?id=curriculum-vitae-europeo&s=&idE=

http://www.zdescargas.com/down.php?name=TomTom Home

http://www.zdescargas.com/down.php?name=BitTorrent

http://www.zdescargas.com/down.php?name=outlook 2012

http://www.zdescargas.com/down.php?name=McAfee Total Protection

http://www.zdescargas.com/down.php?name=Skype

http://www.zdescargas.com/down.php?name=Adblock Plus

http://www.zdescargas.com/down.php?name=Utorrent

http://www.zdescargas.com/down.php?name=

http://www.zdescargas.com/down.php?name=VLC media player

http://www.zdescargas.com/down.php?name=Windows Movie Maker

http://www.zdescargas.com/down.php?name=Video DownloadHelper

http://www.zdescargas.com/down.php?name=DirectX 9

http://www.zdescargas.com/down.php?name=PDFCreator

http://www.zdescargas.com/down.php?name=Adobe Reader 10

http://www.zdescargas.com/down.php?name=Microsoft Office 2010

http://www.zdescargas.com/down.php?name=Nero Burning ROM 12

http://bpm-detect.programas.io/down.php?id=bpm-detect&s=&idE=

http://www.zdescargas.com/down.php?name=Audacity

http://www.zdescargas.com/down.php?name=OpenOffice

http://www.zdescargas.com/down.php?name=Firefox

http://www.zdescargas.com/down.php?name=Ares

http://www.zdescargas.com/down.php?name=Samsung Kies

http://www.softmillon.com/down.php

http://www.zdescargas.com/down.php?name=Reproductor FLASH

http://www.zdescargas.com/down.php?name=Ares 2012

Remove setadobe_reader_10.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.