home

setup.exe

Liniad Media

The application setup.exe by Liniad Media has been detected as a potentially unwanted program by 8 anti-malware scanners. The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. This program installs potentially unwanted software on your PC at the same time as the software you are trying to install, without adequate consent.
Publisher:
Liniad Media  (signed and verified)

MD5:
12eceba90d7366ede572a8fe3ab5ba75

SHA-1:
28c43e77634143afa45c89ebc56ca149f18773b5

SHA-256:
ead177288edfe51e4649a7e60f0e3aa3b07095dd3b855201bf1e312042e52105

Scanner detections:
8 / 68

Status:
Potentially unwanted

Explanation:
Bundles additional adware offers during download and installation using the OutBrowse installer.

Analysis date:
11/27/2024 5:40:58 AM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Application.Bundler.Outbrowse.BA
5813571

AVG
Adware Generic_c.DGT
2015.0.4489

Dr.Web
Trojan.OutBrowse.70
9.0.1.05190

Emsisoft Anti-Malware
Application.Bundler.Outbrowse.BA
10.0.0.5366

ESET NOD32
Win32/OutBrowse.BB potentially unwanted application
7.0.302.0

F-Secure
Riskware.Application.Bundler.Outbrowse
5.15.21

McAfee
Program.Adware-OutBrowse.c
18.0.204.0

Norman
Application.Bundler.Outbrowse.BA
11.01.2016 17:30:26

File size:
564.4 KB (577,952 bytes)

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\setup.exe

Digital Signature
Signed by:
Liniad Media

Authority:
GoDaddy.com, Inc.

Valid from:
9/4/2014 8:42:04 AM

Valid to:
8/25/2015 7:13:46 AM

Subject:
CN=Liniad Media, O=Liniad Media, L=Tel Aviv, C=IL

Issuer:
CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, S=Arizona, C=US

Serial number:
2B980A0176F0EC

File PE Metadata
Compilation timestamp:
12/5/2009 2:50:52 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
12288:rNDu1+KH2r9Vtearcg0be2oYXb8+5OlonO5yvTkjo:r5u1dH2ZVt1rcgmx8+5OloOAgE

Entry address:
0x30FA

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, 60, 91, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, B0, 70, 40, 00, 53, FF, 15, 7C, 72, 40, 00, 6A, 08, A3, 18, EC, 42, 00, E8, F1, 2B, 00, 00, A3, 64, EB, 42, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, 98, 8F, 42, 00, FF, 15, 58, 71, 40, 00, 68, 54, 91, 40, 00, 68, 60, E3, 42, 00, E8, A4, 28, 00, 00, FF, 15, AC, 70, 40, 00, BF, 00, 40, 43, 00, 50, 57, E8, 92, 28, 00, 00...
 
[+]

Entropy:
7.9768

Packer / compiler:
Nullsoft install system v2.x

Code size:
23.5 KB (24,064 bytes)

Remove setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.