home

Setup.exe

My Online Media Ltd.

This is a component of the Bundlore download manager which bundles applications with offers for additional 3rd party software, mostly unwanted adware, and may be installed with minimal consent. The file Setup.exe by My Online Media has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. This downloadble file is typically blocked through Google's Safe Browsing technology in Chrome web browser.
Publisher:
My Online Media Ltd.  (signed and verified)

MD5:
cd3cf422d5db8e66a994a45deb725d16

SHA-1:
d0cc9709553bf8a7c61503925938f49866269750

SHA-256:
085e24285d6847d6749a9c73bccd12f8d8d3fa0a7727aadc6652a237a5c37ea6

Scanner detections:
1 / 68

Status:
Adware

Note:
Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Analysis date:
11/23/2024 5:36:36 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.Bundlore (M)
17.3.7.11

File size:
255 KB (261,112 bytes)

Common path:
C:\users\{user}\downloads\setup.exe

Digital Signature
Signed by:
My Online Media Ltd.

Authority:
COMODO CA Limited

Valid from:
10/4/2014 7:00:00 PM

Valid to:
10/5/2015 6:59:59 PM

Subject:
CN=My Online Media Ltd., O=My Online Media Ltd., STREET=21 Ahad Ha'Am St., L=Tel Aviv, S=Israel, PostalCode=6515103, C=IL

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
009EF11EA9CC37B8E963315B6B2A81E301

File PE Metadata
Compilation timestamp:
2/14/2015 10:37:33 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
12.0

Entry address:
0x32AA

Entry point:
E8, 9D, 47, 00, 00, E9, 00, 00, 00, 00, 6A, 14, 68, 48, AD, 41, 00, E8, 00, 2D, 00, 00, E8, 6E, 49, 00, 00, 0F, B7, F0, 6A, 02, E8, 30, 47, 00, 00, 59, B8, 4D, 5A, 00, 00, 66, 39, 05, 00, 00, 40, 00, 74, 04, 33, DB, EB, 33, A1, 3C, 00, 40, 00, 81, B8, 00, 00, 40, 00, 50, 45, 00, 00, 75, EB, B9, 0B, 01, 00, 00, 66, 39, 88, 18, 00, 40, 00, 75, DD, 33, DB, 83, B8, 74, 00, 40, 00, 0E, 76, 09, 39, 98, E8, 00, 40, 00, 0F, 95, C3, 89, 5D, E4, E8, EF, 3E, 00, 00, 85, C0, 75, 08, 6A, 1C, E8, DC, 00, 00, 00, 59, E8...
 
[+]

Entropy:
6.9014

Code size:
77.5 KB (79,360 bytes)

Remove Setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.