» Download Admin
Digital Signature
Analysis
Files (38)
Downloads (2)
Domains (6)
Distribution (1)
Related (16)

Download Admin

Publisher Information

Download Admin is a software publisher located in San Francisco, California in the United States*. The company is a primary distributor of unwanted software. DownloadAdmin is an ad network and installer/bundler (downloadable product monetization tool) of potentially unwanted software and distributes adware from various publishers including PriceGong, IAC/Ask.com, ComScore, ALOT and many others. The company is run by Tightrope Interactive. Brands include Playfin, UberDownloads, DownloadAdmin and Search.us.com. It distributes its offers via freedownloads.us.com. Thre are 2 additional code signing certificates issued to this publisher.

Authority:

VeriSign, Inc.

Valid from:

6/21/2009 8:00:00 PM

Valid to:

5/30/2010 7:59:59 PM

Subject:

CN=Download Admin, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Download Admin, L=San Francisco, S=California, C=US

Issuer:

CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

0b3c4c63ab2e7d3d56ccc830179f66f0

Scanner detections:

Detections (100% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.DownloadAdmin.I, PUP.DownloadAdmin.EE, PUP.DownloadAdmin.J, PUP.DownloadAdmin.d, PUP.Installer.DownloadAdmin.M, PUP.Installer.DownloadAdmin.K, PUP.DownloadAdmin.FF, Threat.Tightrope.Bundler, PUP.Tightrope.DownloadAdmin.Bundler (M), PUP.Tightrope.Download.Bundler (M), PUP.Tightrope (M)

100.00%

MicroWorld eScan

Adware.DoubleD.D, MemScan:Adware.Mongoose.A

7.89%

nProtect

Adware.DoubleD.D, MemScan:Adware.Mongoose.A

7.89%

McAfee

Generic PUP.x!ek, Artemis!27ACA32C84AF

7.89%

K7 AntiVirus

Riskware, Riskware

7.89%

F-Prot

W32/MalwareF.GMOJ, W32/Relevant.B

7.89%

Bitdefender

Adware.DoubleD.D, MemScan:Adware.Mongoose.A

7.89%

Emsisoft Anti-Malware

Adware.DoubleD, MemScan:Adware.Mongoose

7.89%

VIPRE Antivirus

DownloadAdmin, Trojan.Win32.Generic

7.89%

Quick Heal

Win32.Adware.DoubleD.4

5.26%

1 / 68 (Adware)

pdfcreator-setup.exe (16306c48ad14b34e742e9530a0ef5a06)

1 / 68 (Adware)

atariclassicarcade-setup.exe (747d12c0cba330e628b50bee7c7cf924)

1 / 68 (Adware)

bejeweleddeluxe.aptxpgwbas01.77-05107ab3-c585-4ff2-bd03-08ef5d27fbf6.exe (99d57dd1c7c85722177ff369b2f1d2e4)

1 / 68 (Adware)

7zip.pcsw02.78.exe (b505fc888c5ab7d23b4483ad63759a2d)

1 / 68 (Adware)

setup.exe (bf01be8188d7d486cd28b0d4320cdc58)

1 / 68 (Adware)

openoffice-impress.aptcspgwbas01.78.exe (66642762df11b3602837d789386514c6)

1 / 68 (Adware)

openoffice-impress.aptupgwbas01.78.exe (d5fba7dfaee13d9159df7f354b883cef)

1 / 68 (Adware)

zumasrevenge.aptxpgwbas02.77.exe (8c8347761699fe7119468fc38e7ea5b8)

1 / 68 (Adware)

chessmasterchallenge-setup.exe (872cf5706c0db03873503dfd5238ae62)

1 / 68 (Adware)

openofficeimpress-setup.exe (24bea63ace67a6b91043bcec5d9afa41)

1 / 68 (Adware)

bejeweleddeluxe-setup.exe (f37c9cc553c66806e24c29002461edf5)

1 / 68 (Adware)

deusexe.aptxpgwbas01.77.exe (f16c270406f38cdf69f60b38d94ed5f4)

1 / 68 (Adware)

brutalchess.acnpgwbas01.77.exe (e90ad1c7be1742e3e2299b187fcec92b)

1 / 68 (Adware)

setup.exe (2514d43b4cc85161b8337a59cfa8a259)

1 / 68 (Adware)

setup.exe (dd6a0df2d62e94e25cf218421017778f)

1 / 68 (Adware)

mahjongmedley-setup.exe (6e5970bd324f347a065929232e1a953b)

1 / 68 (Adware)

puredeftb.cspgwbxas02.exe (8996c5400186a2f3776786b98c0704e7)

1 / 68 (Adware)

openofficewriter-setup.exe (73b33b2bd01c7bc140df428237418ef2)

1 / 68 (Adware)

setup.exe (20d29c81628c17e02a49aef34cd3a3b9)

1 / 68 (Adware)

openoffice-suite.aptpgwbas01.78.exe (ef0d52d6d3085ce3873bce235ace3eac)

1 / 68 (Adware)

openofficeimpress-setup.exe (585f8ad927992aa2eddcad3b2f4ec89c)

1 / 68 (Adware)

puredeftb.cspgwbas03.exe (e91d870dc16a9a65b6bfe2c799c5e497)

1 / 68 (Adware)

vlc.us01.exe (648d362cb12d681e84f40fd8ee163983)

1 / 68 (Adware)

openofficesuite-setup.exe (b4c55a03e08c1efe1435f28842d56d54)

23 / 68 (Adware)

bloxxi.aptcspgwbas02.77.exe (66327dbae2d03d7f5e0fd8eb98a01f21)

1 / 68 (Adware)

vlc-setup.exe (7179f738b9df6a4ae879222f152ae494)

1 / 68 (Adware)

eurotrucksimulator-setup.exe (f756ff241557f8262fadcb99d3b22c2a)

1 / 68 (Adware)

openoffice-writer.apgwba01.78.exe (77c3abbc055afad4a54e2d3fb81cae45)

1 / 68 (Adware)

pdfcreator.aptupgxwbas01.78.exe (46e31e583c345f8780475b1ad6c6eabf)

1 / 68 (Adware)

open office.exe (d712fff83c854ccd77f88af3480e5179)

Latest 30 of 38 files

Downloads URLs for files signed by Download Admin.

1 / 68 (Adware)

http://files.downloadadmin.com/download.php?bc=56&d=3&cb=1754786240.exe (7179f738b9df6a4ae879222f152ae494)

22 / 68 (Adware)

http://cdn.cloudfiles.mosso.com/.../7zip.us02.exe (6c96a474a1d5cc194f65e7bb32468de8)

Domains

Top-level domains owned by Download Admin.

Distribution

The following websites host and distribute files published by Download Admin.

cdn.cloudfiles.mosso.com

The certificates below are also signed by Download Admin.

2EEB247A8F9D63D74CE7EF9551E3D401 (Mar 19, 2013 to May 29, 2016)

29529B0D185F8525A92A866D4A38DA3A (Apr 03, 2010 to May 30, 2013)

The following publishers (by Authenticode signature organization name) are related.

Full Spectrum Interactive

* Note, the details and description above are based on the code signing digital signature issued to Download Admin by VeriSign, Inc. on June 21, 2009 with the serial number '0b3c4c63ab2e7d3d56ccc830179f66f0'.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.