» File Downloader
Digital Signature
Analysis
Files (83)
Downloads (5)
Distribution (1)
Related (1)

File Downloader

Publisher Information

File Downloader is a software developer located in San Jose, California in the United States*. The company is a primary distributor of unwanted software. There is one additional code signing certificate issued to this publisher.

Authority:

COMODO CA Limited

Valid from:

9/10/2014 2:00:00 AM

Valid to:

9/11/2015 1:59:59 AM

Subject:

CN=File Downloader, OU=Weather Ping, O=File Downloader, STREET=5655 Silver Creek Valley Road, L=San Jose, S=CA, PostalCode=95138, C=US

Issuer:

CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

6c4833e98e5e20fec258194ce08b6826

Scanner detections:

Detections (100% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.FileDownloader, PUP.Installer.FileDownloader, Threat.Installer.FileDownloader, PUP.FileDownloader.Installer (M), PUP.FileDown.Installer (M), PUP (M)

100.00%

VIPRE Antivirus

Threat.4150696, Trojan.Win32.Generic, InstallMonetizer, Threat.4786532

56.00%

NANO AntiVirus

Trojan.Nsis.Downloader.djhpgw

56.00%

Dr.Web

Adware.Downware.918, Threat.Undefined

56.00%

Rising Antivirus

NS:PUF.SilenceInstaller!1.9DDF

56.00%

AVG

Generic, AdLoad, Could be an adware AdLoad

56.00%

Avira AntiVirus

APPL/Downloader.Gen, PUA/InstallMonetizer.Gen

54.00%

G Data

Win32.Adware.InstallMonetizer, NSIS.Adware.InstallMonetizer

54.00%

Malwarebytes

Riskware.Vmdetector, PUP.Optional.CheckOffer

42.00%

SUPERAntiSpyware

Trojan.Agent/Gen-Agent

42.00%

1 / 68 (Adware)

installmanager1.exe (57dd9f9802e51b170a30d43806aa428a)

1 / 68 (Adware)

installmanager1.exe (08e2ccc63fb478a1e16aa5b388d44467)

1 / 68 (Adware)

installmanager1.exe (1941b46b9cb61e89cbae1d28a6a1484e)

1 / 68 (Adware)

imun.exe (5891a35a87879e5ec8129911200bcdb9)

1 / 68 (Adware)

installmanager1.exe (984ed7cbd1f6092cd6a269658d8d0a36)

1 / 68 (Adware)

imun.exe (021fae1e5c8c573888f0c43da74890e5)

1 / 68 (Adware)

nsjb286.tmp (868fe75e24c46787800afec9e58cafec)

1 / 68 (Adware)

imun.exe (51b58fa2125c7c6ae8dfef36e547b1b7)

1 / 68 (Adware)

installmanager.exe (164d5e5ef5438a7cc9d0b67b6a1ecf2d)

1 / 68 (Adware)

imun.exe (ba61ca48999cc034c9176f2bc1b95b18)

1 / 68 (Adware)

installmanagerns.exe (35186ae2fd1444e581b9fc0ea09a44c1)

1 / 68 (Adware)

nsr699d.tmp (0328138c53c402643cb3b1bb31e7f0aa)

1 / 68 (Adware)

installmanager.exe (6378aff7a33850da5514965dad19acea)

1 / 68 (Adware)

installmanagerns.exe (9965a0218490c9f2a2973dc0634c8119)

1 / 68 (Adware)

installmanagerns.exe (8b1cd9caecdb7a0dd6fdbf245b0fa5a9)

1 / 68 (Adware)

installmanagerns.exe (3409412a2dabcd42d24c8300866fcf1e)

1 / 68 (Adware)

installmanagerns.exe (64c84238f1b93b3913f4c118707f8b34)

1 / 68 (Adware)

installmanager1.exe (78d29de9379b9c389b2ac216206ace0d)

1 / 68 (Adware)

installmanager.exe (5b82f729efa957b90895be9ef079c141)

2 / 68 (Adware)

installmanagerns.exe (c33c35402a1513a09a1d16e375d6985e)

1 / 68 (Adware)

installmanager.exe (43b0d88d9970f072f0d2a225719aed68)

15 / 68 (Adware)

installmanagerns.exe (2f5b46ba582c16c8db74b55f1a6ea6df)

18 / 68 (Adware)

imun.exe (8367497e8af7391bf8f151f08a5b2bab)

16 / 68 (Adware)

installmanagerns.exe (5b2ce635f1f505a70b00543c8148b374)

18 / 68 (Adware)

installmanager1.exe (a1bd4bc739ad1de8d8e5a63a62ebeb48)

8 / 68 (Adware)

installmanagerns.exe (25309552db4b01f5b42373acca74a55c)

7 / 68 (Adware)

installmanager.exe (f4ea836c50a70ded4fecae1dfe225f99)

9 / 68 (Adware)

installmanagerns.exe (191ba420a78d090807e1da4c39c4a0c4)

15 / 68 (Adware)

imun.exe (bbdf945b9f06106195390ff4bd67c5c8)

17 / 68 (Adware)

installmanagerns.exe (bdd5cae73d776fbaa41453b240c8494b)

Latest 30 of 83 files

Downloads URLs for files signed by File Downloader.

15 / 68 (Adware)

http://www.codec13sudha.com/download.php?l4J9dw== (20150210148907.exe)

11 / 68 (Adware)

http://www.codec13sudha.com/download.php?l4J9dw== (nsc2e68.tmp)

15 / 68 (Adware)

http://www.codec13sudha.com/download.php?l4J9dw== (20150212138907.exe)

17 / 68 (Adware)

http://www.codec13sudha.com/download.php?l4J9dw== (nsy504b.tmp)

11 / 68 (Adware)

http://www.codec13sudha.com/download.php?l4J9dw== (2015021778907.exe)

Distribution

The following websites host and distribute files published by File Downloader.

www.codec13sudha.com

The following certificate is also signed by File Downloader.

7F023F854D489D110BB614B5235CA6CF (Jul 20, 2016 to Jul 21, 2017)

The following publishers (by Authenticode signature organization name) are related.

Install Manager

* Note, the details and description above are based on the code signing digital signature issued to File Downloader by COMODO CA Limited on September 10, 2014 with the serial number '6c4833e98e5e20fec258194ce08b6826'.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.