vdownloader4oc.exe

VDownloader

Somoto-inc Limited

The application vdownloader4oc.exe, “VDownloader Setup ” by Somoto-inc Limited has been detected as a potentially unwanted program by 4 anti-malware scanners. This is a self-extracting archive and installer and has been known to bundle potentially unwanted software. Includes the Somoto BetterInstaller, an adware installer that will bundle offers for third party applications, mostly adware toolbars, with legitimate softare. These offers are typically installed onto users' PCs by default, but may include an option to 'opt-out' during or after the installation process.
Publisher:
(c) Vitzo Limited   (signed by Somoto-inc Limited)

Product:
VDownloader

Description:
VDownloader Setup

MD5:
a477434463d09ff40912a7d829142bc8

SHA-1:
56167873dad68f66079efcd51fb6659dc7c3c3f4

SHA-256:
25fe077a8afda0a748bc77d9c6e21513aa3b1c5c53fc4d21ad97a136577c9cec

Scanner detections:
4 / 68

Status:
Potentially unwanted

Analysis date:
11/27/2024 1:12:13 PM UTC  (today)

Scan engine
Detection
Engine version

Bkav FE
W32.HfsAdware
1.3.0.7383

Dr.Web
Adware.Somoto.144
9.0.1.0315

Malwarebytes
PUP.Optional.Somoto
v2015.11.11.12

Reason Heuristics
PUP.Somoto.Somotoinc.Installer (M)
16.1.29.10

File size:
711.8 KB (728,920 bytes)

Product version:
[name/version]

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\vdownloader4oc.exe

Digital Signature
Authority:
Unizeto Technologies S.A.

Valid from:
1/28/2015 10:16:27 AM

Valid to:
1/28/2016 10:16:27 AM

Subject:
E=support@somoto-inc.com, CN="Open Source Developer, Somoto-inc Limited", O=Somoto-inc Limited, C=BR

Issuer:
CN=Certum Level III CA, OU=Certum Certification Authority, O=Unizeto Technologies S.A., C=PL

Serial number:
29F1A62452FF40BB83A6D4AC14453838

File PE Metadata
Compilation timestamp:
7/16/2015 10:24:20 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
12288:cSxGH/JyZG888888888888W88888888888S9bNXkDqnwuY09CFVzxzsDIbOTyNQ1:zxGsZT9bxkDqwz09kX5XuGJ9rj3teH

Entry address:
0x113BC

Entry point:
55, 8B, EC, 83, C4, A4, 53, 56, 57, 33, C0, 89, 45, C4, 89, 45, C0, 89, 45, A4, 89, 45, D0, 89, 45, C8, 89, 45, CC, 89, 45, D4, 89, 45, D8, 89, 45, EC, B8, 34, 00, 41, 00, E8, E8, 51, FF, FF, 33, C0, 55, 68, 9E, 1A, 41, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 5A, 1A, 41, 00, 64, FF, 32, 64, 89, 22, A1, 48, 5B, 41, 00, E8, 1E, D8, FF, FF, E8, 6D, D3, FF, FF, 80, 3D, DC, 2A, 41, 00, 00, 74, 0C, E8, 33, D9, FF, FF, 33, C0, E8, 80, 32, FF, FF, 8D, 55, EC, 33, C0, E8, E2, A3, FF, FF, 8B, 55, EC, B8, 54, 86...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
63.5 KB (65,024 bytes)

The file vdownloader4oc.exe has been seen being distributed by the following 50 URLs.

http://www.ranchsendgift.com/GA_iFHl7LH5F1s hl QwRNtTs9Rf2ol8SQrZ8RyLzdN7NKE5HYEelVvYE6nKyscufwslZpuk932garmNuQNIXRVUsBFFj4PLnDVcepkDXKLkV6_wrN6EZ3GKX1kLNGPoWhB75kbPC1B_N7alUA_eJKHc7jLnej1uooWKZ a27xRiB153jcREFjNyqMADVpO7RFKFMXpdOwa_xh_mpwOfnYhnRGKt4jNjIhCnhBqa7iarBeBx6T3Q0HMO2D6mVnZdyNVwF0a0N9B2puC8UPIEV2AzfNPmze97APuZvqtWViLNbW3sKCekT6NLkuJsoSsxzAO1BjhpiWpwMDt1Y OL8FjPJ7kr6U42Q3wdF7eSzwhgBYt4Rpemal3oz0oOFq9Ruz4_4tdwTreQa1ACxQk267A13Aar6UfOvCaNe Hcl3wEZy2TJSV82tpAT4vXp0KgFXlGw0BfLAIcN6uIrpD0maLEc5MQRVN1ehu10evD2wwOaxbeK2Y=-GzMAAERPFtvPp2iRTSgUMJEDh5ZodiB5Yxl4ssaZgyWTq2HopenWMZQhzA8=-e

http://www.ranchsendgift.com/hnjUyitKBBG0C27 VEn5mH84OAgfVV9c91emIqmPzs 14SKg9wGyUmU47ZHqU8N8_Hy XmYZoCGojgH_Kc6CBTtthUUiq_IrxEMeQZ 1ciNEOGE7xwD cmZkxnPm5xua7FDbHouC1zY0iM7puRQLLSFJ7idVdFGBEMY3Ya3d8NnSARP7FuNCIfQyhsOFwIBjD7EZDh160vGZPe0pp8c3A5CIGFlnA==-GzMAAERPFtvPp2iRTSgUMJEDh5ZodiB5Yxl4ssaZgyWTq2HopenWMZQhzA8=

http://www.ranchsendgift.com/RxFUuEMaJo7ryGa77i2e6UqkwSk_lMO7nTSf49UYJFft7cNl5DlqekPDzmJgFaOJy23jo n3hVcBG18zbU4NAhVrAxo9dLkYeRz_0WOZZQ5svxgUxssubNBHyJRRKDNN5I9h0sDelmQKRY4D0BGTk7hOpVlebnkusX9puT0CIVBKOF4GyNOljLsaA1jNGLteOwrqMJPFY9XhRftwOIiQ v_Z7aR0PA==-GzMAAERPFtvPp2iRTSgUMJEDh5ZodiB5Yxl4ssaZgyWTq2HopenWMZQhzA8=

https://doc-0c-4o-docs.googleusercontent.com/docs/securesc/3ai60ek5vcvp74qbdfjcsll7u6gfjm38/f166gg8af541c5kvatnefkl8st84qmq1/1476741600000/.../17333793267904295297/0B5mdL_eAzPLqVm5EMnlpaXQxd1U?e=download

http://www.ranchsendgift.com/mf17t43hlr5v1dbiiRp0mRCMzZslmASCd_OGyRtFtFCF75iD2x_Lvr2X1pkDkIh96tSKv_qxPYIgTse7n 8E4lnC1QTUE6T x8geKj8RUbHGcBB7tQTEEtP8R_oN5qfeaHI5ux1hvR MHurFdRKsX5fMQ UUFkYwZM1RV5WwMpRBwMH4MYa_TUqdW9oMqiIlEbgLtkyYpP5ylq_GMSjjHZzwBlV6CA==-GzMAAERPFtvPp2iRTSgUMJEDh5ZodiB5Yxl4ssaZgyWTq2HopenWMZQhzA8=

http://getvdownloader.com.br/VDownloader4OC.exe

http://www.ranchsendgift.com/NU39UOID6v5X8b3A6lP0WNZAtyfRiLUMWcp7FK7vXBz0aYDNS7aS0e2gZAe TA9o95xDOK7mCcsMfYiYyoUBKCV0fmT 7zqMccITAiJx5ju1xJRFNXTOV_HJQpf Wh8joaUvQJjWlr2yg32kZoZnCj6FkNGldLRCRQ YVcTMh c5aWiywgtTzCUtFh7KMWfIw2xmGH_1I3pzwhWlee06bO RbAike_s7a b0w4vtRmgJdbF7amVc6I_hu9no8z4Mdtypah01FjoW94gy 6pBIqI8AP1QsN_xtt87r0fJcmq5dDYhoF P 2kcRWrqgMLWNllBZzLoC8oOmAyxywAOMtibWkwbOZOIBmU GOyduw6VAC37_bXVrUM 6yNbMFcMQf02U_4YTiKHZBqO5KgvYNO50brHS0HW M9y1B8hRNChX2OGSKNhdqp273nLAoQz8PU4XMZf94PuMaHd3DoWEMpQpC 7jijfZbYMW9lTyec2jDK37po=-GzMAAERPFtvPp2iRTSgUMJEDh5ZodiB5Yxl4ssaZgyWTq2HopenWMZQhzA8=-e

http://www.ranchsendgift.com/6QFa0O23OOoM4L4p3xMa5jjY2Uj6 r6Ht871ZVCfq7fyDlK1pjxup9b xS_zA1hXzy_uTGL8u UDVO1hlHXyC3vL91KvwupKYkk2eHcaEcez2kh2brI3kIvn9BWBc8NoDL LIBG8jKVhDEfSRd4kg0eUl1fP4yThHpnTG25gdxx9J6kgm2wWychTmJQieLgSGetNWPtOh2T6xQdtqT5SL_9A5O44uw==-GzMAAERPFtvPp2iRTSgUMJEDh5ZodiB5Yxl4ssaZgyWTq2HopenWMZQhzA8=

http://www.ranchsendgift.com/3fmhybyHRhX0jyqBEsOEYFYwBXuLUB0mdVRMnpuIYp5iNSUtDm3BPOSz00WsCtuQpR tGnGK0QfqFshsKIwbHePF5g0pFXs_Pyl iRO9kUcQUbliHuURJPgMwaK5JtOConKdf8MZ7IQBVLT09IZmC9Sw_d1kj4jgbVU2Ii8oy3MIKMIk8hiL6UIvzotCNPW0WIZZR 2Az9Qwuq97okEEnBGJEQYX0g==-GzMAAERPFtvPp2iRTSgUMJEDh5ZodiB5Yxl4ssaZgyWTq2HopenWMZQhzA8=

http://www.ranchsendgift.com/H w0qXnyUIPL_2KA8ANuG0Ks dod3RQUOzm7iIkhg5 yA1239Q1qV_PF5ydNjZaFT0KvleuRT5x 5Jl0hMLsz8KTLMwUepMZ1tsgnT2wMJYDO0548C8y7s8vTqygmGXIa3BF3R LPINfH0xipPRMB64vdQxRp5BAJ_qfOig2OqBy0NI92FBJzZMOzS9xbcniFLhAB7oilnD7CfNIGvBIh67VJS3VtQ==-GzMAAERPFtvPp2iRTSgUMJEDh5ZodiB5Yxl4ssaZgyWTq2HopenWMZQhzA8=

http://www.ranchsendgift.com/msD0X5KFvQYdhh2NNE03ohA8QaGEed2hNlUlrAP0EsQDuobAxNKFG j12izUhF83Kn2UWsNhkYvZ7vCgd0zgsFAlRX_ChlxM1gwiiHWAlpIRGinLmNpUAjtRXSxhmNPJf2nIlab_enqNLiSc3EuUMYo R4JLGojkXidyaLwB856hC6HMvlZfLMqnorhloK1VijooKEfRHeRg_h9OqP7AOlRODerOPg==-GzMAAERPFtvPp2iRTSgUMJEDh5ZodiB5Yxl4ssaZgyWTq2HopenWMZQhzA8=

http://www.ranchsendgift.com/6cNHPyu2zKwiRys y_h4TrbwdWsoiTVlY1nhwrUBEwXyX OUoyyxTd5cwLtqFphCnhnIqQUpWJryH8FEHmiwLSQEXCGGL2kbyrodihzRsGiwPwTE 0CJfOMM96k63DrtqpgOEhFT7bRrlWJa8r8GEPVxMyMTK k5uZYGmrv5hy4_ Wd_DnByDmJnVBoxH6uAAfytma77bs46wk5Mt_CpPTy73m7bug==-GzMAAERPFtvPp2iRTSgUMJEDh5ZodiB5Yxl4ssaZgyWTq2HopenWMZQhzA8=

http://www.ranchsendgift.com/CBmDW7bzLxLoGO0IQjuwUlcAiHwF0jKTZZ 3PscgIr33zdqgpY4lRdkKGF_The5AGUbhiEOLBieYn1K5QBwEYkk1jCw4WCkBRwdhx7FfKphwB_42hiql6PeE8IKmKOsqMFZTAOBN2fBLo7usVwYGLEjmB9AiNW732a7PzBksZ2BlWOJBGHsdGuKPciPwUteKCirMa0K1WFjmhNhKZFzK0GVtXvDRaw==-GzMAAERPFtvPp2iRTSgUMJEDh5ZodiB5Yxl4ssaZgyWTq2HopenWMZQhzA8=

http://www.ranchsendgift.com/dwSR77pug1K2I73PRSmqlS_dVcrwzbTtJJHsv6nEHMj8vtFBdFqbzMOoSff1sULblpj5FeaCZiU94DJrtuQ9wHqVRfg uYUcGM4_a9fVZuDv5HIPRpNYkuomsP1y49QHwF7VTaGiZo4JspNYRaC9aG57zwVHyhQo2y5MuQXVMG2TB1NoLsKDrXctZ4ke3M61WCSpRz_MrRwFbpa TJ46Yh0Q7fjZmQ==-GzMAAERPFtvPp2iRTSgUMJEDh5ZodiB5Yxl4ssaZgyWTq2HopenWMZQhzA8=

http://www.ranchsendgift.com/YhWmdQ5vo7U41085v48kvCXuvx8gDScPYudrbHV5HPWnpdDPpAC7i QYLTty5TZMzj1RpEUA2hLV47WxOhj0UBdJD0 e0h1Oip1p r9XxG3UtQR_9CplvkBpjlLMaarcBwleo kB8UU8J9Anz49HcXtPswWPoo Qud6LrVX6 J_LqJ2o9h0Z7fEsFSw9Q4AlIJ9UcusnW7hDXTT5ZhEYRDTZEY1cPw==-GzMAAERPFtvPp2iRTSgUMJEDh5ZodiB5Yxl4ssaZgyWTq2HopenWMZQhzA8=

http://www.ranchsendgift.com/Sz3r88TrjNRn CxPQ9igvsYeVjiP j4sG7JKyOs6TB8TYGs7zVKCxUCViczjM4g7vIAAMDcj26mXFNq 5n5dvHodshXEB5PRHIgPRgroAh9iy5bx3WJ4Be rLlu8q3QPQsPD2_Ta4MrQBGBLoY5zOkou0ju13QBY1 SfcbsWe_DBWrhrs4FTS7gVky7GO1FuIHhXoEnsB2WeFnYpafbhu8lkffc3aQ==-GzMAAERPFtvPp2iRTSgUMJEDh5ZodiB5Yxl4ssaZgyWTq2HopenWMZQhzA8=

http://www.ranchsendgift.com/hWQZz8ZWS6utYQbSkl TRJq9gcI7Q6oJz9SueAHWYaF0O BAbJHBvM8PPW 26huDdVz4pm2knprEigvuNNqth8Sspblv5ElifP ozSnMn3sIrRgDhbxnR9DZI8OHOtQNgPPjkn1 I0G5SKNRS3zPA3V1hsCil6_TYotW 8mlx3weg7BMnDlqV6Kll5IWNGCpsJeWIRZpcNT9O3YR8gmH7WTnQLSXg==-GzMAAERPFtvPp2iRTSgUMJEDh5ZodiB5Yxl4ssaZgyWTq2HopenWMZQhzA8=

https://getvdownloader.com.br/download/.../

http://www.ranchsendgift.com/ZGtAVgmw6VJ6G7TYPnnBM5Rv4hcy8ydsagbvUA02RKKs4xsj AyMh3KsP3auM_0OQDgr19U_JG0JkPcun7XJwnAparUNhqBMs9m549Txxmv_msKhK44PEuHvlQ58kK533JXPH3QxKroDVbFOG_XOBoa4nnS9LxNgYe6dYkApXL5nlpY6hl 8ysSJSlxqDWrGX aBTRB91F3F9FMdxPliVmA_deaMiQ==-GzMAAERPFtvPp2iRTSgUMJEDh5ZodiB5Yxl4ssaZgyWTq2HopenWMZQhzA8=

http://www.ranchsendgift.com/rSKfIsCyiA4k9_APCAuqvDBib0_M4rtvFT05iyQ4FlpdI0DyCTyAknAjUqhKs4XgYktLhrugJRFte4HQ48O NqHoGANjiNZKC_MfVBQEdjSqAGzd_on_EDlGDBa1esIw7aZCXcyOae e8gx4L2G4XAL6wp1u3zKr 4s5TDiUwev36Eg8nbGNerYQb1RaO38_KyvHXubwYogLIB0_lKO0VFeECmvuVA==-GzMAAERPFtvPp2iRTSgUMJEDh5ZodiB5Yxl4ssaZgyWTq2HopenWMZQhzA8=

http://www.ranchsendgift.com/evUgqX4x9itR8h36FiP1hVNZhAAzszoSlRPBzAt_UgBgYn0j_rcZq4cueVOl3klbvHVqHKXX1KxpTvcuEcOHcJjkPen7m8zZAlte7d7F2VHMLLB92hcx C IbRWPwEniWonZr cDom1FbFDf1TN2MGRc0x8qbiT13GlQWXtCWkxqmzJmSvr0D4Yml5zaOJF1YkT6AGVcvocV8AlOgqxr15_aIiGgQFjHNF0wg2BA Z2EdDxMmSIaf63VjcHljRnMuIwYph 3QW8o3qhYuxGqOnTnR2n3Rn8ZtUsKMviXrxvAGEFQhBrMHMKBji2ZOcNoCRBDCCkvA0CUbnlbcg2tJH nivV8q8Po ecZS9UGuh_JM83jkF7IPvSLRtSNQBkaSynnVCt_oHBbZqvPJ0OVXhZq5XqjURarUCgUct_TDCwzNnbNDcTZSVjiH8jzdH0za_uUki0I82vCBYXcqbD1NjPh6cRq203cIKNJNBIo2_d pkDvvzpXKLQQij91KdbpalFheST9e8Ek1q1SW5SJ8gjFcJHwdyLIklEdhPhwzyoBggpS_rjq1t2rcjkO834KVsU7FPJt-GzMAAERPFtvPp2iRTSgUMJEDh5ZodiB5Yxl4ssaZgyWTq2HopenWMZQhzA8=-e

https://s3-sa-east-1.amazonaws.com/.../VDownloader4OC.exe

http://www.ranchsendgift.com/Yd FdTUkHBHJu3lXu9QsdYx_daEaImZ5wGyOpPsspOD61f7lNcbxAdLr sCCHVBUGDNv2mzfdaz2Zo9BEpElcymeMdGsniWWpq6IZ8JlmJ9mTEi35DSuytmHIEQNlA5NeKTL046zYOEaF3ImZwr2oasB98yo2hzQrEufevVeh9YbfzdzMSV7sbtbwZ0BBrHE5sB0gM7ZnDap3Bznkg6rXwVe19NhvQ==-GzcAAETdFtsP5 Xd0ASrIAyN50wRNuBEILAg0AH8prDv5CEziTb4bKCWhpFVOhp Hbw53cJN8AE=

http://www.ranchsendgift.com/NCiIbZ70GI1OccB9kHv68ju7mo5B7Re0GZ_9d7xpLragIa3AW2SHt0FDT2TCuQ sm WDTYJ4yOKYioMlh6Lg_rpHy2ay6G3TMwlielz9ONBpheDQx6pP1DqYcwOp4ZVlqH_mAUsBqGK0bNjzfSFty5VcK78K1axEf92D_Jj9F2loHQa10WYaPX4SVTpcElcm8GTZeffnZ1e1jvSXFBDEu4_M IP2og==-GzMAAERPFtvPp2iRTSgUMJEDh5ZodiB5Yxl4ssaZgyWTq2HopenWMZQhzA8=

http://www.ranchsendgift.com/nXeqHN1PuyRiA6bsU4uOuG9P7Z3eiKQeAIPK_1gxdTn0g2K5mtUCFYc4NLzMuN8UXoq1LMn f6dg1cFhk_OvB1Bg2xtNR5DzB0EKizTNPltGEZBY7A0718vsz94hW1vEvjZAiXK_C0HrpYXvdwqvHLN8fUzcjxUNZTefPCTMOSh6NZs_5_4zdBVfEjV1_Uzb1EXgkvV K5XWfHYn6gvRuzH1hsgIiw==-GzMAAERPFtvPp2iRTSgUMJEDh5ZodiB5Yxl4ssaZgyWTq2HopenWMZQhzA8=

http://www.ranchsendgift.com/xK8q8Wg9dkUTj8gG7zJJYwLHhYQDHTT xDpXr4bcRDjHgcMIrXvJHNk7ROug 3rb0Fzc2rPjpDV93YyKs44wIWfC75jR_Vmne6KTzyMrcCHp6eh2o2hVqR7kZQLWrCZzVqM0pgvHPlD1hkVlDDi1dd5LAuuPjhXOqjq_Gx_iVJWSWbtnwAnsYPJ_Nk_mBPXuIbWS7aTLeDl9hZdlMzsNtwEJuW52Vw==-GzMAAERPFtvPp2iRTSgUMJEDh5ZodiB5Yxl4ssaZgyWTq2HopenWMZQhzA8=

http://www.ranchsendgift.com/2rO9LzqOzU79cQD4h Jy45wETW08YhLREPNNFJMFYraFPBuzUR6 lwS_mYlfgpC2FOE8uahaP7ig2_FyztYiHDvK zUkD LQkCHo LCGA1pDKKBYTzBhh9ZkzN8qGQrshFuoiiKG6 wxHRkpUgqnYzYpyin_dAEqvSWLN3QMjv6DDyOPxH5LI0k ITAxOSD9GdV1sn2ns5FEvv5TlKPnEEmu19ZtqQ==-GzMAAERPFtvPp2iRTSgUMJEDh5ZodiB5Yxl4ssaZgyWTq2HopenWMZQhzA8=

http://www.ranchsendgift.com/1BgtqDVO1o9CUyTzSper2AwxC3SKiU35K_lZQgRWg5KpuafQZnRk_wuxNrJMbPIh6khAjEnvrVRw x53QA6EERHmo6WANJVjoWjk3IzKQWyI1q ZDAdMtwIO 6TVTIbV5UD eY 5cYlq5KyulJnqlmZLm_ylPTNtsLqd19mvePO3YFIF_QTqYV3DnWRcGNYe uyziDHIDkVV1s7WYmifn3e7PrWfSg==-GzMAAERPFtvPp2iRTSgUMJEDh5ZodiB5Yxl4ssaZgyWTq2HopenWMZQhzA8=

http://www.ranchsendgift.com/fRMceu0hrjF x0kDkUQc6MuGaBsBmDAZGye93Egju0aOPTzGBxiXGq9o1Xd8VlnGKx0NpTNKUjDKB4JWv2iQpceSdf_Jge38 4Ol174mAL0Jap sT_xlSxv1b5bFvJKLO727X8FUL17rCNHUyczku7FjF3aAI3Q0Vr8Hw_cJAMzWJo5jvu295zuMUetO Mt1UFRqgGAS Ucx4UgK 5g3hH4hUcwBxw==-GzMAAERPFtvPp2iRTSgUMJEDh5ZodiB5Yxl4ssaZgyWTq2HopenWMZQhzA8=

http://www.ranchsendgift.com/KEM7P1HbGIk8r6NBJHbAFzg9n_dSlV8sWHIh1ZaAMkryUpA5du0vSIeBHw4fNKJkWQa0QTkEGy7jZc4EktbJngGMEtTMpcUUFg9rCfF0by 8kf5XKXiJyQaOGuZlouBEyO8KCZf_7o2Xl0mvWGC9rVG7XrikTAiRfNe4J1mcNwKiokBkOp4kiMISfJVG47Wvdx177z5Puyk65Au_jzo_DGdBgb263A==-GzMAAERPFtvPp2iRTSgUMJEDh5ZodiB5Yxl4ssaZgyWTq2HopenWMZQhzA8=

Latest 30 of 69 download URLs

Remove vdownloader4oc.exe - Powered by Reason Core Security