web_bar_setup_is2.exe

Web Bar Media

The file web_bar_setup_is2.exe by Web Bar Media has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. It is also typically executed from the user's temporary directory.
Publisher:
Web Bar Media  (signed and verified)

MD5:
b46a732723b74f863ca11e9c215fb791

SHA-1:
d66e9ea114e5c52f6dc77f096f5cc7672f986e8f

SHA-256:
0f3ce4fb8d05f057ff0aa6ef0712eeadcc8a577b8381e47d00a148a9cf7fb8bd

Scanner detections:
1 / 68

Status:
Adware

Note:
Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Analysis date:
12/24/2024 2:17:20 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.WebBarMe.Installer (M)
16.7.3.3

File size:
2 MB (2,096,976 bytes)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\exe\f71d45ba411c90bd9be17225d84f5a38\web_bar_setup_is2.exe.part

Digital Signature
Signed by:

Authority:
Symantec Corporation

Valid from:
2/5/2015 7:00:00 PM

Valid to:
2/6/2016 6:59:59 PM

Subject:
CN=Web Bar Media, O=Web Bar Media, L=Victoria, S=British Columbia, C=CA

Issuer:
CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
0F7B7C7A3031BA614438E5A48FF24DD7

File PE Metadata
Compilation timestamp:
7/9/2014 3:58:13 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:L6EdjJYVtn0GVNVpOTWVC9LKjvDoIJza1JWogI1gk7M:mEdjJYXVDXj7G1gM7M

Entry address:
0x113BC

Entropy:
5.0448

Code size:
63.5 KB (65,024 bytes)

Remove web_bar_setup_is2.exe - Powered by Reason Core Security