adbdriverinstaller_downloader-qferapbg4.exe.zip

The file adbdriverinstaller_downloader-qferapbg4.exe.zip has been detected as a potentially unwanted program by 21 anti-malware scanners. According to AVG, this software downloads additional adware offers during setup. The file has been seen being downloaded from sub.yorkshatb.com.
MD5:
cfb72fcdfbab802a9d3261e1789d613a

SHA-1:
907a77abad025b79cde96c82b7899294cd41c09a

SHA-256:
91df92845804de371a4d7f75496ca38113ab5781e220284dd570512e032083a6

Scanner detections:
21 / 68

Status:
Potentially unwanted

Explanation:
Uses the Somoto 'BetterInstaller' to bundle additional (unwanted) software during install without adequate consent.

Analysis date:
4/25/2024 1:11:53 AM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Application.Bundler.Somoto.AH
5865213

Avira AntiVirus
PUA/Somoto.Gen2
8.3.1.6

Arcabit
Application.Bundler.Somoto.AH
1.0.0.425

avast!
NSIS:Adware-ZI [PUP]
2014.9-150819

AVG
Downloader
2016.0.3012

Bitdefender
Application.Bundler.Somoto.AH
1.0.20.1155

Clam AntiVirus
Win.Adware.Somoto
0.98/20809

Dr.Web
Threat.Undefined
9.0.1.05190

Emsisoft Anti-Malware
Application.Bundler.Somoto.AH
10.0.0.5366

ESET NOD32
Win32/Somoto.G potentially unwanted application
7.0.302.0

F-Prot
W32/SomotoBetterInstaller.F.
v6.4.7.1.166

F-Secure
Application.Bundler.Somoto
11.2015-19-08_4

K7 AntiVirus
Trojan
13.2016943

Kaspersky
not-a-virus:HEUR:Downloader.NSIS.Somoto
14.0.0.1556

MicroWorld eScan
Application.Bundler.Somoto.AH
16.0.0.693

NANO AntiVirus
Trojan.Win32.Agent.dtledk
0.30.24.3079

Panda Antivirus
PUP/Somoto
15.08.19.07

Sophos
Generic PUA LJ (PUA)
4.98

Trend Micro House Call
ADW_TOMOS.SMN
7.2.231

Trend Micro
ADW_TOMOS.SMN
10.465.19

VIPRE Antivirus
Trojan.Win32.Generic
43030

File size:
379.5 KB (388,578 bytes)

Common path:
C:\users\{user}\downloads\adbdriverinstaller_downloader-qferapbg4.exe.zip

The file adbdriverinstaller_downloader-qferapbg4.exe.zip has been seen being distributed by the following URL.