home

adworld.exe

Play now radio

Pay By Ads LTD

The application adworld.exe has been detected as adware by 10 anti-malware scanners. This file is typically installed with the program adworld. It is also typically executed from the user's temporary directory.
Publisher:
Pay By Ads LTD

Product:
Play now radio

Version:
1.3.0.0

MD5:
348c74a68e444c6809370effe40e2c40

SHA-1:
7cc04257a8806b2efdb392f12ddee2d673edbd16

SHA-256:
8f2bd57fca68386cd8e3cbaef5e866cf0134af1ef0d36acfeb3d76616851a76b

Scanner detections:
10 / 68

Status:
Adware

Analysis date:
4/20/2024 1:56:48 AM UTC  (today)

Scan engine
Detection
Engine version

Agnitum Outpost
PUA.Toolbar.Montiera
7.1.1

Baidu Antivirus
Adware.Win32.Montiera
4.0.3.14726

Dr.Web
Adware.Downware.2523
9.0.1.0207

ESET NOD32
Win32/Toolbar.Montiera (variant)
8.10065

Malwarebytes
PUP.Optional.Montiera
v2014.07.26.11

McAfee
Artemis!348C74A68E44
5600.6884

Reason Heuristics
PUP.PayByAds
15.1.16.1

Sophos
PayByAds
4.98

Trend Micro House Call
ADW_MONTRA
7.2.16

Trend Micro
ADW_MONTRA
10.465.16

File size:
396 KB (405,504 bytes)

Product version:
1.3.0.0

Copyright:
All rights reserved.

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\temp\adworld.exe

File PE Metadata
Compilation timestamp:
2/27/2014 7:35:33 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
12288:Bceo4G249Z20R/NeBPvDPYv2mPWcvOYVGyvh9QCJw:jjeGyjQCW

Entry address:
0x361E4

Entry point:
E8, BA, 6B, 00, 00, E9, 89, FE, FF, FF, B8, E8, D8, 43, 00, A3, D0, 95, 45, 00, C7, 05, D4, 95, 45, 00, DE, CF, 43, 00, C7, 05, D8, 95, 45, 00, 92, CF, 43, 00, C7, 05, DC, 95, 45, 00, CB, CF, 43, 00, C7, 05, E0, 95, 45, 00, 34, CF, 43, 00, A3, E4, 95, 45, 00, C7, 05, E8, 95, 45, 00, 60, D8, 43, 00, C7, 05, EC, 95, 45, 00, 50, CF, 43, 00, C7, 05, F0, 95, 45, 00, B2, CE, 43, 00, C7, 05, F4, 95, 45, 00, 3E, CE, 43, 00, C3, 8B, FF, 55, 8B, EC, E8, 96, FF, FF, FF, 83, 7D, 08, 00, 74, 05, E8, CB, 76, 00, 00, DB...
 
[+]

Entropy:
6.3584

Code size:
282 KB (288,768 bytes)

The file adworld.exe has been discovered within the following program.

adworld  by adworld
36% remove it
 
Powered by Should I Remove It?

Remove adworld.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.