» adxloader64.dll
Overview
Analysis
File Details
Programs (1)

adxloader64.dll

2298491 Ontario Inc.

The module adxloader64.dll by 2298491 Ontario has been detected as adware by 2 anti-malware scanners. This file is typically installed with the program FoodBuzz by Lake Ventures, LLC. which is a potentially unwanted software program.

File name:

adxloader64.dll

Publisher:

2298491 Ontario Inc. (signed and verified)

Version:

8, 2, 5067, 0

MD5:

890f274fe564281376e78ce48c4fadcb

SHA-1:

a66de86cb081db96e45a79611f210075f9eb680a

SHA-256:

a864bb8a46a7e58dff662af9c8e2b6af78656fd4dadca00fc527047b0887ab9a

Scanner detections:

2 / 68

Status:

Adware

Analysis date:

4/19/2024 5:29:31 AM UTC (today)

Scan engine

Detection

Engine version

Reason Heuristics

PUP.2298491Ontario.L

14.7.27.14

VIPRE Antivirus

FoodBuzz

19452

File size:

723.3 KB (740,616 bytes)

Product version:

8, 2, 5067, 0

Original file name:

adxloader.dll

File type:

Dynamic link library (Win64 DLL)

Language:

English (United States)

Common path:

C:\Program Files\foodbuzz\extension\adxloader64.dll

Digital Signature

Signed by:

2298491 Ontario Inc.

Authority:

GoDaddy.com, Inc.

Valid from:

2/15/2013 9:00:24 PM

Valid to:

2/15/2014 9:00:24 PM

Subject:

CN=2298491 Ontario Inc., O=2298491 Ontario Inc., L=Guelph, S=ON, C=CA

Issuer:

SERIALNUMBER=07969287, CN=Go Daddy Secure Certification Authority, OU=http://certificates.godaddy.com/repository, O="GoDaddy.com, Inc.", L=Scottsdale, S=Arizona, C=US

Serial number:

0781DF92848AC5

Registration

CLSID:

{1C6E034D-B4B6-4D96-94B5-4163A5EB2195}

ProgID:

FoodBuzz.IEModule

COM registered:

Yes

File PE Metadata

Compilation timestamp:

3/18/2013 12:20:26 PM

OS version:

4.0

OS bitness:

Win64

Subsystem:

Windows GUI

Linker version:

8.0

CTPH (ssdeep):

12288:/rJF9pCir6OWKIMBHeCsukqpIMB6gjME74PMOz2tGwYDP:jr9pCir1H+Cs8pIMB6gjME74PMOz28wq

Entry address:

0x5E9D0

Entry point:

48, 89, 5C, 24, 08, 48, 89, 74, 24, 10, 57, 48, 83, EC, 20, 83, FA, 01, 49, 8B, F8, 8B, DA, 48, 8B, F1, 75, 05, E8, CF, DB, 00, 00, 4C, 8B, C7, 8B, D3, 48, 8B, CE, 48, 8B, 5C, 24, 30, 48, 8B, 74, 24, 38, 48, 83, C4, 20, 5F, E9, 83, FE, FF, FF, CC, CC, CC, 48, 89, 5C, 24, 08, 48, 89, 74, 24, 10, 57, 48, 83, EC, 20, 48, 8D, 59, 1C, 48, 8B, F1, BF, 01, 01, 00, 00, 48, 8B, CB, 4C, 8B, C7, 33, D2, E8, 78, C3, FF, FF, 45, 33, DB, 4C, 8D, 05, 9E, A6, 04, 00, 44, 89, 5E, 04, 44, 89, 5E, 08, 44, 89, 5E, 0C, 4C, 89... 
[+]

Entropy:

6.1162

Code size:

485.5 KB (497,152 bytes)

The file adxloader64.dll has been discovered within the following program.

FoodBuzz by Lake Ventures, LLC.

FoodBuzz (foodbuzz.net/2298491 Ontario Inc.) is a web browser extension and toolbar that delivers contextual based advertising as well as modify the user's web browser home and search pages to provide advertising and search.

foodbuzz.net

82% remove it

Remove adxloader64.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.