home

ag32installer.exe

Vittalia Limited

This is the Vittalia Filewon Installer which bundles applications with offers for additional 3rd party software, mostly unwanted adware, and may be installed with minimal consent. The application ag32installer.exe by Vittalia Limited has been detected as adware by 19 anti-malware scanners. The program is a setup application that uses the Vittalia DM installer.
Publisher:
Vittalia Limited  (signed and verified)

Version:
1.0.0.5

MD5:
d96604b3d322697ae87a798b9468c1e8

SHA-1:
e150c6daba42ad15d4949b03747e45a0340e5e9b

SHA-256:
21222633094941b23b4d7cfb724665ab4671d487c87e2de5bb66be7e6ce165d0

Scanner detections:
19 / 68

Status:
Adware

Explanation:
Bundles additional software, mostly toolbars and other potentially unwanted applications using the Vittalia monitization installer.

Description:
This is also known as bundleware, or downloadware, which is an downloader designed to simply deliver ad-supported offers in the setup routine of an otherwise legitimate software.

Analysis date:
4/26/2024 9:00:36 PM UTC  (today)

Scan engine
Detection
Engine version

Agnitum Outpost
Riskware.Agent
7.1.1

Avira AntiVirus
APPL/Downloader.Gen9
7.11.173.240

AVG
InstallC
2015.0.3342

Baidu Antivirus
Adware.Win32.Vittalia
4.0.3.14923

Bitdefender
Gen:Variant.Kazy.418555
1.0.20.1695

Comodo Security
TrojWare.Win32.Agent.IEXT
19597

Emsisoft Anti-Malware
Gen:Variant.Kazy.418555
8.14.12.05.01

ESET NOD32
Win32/Vittalia.R potentially unwanted application
8.7.0.302.0

F-Prot
W32/A-663b0079
v6.4.7.1.166

G Data
Gen:Variant.Kazy.418555
14.12.24

herdProtect (fuzzy)
variant of m78binstaller.exe (Adware)
2014.12.5.18

IKARUS anti.virus
PUA.Vittalia
t3scan.1.6.1.0

K7 AntiVirus
Unwanted-Program
13.183.13463

McAfee
CryptVittalia
5600.6998

MicroWorld eScan
Gen:Variant.Kazy.418555
15.0.0.1017

Panda Antivirus
Trj/Genetic.gen
14.09.23.03

Reason Heuristics
PUP.VittaliaLimited.N
14.9.23.14

SUPERAntiSpyware
PUP.Vittalia/Variant
10342

VIPRE Antivirus
Threat.4782551
29708

File size:
845.1 KB (865,368 bytes)

Product version:
1.0.0.5

Copyright:
Copyright (C) 2014

File type:
Executable application (Win32 EXE)

Bundler/Installer:
Vittalia DM

Language:
Espagnol (alphabet international)

Common path:
C:\Documents and Settings\{user}\Application data\temp\ag32installer.exe

Digital Signature
Signed by:
Vittalia Limited

Authority:
VeriSign, Inc.

Valid from:
5/18/2013 2:00:00 PM

Valid to:
5/18/2016 1:59:00 PM

Subject:
CN=Vittalia Limited, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Vittalia Limited, L=Dublin, S=Dublin, C=IE

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
6CC8DB30E67B3DF9E2607EE882D390AC

File PE Metadata
Compilation timestamp:
7/4/2014 2:57:54 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
24576:MgnPDtT/NPqF+1/S6fAuyRY25YtiTIuXknWty7:hdNPqgro5RbTIu0nWty7

Entry address:
0x4B44D

Entry point:
E8, 42, 11, 01, 00, E9, 00, 00, 00, 00, 6A, 14, 68, F8, 9E, 4A, 00, E8, DD, 62, 00, 00, E8, 76, 52, 00, 00, 0F, B7, F0, 6A, 02, E8, D5, 10, 01, 00, 59, B8, 4D, 5A, 00, 00, 66, 39, 05, 00, 00, 40, 00, 74, 04, 33, DB, EB, 33, A1, 3C, 00, 40, 00, 81, B8, 00, 00, 40, 00, 50, 45, 00, 00, 75, EB, B9, 0B, 01, 00, 00, 66, 39, 88, 18, 00, 40, 00, 75, DD, 33, DB, 83, B8, 74, 00, 40, 00, 0E, 76, 09, 39, 98, E8, 00, 40, 00, 0F, 95, C3, 89, 5D, E4, E8, D6, D3, 00, 00, 85, C0, 75, 08, 6A, 1C, E8, DC, 00, 00, 00, 59, E8...
 
[+]

Code size:
607.5 KB (622,080 bytes)

Remove ag32installer.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.