home

angry birds provided through aragon advertising.exe

Speedy Installer

LiveSoftAction

The program utilizes the Appscion Download and Install manager, an adware distribution bundler from SIEN SA. The setup program includes ad-supported toolbars and utilities. The application angry birds provided through aragon advertising.exe by LiveSoftAction has been detected as adware by 15 anti-malware scanners. The program is a setup application that uses the SIEN SuperInstall installer. This program installs potentially unwanted software on your PC at the same time as the software you are trying to install, without adequate consent.
Publisher:
LiveSoft_Action  (signed by LiveSoftAction)

Product:
Speedy Installer

Version:
9.11.5.1

MD5:
173dcba87df0011cd84f79c775c8767f

SHA-1:
2def192a1d6338dee8c83f799aa736878f52edc3

SHA-256:
3e1f64dd0f2c62ac1a505f112414c3e7d80fd1d6462b6885b329cfe62368c6c6

Scanner detections:
15 / 68

Status:
Adware

Explanation:
This is a modified installer that uses the Appscion to bundle adware.

Description:
This 'download manager' is also considered bundleware, a utility designed to download software (possibly legitimate or opensource) and bundle it with a number of optional offers including ad-supported utilities, toolbars, shopping comparison tools and browser extensions.

Analysis date:
4/27/2024 2:42:10 AM UTC  (today)

Scan engine
Detection
Engine version

Avira AntiVirus
APPL/GetNow.ersd
3.6.1.96

AVG
Generic
2016.0.3153

Bkav FE
W32.HfsAdware
1.3.0.6379

Comodo Security
Application.Win32.GetNow.DI
21998

Dr.Web
Adware.Iminent.28
9.0.1.091

ESET NOD32
Win32/GetNow.I potentially unwanted application
9.7.0.302.0

F-Secure
Riskware.Gen:Variant.Application.Bundler
11.2015-05-07_1

herdProtect (fuzzy)
variant of non confirmé 521185.crdownload (Adware)
2015.7.5.22

IKARUS anti.virus
PUA.Getnow
t3scan.1.8.9.0

K7 AntiVirus
Unwanted-Program
13.203.15791

Kaspersky
not-a-virus:Downloader.Win32.Agent
14.0.0.1780

NANO AntiVirus
Riskware.Win32.Downware.dpofof
0.30.24.1357

Reason Heuristics
PUP.Bundler.Sien
15.3.31.23

Sophos
PUA 'Live Soft Action' (of type Adware)
5.13

VIPRE Antivirus
Threat.4150696
39486

File size:
911 KB (932,832 bytes)

Product version:
9.11.5.1

Copyright:
(c) LiveSoft_Action. All rights reserved.

Original file name:
Setup.exe

File type:
Executable application (Win32 EXE)

Bundler/Installer:
SIEN SuperInstall

Language:
English (United States)

Common path:
C:\users\{user}\downloads\angry birds provided through aragon advertising.exe

Digital Signature
Signed by:
LiveSoftAction

Authority:
COMODO CA Limited

Valid from:
12/8/2014 7:00:00 PM

Valid to:
12/9/2015 6:59:59 PM

Subject:
CN=LiveSoftAction, O=LiveSoftAction, STREET="64-66, Mezzanine", STREET=Dionisie Lupu Street, L=Bucharest, S=ROMANIA, PostalCode=010458, C=RO

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
0DB89F49425D87D205160442DA55CE38

File PE Metadata
Compilation timestamp:
3/13/2015 9:31:04 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
24576:mytyC6IC62/cc3TDkZYZIBKvd8C2nmmfy51o0hJuyN5:0UKDPEKvdh/39

Entry address:
0x24FAC0

Entry point:
60, BE, 00, 50, 58, 00, 8D, BE, 00, C0, E7, FF, 57, 83, CD, FF, EB, 10, 90, 90, 90, 90, 90, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, 0B, 75, 28, 8B, 1E, 83, EE, FC, 11, DB, 72, 1F, 48, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, EB, D4, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, EB, 52, 31, C9, 83, E8, 03, 72, 11, C1, E0, 08, 8A, 06, 46, 83, F0, FF, 74, 75, D1, F8, 89...
 
[+]

Packer / compiler:
UPX 2.90LZMA

Code size:
812 KB (831,488 bytes)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.