» captain america the winter soldier 2014 hdts newsource x264 ac3-millenium.exe
Overview
Analysis
File Details
Downloads (3)

captain america the winter soldier 2014 hdts newsource x264 ac3-millenium.exe

Wideblue installer

This uses the software InstalleRex download manager which bundles a number of adware plugin and browser extensions and is distributed via TusFiles. The application captain america the winter soldier 2014 hdts newsource x264 ac3-millenium.exe, “Installer for Wideblue installer” has been detected as adware by 24 anti-malware scanners. The program is a setup application that uses the Tarma Installer installer, however the file is not signed with an authenticode signature from a trusted source. The setup program uses Web-Pick's InstalleRex download manager and installer to bundle potentially unwanted ad-supported software which includes toolbars and browser extensions through a pay-per-install monetization scheme.

File name:

Publisher:

Wideblue installer

Product:

Wideblue installer

Description:

Installer for Wideblue installer

Version:

2014.6.29.1256

MD5:

fcae219f5d01b9255f1e4369c075dc30

SHA-1:

4f4f3f2f2a60677aa968dcf4bf3ad7a651007c95

SHA-256:

18f73ed88badd22decd502428e6e712495c7925ee95d1071146305bb2ef9a8a4

Scanner detections:

24 / 68

Status:

Adware

Explanation:

Uses the InstalleRex from WebPick Internet Holdings to install bundled add-ons including toolbars and other web browser extensions.

Analysis date:

4/25/2024 8:54:06 PM UTC (today)

Scan engine

Detection

Engine version

Lavasoft Ad-Aware

Gen:Variant.Kazy.324119

949

Avira AntiVirus

TR/Kazy.324119.29

7.11.157.214

AVG

Generic

2015.0.3367

Bitdefender

Gen:Variant.Kazy.324119

1.0.20.905

Bkav FE

HW32.CDB

1.3.0.4959

Comodo Security

Application.Win32.InstalleRex.KG

18725

Dr.Web

Threat.Undefined

9.0.1.0181

Emsisoft Anti-Malware

Gen:Variant.Kazy.324119

8.14.06.30.08

ESET NOD32

Win32/InstalleRex.M potentially unwanted application

8.7.0.302.0

F-Secure

Gen:Variant.Kazy.324119

11.2014-30-06_2

G Data

Gen:Variant.Kazy.324119

14.6.24

herdProtect (fuzzy)

variant of free download artisteer 4.2 full version cracked with keygen.exe (Adware)

2014.8.30.3

IKARUS anti.virus

PUA.BInstaller

t3scan.1.6.1.0

K7 AntiVirus

Trojan

13.180.12574

Kaspersky

Trojan.Win32.AntiFW

14.0.0.3631

Malwarebytes

PUP.Optional.InstalleRex

v2014.06.30.08

McAfee

PUP-FHQ

5600.7083

MicroWorld eScan

Gen:Variant.Kazy.324119

15.0.0.543

NANO AntiVirus

Riskware.Win32.InfoLeak.cvgqot

0.28.0.60577

Qihoo 360 Security

Malware.QVM20.Gen

1.0.0.1015

Quick Heal

Trojan.AntiFW.A5

6.14.14.00

Reason Heuristics

Adware.WebPick.Installer.?

14.6.30.19

Vba32 AntiVirus

Downware.TSU

3.12.26.3

VIPRE Antivirus

Threat.4150696

29708

File size:

311.9 KB (319,368 bytes)

Product version:

1.0.0.3

Original file name:

TSULoader.exe

File type:

Executable application (Win32 EXE)

Installer:

Tarma Installer

Language:

Language Neutral

Common path:

C:\users\{user}\downloads\captain america the winter soldier 2014 hdts newsource x264 ac3-millenium.exe

File PE Metadata

Compilation timestamp:

3/12/2013 6:51:45 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

8.0

CTPH (ssdeep):

6144:zr8bUzkuvcBYC47l2xkxUtI+u+wJBfhdWDtSJP5CDpCKA:zrBkuveY3+u+OYDtS7CpCKA

Entry address:

0x14DB

Entry point:

55, 8B, EC, 81, EC, 2C, 06, 00, 00, 53, 56, 33, DB, 57, 66, 89, 9D, DC, FB, FF, FF, 89, 5D, F4, 89, 5D, FC, FF, 15, 74, 30, 40, 00, A3, 08, 44, 40, 00, FF, 15, 70, 30, 40, 00, 8B, F8, 8D, 45, EC, 50, FF, 15, 6C, 30, 40, 00, FF, 15, 68, 30, 40, 00, 8B, F0, F7, D6, 33, F7, FF, 15, 64, 30, 40, 00, 33, F0, 8B, 45, F0, 33, 45, EC, 68, 04, 01, 00, 00, 33, F0, 8D, 85, D4, F9, FF, FF, 50, 53, FF, 15, 60, 30, 40, 00, 85, C0, 75, 41, FF, 15, 5C, 30, 40, 00, 83, F8, 78, 75, 1A, 68, A8, 32, 40, 00, E8, 43, FB, FF, FF... 
[+]

Entropy:

7.9521

Developed / compiled with:

Microsoft Visual C++

Code size:

7.5 KB (7,680 bytes)

The file captain america the winter soldier 2014 hdts newsource x264 ac3-millenium.exe has been seen being distributed by the following 3 URLs.

http://dowcnloadboox.info/.../?&q=Captain America The Winter Soldier 2014 HDTS NEWSOURCE x264 AC3-MiLLENiUM&product_name=Captain America The Winter Soldier 2014 HDTS NEWSOURCE x264 AC3-MiLLENiUM&installer_file_name=Captain America The Winter Soldier 2014 HDTS NEWSOURCE x264 AC3-MiLLENiUM&cor=1&q=Captain America The Winter Soldier 2014 HDTS NEWSOURCE x264 AC3-MiLLENiUM&external_id=1404119454005592823

http://applicationgrabb.net/c9cc18d80535aeb816b8016650261f94/cfn/dl.php?id=1404119454005592823&r=http://dowcnloadboox.info/.../?&q=Captain America The Winter Soldier 2014 HDTS NEWSOURCE x264 AC3-MiLLENiUM&product_name=Captain America The Winter Soldier 2014 HDTS NEWSOURCE x264 AC3-MiLLENiUM&installer_file_name=Captain America The Winter Soldier 2014 HDTS NEWSOURCE x264 AC3-MiLLENiUM&cor=1&q=Captain America The Winter Soldier 2014 HDTS NEWSOURCE x264 AC3-MiLLENiUM&__rnd=b473cf1d8377500fb886809b92b28540

Remove captain america the winter soldier 2014 hdts newsource x264 ac3-millenium.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.