» coupon downloader.dll
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

coupon downloader.dll

Coupon Downloader

The module coupon downloader.dll by Coupon Downloader has been detected as adware by Malwarebytes. It is installed within the context of Internet Explore as a BHO (Browser Helper Object) under the name ‘CouponDownloader’. This file is typically installed with the program coupon downloader by Adpeak, Inc. which is a potentially unwanted software program.

File name:

Publisher:

Coupon Downloader (signed and verified)

MD5:

09a4a06843649a3ea2fae5ec3c97b29c

SHA-1:

20d690f836fc36dd5beddc7726da36610313481b

SHA-256:

48a2d8d6df67f7ce945038558dc5ca57c79937fa224a6e5c386de77a113a3e08

Scanner detections:

1 / 68

Status:

Adware

Analysis date:

4/24/2024 5:33:26 AM UTC (today)

Scan engine

Detection

Engine version

Malwarebytes

PUP.Optional.CouponDownloader.A

v2014.05.16.08

File size:

88.3 KB (90,416 bytes)

File type:

Dynamic link library (Win32 DLL)

Common path:

C:\Program Files\coupon downloader\coupon downloader.dll

Digital Signature

Signed by:

Coupon Downloader

Authority:

GlobalSign nv-sa

Valid from:

4/2/2014 5:34:32 PM

Valid to:

4/3/2015 5:34:32 PM

Subject:

E=support@coupondownloader.com, CN=Coupon Downloader, O=Coupon Downloader, L=Sarasota, S=Florida, C=US

Issuer:

CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:

11219C3B68862D9462AA9FCC7E352A286BFC

File PE Metadata

Compilation timestamp:

4/14/2014 4:16:46 PM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

10.0

CTPH (ssdeep):

1536:4BgtVpxwjzni/qbI2Qak6jXnTB06S/qYNr1e3nUCY6:sAnijzgAN06ns1e3nUe

Entry address:

0x2F46

Entry point:

8B, FF, 55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, 43, 2F, 00, 00, FF, 75, 08, 8B, 4D, 10, 8B, 55, 0C, E8, EC, FE, FF, FF, 59, 5D, C2, 0C, 00, 8B, FF, 55, 8B, EC, 81, EC, 28, 03, 00, 00, A3, 50, 44, 01, 10, 89, 0D, 4C, 44, 01, 10, 89, 15, 48, 44, 01, 10, 89, 1D, 44, 44, 01, 10, 89, 35, 40, 44, 01, 10, 89, 3D, 3C, 44, 01, 10, 66, 8C, 15, 68, 44, 01, 10, 66, 8C, 0D, 5C, 44, 01, 10, 66, 8C, 1D, 38, 44, 01, 10, 66, 8C, 05, 34, 44, 01, 10, 66, 8C, 25, 30, 44, 01, 10, 66, 8C, 2D, 2C, 44, 01, 10, 9C, 8F, 05, 60, 44... 
[+]

Entropy:

6.4383

Code size:

53.5 KB (54,784 bytes)

Internet Explorer BHO

CLSID:

{10AD2C61-0898-4348-8600-14A342F22AC3}

CLSID name:

CouponDownloader

The file coupon downloader.dll has been discovered within the following program.

coupon downloader by Adpeak, Inc.

This adware web browser add-on injects advertising in the user's Internet browser by running as an extension and/or add-on. Ads are delivered in the form of coupons displayed on a web page, shopping comparison, in-text and new tab advertisements.

coupondownloader.com

86% remove it

Remove coupon downloader.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.