home

darkwave-studio-5.5.2-setup.exe

Setup Alpha ((New Media Holdings Ltd)

The application darkwave-studio-5.5.2-setup.exe by Setup Alpha ((New Media Holdings) has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The file has been seen being downloaded from dw.uptodown.com and multiple other hosts.
Publisher:
Setup Alpha ((New Media Holdings Ltd)  (signed and verified)

MD5:
6d6a643a22782dcf3e9dcd93daf02d8f

SHA-1:
97827300f266065c0e4700c5ad44c8a9fa24b261

SHA-256:
afb1fb2092cb0bbaf18e35e81bd3e29f750069f59cd281f82849d273ceddfc39

Scanner detections:
1 / 68

Status:
Adware

Note:
Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Description:
This 'download manager' is also considered bundleware, a utility designed to download software (possibly legitimate or opensource) and bundle it with a number of optional offers including ad-supported utilities, toolbars, shopping comparison tools and browser extensions.

Analysis date:
4/20/2024 12:13:43 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.NewMedia.NMH.Bundler (M)
16.5.30.0

File size:
2.9 MB (3,019,880 bytes)

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore

Common path:
C:\users\{user}\downloads\darkwave-studio-5.5.2-setup.exe

Digital Signature
Signed by:
Setup Alpha ((New Media Holdings Ltd)

Authority:
GlobalSign nv-sa

Valid from:
3/14/2016 6:00:32 PM

Valid to:
6/25/2017 1:42:13 PM

Subject:
CN=Setup Alpha ((New Media Holdings Ltd), O=Setup Alpha ((New Media Holdings Ltd), L=Tel Aviv, C=IL

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121BA855EED3CFF403D39EDCDA9844389DA

File PE Metadata
Compilation timestamp:
12/27/2015 7:25:44 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
49152:i0LdZVr+lgii2XuN8KdOGQOuCacrccEOpbKegU7xwuthGZppirSDg4y2LQ:i0PVrae8KdxQOFrfEQOytwIEpTD5LQ

Entry address:
0x322E

Entry point:
81, EC, 84, 01, 00, 00, 53, 56, 57, 33, DB, 68, 01, 80, 00, 00, 89, 5C, 24, 18, C7, 44, 24, 10, 30, 91, 40, 00, 89, 5C, 24, 20, C6, 44, 24, 14, 20, FF, 15, AC, 70, 40, 00, FF, 15, A8, 70, 40, 00, 66, 3D, 06, 00, 74, 11, 53, E8, 94, 2F, 00, 00, 3B, C3, 74, 07, 68, 00, 0C, 00, 00, FF, D0, 55, 68, 0C, 92, 40, 00, E8, 14, 2F, 00, 00, 68, 04, 92, 40, 00, E8, 0A, 2F, 00, 00, 68, F8, 91, 40, 00, E8, 00, 2F, 00, 00, 6A, 09, E8, 63, 2F, 00, 00, 6A, 07, E8, 5C, 2F, 00, 00, A3, 84, 1F, 7A, 00, FF, 15, 3C, 70, 40, 00...
 
[+]

Code size:
24 KB (24,576 bytes)

The file darkwave-studio-5.5.2-setup.exe has been seen being distributed by the following 23 URLs.

https://dw.uptodown.com/dwn/3TQ9dDig8g529rD95zDgi8S_I0J-GZbQTzLmEcVfdxjRTm65093wBvzFoQtHSNF1hyPdxx75Z8nfIpy9kImf05P-8MgLZYh6Qw2NME68N-VWuKORZxjaFZBHZvvLuklm/nYWQ2h7YSXrylsHAeT001q-4yEg8AEDFzD4xdZywoU__gAh-AGprImGQAhUwmeK9ZFG0Hz4SH8Pjz0Foosjv1KzktekoIS_0bHTC3L1U029PMR6PKWT4dpn6Po368Nhh/.../

http://dw.uptodown.com/dwn/cJovMYJ7WVl-qlA0jgmh9lJfk1GhSQlGMvyPWRrSYohz-tQcGmIAJyDNjS2MjZCuwg-L5yxEJ6h_ahGIWd_uxXPvyqBnSwa9Yfem8koFjie1q6qf_gdQzKp5S32d6DFa/Q4BrM_Mj6FKJ6yTDhOBdgFAkNA1fx_VeRZImrn4Vbf64gIS_h0G52Eu1W-wo6r-9cX9f-UBybahK6Jk4BIB-RDzWoO6mHNulPlEDc66u6N-N43tG99Tdo63V-pz0MJo2/.../

http://dw.uptodown.com/dwn/7uAG26kweg88UjYM8ODC7D_r6sIQFAzlHp6HK3I2rOVEONu4qWc6zidC5qv1P-pw6_eVDcsccnV_iUsQvHnOgnAW-4x_zYsK5oU-AyO1t_ICCTST5O79xW5vnUJ-h-fO/2-tLRFd0d4S_vUS8rwUHEyvNVm-FMq1N7AcwNQxmrMkRM7nXtxbjykH-aCWwMMuXoob_9POvXCJ1vNoB817tPQv1Qt4F7O8bopp8JD5xat0xYW48N-VkdY6cS1P3eS5X/.../

https://dw.uptodown.com/dwn/75T0btatJu4i2KlpODhyjSa4QAssjmayQGwcAHwFDAfM0QrpfZheAk9yiwVSmLBPvv2NVThbNExx4Wd6TZ1M6QkqZe4SRH9ZobMPj7vc1Ak_MgZSrhZtVfPATvGCmmCh/N4O--TziFR01lP9Lp86sAQyalKMM1p7XbjjrmbUIpEzz4Yz9vCOR_HiAGVmAppRacvr9Ehy_gxJv53_ENooN8rkb5KN0-PFZ0OT9W9MEZrWBmwhFvP9a9fxyGMlUXR6o/.../

https://dw.uptodown.com/dwn/cvePfeHyjk6-W9z7lC3eX7WSkGLZL1nxAVtpdobPlMsWmUn8gfYEcyf0ac-6_CpusnuARtTQn74o7Kv4RVUzBaKtOayOQS4mnfC24EuBeDfPhZfg2du2nC1upjNpHWFv/6ZYKjmFhBCikJqWF27HEGIBvlb8czirYWqYbtvKOfva-DG_Aih4qlzDV870fhwRTFUX22IliGuBjgZAleJKUntoVoj7ctuUxp1QJCVz4ScnkNuktHlFn-sgzXV7mX5rF/.../

http://dw.uptodown.com/dwn/PlLI76t2goMYrOAo-ipJ7JGd61gn8vlY4WlcAHYwUfckammqIviQ1tdFf8DaHFFRJlwXWiJ9kRVMjZsF9y6TbLKRwqI-B82iVxdnnBWQSUdSh-vjafr6UH2E3t2EaUHP/HYkM8MIeqzhEkKJdrlfAFW0CmqSH_aDSbpEj5YzFY9uT9Efg8Fb1mDtAzBwnnIQ5oDsSGeayrUgc6mnmcvANuA5xUIS2XG__hH7QJxF7rcIjZOUQyhf1v-mRdrmdtsH2/.../

https://dw.uptodown.com/dwn/lBr8g47IizI58XiAwcgY98nXJ8yIbhbFQXo3UFrWSi-Xcp2Dg_dXwCdcIomuyTWQSswtxfn73PBbLXixcKb5j0ZtGFqqMOeFjjn3oTWQXvyD0620ErBZJzPjhyqdy7bT/yD1OBrocO1G6vsEkFpzr2_h6gxATQFcz4Jsy10znew8WpfuQ8JPlBHYp5ii7oRaWvBSIW3SiNwFAjtGMv1BZGnlu-WyXqkbwNlch14uuBZoMQAkHCkSTRuYUE6X5mS8N/.../

http://www.downloadcollection.com/downloadredirect.php?idx=104366

https://dw.uptodown.com/dwn/Lngz55T3DeksbLrlJd6eu8wjHVFrlyvgthIdd-14M3Jy69mMFWFAXQEtGoFhRjMkQz22H5D9wMm9ipUrkWt2AkBfgJxqTbBykfDIhqSbeSBZLEVBLvg3NsgyebWOEC7B/Bq_vRf7oTHh7M8YC0bPO58_P0xQvDWWj4nYA_ilSiOUbLKiAVhQHQ1X7FV75fziZfR0rPSdR3xPhPXsRkN8DBT0g_Y1q8csl2RTYEg0X5-g78s4OnDe_bpVUdVxOQJfJ/.../

http://dw.uptodown.com/dwn/bn4SbkPNtc6LE1qG4B7s2dj_qVIIHDh4EJ_NnweGHbR92lWTRdGLV52Gh465mJ5rHk_wQeCmcMSBlBTKmxB_JSWl3_VouGn9W1GVli5ktejV5cqq55pZY8SPmFDybdwX/NzxyMQfIL8dwQZg4foqXD7JdceKclAwe2ZnMeu9b6vbT9V_y1IYeFTj1pdX2JD9a3rc1UshUIvqEovNTni0Pfu87Klcp_9w1QW4QqJtfn2qQUmnm2AoK1e9c-U0Ph0x0/.../

http://www.musiciansnetwork.com/.../downloadurl.html?id=31734&n=1

http://dw.uptodown.com/dwn/Qtu1Wtwh_VofrUI4bGmiT0xaavsEN108g1rY8Bt7MdktMEPCeDjItF6VqpV59tkaLNkftv2v2RTnrS9t9_xzeeAu0Th9L8btk-_tPVX6AmCCYhXKMBpNAy0gOyjRcU5A/xvfWThfzh_KgqWHS1sg2YaKNNGcq1HB179vIEY8bJL66ThLchCbwtCAY6QQAf3X-uUPCts8C9l4_y--fYSZfnhCoyXLDnsbT_GXum0KfAI_L7IMNsZVASi7kDSAnr_Ax/.../

http://files.downloadnow.com/s/software/14/68/83/.../DarkWave-Studio-5.5.2-Setup.exe

http://darkwave-studio.softonic.com/download-tracker?th=8yS3 KGEYLiw7GKMHzA/trmsvRChbxdrflJq3ZIylWvN9r34dCIdbNLuRrPzJoIMMyrbwBIOSsyl/arVYAJ65 BhkyX9P6Ri7l5di5iJbm4KeKVdLawKNpGZ/.../Vn8cuJE0NgHf5GGz8nZFJjIiPym35GGwuEQLlxW45nHteI2CsS14WYmm9Bk7ZoAaSwy03ykag==

http://dw9.uptodown.com/dwn/sCFrgvOdkpSjEv-xte9jOW2u5UsP5S6X4usY6cMORv0vYGyuhqLkgUwK-CVIqnYZC_Jw9lqarKB7n2bdfxJeBZssj5CDRa9PI1itV1Kbsaj0w8GLxygnHjfOexRzumFZ/EcFLqukZ-muAiWKdBPPuVR_9S-2aofdoLt8FIpJ11DSh7pDLi5c_0iTeptUWV-43ZsXIeANlYKCbtav75nfnEqWcAaqXRMO2wjwokH7oL8udlf_xNG2YmpUXw-RvexhM/.../darkwave-studio-5-5-2.exe

http://dw.uptodown.com/dwn/zMqDsEVEqbDQ6_PYmq773hqdqgdPqnBIne_8dbxhxPcBC14UpmY2Gc1YaNJFgfDWGckaAdOFjadP6AwpYngsWeGloF_vsKHcwx6xUdeHVUQlDoqqLrv1URlSIDkwt3zi/eA0_ghTdd3UeZfB-HunTLvo-LRUQRkV6GX__QQLzunM7fsrhqn_IaFwM9yZ3St3SVaG9y8aHQWAnfusV530OddZvSTZLlkNH3bZ4pTz1gjv0vRvGPmzWtMR2kIBaZP5H/.../

https://dw.uptodown.com/dwn/D-9UWZ7kpHjpEu6vWabYBGt7vozGzAvSPxP_lk2e7uXJmeWlNBlkk95ek8U9zwqr2GeYarSpjjZ1w-beUdHr4xHf3TeGk4xpENXTXDaCfTDXyO-19uXRms3gxaMOSjuD/kdwAhOcf19W-mhoMRg5fpQe-etH_CL0ii6oBaTcSQrb2O1sNFKzzNit3is1kYPLUjpbuo7hAsrGk1pgWCClLVGZ41AxuBf1DAT0G4nvhkNjWmNx1k8Dv0C-NOC5G4IoR/.../

https://dw.uptodown.com/dwn/FsrnohK2kjSrXlBsejC_oDMvEg6fczVQox2YM-yFGKqAgmRejYE93UIxLZ0aORgI_ZQuwY4sX4GBgrqbv2jcVQYlJ0pHzRW2rwLcAHPzKCRrcw0Yvcpapzg4LTq1kig8/rIPZ3xgP5tTEDyOyWWsDIRU-TGPA_5EEdYoIGYchkJssGfC7MKXroUDldK4MQlKgrbAr6qbiSsxaGCPonCDUby_2mtGdJrIu4QlOoKnWff9bqRvgg5ywuXKPfj54B6P2/.../

http://software.thaiware.com/download_url.php?id=11313

http://darkwave-studio.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxANWeszXncrxElLkTICkozKBZ6sk0zwO7eHTtaLglGSWh3UKDIWwSimQ0/b1SwO59DHtvc0mMAUCM9UQtdOJynxrYrXXI7ULNENsp1KGbF/.../9A==

http://www.experimentalscene.com/.../DarkWave-Studio-5.5.1-Setup.exe

http://darkwave-studio.softonic.com.br/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxANWeszXncrxElLkTICkozKBZ6sk0zwO7eHTtaLglGSWh3UKDIWwSimQ0/b1SwO59DHtvc0mMAUCM9UQtdOJynxrYrXXI7ULNENsp1KGbF/.../9A==

http://www.experimentalscene.com/.../DarkWave-Studio-5.5.2-Setup.exe

Remove darkwave-studio-5.5.2-setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.