» dealiokit97-stub-0.exe
Overview
Analysis
File Details
Programs (1)

dealiokit97-stub-0.exe

Dealio Toolbar

Vendio Services, Inc.

The application dealiokit97-stub-0.exe, “Setup Launcher ” by Vendio Services has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. This file is typically installed with the program Falling Autumn Leaves Screen Saver by Acez Software LLC.

File name:

Publisher:

Vendio Services, Inc. (signed by Vendio Services, Inc.)

Product:

Dealio Toolbar

Description:

Setup Launcher

Version:

11.0.7

MD5:

223d4c4de6f072092a8f36c4b92aa8a9

SHA-1:

2e858d92cc62687c35527af1c71bc0c3bc7e4863

SHA-256:

25caaeb7511ae3c4746eeed946dbfec93be6aaa293927a337a0175c4f641f80f

Scanner detections:

1 / 68

Status:

Potentially unwanted

Analysis date:

4/23/2024 8:30:21 PM UTC (today)

Scan engine

Detection

Engine version

Reason Heuristics

PUP.Dealio.VS (M)

16.10.28.18

File size:

284.9 KB (291,776 bytes)

Product version:

11.0.7

Original file name:

Setup.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\1 nutty santa screen saver 2.7\dealiokit97-stub-0.exe

Digital Signature

Signed by:

Vendio Services, Inc.

Authority:

VeriSign, Inc.

Valid from:

7/19/2005 8:00:00 PM

Valid to:

7/20/2006 7:59:59 PM

Subject:

CN="Vendio Services, Inc.", OU=Vendio, OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Vendio Services, Inc.", L=San Bruno, S=California, C=US

Issuer:

CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

2BAF1E5CED63B13A8526AD700EA467AF

File PE Metadata

Compilation timestamp:

4/14/2005 6:11:39 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

6.0

CTPH (ssdeep):

6144:/jNpb4mYE1RaM0ZMN4nSuJhhDOFpXsGKLu8NVhpIJx/yp0:YmYE1ROZJvhDAtmxjpIJx/yp0

Entry address:

0x1E77C

Entry point:

55, 8B, EC, 6A, FF, 68, F8, 9F, 42, 00, 68, 8C, 27, 42, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 58, 53, 56, 57, 89, 65, E8, FF, 15, 34, 91, 42, 00, 33, D2, 8A, D4, 89, 15, E4, 5D, 43, 00, 8B, C8, 81, E1, FF, 00, 00, 00, 89, 0D, E0, 5D, 43, 00, C1, E1, 08, 03, CA, 89, 0D, DC, 5D, 43, 00, C1, E8, 10, A3, D8, 5D, 43, 00, 6A, 01, E8, 38, 2D, 00, 00, 59, 85, C0, 75, 08, 6A, 1C, E8, C3, 00, 00, 00, 59, E8, 50, 1F, 00, 00, 85, C0, 75, 08, 6A, 10, E8, B2, 00, 00, 00, 59, 33, F6, 89, 75... 
[+]

Entropy:

6.5518

Developed / compiled with:

Microsoft Visual C++ v6.0

Code size:

160 KB (163,840 bytes)

The file dealiokit97-stub-0.exe has been discovered within the following program.

Falling Autumn Leaves Screen Saver by Acez Software LLC

Publisher's description - “Enjoy the foliage without the hassle of raking. Colorful autumn leaves gather on your desktop with this soothing free screensaver. We conjured up this simple little screensaver for those who love autumn. I admit...”

www.acez.com/autumnleaves.htm

About 4% of users remove it

Remove dealiokit97-stub-0.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.