download video player.exe.dap

Tuguu Israel Ltd

The Tuguu download and install manager uses the DomalIQ installer to bundle additional adware offers such as toolbars and browser extensions during the setup process. This software distributes modified installers which are not the same as the original distributed by the author. The file download video player.exe.dap by Tuguu Israel has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the TUGUU DomaIQ Setup installer.
Publisher:
Tuguu Israel Ltd  (signed and verified)

MD5:
b90d9a9854199526ec0bc45288713b4d

SHA-1:
f45fa5e9300925bb35dd237c5e7666a87d3e527f

SHA-256:
10d2914d4c81d4f9fef275c7b151f6375bac166710c31ad884cd6875cd7466cc

Scanner detections:
1 / 68

Status:
Adware

Explanation:
The software bundles potentially unwanted offers during setup including toolbars and adware.

Description:
This is also known as bundleware, or downloadware, which is an downloader designed to simply deliver ad-supported offers in the setup routine of an otherwise legitimate software.

Analysis date:
3/16/2017 5:26:31 AM UTC  (eight months ago)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.Tuguu (M)
17.3.16.1

File size:
458.4 KB (469,448 bytes)

Bundler/Installer:
TUGUU DomaIQ Setup

Digital Signature
Authority:
DigiCert Inc

Valid from:
6/12/2013 3:00:00 AM

Valid to:
8/20/2014 3:00:00 PM

Subject:
CN=Tuguu Israel Ltd, O=Tuguu Israel Ltd, L=RAMAT GAN, C=IL

Issuer:
CN=DigiCert Assured ID Code Signing CA-1, OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:
06FD356584CBF71B04A7AFE790A2329F

File PE Metadata
Compilation timestamp:
1/6/2014 1:03:51 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

Entry address:
0xD182

Entry point:
E8, C4, 63, 00, 00, E9, 78, FE, FF, FF, 6A, 0C, 68, 18, 43, 42, 00, E8, C4, 04, 00, 00, 83, 65, E4, 00, 8B, 75, 08, 3B, 35, 58, A8, 42, 00, 77, 22, 6A, 04, E8, AF, 65, 00, 00, 59, 83, 65, FC, 00, 56, E8, B6, 6D, 00, 00, 59, 89, 45, E4, C7, 45, FC, FE, FF, FF, FF, E8, 09, 00, 00, 00, 8B, 45, E4, E8, D0, 04, 00, 00, C3, 6A, 04, E8, AA, 64, 00, 00, 59, C3, 8B, FF, 55, 8B, EC, 56, 8B, 75, 08, 83, FE, E0, 0F, 87, A1, 00, 00, 00, 53, 57, 8B, 3D, 70, F0, 41, 00, 83, 3D, 1C, A5, 42, 00, 00, 75, 18, E8, 6A, 5C, 00...
 
[+]

Entropy:
7.4197

Code size:
119.5 KB (122,368 bytes)

Remove download video player.exe.dap - Powered by Reason Core Security