home

DownVision.exe

DownVision

KSX Development

The application DownVision.exe by KSX Development has been detected as adware by 2 anti-malware scanners. This file is typically installed with the program DownVision.
Publisher:
KSX Development  (signed and verified)

Product:
DownVision

Version:
1.0.7.0

MD5:
d5b025edd5cc7d7adc4fbfd2e4e01462

SHA-1:
1e5103b7bc86508a5a3a0a4d988857a821279651

SHA-256:
830755613c95fcf236f63cb832e442a7e0c8b776a24105180347c9499d7a70d1

Scanner detections:
2 / 68

Status:
Adware

Analysis date:
4/26/2024 2:41:32 AM UTC  (today)

Scan engine
Detection
Engine version

Dr.Web
Adware.TorrentClient.1
9.0.1.05190

Reason Heuristics
PUP.KSXDevelopment
15.6.6.16

File size:
1.6 MB (1,654,008 bytes)

Product version:
1.0.7.0

Copyright:
Copyright © 2011

Original file name:
DownVision.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\downvision\downvision.exe

Digital Signature
Signed by:
KSX Development

Authority:
VeriSign, Inc.

Valid from:
7/19/2011 2:00:00 AM

Valid to:
7/19/2012 1:59:59 AM

Subject:
CN=KSX Development, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=KSX Development, L=Saint-Petersburg, S=Saint-Petersburg, C=RU

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
073B209CBD5C848CD7CCADC4311B16DC

File PE Metadata
Compilation timestamp:
7/7/2011 3:23:25 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
12288:YaebB+AKTLA8TdCQXmZOvBlNvpU2LzFM0liuyROJHe3zqcLIO:Y/bB+AKTBRC6DbPFM07O

Entry address:
0x18226E

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
1.5 MB (1,573,888 bytes)

The file DownVision.exe has been discovered within the following program.

DownVision  by DownVision
downvision.com
About 1% of users remove it
 
Powered by Should I Remove It?

Remove DownVision.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.