ffdshow_setup.exe
Premium Installer
This is published and distributed via an Adknowledge's advertising supported (adware) software installer. The application ffdshow_setup.exe by Premium Installer has been detected as adware by 2 anti-malware scanners. The program is a setup application that uses the Adknowledge Fusion installer. The file has been seen being downloaded from install2.optimum-installer.com and multiple other hosts.
File name:
ffdshow_setup.exe
MD5:
8b9ba242b82eab4ee8d87acbaece27d2
SHA-1:
4d3d20387d8093ab62e10ae5f9579423a659103c
SHA-256:
77fa7f9cd7fb1f5ee33814f01754f54b796fd73169c629ecdd2531f92e9547e8
Scanner detections:
2 / 68
Explanation:
This setup/installer bundles various adware components.
Description:
This is also known as bundleware, or downloadware, which is an downloader designed to simply deliver ad-supported offers in the setup routine of an otherwise legitimate software.
Analysis date:
4/23/2024 1:12:19 PM UTC (today)
Scan engine
Detection
Engine version
Boost by Reason
Adware.Installer.PremiumInstaller.N
2013.7.26.0
Reason Heuristics
PUP.Installer.PremiumInstaller.N
14.8.8.3
File size:
1 MB (1,067,672 bytes)
File type:
Executable application (Win32 EXE)
Bundler/Installer:
Adknowledge Fusion
Common path:
C:\users\{user}\downloads\ffdshow_setup.exe
Valid from:
7/12/2013 5:00:00 PM
Valid to:
8/2/2014 4:59:59 PM
Subject:
CN=Premium Installer, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Premium Installer, L=Wilmington, S=Delaware, C=US
Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US
Serial number:
35BB74B905C01CE61DA131BA49337F33
Compilation timestamp:
7/24/2013 1:25:18 PM
Code size:
106 KB (108,544 bytes)
The file ffdshow_setup.exe has been seen being distributed by the following 2 URLs.