freetvdownloader.exe

Free TV Downloader

CoolMirage Ltd.

This is part of a CoolMirage installatation, a potentially unwanted program (PUP) that display ads on the computer. The application freetvdownloader.exe by CoolMirage has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. This is a setup program which is used to install the application. The setup installer will bundle multiple adware offers during download and setup (based on the user's geographical location) including toolbars, extensions and coupon utilities.
Publisher:
Cool Mirage  (signed by CoolMirage Ltd.)

Product:
Free TV Downloader

Version:
1.1.4.6

MD5:
410e0096b8128efb40dcaea1fb123acd

SHA-1:
f4bb98c01c8b21bf43d7c6fd9de906e4d30c6dc5

SHA-256:
202c14493f0c2e7a9a8fc37f0009e019462d10da106bcb563f78f2e4b3cb3b25

Scanner detections:
1 / 68

Status:
Adware

Explanation:
Bundles a number of adware programs in the installer.

Analysis date:
4/18/2024 2:35:17 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.CoolMirage (M)
16.1.7.9

File size:
2.6 MB (2,699,768 bytes)

Product version:
1.1.4.6

Copyright:
Copyright © Cool Mirage 2013

Original file name:
Free TV Downloader.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\Program Files\1clickmoviedownloader.com\freetvdownloader.exe

Digital Signature
Signed by:

Authority:
Thawte, Inc.

Valid from:
6/6/2013 5:30:00 AM

Valid to:
6/7/2014 5:29:59 AM

Subject:
CN=CoolMirage Ltd., O=CoolMirage Ltd., L=Tel Aviv, S=Israel, C=IL

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
110F603E63C86349A5F243EA06966F33

File PE Metadata
Compilation timestamp:
8/21/2013 3:31:06 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
49152:8KUeeO9sssgMzAtwi2NlRp3j2J3pK761Y8SeHDTRz3P9J+biO3+ukUIbaHvrr/ta:HUeeO9sssjEtwi2yJ5p13DTZeZkzMr56

Entry address:
0x28F58E

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
7.9320

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
2.6 MB (2,676,224 bytes)

The file freetvdownloader.exe has been seen being distributed by the following URL.

Remove freetvdownloader.exe - Powered by Reason Core Security