ielogic.exe
Conduit Toolbar
Conduit Ltd.
It is part of the Conduit Toolbar platform (bundled adware) and is the package designed to install the toolbar in Internet Explorer. The application ielogic.exe, “BrowserPlus2 Toolbar” by Conduit has been detected as a potentially unwanted program by 7 anti-malware scanners. The program is a setup application that uses the Conduit Toolbar Manager installer. It is also typically executed from the user's temporary directory. While running, it connects to the Internet address setupapi.toolbar.conduit-services.com on port 80 using the HTTP protocol.
Description:
BrowserPlus2 Toolbar
MD5:
87853eb675f6a30f83e0040a2d4d414b
SHA-1:
116dffff1ea87751dbf56edce0bf61d3db4b2986
SHA-256:
ea21933d7103502dc37aa3365a57872826a92a304240408f4f1eda598b5e3f91
Scanner detections:
7 / 68
Status:
Potentially unwanted
Explanation:
This component is distributed and installed with the Conduit Toolbar platform.
Description:
This is also known as bundleware, or downloadware, which is an downloader designed to simply deliver ad-supported offers in the setup routine of an otherwise legitimate software.
Analysis date:
4/24/2024 10:57:09 PM UTC (today)
Scan engine
Detection
Engine version
Boost by Reason
Optional.Conduit.H
188838
Comodo Security
Application.Win32.Conduit.~f
17137
Dr.Web
Adware.Conduit.6
9.0.1.042
Malwarebytes
PUP.Optional.Conduit.A
v2014.02.11.10
Reason Heuristics
PUP.Toolbar.Conduit.H
14.8.7.22
Trend Micro House Call
TROJ_GEN.F47V0821
7.2.42
VIPRE Antivirus
Conduit
22592
File size:
2.4 MB (2,521,960 bytes)
Product version:
6.14.0.28
Copyright:
Conduit (C) 2013 All Rights Reserved
Original file name:
Conduit Toolbar
File type:
Executable application (Win32 EXE)
Bundler/Installer:
Conduit Toolbar Manager
Language:
English (United States)
Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\ielogic.exe
Valid from:
1/2/2013 4:00:00 PM
Valid to:
4/3/2016 4:59:59 PM
Subject:
CN=Conduit Ltd., OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Conduit Ltd., L=Ness Ziona, S=Israel, C=IL
Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US
Serial number:
3A82654719D8F75B59134F7B66465210
Compilation timestamp:
4/10/2010 5:19:31 AM
Code size:
25 KB (25,600 bytes)
The executing file has been seen to make the following network communications in live environments.