» kamasutra_malayalam_translation.exe
Overview
Analysis
File Details

kamasutra_malayalam_translation.exe

YourFileDownloader Installer

Mtech

This is the Via Advertising bundle installer which bundles applications with offers for additional 3rd party software, mostly unwanted adware, and may be installed with minimal consent. The application kamasutra_malayalam_translation.exe by Mtech has been detected as adware by 20 anti-malware scanners. The program is a setup application that uses the YourFile Downloader installer. This program installs potentially unwanted software on your PC at the same time as the software you are trying to install, without adequate consent.

File name:

Publisher:

http://yourfile-downloader.com (signed by Mtech)

Product:

YourFileDownloader Installer

Version:

1, 0, 665, 1

MD5:

1a8eb470d37e492c5c9aab448cb1d6b6

SHA-1:

3068f9b0b6fb4acd51a00329098d040b0b284e3e

SHA-256:

3a469f24b4930100dd9d345da358c72ef00087f7926c2a4076406243e251f8a6

Scanner detections:

20 / 68

Status:

Adware

Description:

This 'download manager' is also considered bundleware, a utility designed to download software (possibly legitimate or opensource) and bundle it with a number of optional offers including ad-supported utilities, toolbars, shopping comparison tools and browser extensions.

Analysis date:

2/8/2026 2:45:11 AM UTC (today)

Scan engine

Detection

Engine version

Lavasoft Ad-Aware

Application.Bundler.Agent.X

5523130

Agnitum Outpost

Riskware.Agent

7.1.1

AhnLab V3 Security

PUP/Win32.YourFileDownloader

2015.05.20

Avira AntiVirus

PUA/EDownloader.Gen

8.3.1.6

avast!

Win32:Adware-gen [Adw]

150319-1

AVG

Adware BundleApp_r.AX

2014.0.4311

Bitdefender

Application.Bundler.Agent.X

1.0.20.700

Bkav FE

HW32.Packed

1.3.0.6379

Clam AntiVirus

Win.Adware.1239795

0.98/20486

Dr.Web

Adware.Downware.11105

9.0.1.05190

Emsisoft Anti-Malware

Application.Bundler.Agent.X

10.0.0.5366

ESET NOD32

Win32/ExpressDownloader.E potentially unwanted application

7.0.302.0

F-Secure

Riskware.Application.Bundler.Agent

5.13.68

G Data

Application.Bundler.Agent

15.5.25

IKARUS anti.virus

PUA.Expressdownloader

t3scan.1.8.9.0

K7 AntiVirus

Adware

13.204.15965

Malwarebytes

PUP.Optional.Downloader

v2015.05.20.08

MicroWorld eScan

Application.Bundler.Agent.X

16.0.0.420

Reason Heuristics

PUP.Via Advertising.Bundler

15.5.20.4

VIPRE Antivirus

Threat.4150696

39486

File size:

4.5 MB (4,704,088 bytes)

Product version:

1.0.0.1

Original file name:

YourFileDownloaderInstaller.exe

File type:

Executable application (Win32 EXE)

Bundler/Installer:

YourFile Downloader

Language:

English

Common path:

C:\users\{user}\appdata\local\temp\{random}.tmp\kamasutra_malayalam_translation.exe

Digital Signature

Signed by:

Mtech

Authority:

Mtech

Valid from:

4/23/2015 11:27:39 AM

Valid to:

4/22/2016 11:27:39 AM

Subject:

CN=Mtech, O=Mtech, S=London, C=UK

Issuer:

CN=Mtech, C=UK, S=London, L=London, E=admin@mtech.com, O=Mtech

Serial number:

100001

File PE Metadata

Compilation timestamp:

4/24/2015 7:32:16 PM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

12.0

CTPH (ssdeep):

98304:iweTWQRqN4Z4JxDirDJQPazcAm51aVa7GqkVjG4IQJfc21c9:jeT1Rjc5oQSYT51ao77kDIQJB1c9

Entry address:

0x8FC179

Entry point:

E8, 3D, D5, BE, FF, 9C, 60, 89, F4, 60, FF, 74, 24, 0C, FF, 74, 24, 08, 8D, 64, 24, 28, E9, CE, 1E, F6, FF, 77, 5D, 40, 8E, 2F, D6, E1, F6, C4, 28, B7, 15, BA, 5B, 94, 18, A7, 5E, 8E, 6E, 3A, D3, 08, D4, FE, E6, E0, E4, 98, 54, 76, 3E, 95, 27, 6A, 50, 13, 54, 3D, 50, 9C, E8, B6, 67, A1, 7C, 47, D6, 0B, 09, 10, FD, D4, B7, 3D, 1D, D7, C5, F3, 36, 89, 2C, 23, AF, 70, 4F, C2, 98, CB, C1, A3, EC, 25, B7, A4, 55, 5F, 1D, 48, 8E, 50, B8, 0D, 93, 9F, 55, 43, D2, 4E, E9, 6E, 8C, CC, 52, DC, 02, 94, 9A, 5A, 60, FF... 
[+]

Entropy:

7.9287 (probably packed)

Code size:

1.1 MB (1,163,776 bytes)

Remove kamasutra_malayalam_translation.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.