home

lemurleap.ffupdate.dll

Lemurleap

FFUpdate is the Mozilla Firefox plugin manager for the Lemurleap branded Yontoo adware browser platform. The component is designed to install and keep Firefox connected to the adware updater. The module lemurleap.ffupdate.dll by Lemurleap has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat.
Publisher:
Lemurleap  (signed and verified)

Version:
1.0.5454.31554

MD5:
ac4f78b82d9f8e8cd87d298e11452a58

SHA-1:
cc0379e50645c0acaa2ed2c60eae7c9febbadd1a

SHA-256:
d7b6126193cf96e73a2d60c4ce19d54100fe09f77c586105f55da3a823be8308

Scanner detections:
1 / 68

Status:
Adware

Explanation:
Part of the Yontoo distributed ad-supported web browser plugin for Firefox.

Analysis date:
4/25/2024 6:01:19 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
Adware.Yontoo.Lemurleap (M)
16.2.13.4

File size:
546.4 KB (559,528 bytes)

Product version:
1.0.5454.31554

Original file name:
LemurLeap.FFUpdate2014120801.dll

File type:
Dynamic link library (Win32 DLL)

Language:
Language Neutral

Common path:
C:\Program Files\lemurleap\bin\plugins\lemurleap.ffupdate.dll

Digital Signature
Signed by:
Lemurleap

Authority:
COMODO CA Limited

Valid from:
5/7/2014 4:00:00 AM

Valid to:
5/8/2015 3:59:59 AM

Subject:
CN=Lemurleap, O=Lemurleap, STREET=10620 Treena Street Suite 230, L=San Diego, S=Ca, PostalCode=92131, C=US

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
015F3E368C995EC152965B1AABC50D9E

File PE Metadata
Compilation timestamp:
12/8/2014 5:31:52 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
6.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
12288:ZMO38ntEaNmoq/4Z0rLzM9d0Ei70xgmvOqH7s:ZXouSsLzM91qwOS

Entry address:
0x8897A

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
7.4967

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
538.5 KB (551,424 bytes)

Remove lemurleap.ffupdate.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.