home

MovieDownloader.exe

MovieDownloader

CoolMirage Ltd.

This is part of a CoolMirage installatation, a potentially unwanted program (PUP) that display ads on the computer. The application MovieDownloader.exe by CoolMirage has been detected as adware by 2 anti-malware scanners. This is a setup program which is used to install the application. This file is typically installed with the program MovieDownloader by 1clickmoviedownloader.com which is a potentially unwanted software program. The setup installer will bundle multiple adware offers during download and setup (based on the user's geographical location) including toolbars, extensions and coupon utilities.
Publisher:
Cool Mirage  (signed by CoolMirage Ltd.)

Product:
MovieDownloader

Version:
1.1.4.0

MD5:
d74bacac0bea585da749f2de5799c909

SHA-1:
1662e3735da0051f72432671e4157cfdcf43e863

SHA-256:
ce1d1c130f1fc48776b09dd3579663bfa5f932adaaefc79243fc0bbf8ca015ea

Scanner detections:
2 / 68

Status:
Adware

Explanation:
Bundles a number of adware programs in the installer.

Analysis date:
4/19/2024 8:23:47 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.CoolMirage (M)
15.11.12.11

VIPRE Antivirus
CoolMirage Ltd
21510

File size:
2.5 MB (2,673,144 bytes)

Product version:
1.1.4.0

Copyright:
Copyright © Cool Mirage 2013

Original file name:
MovieDownloader.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\Program Files\1clickmoviedownloader.com\moviedownloader.exe

Digital Signature
Signed by:
CoolMirage Ltd.

Authority:
Thawte, Inc.

Valid from:
6/5/2013 5:00:00 PM

Valid to:
6/6/2014 4:59:59 PM

Subject:
CN=CoolMirage Ltd., O=CoolMirage Ltd., L=Tel Aviv, S=Israel, C=IL

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
110F603E63C86349A5F243EA06966F33

File PE Metadata
Compilation timestamp:
7/15/2013 8:41:11 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
49152:8qFDHZK6KDT1Y8D+2kUXbvKUeeZsssgMzAtwi2NlRp3j2J3pK761Y8SeHDTRz3Pt:HDXk1ZkAmUeeZsssjEtwi2yJ5p13DTZV

Entry address:
0x288BFE

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
7.9338

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
2.5 MB (2,649,600 bytes)

The file MovieDownloader.exe has been discovered within the following program.

MovieDownloader  by 1clickmoviedownloader.com
The MovieDownloader, also known as the Smarter Downloader is a bundled installation using the Optimum Installer monetization platform. Installing the co-bundled software through the modified installer may not be optional.
71% remove it
 
Powered by Should I Remove It?

The file MovieDownloader.exe has been seen being distributed by the following URL.

http://www1.installsfiles.com/MovieDownloader4.exe

Remove MovieDownloader.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.