» online-video-accelerator_setup.exe
Overview
Analysis
File Details
Downloads (6)

online-video-accelerator_setup.exe

Online Video Accelerator

Jottix international media G. M (2007) LTD

The application online-video-accelerator_setup.exe by Jottix international media G. M (2007) has been detected as a potentially unwanted program by 11 anti-malware scanners. The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from www.online-video-accelerator.com and multiple other hosts.

File name:

Publisher:

Jottix (signed by Jottix international media G. M (2007) LTD)

Product:

Online Video Accelerator

Version:

1.0

MD5:

28ae8a82637c1cddb5944e6a51b485fe

SHA-1:

5983585a417ced7315f370d3ebf4ad0a432b6efa

SHA-256:

354d6a1a62d08d3ffead5767df0071af44ebed5bf0edc4719a076fea8d117286

Scanner detections:

11 / 68

Status:

Potentially unwanted

Analysis date:

4/24/2024 3:19:12 PM UTC (today)

Scan engine

Detection

Engine version

avast!

Adware-AZL [Adw]

140813-1

AVG

Generic

2015.0.3367

Dr.Web

Trojan.DownLoader9.55724

9.0.1.05190

ESET NOD32

Win32/DownWare.G potentially unwanted application

7.0.302.0

Malwarebytes

PUP.Downware

v2014.08.29.08

Norman

Downloader

11.20140829

Reason Heuristics

PUP.Installer.JottixinternationalmediaGM2007.EE

14.8.29.18

Sophos

Jottix

4.98

SUPERAntiSpyware

PUP.Downloader/Variant

10391

Vba32 AntiVirus

suspected of Trojan.Downloader.gen.h

3.12.26.3

VIPRE Antivirus

Threat.4784450

32210

File size:

203.9 KB (208,816 bytes)

Product version:

1.0

File type:

Executable application (Win32 EXE)

Installer:

NSIS (Nullsoft Scriptable Install System)

Language:

Language Neutral

Common path:

C:\users\{user}\downloads\online-video-accelerator_setup.exe

Digital Signature

Signed by:

Jottix international media G. M (2007) LTD

Authority:

Thawte, Inc.

Valid from:

12/22/2012 4:00:00 PM

Valid to:

12/23/2013 3:59:59 PM

Subject:

CN=Jottix international media G. M (2007) LTD, O=Jottix international media G. M (2007) LTD, L=Tel-Aviv -Jaffa, S=Israel, C=IL

Issuer:

CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:

78D22334FC3A8C23C5226A26540F86C6

File PE Metadata

Compilation timestamp:

12/5/2009 2:50:52 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

6.0

CTPH (ssdeep):

3072:ygXdZt9P6D3XJpQvh/PclmjXMU7Q2pzFmaO7y+z3IAwpF5Z2+q:ye34Ep/klmu2ppmaaEPm

Entry address:

0x30FA

Entry point:

81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, 60, 91, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, B0, 70, 40, 00, 53, FF, 15, 7C, 72, 40, 00, 6A, 08, A3, 18, EC, 42, 00, E8, F1, 2B, 00, 00, A3, 64, EB, 42, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, 98, 8F, 42, 00, FF, 15, 58, 71, 40, 00, 68, 54, 91, 40, 00, 68, 60, E3, 42, 00, E8, A4, 28, 00, 00, FF, 15, AC, 70, 40, 00, BF, 00, 40, 43, 00, 50, 57, E8, 92, 28, 00, 00... 
[+]

Entropy:

6.4184

Packer / compiler:

Nullsoft install system v2.x

Code size:

23.5 KB (24,064 bytes)

The file online-video-accelerator_setup.exe has been seen being distributed by the following 6 URLs.

http://www.online-video-accelerator.com/download/.../online-video-accelerator_setup.exe

http://www.online-video-accelerator.com/dl.php?p=1&aff_id=1&ce_cid=20oCmn3X83rkQLAw1nwQT11uZjJP2HAl&channel=2&cid=

Remove online-video-accelerator_setup.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.