Payments Interactive SL
This is the Tuguu DomaIQ download manager which bundles applications with offers for additional 3rd party software, mostly unwanted adware, and may be installed with minimal consent. The application player setup.exe by Payments Interactive SL has been detected as adware by 23 anti-malware scanners. The program is a setup application that uses the TUGUU DomaIQ Setup installer. The file has been seen being downloaded from dlp.cloudbox10.com.
23 / 68
Uses the DomainIQ download manager to bundle additional potentially unwanted software without adequate consent.
This 'download manager' is also considered bundleware, a utility designed to download software (possibly legitimate or opensource) and bundle it with a number of optional offers including ad-supported utilities, toolbars, shopping comparison tools and browser extensions.
12/10/2016 11:55:42 AM UTC (today)
AhnLab V3 Security
Antiy Labs AVL
Win32/DomaIQ.BF potentially unwanted application
K7 Gateway Antivirus
McAfee Web Gateway
DomainIQ pay-per install
284 KB (290,784 bytes)
Executable application (Win32 EXE)
TUGUU DomaIQ Setup
12/5/2013 3:09:43 PM
12/5/2014 3:09:43 PM
CN=Payments Interactive SL, O=Payments Interactive SL, L=Adeje, S=Santa cruz de Tenerife, C=ES
SERIALNUMBER=07969287, CN=Go Daddy Secure Certification Authority, OU=http://certificates.godaddy.com/repository, O="GoDaddy.com, Inc.", L=Scottsdale, S=Arizona, C=US
5/23/2014 10:19:48 AM
109 KB (111,616 bytes)
The file player setup.exe has been seen being distributed by the following URL.