posfreecollagemaker_setup.exe

The application posfreecollagemaker_setup.exe has been detected as a potentially unwanted program by 6 anti-malware scanners. This is a self-extracting archive and installer, however the file is not signed with an authenticode signature from a trusted source. The installer uses the InstallMonetizer platform which will donwload and install adware toolbars and other potentially unwanted software offers during setup.
Remove posfreecollagemaker_setup.exe - Powered by Reason Core Security
MD5:
3626942b86eef35a58f4d6f2e18f42f3

SHA-1:
7e22b7016613bbdd28361b58e991eed9cf42dd0e

SHA-256:
705181b19944d0395cfa48b7c698209e3f4aa00b6080b839b7659cf10e98c4b8

Scanner detections:
6 / 68

Status:
Potentially unwanted

Explanation:
Uses the InstallMonetizer distribution platform to bundle adware.

Analysis date:
12/9/2016 4:39:01 PM UTC  (today)

Scan engine
Detection
Engine version

CMC Antivirus
WebToolbar.Win32.RK!O
1.1.0.977

Dr.Web
Adware.Downware.2013
9.0.1.0161

ESET NOD32
Win32/InstallMonetizer.AQ
8.9883

F-Prot
W32/AdAgent.AR.gen
v6.4.7.1.166

Remove posfreecollagemaker_setup.exe - Powered by Reason Core Security
File size:
43.6 MB (45,733,422 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\posfreecollagemaker_setup.exe

File PE Metadata
Compilation timestamp:
7/31/2010 9:32:56 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
786432:VEYeVsSSxljcapogmcPNcwtX5CJ9tnzGpFf4asxd+jLyq2XMcd04i1gmW1rxc/GX:VEYusvvjcaDmc75CPpzcAasxe27dW1i5

Entry address:
0x29432

Entry point:
55, 8B, EC, 6A, FF, 68, 88, C8, 42, 00, 68, C0, 8C, 42, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 58, 53, 56, 57, 89, 65, E8, FF, 15, 38, C1, 42, 00, 33, D2, 8A, D4, 89, 15, 20, 39, 48, 00, 8B, C8, 81, E1, FF, 00, 00, 00, 89, 0D, 1C, 39, 48, 00, C1, E1, 08, 03, CA, 89, 0D, 18, 39, 48, 00, C1, E8, 10, A3, 14, 39, 48, 00, 33, F6, 56, E8, E0, 00, 00, 00, 59, 85, C0, 75, 08, 6A, 1C, E8, B0, 00, 00, 00, 59, 89, 75, FC, E8, 33, 14, 00, 00, FF, 15, 0C, C1, 42, 00, A3, 20, 3E, 48, 00, E8...
 
[+]

Entropy:
7.9992

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
171 KB (175,104 bytes)

Remove posfreecollagemaker_setup.exe - Powered by Reason Core Security