senselesstv.exe

SenselessTV Video Plugin

Agam Berry

The application senselesstv.exe by Agam Berry has been detected as adware by 9 anti-malware scanners. The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. This will display context specific advertisements in the browser as well as attempt to modify the browser's search provider. The file has been seen being downloaded from senseless.tv.
Publisher:
SenselessTV.com  (signed by Agam Berry)

Product:
SenselessTV Video Plugin

Version:
1.0

MD5:
e7611eecb81e7a996b50ab24af1e8393

SHA-1:
9c662a78fa0179e28927062ec7af740f1ad22b64

SHA-256:
3664fbdbf2d5536452964322e243a60bb988973411f362a45deda45572de04b3

Scanner detections:
9 / 68

Status:
Adware

Explanation:
Bundles additional adware offers during download and installation using the OutBrowse installer.

Analysis date:
4/25/2024 8:04:04 PM UTC  (today)

Scan engine
Detection
Engine version

AVG
Toolbar.Babylon
2015.0.3492

Baidu Antivirus
Trojan.Win32.Agent
4.0.3.14427

Dr.Web
Adware.Toolbar.146
9.0.1.0117

ESET NOD32
Win32/DownWare
8.9177

Fortinet FortiGate
W32/Toolbar.BABYLON
4/27/2014

Reason Heuristics
PUP.AgamBerry.L
14.8.7.23

Trend Micro House Call
ADW_BPROTECT
7.2.117

Trend Micro
ADW_BPROTECT
10.465.27

VIPRE Antivirus
OutBrowse
24414

File size:
1.1 MB (1,131,904 bytes)

Copyright:
© SenselessTV

Trademarks:
SenselessTV.com

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\senselesstv.exe

Digital Signature
Signed by:

Authority:
StartCom Ltd.

Valid from:
8/11/2012 11:08:20 PM

Valid to:
8/14/2014 12:01:23 AM

Subject:
E=admin@senseless.tv, CN=Agam Berry, L=Panchkula, S=Haryana, C=IN, Description=MdkS78g4D23HuXpp

Issuer:
CN=StartCom Class 2 Primary Intermediate Object CA, OU=Secure Digital Certificate Signing, O=StartCom Ltd., C=IL

Serial number:
06EE

File PE Metadata
Compilation timestamp:
12/5/2009 11:50:52 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
24576:96oFPjn59Ca9swlD/KslXcIkt3pCsw7OTC+ev1XZQJ14ZQz:fFPN9CR2CslsIx/72C+ev1XSJeSz

Entry address:
0x30FA

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, 60, 91, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, B0, 70, 40, 00, 53, FF, 15, 7C, 72, 40, 00, 6A, 08, A3, 18, EC, 42, 00, E8, F1, 2B, 00, 00, A3, 64, EB, 42, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, 98, 8F, 42, 00, FF, 15, 58, 71, 40, 00, 68, 54, 91, 40, 00, 68, 60, E3, 42, 00, E8, A4, 28, 00, 00, FF, 15, AC, 70, 40, 00, BF, 00, 40, 43, 00, 50, 57, E8, 92, 28, 00, 00...
 
[+]

Packer / compiler:
Nullsoft install system v2.x

Code size:
23.5 KB (24,064 bytes)

The file senselesstv.exe has been seen being distributed by the following URL.

Remove senselesstv.exe - Powered by Reason Core Security