setup.exe
Premium Installer
This is published and distributed via an Adknowledge's advertising supported (adware) software installer. The application setup.exe by Premium Installer has been detected as adware by 2 anti-malware scanners. The program is a setup application that uses the Adknowledge Fusion installer. The file has been seen being downloaded from install2.optimum-installer.com and multiple other hosts.
MD5:
3214256c4426ae4db49c5e65c94a239c
SHA-1:
4f87ada1f4d586031aa63561968313a564e05b5e
SHA-256:
025d146210a754993b226b951668c7cc143037c2620a83e8fa00d877b5b046d7
Scanner detections:
2 / 68
Explanation:
This setup/installer bundles various adware components.
Description:
This 'download manager' is also considered bundleware, a utility designed to download software (possibly legitimate or opensource) and bundle it with a number of optional offers including ad-supported utilities, toolbars, shopping comparison tools and browser extensions.
Analysis date:
4/19/2024 1:43:59 AM UTC (today)
Scan engine
Detection
Engine version
Boost by Reason
Adware.Installer.PremiumInstaller.F
2013.8.4.12
Reason Heuristics
PUP.Installer.PremiumInstaller.F
14.8.8.3
File size:
1 MB (1,065,624 bytes)
File type:
Executable application (Win32 EXE)
Bundler/Installer:
Adknowledge Fusion
Common path:
C:\users\{user}\downloads\setup.exe
Valid from:
7/12/2013 5:00:00 PM
Valid to:
8/2/2014 4:59:59 PM
Subject:
CN=Premium Installer, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Premium Installer, L=Wilmington, S=Delaware, C=US
Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US
Serial number:
35BB74B905C01CE61DA131BA49337F33
Compilation timestamp:
8/2/2013 6:40:41 AM
CTPH (ssdeep):
24576:G5zsezvLMJC+eGekJexWkm8JIDqVraNiAgi4CICr83GvERT/4Z:krkvtex9m8J2qVraNJgi4CICrWGvERT6
Code size:
105 KB (107,520 bytes)
The file setup.exe has been seen being distributed by the following 2 URLs.