» Safe Downloads
Digital Signature
Analysis
Files (61)
Downloads (11)
Distribution (1)

Safe Downloads

Publisher Information

Safe Downloads is a software publisher located in Carlsbad, California in the United States*. A majority of the programs developed by the company can be classified as adware or other potentially unwanted programs. There is one additional code signing certificate issued to this publisher.

Authority:

COMODO CA Limited

Valid from:

2/11/2014 7:00:00 PM

Valid to:

2/12/2015 6:59:59 PM

Subject:

CN=Safe Downloads, O=Safe Downloads, STREET=2911 State Street, L=Carlsbad, S=CA, PostalCode=92008, C=US

Issuer:

CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

7f513316c38621855c3dc287ae382022

Scanner detections:

Detections (100% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.InstallCore.Bundler (M), PUP.installCore.SafeDownloads (M), PUP.installCore.SafeDownloads.Installer (M), PUP.installCore.SafeDown (M), PUP.installCore.SafeDown.Installer (M), PUP.installCore (M)

74.00%

VIPRE Antivirus

InstallCore, Threat.4786018

36.00%

Avira AntiVirus

ADWARE/InstallCore.Gen7, ADWARE/InstallCore.Gen4, ADWARE/InstallCore.Gen9, PUA/InstallCore.Gen7

28.00%

ESET NOD32

Win32/InstallCore.QF (variant), Win32/InstallCore.TL (variant), Win32/InstallCore.TL potentially unwanted (variant), Win32/InstallCore.PY (variant)

22.00%

Baidu Antivirus

Adware.Win32.InstallCore

22.00%

Trend Micro House Call

Suspicious_GEN.F47V1119, Suspicious_GEN.F47V1210, Suspicious_GEN.F47V1217, Suspicious_GEN.F47V1226, Suspicious_GEN.F47V0927, Suspicious_GEN.F47V0105

20.00%

ESET NOD32

Win32/InstallCore.TL potentially unwanted application, Win32/InstallCore.PY potentially unwanted application, Win32/InstallCore.SU potentially unwanted application, Win32/InstallCore.SW potentially unwanted application

16.00%

Dr.Web

Trojan.InstallCore.11, Trojan.InstallCore.953

10.00%

Sophos

Generic PUA CG, Generic PUA ON, Generic PUA FK, Generic PUA GF

8.00%

Comodo Security

Application.Win32.InstallCore.SDKA, ApplicUnwnt, Application.Win32.InstallCore.EA

8.00%

1 / 68 (PUP)

apache_openoffice_v4.0.1.exe (4b79ffd26144fc1c06305492543ad1ff)

1 / 68 (PUP)

word_processor_v401.exe (c6dfc5fe0a206937c3bd0b3cad9b0e3b)

1 / 68 (PUP)

inkscape-installer.exe (6ca88831972cb4dd796974e49ae966bd)

1 / 68 (PUP)

vuze-installer.exe (d1237c308a1da82244f80cf42627c679)

1 / 68 (PUP)

apache_openoffice_v4.0.1.exe (04a0ea6bea1b88d495e7eafbd527385d)

1 / 68 (PUP)

handbrake-installer.exe (Generic) (8a4f5dc94aa1bf31e2c4591b37281718)

1 / 68 (PUP)

vuze-installer.exe (5b1de164a47ffca1092bc80c433ec2f3)

1 / 68 (PUP)

gimp-installer.exe (My Program) (2513b463bfa92c2f9f4bf3c5e710774c)

1 / 68 (PUP)

word_processor_v401.exe (64170faeefc8127d8121ae28f4a8a795)

1 / 68 (PUP)

audacity-windows-2.0.5.exe (785e68ae8faeb147f86c79d9ec48872d)

1 / 68 (PUP)

7-zip-installer.exe (9acf9877636501b59569d45d6896a9a8)

1 / 68 (PUP)

gimp-installer.exe (My Program) (6a2ef31a300b2efce2e3c2c47d935efd)

1 / 68 (PUP)

inkscape-installer.exe (Generic) (051c43b24afda1939bcc602f48e1d221)

1 / 68 (PUP)

notepad-plus-plus-installer.exe (970ebfb6ca3ca3770a58337bed871772)

1 / 68 (PUP)

notepad-plus-plus-installer.exe (12b1c8a81690479448f4b159c65211c2)

1 / 68 (PUP)

vuze-installer.exe (My Program) (4556c79454737dde0d7bf761b7431b6b)

1 / 68 (PUP)

apache_openoffice_v4.0.1.exe (My Program) (8ed5832116ba5cc4e236905543e5768c)

1 / 68 (PUP)

libreoffice_v4.1.6.exe (e09cec022b92ea193b50a03ba251d936)

1 / 68 (PUP)

audacity-windows-2.0.5.exe (f2374124e17cce2a033393682a6fdfb9)

1 / 68 (PUP)

utorrent-installer.exe (My Program) (20dbdb49a725e9742023f842b19e6577)

1 / 68 (PUP)

notepad-plus-plus-installer.exe (c856ec26e3824911543f4a7e6012b202)

1 / 68 (PUP)

notepad-plus-plus-installer.exe (181e013d54647aa6e112bf10c6c69a70)

1 / 68 (PUP)

apache_openoffice_v4.0.1.exe (Generic Internet by Application Web Generic) (48b95916a9a69d66077eabd7ab7cb47e)

1 / 68 (PUP)

libreoffice_v4.1.6.exe (My Program) (85458fb5b8fa50b572bee8b6feab16de)

1 / 68 (PUP)

notepad-plus-plus-installer.exe (My Program) (110afe9e55c4b928fa60cc909edf5403)

1 / 68 (PUP)

pdf_reader_v24.exe (1e0a99612ea55be5cc224073f85b3210)

1 / 68 (PUP)

audacity-windows-2.0.5.exe (6a72331101f2933e97dc213b31d75ce2)

1 / 68 (PUP)

audacity-windows-2.0.5.exe (e1eaae684f275e45865be2fb1eadcaca)

1 / 68 (PUP)

youtube_file_converter.exe (Generic) (33ab3cbb93f7771240a259036f11fa29)

4 / 68 (PUP)

libreoffice_v4.1.6.exe (f6e3b6a50bd51a186ff3f9dd71a0f6db)

Latest 30 of 61 files

Downloads URLs for files signed by Safe Downloads.

5 / 68 (PUP)

http://content.officialopendownloads.com/?ic_user_id=598 (7-zip-installer.exe)

1 / 68 (PUP)

http://content.officialopendownloads.com/?ic_user_id=598 (handbrake-installer.exe)

1 / 68 (PUP)

http://content.officialopendownloads.com/?ic_user_id=598 (gimp-installer.exe)

1 / 68 (PUP)

http://content.officialopendownloads.com/?ic_user_id=598 (7-zip-installer.exe)

1 / 68 (PUP)

http://content.officialopendownloads.com/?ic_user_id=598 (libreoffice_v4.1.6.exe)

1 / 68 (PUP)

http://content.officialopendownloads.com/?ic_user_id=598 (notepad-plus-plus-installer.exe)

9 / 68 (PUP)

http://content.officialopendownloads.com/?ic_user_id=598 (notepad-plus-plus-installer.exe)

6 / 68 (PUP)

http://content.officialopendownloads.com/?ic_user_id=598 (apache_openoffice_v4.0.1.exe)

1 / 68 (PUP)

http://content.officialopendownloads.com/?ic_user_id=598 (youtube_file_converter.exe)

1 / 68 (PUP)

http://content.officialopendownloads.com/?ic_user_id=598 (audacity-windows-2.0.5.exe)

5 / 68 (PUP)

http://content.officialopendownloads.com/?ic_user_id=598 (notepad-plus-plus-installer.exe)

Distribution

The following websites host and distribute files published by Safe Downloads.

content.officialopendownloads.com

The following certificate is also signed by Safe Downloads.

29B5387FD5B9A64B8E8D5CFFF6B746D9 (Sep 24, 2012 to Sep 25, 2013)

* Note, the details and description above are based on the code signing digital signature issued to Safe Downloads by COMODO CA Limited on February 11, 2014 with the serial number '7f513316c38621855c3dc287ae382022'.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.