softonicdownloader_pour_videospin.exe

Softonic Downloader

Softonic

The application softonicdownloader_pour_videospin.exe has been detected as adware by 13 anti-malware scanners. The program is a setup application that uses the Softonic Downloader installer, however the file is not signed with an authenticode signature from a trusted source. The file has been seen being downloaded from videospin.softonic.fr.
Publisher:
Softonic

Product:
Softonic Downloader

Version:
1.41.1.7

MD5:
6a29728b876a79d12b234fe0994535b0

SHA-1:
502e86c25121948d57657fff6f14b54c28e512a8

SHA-256:
5428d6c741ebfed06409ff6b59a2719e9da277101987db37ea33e489d3530d8d

Scanner detections:
13 / 68

Status:
Adware

Description:
This 'download manager' is also considered bundleware, a utility designed to download software (possibly legitimate or opensource) and bundle it with a number of optional offers including ad-supported utilities, toolbars, shopping comparison tools and browser extensions.

Analysis date:
4/19/2024 5:48:07 AM UTC  (today)

Scan engine
Detection
Engine version

Avira AntiVirus
TR/Crypt.ULPM.Gen
7.11.30.172

Dr.Web
Adware.Downware.5107
9.0.1.0219

ESET NOD32
Win32/SoftonicDownloader.G potentially unwanted application
8.7.0.302.0

F-Prot
W32/Softonic.C2.gen
v6.4.7.1.166

IKARUS anti.virus
PUA.Softonic
t3scan.1.6.1.0

K7 AntiVirus
Unwanted-Program
13.180.12538

Kaspersky
not-a-virus:Downloader.Win32.Agent
15.0.0.494

Malwarebytes
PUP.Optional.Softonic.A
v2014.08.07.09

NANO AntiVirus
Riskware.Win32.Downware.dbzrzs
0.28.2.61349

Reason Heuristics
Bundler.SoftonicDownloader.b
14.8.7.8

Vba32 AntiVirus
Downloader.Agent
3.12.26.3

VIPRE Antivirus
Threat.4786139
29708

File size:
352.4 KB (360,816 bytes)

Product version:
1.41.1.7

Copyright:
Copyright (C) 2014

Original file name:
SoftonicDownloader.exe

File type:
Executable application (Win32 EXE)

Bundler/Installer:
Softonic Downloader

Language:
Spanish

Common path:
C:\users\{user}\downloads\softonicdownloader_pour_videospin.exe

File PE Metadata
Compilation timestamp:
9/26/2000 10:56:17 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
6144:RGpUiCbVzVvvL+12I5qGNp9d+MEQz/voXsiUZsKIyaFbwBywkEJvjFmYYE3yQL66:RyCbVRbinNb1EQcXXUVI3FC1FmYqQFxN

Entry address:
0xF1830

Entry point:
60, BE, 00, 50, 4A, 00, 8D, BE, 00, C0, F5, FF, 57, 89, E5, 8D, 9C, 24, 80, C1, FF, FF, 31, C0, 50, 39, DC, 75, FB, 46, 46, 53, 68, ED, F8, 0E, 00, 57, 83, C3, 04, 53, 68, 28, C8, 04, 00, 56, 83, C3, 04, 53, 50, C7, 03, 03, 00, 02, 00, 90, 90, 90, 90, 90, 55, 57, 56, 53, 83, EC, 7C, 8B, 94, 24, 90, 00, 00, 00, C7, 44, 24, 74, 00, 00, 00, 00, C6, 44, 24, 73, 00, 8B, AC, 24, 9C, 00, 00, 00, 8D, 42, 04, 89, 44, 24, 78, B8, 01, 00, 00, 00, 0F, B6, 4A, 02, 89, C3, D3, E3, 89, D9, 49, 89, 4C, 24, 6C, 0F, B6, 4A...
 
[+]

Code size:
312 KB (319,488 bytes)

The file softonicdownloader_pour_videospin.exe has been seen being distributed by the following URL.

Remove softonicdownloader_pour_videospin.exe - Powered by Reason Core Security