home

the walking dead season 3.exe

Innovative Media Solutions

The application the walking dead season 3.exe by Innovative Media Solutions has been detected as adware by 13 anti-malware scanners. The program is a setup application that uses the Inno Setup installer. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions. The file has been seen being downloaded from www.download-provider.org.
Publisher:
Innovative Media Solutions  (signed and verified)

MD5:
c11cffdf2ec557f80f0654144dded971

SHA-1:
fe9815ba3b074d4f3e99691b8bec4f7be8e07bd9

SHA-256:
62eac6e91ecb393657200ef7df9a5b7f8287af1a8667d7c12cdfd806249be5e6

Scanner detections:
13 / 68

Status:
Adware

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Analysis date:
4/19/2024 12:50:54 PM UTC  (today)

Scan engine
Detection
Engine version

Agnitum Outpost
PUA.InstallCore
7.1.1

Avira AntiVirus
ADWARE/InstallCore.Gen7
7.11.164.58

avast!
Win32:Adware-AWA [Adw]
140617-1

Bkav FE
HW32.Laneul
1.3.0.4959

Dr.Web
Trojan.Packed.24400
9.0.1.05190

ESET NOD32
Win32/InstallCore.BY potentially unwanted application
7.0.302.0

F-Prot
W32/InstallCore.R.gen
4.6.5.141

IKARUS anti.virus
Backdoor.Hupigon
t3scan.1.6.1.0

NANO AntiVirus
Riskware.Win32.InstallCore.dcnbix
0.28.2.60990

Reason Heuristics
PUP.InnovativeMediaSolutions.a
14.8.11.23

Rising Antivirus
PE:Malware.InstallCore!6.4
23.00.65.14726

Vba32 AntiVirus
Downware.InstallCore
3.12.26.3

VIPRE Antivirus
Threat.4786018
31208

File size:
598.9 KB (613,320 bytes)

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Common path:
C:\users\{user}\downloads\ the walking dead season 3.exe

Digital Signature
Signed by:
Innovative Media Solutions

Authority:
COMODO CA Limited

Valid from:
8/27/2012 5:00:00 PM

Valid to:
8/28/2013 4:59:59 PM

Subject:
CN=Innovative Media Solutions, O=Innovative Media Solutions, STREET="604, Tower A, New Trade Plaza, 6 On Ping Street", L=Hong Kong, S=Hong Kong, PostalCode=00852, C=HK

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
008999B0860A6DC61AA130342F5DD96B25

File PE Metadata
Compilation timestamp:
6/19/1992 3:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
12288:M6qJfsMxrcJhXpotIYch6xGAEOQjJgCgKvKdHJt44W1/+dh00hjL8jFtGVaFdZUD:M6qJfsYrcJh5FnAEtjV/KdHJO4W190hP

Entry address:
0x98CC

Entry point:
55, 8B, EC, 83, C4, CC, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, FA, 97, FF, FF, E8, 01, AA, FF, FF, E8, 2C, CC, FF, FF, E8, 73, CC, FF, FF, E8, 0A, F3, FF, FF, E8, 71, F4, FF, FF, 33, C0, 55, 68, 76, 9F, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 2C, 9F, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, B0, 40, 00, E8, 9B, FE, FF, FF, E8, 26, FA, FF, FF, 8D, 55, F0, 33, C0, E8, E0, D0, FF, FF, 8B, 55, F0, B8, D8, BD, 40, 00, E8, AB, 98, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, D8, BD, 40, 00, B2, 01, B8...
 
[+]

Entropy:
7.7080

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
36 KB (36,864 bytes)

The file the walking dead season 3.exe has been seen being distributed by the following URL.

http://www.download-provider.org/.../download-z457718863.html?server=us

Remove the walking dead season 3.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.