home

9e3739dbdd849683c2bc54c234d725db7191e9430c4df4a0bdfa554e9ab6f504

Sakysoft s.r.l.

The file 9e3739dbdd849683c2bc54c234d725db7191e9430c4df4a0bdfa554e9ab6f504 by Sakysoft s.r.l has been detected as a potentially unwanted program by 30 anti-malware scanners. The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. This program installs potentially unwanted software on your PC at the same time as the software you are trying to install, without adequate consent.
Publisher:
Sakysoft s.r.l.  (signed and verified)

MD5:
bd1b60dc0f0c590adbd310bfc19386c7

SHA-1:
513db2e00fa54a4443d26d526f26358a92546b61

SHA-256:
9e3739dbdd849683c2bc54c234d725db7191e9430c4df4a0bdfa554e9ab6f504

Scanner detections:
30 / 68

Status:
Potentially unwanted

Explanation:
Bundles additional adware offers during download and installation using the OutBrowse installer.

Analysis date:
4/24/2024 9:05:48 PM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Application.Bundler.Outbrowse.A
5670435

Agnitum Outpost
PUA.OutBrowse
7.1.1

Avira AntiVirus
PUA/Outbrowse.Gen
8.3.1.6

Arcabit
Application.Bundler.Outbrowse.A
1.0.0.425

avast!
OutBrowse-HW [PUP]
150602-1

Bitdefender
Application.Bundler.Outbrowse.A
1.0.20.780

Bkav FE
W32.HfsAdware
1.3.0.6379

Clam AntiVirus
Win.Adware.OutBrowse-4
0.98/20550

Comodo Security
Application.Win32.OutBrowse.~B
22338

Dr.Web
Adware.Downware.9074
9.0.1.05190

Emsisoft Anti-Malware
Application.Bundler.Outbrowse
10.0.0.5366

ESET NOD32
Win32/OutBrowse.D potentially unwanted application
7.0.302.0

Fortinet FortiGate
Riskware/NSIS_OutBrowse
6/5/2015

F-Secure
Application.Bundler.Outbrowse
11.2015-05-06_6

G Data
Application.Bundler.Outbrowse
15.6.25

K7 AntiVirus
Unwanted-Program
13.204.16146

Kaspersky
not-a-virus:Downloader.NSIS.OutBrowse
15.0.0.543

Malwarebytes
PUP.Optional.Smart
v2015.06.05.12

McAfee
Program.Artemis!BD1B60DC0F0C
18.0.204.0

MicroWorld eScan
Application.Bundler.Outbrowse.A
16.0.0.468

NANO AntiVirus
Trojan.Win32.OutBrowse.cxaakt
0.30.24.1636

Norman
Application.Bundler.Outbrowse.A
02.06.2015 14:23:46

Qihoo 360 Security
Trojan.Generic
1.0.0.1015

Quick Heal
TrojanDownloader.NSIS.OutBrowse.B
6.15.14.00

Reason Heuristics
Win32.Generic.Installer.Meta
15.6.4.20

Sophos
PUA 'OutBrowse' (of type Adware)
5.15

SUPERAntiSpyware
Adware.OutBrowse/Variant
9833

Total Defense
Win32/Tnega.fRTYbOC
37.1.62.1

Vba32 AntiVirus
Downloader.OutBrowse
3.12.26.4

VIPRE Antivirus
Threat.4784459
40828

File size:
606.6 KB (621,152 bytes)

Installer:
NSIS (Nullsoft Scriptable Install System)

Language:
Language Neutral

Digital Signature
Signed by:
Sakysoft s.r.l.

Authority:
COMODO CA Limited

Valid from:
2/22/2013 1:00:00 AM

Valid to:
2/23/2014 12:59:59 AM

Subject:
CN=Sakysoft s.r.l., O=Sakysoft s.r.l., STREET=Via Gorghi 6, L=Udine, S=UD, PostalCode=33100, C=IT

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
71866EA827886C967A3E4D23288DBA3A

File PE Metadata
Compilation timestamp:
12/5/2009 11:50:52 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
12288:iy5cWN3aPbD3x6imu00ufz6HSkdxvN+RrA55N2uSgcbUe6Q8SAEe3nTJl6:iorNKPbDVmH0uf+HSkHl+RsnNFSgcD6q

Entry address:
0x30FA

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, 60, 91, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, B0, 70, 40, 00, 53, FF, 15, 7C, 72, 40, 00, 6A, 08, A3, 18, EC, 42, 00, E8, F1, 2B, 00, 00, A3, 64, EB, 42, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, 98, 8F, 42, 00, FF, 15, 58, 71, 40, 00, 68, 54, 91, 40, 00, 68, 60, E3, 42, 00, E8, A4, 28, 00, 00, FF, 15, AC, 70, 40, 00, BF, 00, 40, 43, 00, 50, 57, E8, 92, 28, 00, 00...
 
[+]

Entropy:
7.9772

Packer / compiler:
Nullsoft install system v2.x

Code size:
23.5 KB (24,064 bytes)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.