» adobe master collection cs5.5 シリアル番号keygen.exe
Overview
Analysis
File Details
Downloads (2)
Network (1)

adobe master collection cs5.5 シリアル番号keygen.exe

Moshe Caspi

This program bundles adware during the download and install process using the InstaleRex pay-per-install app monetizer. The application adobe master collection cs5.5 シリアル番号keygen.exe, “Installer for SoftSafe” by Moshe Caspi has been detected as adware by 23 anti-malware scanners. The program is a setup application that uses the WebPick InstalleRex (Tarma) installer. The setup program uses Web-Pick's InstalleRex download manager and installer to bundle potentially unwanted ad-supported software which includes toolbars and browser extensions through a pay-per-install monetization scheme.

File name:

Publisher:

SoftSafe (signed by Moshe Caspi)

Product:

SoftSafe

Description:

Installer for SoftSafe

Version:

2013.3.10.1226

MD5:

9f5dbd66f5d82d36b7728a1da443398f

SHA-1:

2fe521d53c408396ad5bcd4df2e361a5f2a0b822

SHA-256:

94ac27d23a4105785d2a77b26cb483c08ad17f443170c6eadead8cfed55f9e42

Scanner detections:

23 / 68

Status:

Adware

Explanation:

Uses the InstalleRex from WebPick Internet Holdings to install bundled add-ons including toolbars and other web browser extensions.

Analysis date:

4/23/2024 10:14:04 PM UTC (today)

Scan engine

Detection

Engine version

Agnitum Outpost

Adware.Generic

7.1.1

AhnLab V3 Security

Adware/Win32.StartPage

2014.06.23

Avira AntiVirus

ADWARE/InstallRex.Gen

7.11.156.34

avast!

Win32:Downloader-UZF [PUP]

140617-1

AVG

Adware AdInstaller.P

2014.0.3972

Bkav FE

HW32.CDB

1.3.0.4959

Comodo Security

Application.Win32.Agent.V

18636

Dr.Web

Adware.Downware.1166

9.0.1.05190

ESET NOD32

Win32/InstalleRex.E potentially unwanted application

7.0.302.0

G Data

Win32.Application.InstalleRex

14.6.24

IKARUS anti.virus

PUP.InstallRex

t3scan.1.6.1.0

K7 AntiVirus

Unwanted-Program

13.180.12484

Kaspersky

not-a-virus:HEUR:Downloader.Win32.AdLoad

15.0.0.463

Malwarebytes

PUP.Optional.InstalleRex

v2014.06.23.01

NANO AntiVirus

Riskware.Win32.Downware.ctkpnb

0.28.0.60253

Panda Antivirus

PUP/TSUploader

14.06.23.01

Qihoo 360 Security

Malware.QVM20.Gen

1.0.0.1015

Quick Heal

Backdoor.Clack.ard

6.14.14.00

Reason Heuristics

Adware.WebPick.Installer.j

14.8.7.17

Sophos

InstallRex

4.98

SUPERAntiSpyware

PUP.InstallerEx/Variant

10527

Vba32 AntiVirus

Downware.TSU

3.12.26.3

VIPRE Antivirus

Threat.4753027

29708

File size:

282.1 KB (288,880 bytes)

Product version:

1.0

Original file name:

TSULoader.exe

File type:

Executable application (Win32 EXE)

Installer:

WebPick InstalleRex (Tarma)

Common path:

C:\users\{user}\downloads\adobe\adobe master collection cs5.5 ??????keygen.exe

Digital Signature

Signed by:

Moshe Caspi

Authority:

COMODO CA Limited

Valid from:

8/2/2012 9:00:00 AM

Valid to:

8/3/2013 8:59:59 AM

Subject:

CN=Moshe Caspi, O=Moshe Caspi, STREET=Hashuk 39, L=Tel Aviv, S=Israel, PostalCode=66067, C=IL

Issuer:

CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

00B1B859272556EC39AF8F0E4A626C2ADC

File PE Metadata

Compilation timestamp:

2/5/2013 6:49:08 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

8.0

CTPH (ssdeep):

6144:Lr+bIDOg9oN5vXS8YVRZaMFYzYvKNPE0aDcaDgfDwQHKwGPWM:Lr+bIDX9cUl9WYyGfc0gfDwlD

Entry address:

0x14DB

Entry point:

55, 8B, EC, 81, EC, 2C, 06, 00, 00, 53, 56, 33, DB, 57, 66, 89, 9D, DC, FB, FF, FF, 89, 5D, F4, 89, 5D, FC, FF, 15, 74, 30, 40, 00, A3, 08, 44, 40, 00, FF, 15, 70, 30, 40, 00, 8B, F8, 8D, 45, EC, 50, FF, 15, 6C, 30, 40, 00, FF, 15, 68, 30, 40, 00, 8B, F0, F7, D6, 33, F7, FF, 15, 64, 30, 40, 00, 33, F0, 8B, 45, F0, 33, 45, EC, 68, 04, 01, 00, 00, 33, F0, 8D, 85, D4, F9, FF, FF, 50, 53, FF, 15, 60, 30, 40, 00, 85, C0, 75, 41, FF, 15, 5C, 30, 40, 00, 83, F8, 78, 75, 1A, 68, A8, 32, 40, 00, E8, 43, FB, FF, FF... 
[+]

Entropy:

7.9522

Developed / compiled with:

Microsoft Visual C++

Code size:

7.5 KB (7,680 bytes)

The file adobe master collection cs5.5 シリアル番号keygen.exe has been seen being distributed by the following 2 URLs.

http://www.esyncsoft.info/v377/?product_name=Adobe Master Collection CS5.5 ??????keygen.rar&filesize=54.94 KB&product_title=DFH Download Manager&installer_file_name=Adobe Master Collection CS5.5 ??????keygen&product_file_name=Adobe Master Collection CS5.5 ??????keygen.rar&product_download_url=http://.../get.php?file=0a1c3bf5&m&uuid=

The executing file has been seen to make the following network communication in live environments.

TCP (HTTP):

Connects to r1.stylezip.info (54.186.255.26:80)

Remove adobe master collection cs5.5 シリアル番号keygen.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.