» an introduction to human services, 6 edition.exe
Overview
Analysis
File Details
Downloads (3)
Network (2)

an introduction to human services, 6 edition.exe

article or multiprocessor information

Sergey Panov

The is the installer for the WebPick InstalleRex download manager which bundles applications with offers for additional 3rd party software, mostly unwanted adware, and may be installed without consent. The application an introduction to human services, 6 edition.exe by Sergey Panov has been detected as adware by 23 anti-malware scanners. The program is a setup application that uses the WebPick InstalleRex installer. The setup program uses Web-Pick's InstalleRex download manager and installer to bundle potentially unwanted ad-supported software which includes toolbars and browser extensions through a pay-per-install monetization scheme.

File name:

Publisher:

SQL (signed by Sergey Panov)

Product:

article or multiprocessor information

Version:

2.2.0.0

MD5:

d51e7fe425f71a0a8c8541096b64da07

SHA-1:

f3072aeec2b046acfd6e1f94c66cf04dc853c5ed

SHA-256:

6047ec88d989da95ec95d347549c0d4e2b6c86bb00a5f0a83c93dd3a132224d3

Scanner detections:

23 / 68

Status:

Adware

Explanation:

Uses the InstalleRex from WebPick Internet Holdings to install bundled add-ons including toolbars and other web browser extensions.

Description:

This is also known as bundleware, or downloadware, which is an downloader designed to simply deliver ad-supported offers in the setup routine of an otherwise legitimate software.

Analysis date:

5/3/2024 5:48:44 PM UTC (today)

Scan engine

Detection

Engine version

Lavasoft Ad-Aware

Gen:Variant.Adware.Dropper.103

930

Agnitum Outpost

PUA.MultiPlug

7.1.1

AhnLab V3 Security

PUP/Win32.InstallRex

2014.07.20

Avira AntiVirus

ADWARE/Adware.Gen7

7.11.163.2

avast!

Win32:InstalleRex-CC [PUP]

140617-1

AVG

Adware Generic5.AXST

2014.0.3986

Bitdefender

Gen:Variant.Adware.Dropper.103

1.0.20.1005

Clam AntiVirus

Win.Adware.Agent-7393

0.98/19185

Dr.Web

Trojan.Crossrider.24065

9.0.1.05190

Emsisoft Anti-Malware

Gen:Variant.Adware.Dropper.103

8.14.07.20.01

ESET NOD32

Win32/AdWare.MultiPlug.R application

7.0.302.0

F-Secure

Gen:Variant.Adware.Dropper.103

11.2014-20-07_1

G Data

Gen:Variant.Adware.Dropper.103

14.7.24

K7 AntiVirus

Adware

13.181.12775

Kaspersky

not-a-virus:HEUR:AdWare.Win32.Agent

14.0.0.3535

Malwarebytes

PUP.Optional.MultiPlug

v2014.07.20.01

McAfee

PUP-FLT

5600.7064

MicroWorld eScan

Gen:Variant.Adware.Dropper.103

15.0.0.603

NANO AntiVirus

Riskware.Win32.Agent.dbljwr

0.28.2.60881

Panda Antivirus

Generic Malware

14.07.20.01

Reason Heuristics

PUP.SergeyPanov.m

14.7.20.1

SUPERAntiSpyware

Adware.MultiPlug/Variant

10473

VIPRE Antivirus

Threat.4150696

31208

File size:

748.2 KB (766,128 bytes)

Product version:

2.2.0.0

Original file name:

so and

File type:

Executable application (Win32 EXE)

Bundler/Installer:

WebPick InstalleRex

Language:

English (United Kingdom)

Common path:

C:\users\{user}\downloads\an introduction to human services, 6 edition.exe

Digital Signature

Signed by:

Sergey Panov

Authority:

COMODO CA Limited

Valid from:

9/25/2013 8:00:00 PM

Valid to:

9/26/2014 7:59:59 PM

Subject:

CN=Sergey Panov, O=Sergey Panov, STREET=Nevsky 34, L=Hiev, S=centr, PostalCode=03062, C=UA

Issuer:

CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

67EDB237B456844DA741B5D82EEC432C

File PE Metadata

Compilation timestamp:

6/18/2014 10:53:04 AM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

11.0

CTPH (ssdeep):

12288:6dOc5Y/8ePQq3nPv/Swv/74rBUlrontNvKwtpLLU9N192PqVVBt6qP/osNMPMtJm:6djfePQUPHSwvuUynPvKkvUt92PqVVBC

Entry address:

0x15AEB

Entry point:

E8, 87, 7C, 00, 00, E9, 00, 00, 00, 00, 6A, 14, 68, 38, C1, 42, 00, E8, 6F, 0D, 00, 00, E8, A2, 03, 00, 00, 0F, B7, F0, 6A, 02, E8, 1A, 7C, 00, 00, 59, B8, 4D, 5A, 00, 00, 66, 39, 05, 00, 00, 40, 00, 74, 04, 33, DB, EB, 33, A1, 3C, 00, 40, 00, 81, B8, 00, 00, 40, 00, 50, 45, 00, 00, 75, EB, B9, 0B, 01, 00, 00, 66, 39, 88, 18, 00, 40, 00, 75, DD, 33, DB, 83, B8, 74, 00, 40, 00, 0E, 76, 09, 39, 98, E8, 00, 40, 00, 0F, 95, C3, 89, 5D, E4, E8, 53, 45, 00, 00, 85, C0, 75, 08, 6A, 1C, E8, DC, 00, 00, 00, 59, E8... 
[+]

Entropy:

7.7738 (probably packed)

Code size:

129 KB (132,096 bytes)

The file an introduction to human services, 6 edition.exe has been seen being distributed by the following 3 URLs.

http://dowcnloadboox.info/.../?&q=An Introduction to Human Services, 6 edition&product_name=An Introduction to Human Services, 6 edition&installer_file_name=An Introduction to Human Services, 6 edition&cor=1&installer_type=IX_2013&installer_version=4&affiliate_id=_i2&q=An Introduction to Human Services, 6 edition&external_id=1403728527452729917

http://lp.ezdownloadpro.info/2003c7930e30aa33e7ffbfa123516c41/eboo/dl.php?id=1403728527452729917&r=http://dowcnloadboox.info/.../?&q=An Introduction to Human Services, 6 edition&product_name=An Introduction to Human Services, 6 edition&installer_file_name=An Introduction to Human Services, 6 edition&cor=1&installer_type=IX_2013&installer_version=4&affiliate_id=_i2&q=An Introduction to Human Services, 6 edition&__rnd=85117bc31f35ba08c091c9c2bb16c4d1

The executing file has been seen to make the following network communications in live environments.

TCP (HTTP):

Connects to r1.stylezip.info (54.186.255.26:80)

TCP (HTTP):

Connects to c1.stylezip.info (54.186.255.26:80)

http://c1.stylezip.info/?step_id=1&installer_id=7957958&publisher_id=957&source_id=0&page_id=0&country_code=US&locale=US&browser_id=4&download_id=23873874&external_id=0&session_id=47747748&hardware_id=55705706&installer_file_name=an+introduction+to+human+services,+6+edition

Remove an introduction to human services, 6 edition.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.