download game pc gratis dota 2 full version auto update download game ringan terbaru gratis.exe

Yes APpS

This is the OutBrowse Revenyou installer which bundles offers for additional third party applications that may be unwanted and installed without consent. The application download game pc gratis dota 2 full version auto update download game ringan terbaru gratis.exe by Yes APpS has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the OutBrowse Revenyou installer. The file has been seen being downloaded from download.file10desktop.com.
Publisher:
ZTSXE  (signed by Yes APpS)

Product:
ZTSXE

Version:
497.1566.858.5721

MD5:
771e3710aed59afb0db688e2077bbedd

SHA-1:
6b8b8c0d86a6ad9b6e8649607c10f5884140686d

SHA-256:
8e1269d7dafb53f48b0b6e080df11b53b3b373d242f4d88bd7489aad887aca3f

Scanner detections:
1 / 68

Status:
Adware

Note:
Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Description:
This is an installer which may bundle legitimate applications with offers for additional 3rd-party applications that may be unwanted by the user. While the installer contains an 'opt-out' feature this is not set be defult and is usually overlooked.

Analysis date:
8/4/2025 6:51:38 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.Outbrowse (M)
16.10.20.16

File size:
636.5 KB (651,824 bytes)

Product version:
497.1566.858.5721

Copyright:
ZTSXE

Trademarks:
ZTSXE

File type:
Executable application (Win32 EXE)

Bundler/Installer:
OutBrowse Revenyou (using Nullsoft Install System)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\download game pc gratis dota 2 full version auto update download game ringan terbaru gratis.exe

Digital Signature
Signed by:

Authority:
thawte, Inc.

Valid from:
6/4/2015 7:00:00 AM

Valid to:
12/18/2015 6:59:59 AM

Subject:
CN=Yes APpS, O=Yes APpS, L=Dublin, S=Dublin, C=IE

Issuer:
CN=thawte SHA256 Code Signing CA, O="thawte, Inc.", C=US

Serial number:
2D13A9197B2C2A64580B3DA06E3F0D20

File PE Metadata
Compilation timestamp:
12/6/2009 5:52:12 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
12288:iheFnOeQlaQCqz2fD3fcb8tLcSDYaybG/RXX8x6p4p3fH2bPODfc8vy4h:ikmlfCY2fD3fdtLnDWyXMxOEA/86

Entry address:
0x30FA

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, 60, 91, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, B0, 70, 40, 00, 53, FF, 15, 7C, 72, 40, 00, 6A, 08, A3, 18, 1C, 45, 00, E8, F1, 2B, 00, 00, A3, 64, 1B, 45, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, 98, 37, 43, 00, FF, 15, 58, 71, 40, 00, 68, 54, 91, 40, 00, 68, 60, DB, 44, 00, E8, A4, 28, 00, 00, FF, 15, AC, 70, 40, 00, BF, 00, A0, 47, 00, 50, 57, E8, 92, 28, 00, 00...
 
[+]

Packer / compiler:
Nullsoft install system v2.x

Code size:
23.5 KB (24,064 bytes)

The file download game pc gratis dota 2 full version auto update download game ringan terbaru gratis.exe has been seen being distributed by the following URL.

http://download.file10desktop.com/1433585448/1433585448/.../ZndtY2ZaXxwqLEJYbWQcKSlLOh0uKz5yYGtgbCApKEBKS0EkKScrICkoQnBjbCQpJ09gaWtlamUlMSc4bm9mHS4rTHBjWGteICkoIS5YJTEnO2hyZWRrXFslMSc WmhcHS4rSWltXlhnICkoUGBpYmBpbB4tJz9uXGtpch1dYmdcZl1oXD1DZm5nZ2ZZYCApMEZYZF4gKShMPhwyLz5pWm9gayEtJ0ROSzgeLScqIS0nRnRjYx4tJ05hbWppbmUcKys4bXBqHDIvTGddXGtdIS0nJTJYHCsrO2dzaWNvYFscKys WWlgHDIvSWBnYlhmIS0nVGRpWVptbB0uKz5yYGtgbCFrcXFtYz1na2tpICpZIS1dJTFdbnByJSwwX2Z3bWNmWl8lW2toHDJlZ1oeLV1sZGlic29eQGdua1loZyVwZ2ccLGFdYWhgHDNjO2ZwaWNnXV8cMi8 WGZgHCosSzolMSc a1xrYW8gKTBDRks6ICkoLiApMEVsY2UgKShSYGlzaGZlHi0nOXFvZiUxJ0xpX1hsYSApMCQqWB4tJzxrcmVsblhbHi0nP11oXCUxJ0liaV5ZaiApMFNcaVtcaW0hLSdHcVhrYm4dSzkwKTA3HWBcamU1Li4demhnNCk