jurassic world the game hack tool.exe

cLICk TO STart

This is the OutBrowse Revenyou installer which bundles offers for additional third party applications that may be unwanted and installed without consent. The application jurassic world the game hack tool.exe by cLICk TO STart has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the OutBrowse Revenyou installer. The file has been seen being downloaded from get.0119f.info.
Publisher:
TTWVV  (signed by cLICk TO STart)

Product:
TTWVV

Version:
1158.15614.866.7439

MD5:
9230196bb8322741256a189f56f2e6ee

SHA-1:
67bd097388a5976a0c75b7314a0be121b8a57c4a

SHA-256:
90011c55e1f821bcc1e82c9784c8291225903da907a719c3e8d3dbf1080776e8

Scanner detections:
1 / 68

Status:
Adware

Note:
Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Description:
This is also known as bundleware, or downloadware, which is an downloader designed to simply deliver ad-supported offers in the setup routine of an otherwise legitimate software.

Analysis date:
5/16/2024 10:32:33 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.Outbrowse.cLICkTOSTart.Bundler (M)
16.2.6.18

File size:
768.9 KB (787,312 bytes)

Product version:
1158.15614.866.7439

Copyright:
TTWVV

Trademarks:
TTWVV

File type:
Executable application (Win32 EXE)

Bundler/Installer:
OutBrowse Revenyou (using Nullsoft Install System)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\jurassic world the game hack tool.exe

Digital Signature
Signed by:

Authority:
thawte, Inc.

Valid from:
6/11/2015 2:00:00 AM

Valid to:
12/18/2015 12:59:59 AM

Subject:
CN=cLICk TO STart, O=cLICk TO STart, L=Dublin, S=Dublin, C=IE

Issuer:
CN=thawte SHA256 Code Signing CA, O="thawte, Inc.", C=US

Serial number:
00FD417D76616773057D5038044A4722

File PE Metadata
Compilation timestamp:
12/5/2009 11:52:12 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
24576:ddJgYfCGmaSEi+ZPy49iGOAqSSmmoiA864:HqGmayIXOAqbm3W7

Entry address:
0x30FA

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, 60, 91, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, B0, 70, 40, 00, 53, FF, 15, 7C, 72, 40, 00, 6A, 08, A3, 18, 1C, 45, 00, E8, F1, 2B, 00, 00, A3, 64, 1B, 45, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, 98, 37, 43, 00, FF, 15, 58, 71, 40, 00, 68, 54, 91, 40, 00, 68, 60, DB, 44, 00, E8, A4, 28, 00, 00, FF, 15, AC, 70, 40, 00, BF, 00, A0, 47, 00, 50, 57, E8, 92, 28, 00, 00...
 
[+]

Packer / compiler:
Nullsoft install system v2.x

Code size:
23.5 KB (24,064 bytes)

The file jurassic world the game hack tool.exe has been seen being distributed by the following URL.

Remove jurassic world the game hack tool.exe - Powered by Reason Core Security