microsoft games for windows - live 3.5.50.0.exe

Cyberservices B.V.

Part of the OutBrowse Revenyou installer which bundles offers for additional third party applications that may be unwanted and installed without consent. The application microsoft games for windows - live 3.5.50.0.exe by Cyberservices B.V has been detected as adware by 7 anti-malware scanners.
Publisher:
Cyberservices B.V.  (signed and verified)

MD5:
d21f46de38749d1900900c5ea14c0ad4

SHA-1:
b99171af5e89f47bda4927b92f1c4d815901ef6b

SHA-256:
68b5e8a2831c8001f009b373547b9c169a62dfe1239292dfb51afcb43d7face2

Scanner detections:
7 / 68

Status:
Adware

Analysis date:
12/4/2016 9:23:20 AM UTC  (today)

Scan engine
Detection
Engine version

avast!
Win32:DownloadGuide-B [PUP]
140608-0

ESET NOD32
Win32/DownloadGuide.A potentially unwanted application
7.0.302.0

F-Secure
Adware:W32/Buzzrin
11.2014-10-06_3

Malwarebytes
PUP.Optional.Breitschopp
v2014.06.10.08

Reason Heuristics
PUP.CyberservicesBV.i
14.6.10.7

Total Defense
Win32/Tnega.cWXNWCD
37.0.10990

VIPRE Antivirus
Threat.4890059
30086

File size:
457.1 KB (468,032 bytes)

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\microsoft games for windows - live 3.5.50.0.exe

Digital Signature
Authority:
COMODO CA Limited

Valid from:
2/10/2014 7:00:00 AM

Valid to:
2/11/2016 6:59:59 AM

Subject:
CN=Cyberservices B.V., O=Cyberservices B.V., STREET=Keizersgracht 62-64 NL, L=Amsterdam, S=Nordholland, PostalCode=1015CS, C=NL

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
797CAC4561E8B8B21910CD01E0002669

File PE Metadata
Compilation timestamp:
5/15/2014 3:02:34 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
6144:zdaE2eROmvmZ2yd/vn9Z19wAPHE1WCe/mF6GH8VPflPrbZ3Yjmk5p+T4reQp:zdamROmpyxTX9PqPuVX16mJELp

Entry address:
0x1B586

Entry point:
E8, 9E, 48, 00, 00, E9, 89, FE, FF, FF, 8B, 44, 24, 08, 8B, 4C, 24, 10, 0B, C8, 8B, 4C, 24, 0C, 75, 09, 8B, 44, 24, 04, F7, E1, C2, 10, 00, 53, F7, E1, 8B, D8, 8B, 44, 24, 08, F7, 64, 24, 14, 03, D8, 8B, 44, 24, 08, F7, E1, 03, D3, 5B, C2, 10, 00, 8B, FF, 55, 8B, EC, 83, EC, 20, 8B, 45, 08, 56, 57, 6A, 08, 59, BE, EC, 9D, 42, 00, 8D, 7D, E0, F3, A5, 89, 45, F8, 8B, 45, 0C, 5F, 89, 45, FC, 5E, 85, C0, 74, 0C, F6, 00, 08, 74, 07, C7, 45, F4, 00, 40, 99, 01, 8D, 45, F4, 50, FF, 75, F0, FF, 75, E4, FF, 75, E0...
 
[+]

Entropy:
6.9795

Code size:
152.5 KB (156,160 bytes)