» Daily apps forfor
Digital Signature
Analysis
Files (31)
Downloads (8)
Distribution (7)
Related (20)

Daily apps forfor

Publisher Information

Daily apps forfor is a software developer located in Dublin, Ireland*. The company is a primary distributor of unwanted software. Thre are 24 additional code signing certificates issued to this publisher.

Authority:

thawte, Inc.

Valid from:

1/26/2015 6:00:00 PM

Valid to:

1/27/2016 5:59:59 PM

Subject:

CN=Daily apps forfor, O=Daily apps forfor, L=Dublin, S=Dublin, C=IE

Issuer:

CN=thawte SHA256 Code Signing CA, O="thawte, Inc.", C=US

Serial number:

6f1e3ddf304ce728a56fbde7c027105b

Scanner detections:

Detections (100% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.Dailyappsforfor, PUP.Installer.Dailyappsforfor, PUP.Outbrowse.Installer, PUP.Outbrowse.Dailyappsforfor.Installer (M), PUP.Outbrowse.Dailyapp.Installer (M), PUP.Outbrowse (M)

100.00%

Dr.Web

infected with Trojan.OutBrowse.83, Trojan.KillFiles.22265, Trojan.OutBrowse.470

25.81%

ESET NOD32

Win32/OutBrowse.BS potentially unwanted application, Win32/OutBrowse.BA potentially unwanted application, Win32/OutBrowse.BU potentially unwanted application

25.81%

AVG

Potentially harmful program Downloader.DII, Generic

25.81%

McAfee

Adware-OutBrowse.e, Artemis!251E34644BAB, Program.Adware-OutBrowse.e

25.81%

K7 AntiVirus

Trojan , Unwanted-Program , DoS-Trojan

25.81%

Trend Micro House Call

Suspici.8D175B40, Suspicious_GEN.F47V0126, TROJ_GE.8F191241

25.81%

Kaspersky

not-a-virus:Downloader.NSIS.OutBrowse

25.81%

AhnLab V3 Security

PUP/Win32.OutBrowse

25.81%

Malwarebytes

PUP.Optional.OutBrowse

22.58%

1 / 68 (Adware)

java_runtime_enviroment_setup.exe.exe (55b9ec1ec4b70c08e8773f57f37d661b)

1 / 68 (Adware)

streetlegalracingredline2.2.1-liveford.exe (44fb12752ed09934355eebb4045ae70a)

1 / 68 (Adware)

preconfig.exe (06dfbd28e207aa8182724b86dd96e980)

1 / 68 (Adware)

data structures in c noel kalicharan pdf.exe (3d35966daf604c0ce23eb6c4124f74c2)

1 / 68 (Adware)

vlc-2.1.6a-win32setup.exe (9b5fcec2ec470ac0ef8086ec1b4c0bcd)

1 / 68 (Adware)

xboxlivecodegenerator.exe (f5361771fa8e97276881bfc4107e94a4)

1 / 68 (Adware)

get_downward1212_info (63635305677631800a141cd28aef61ec)

1 / 68 (Adware)

setup.exe (8983a61b84e5a4002a8f9dcce467dca0)

1 / 68 (Adware)

photodex-proshow-producer.exe (791e88ae11feff184c9c974286620fef)

1 / 68 (Adware)

java_runtime_enviroment_setup.exe.exe (be45609f456ea60fc80f4e8b08a3e73e)

1 / 68 (Adware)

java_runtime_enviroment_setup.exe.exe (c1068ad082faccbf645fee889a5b6b95)

1 / 68 (Adware)

java_runtime_enviroment_setup.exe.exe (214ebedada8713da0f1c4ebbc7d420a3)

1 / 68 (Adware)

hack tool.exe (fc2011511221485d7d1c6f5c02d3dbbf)

1 / 68 (Adware)

avira internet security 2014 14.0 final full key.exe (f62cb9ac7494413b113679e6bbee40b9)

1 / 68 (Adware)

adobe_flash_setup.exe.exe (ab034b48acc9e777246fe40681f189cf)

1 / 68 (Adware)

moviestarplanet hack v2.3.exe (beeaa36c80bed1c1f077065f1675643b)

1 / 68 (Adware)

steam_setup.exe.exe (27cb636dc5bba50406925c360afb5909)

1 / 68 (Adware)

steam_setup.exe.exe (4fd6378314557ace9cb33c89f9eb7ac0)

1 / 68 (Adware)

microsoftsetup.exe (4d3855fcaa2a9b953975056c70ef6d89)

1 / 68 (Adware)

virusshare_6a74efcddaa08a9c064b64d60223ac30.exe (6a74efcddaa08a9c064b64d60223ac30)

1 / 68 (Adware)

adobe_flash_setup.exe.exe (fb401a9299200b5413ff06adfec696b2)

1 / 68 (Adware)

Setup.exe (df33db4fdd607908b959cffba11965a3)

1 / 68 (Adware)

Setup.exe (644c7a247fe684df8bfe9692d0f75b91)

27 / 68 (Adware)

installation.exe (c99b3b325c4cc468e38e66c12064b490)

24 / 68 (Adware)

adblock 2.0.9.exe (7a5fcc8db277ad94966643ce6b4ce896)

24 / 68 (Adware)

wifikill for pc.exe (948be9dd28926a27bf378ad726b22d2c)

15 / 68 (Adware)

java_runtime_enviroment_setup.exe.exe (213f63c3ea953e368947bb956dff51cb)

14 / 68 (Adware)

epson lq series 1 136 inbox driver.exe (494e7e7b56bd58892fb9a1a7c2e4df25)

13 / 68 (Adware)

setup.exe (787aaf7c88add3ad78de9b1126c4ff24)

17 / 68 (Adware)

bdacabfhhdi.exe (d2307d1aa710f24bd92822478077f767)

Latest 30 of 31 files

Downloads URLs for files signed by Daily apps forfor.

1 / 68 (Adware)

http://7769domain.com/Ad/GoP/14864/www.downloadape.org/190601/.../download/www.downloadape.org/.../US/.../635582700914544621 (setup.exe)

1 / 68 (Adware)

http://bit.ly/1JKTYcz (hack tool.exe)

1 / 68 (Adware)

http://serv.down4desk.com/TIMESTAMP/get?p=18940&d=25092&l=24278&n=1&productname=Download Manager&d1=0&S=14226547275648,US,ac_rr444,554,obn,68,Chrome,03e3e4a3b81db4e191d9c5273de20b14,cid=u4219bae854a431c63e39858da7&pubid=262765&exeurl=http://.../install_flash_player_13_plugin.exe&dynamicname=Adobe Flash Player&filename=adobe_flash_setup.exe#?1#?1#WebrootPlugIn#?1#?1#PhreshPhish#?1#?1#agtpwd (ab034b48acc9e777246fe40681f189cf)

1 / 68 (Adware)

http://get.file28desktop.com/.../get?p=4925&d=6987&l=6569&n=1&dynamicname=MovieStarPlanet Hack v2.3&filename=MovieStarPlanet Hack v2.3&d1=8 (moviestarplanet hack v2.3.exe)

24 / 68 (Adware)

http://yes-i-am-rich.com/WifiKill For PC.php (wifikill for pc.exe)

15 / 68 (Adware)

http://updatechecker.theupgrade24.com/dl.php?conversion_id=14226860098994&site_id=3621&app_id=63&lp_id=335&v=obn&stub_id=68&v_id=ee0b7ecdb0c1aa3ff17812cdba29a33d&dist_id=292&channel=affl292&subid=102620_c841b9fa0089b9032f81728f48b902ec (java_runtime_enviroment_setup.exe.exe)

14 / 68 (Adware)

http://get.downward1212.info/.../get60?p=13265&d=18970&l=18129&n=1&productname=Epson Lq Series 1 136 Inbox Driver&dynamicname=Epson Lq Series 1 136 Inbox Driver&filename=Epson Lq Series 1 136 Inbox Driver&d1=22 (epson lq series 1 136 inbox driver.exe)

12 / 68 (Adware)

http://get.file28desktop.com/downloadmanager/get?p=9056&d=25703&l=24889&n=1&productname=Setup&dynamicname=KMSPico 10.0.5&filename=KMSPico 10.0.5&tyurl=http://ppvline.com/activation/.../KMSPico.html (kmspico 10.0.5.exe)

Distribution

The following websites host and distribute files published by Daily apps forfor.

serv.down4desk.com

updatechecker.theupgrade24.com

get.downward1212.info

get.file28desktop.com

7769domain.com

yes-i-am-rich.com

bit.ly

The certificates below are also signed by Daily apps forfor.

1CC955671230E3A9E69FA41AD8F045CE (Mar 26, 2015 to Jan 28, 2016)

07287FBE69E60C7CEE7918973B8AD4E4 (Mar 23, 2015 to Jan 28, 2016)

1367D9C1D7A7F4994ABEFF6E15D5207F (Feb 17, 2015 to Jan 28, 2016)

305453768B3DEF7B6A37CFA6DD027C73 (Feb 05, 2015 to Jan 28, 2016)

035E34E974BFABE275BE7932F1212443 (May 31, 2015 to Jan 28, 2016)

39DE6DD20E851CF79FA6D7040E382D6F (May 26, 2015 to Jan 28, 2016)

6AF45CDD9B1B1DF44B68409CE5CDCC07 (Apr 08, 2015 to Jan 28, 2016)

3693B98932E5AC265D9536CD8EFCA1C2 (Feb 25, 2015 to Jan 28, 2016)

56EC0ACB34F93612AA917039E5A3834F (Feb 18, 2015 to Jan 28, 2016)

26F81526E9C53E7493E6B73CC237AFA5 (Jun 30, 2015 to Jan 27, 2016)

10 of 24 code signing certificates issued

The following publishers (by Authenticode signature organization name) are related.

* Note, the details and description above are based on the code signing digital signature issued to Daily apps forfor by thawte, Inc. on January 26, 2015 with the serial number '6f1e3ddf304ce728a56fbde7c027105b'.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.