home

sony dvd architect studio 5.0.186.rar.exe

Sergey Petrov

This is a WebPick installer that bundles (with very minimal user consent) a number of adware browser extensions using the JustPlug.it browser framework. The application sony dvd architect studio 5.0.186.rar.exe, “Installer for ApPure” by Sergey Petrov has been detected as adware by 32 anti-malware scanners. The program is a setup application that uses the WebPick InstalleRex (Tarma) installer. The setup program uses Web-Pick's InstalleRex download manager and installer to bundle potentially unwanted ad-supported software which includes toolbars and browser extensions through a pay-per-install monetization scheme.
Publisher:
ApPure  (signed by Sergey Petrov)

Product:
ApPure

Description:
Installer for ApPure

Version:
2014.3.18.1735

MD5:
57fd49f3a283aeb558f4bcd9d8d064ad

SHA-1:
edc2b33bc6a2af43c54db370abd801eb1b0c40af

SHA-256:
13737326724feed7df99c511f8a490318fe806fb7ee4936a198aad06d7964b14

Scanner detections:
32 / 68

Status:
Adware

Explanation:
Uses the InstalleRex from WebPick Internet Holdings to install bundled add-ons including toolbars and other web browser extensions.

Analysis date:
9/4/2025 9:00:06 PM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Trojan.Generic.11450565
827

Agnitum Outpost
Trojan.AntiFW
7.1.1

AhnLab V3 Security
PUP/Win32.TSULoader
2014.10.31

Avira AntiVirus
Adware/InstallRex.T
7.11.182.126

avast!
Win32:InstalleRex-CZ [PUP]
141025-0

AVG
InstallRex
2015.0.3305

Bitdefender
Trojan.Generic.11450565
1.0.20.1520

Bkav FE
W32.FamVT.AntiFWK.Trojan
1.3.0.6185

Comodo Security
Application.Win32.InstalleRex.KG
19950

Dr.Web
Trojan.WebPick.29
9.0.1.05190

Emsisoft Anti-Malware
Trojan.Generic.11450565
8.14.10.31.02

ESET NOD32
Win32/InstalleRex.R potentially unwanted application
7.0.302.0

Fortinet FortiGate
Riskware/Generic.AC.4161048
10/31/2014

F-Prot
W32/InstallRex.B.gen
v6.4.7.1.166

F-Secure
Trojan.Generic.11450565
11.2014-31-10_6

G Data
Trojan.Generic.11450565
14.10.24

K7 AntiVirus
Unwanted-Program
13.185.13853

Kaspersky
Trojan.Win32.AntiFW
15.0.0.494

Malwarebytes
PUP.Optional.Installrex
v2014.10.31.02

McAfee
PUP-FHQ
5600.6961

MicroWorld eScan
Trojan.Generic.11450565
15.0.0.912

NANO AntiVirus
Riskware.Win32.InfoLeak.cvgqot
0.28.6.62995

nProtect
Trojan/W32.AntiFW.323864
14.10.30.01

Qihoo 360 Security
Malware.QVM20.Gen
1.0.0.1015

Quick Heal
Trojan.AntiFW.A5
10.14.14.00

Reason Heuristics
Adware.WebPick.Installer
15.4.2.1

Rising Antivirus
PE:Trojan.AntiFW!6.16DE
23.00.65.141029

Sophos
InstallRex
4.98

SUPERAntiSpyware
Adware.InstallRex/Variant
10267

Vba32 AntiVirus
Downware.TSU
3.12.26.3

VIPRE Antivirus
Threat.4150696
34232

Zillya! Antivirus
Trojan.AntiFW.Win32.203
2.0.0.1973

File size:
316.3 KB (323,864 bytes)

Product version:
1.0.0.3

Copyright:
Copyright © 2014 ApPure

Original file name:
TSULoader.exe

File type:
Executable application (Win32 EXE)

Installer:
WebPick InstalleRex (Tarma)

Common path:
C:\users\{user}\downloads\sony dvd architect studio 5.0.186.rar.exe

Digital Signature
Signed by:
Sergey Petrov

Authority:
COMODO CA Limited

Valid from:
8/20/2013 7:00:00 PM

Valid to:
8/21/2014 6:59:59 PM

Subject:
CN=Sergey Petrov, O=Sergey Petrov, STREET=Gaydara 13, L=Kyev, S=Kyev, PostalCode=01033, C=UA

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
0AD084E865D27CD546D21DB6EDF89D48

File PE Metadata
Compilation timestamp:
3/12/2013 3:51:45 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
6144:crJbUzkuvcBYC47l2xuNfL2pAgWriSTb3Z9xuzSCR2bSZ:cr6kuveY3TT2XdGp9xRC4bSZ

Entry address:
0x14DB

Entry point:
55, 8B, EC, 81, EC, 2C, 06, 00, 00, 53, 56, 33, DB, 57, 66, 89, 9D, DC, FB, FF, FF, 89, 5D, F4, 89, 5D, FC, FF, 15, 74, 30, 40, 00, A3, 08, 44, 40, 00, FF, 15, 70, 30, 40, 00, 8B, F8, 8D, 45, EC, 50, FF, 15, 6C, 30, 40, 00, FF, 15, 68, 30, 40, 00, 8B, F0, F7, D6, 33, F7, FF, 15, 64, 30, 40, 00, 33, F0, 8B, 45, F0, 33, 45, EC, 68, 04, 01, 00, 00, 33, F0, 8D, 85, D4, F9, FF, FF, 50, 53, FF, 15, 60, 30, 40, 00, 85, C0, 75, 41, FF, 15, 5C, 30, 40, 00, 83, F8, 78, 75, 1A, 68, A8, 32, 40, 00, E8, 43, FB, FF, FF...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
7.5 KB (7,680 bytes)

The file sony dvd architect studio 5.0.186.rar.exe has been seen being distributed by the following 4 URLs.

http://best-new-zip-my.info/download/v34?installer_file_name=Sony DVD Architect Studio 5.0.186.rar&product_name=Sony DVD Architect Studio 5.0.186.rar&product_download_url=https://fs01n4.sendspace.com/dllp/7ff3b4e1c1728dd70af8e60eac61403f/532c2cf0/000000/50m35g/Sony DVD Architect Studio 5.0.186.rar&reffer=http://www.sendspace.com/.../50m35g&filesize=&product_file_name=error.txt&uuid=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

http://best-new-zip-my.info/v34?installer_file_name=Sony DVD Architect Studio 5.0.186.rar&product_name=Sony DVD Architect Studio 5.0.186.rar&product_download_url=https://fs01n4.sendspace.com/dllp/7ff3b4e1c1728dd70af8e60eac61403f/532c2cf0/000000/50m35g/Sony DVD Architect Studio 5.0.186.rar&reffer=http://www.sendspace.com/.../50m35g

http://www.sendspace.com/quickdownload.html?lc=50m35g

http://www.sendspace.com/.../50m35g

The executing file has been seen to make the following network communications in live environments.

TCP (HTTP):
Connects to r1.stylezip.info  (54.186.255.26:80)

TCP (HTTP):
Connects to c1.stylezip.info  (54.186.255.26:80)

 
http://c1.stylezip.info/?step_id=1&installer_id=12708148&publisher_id=270&source_id=0&page_id=0&country_code=US&locale=US&browser_id=4&download_id=38124444&external_id=0&session_id=76248888&hardware_id=88957036&installer_file_name=sony+dvd+architect+studio+5.0.186.rar

Remove sony dvd architect studio 5.0.186.rar.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.