adobe photoshop 7.0, with serial.exe

The program is a setup application that uses the WinZip SFX installer. The file has been seen being downloaded from www21.zippyshare.com and multiple other hosts.
MD5:
4f7920530c9b9b5f6dc7e8b5edced6c9

SHA-1:
6390e656ac9148177d2ada62e9865b35ef5dae54

SHA-256:
b5ad18647621618f2127da11c1b8108e43b06508eadb989bd7cb31119c21a222

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
11/27/2024 12:55:52 AM UTC  (today)

Scan engine
Detection
Engine version

Panda Antivirus
r:/sav/ruta_trabajo2/22568536.dat[r:/sav/ruta_trabajo2/22568536.dat][Photoshop/data1.cab]
14.07.14.08

File size:
160.5 MB (168,267,776 bytes)

File type:
Executable application (Win32 EXE)

Installer:
WinZip SFX

File PE Metadata
Compilation timestamp:
1/9/2001 9:08:41 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
5.10

CTPH (ssdeep):
3145728:MTyb1lhi+3Ee0feUzZVxYc/LZfNZraTmznx4Ridz0ivbeyj+DUT9E:syXL+2KVxYsmEx8iN0iTey

Entry address:
0x39D8

Entry point:
53, FF, 15, 50, 60, 40, 00, B3, 22, 38, 18, 74, 03, 80, C3, FE, 8A, 48, 01, 40, 33, D2, 3A, CA, 74, 0A, 3A, CB, 74, 06, 8A, 48, 01, 40, EB, F2, 38, 10, 74, 01, 40, 52, 50, 52, 52, FF, 15, 54, 60, 40, 00, 50, E8, 07, F8, FF, FF, 50, FF, 15, 58, 60, 40, 00, 5B, C3, 8B, 44, 24, 04, 8B, 40, 3C, 05, F8, 00, 00, 00, C3, 55, 8B, EC, 51, A1, 28, 84, 40, 00, 83, 0D, A0, 82, 40, 00, FF, 56, 33, F6, 39, 35, F8, 7D, 40, 00, 89, 35, D4, 83, 40, 00, 89, 35, 24, 84, 40, 00, A3, C4, 86, 40, 00, 75, 05, E8, 67, D8, FF, FF...
 
[+]

Entropy:
7.9994

Packer / compiler:
WinZip, 0x32-bit SFX v8.x module

Code size:
18.5 KB (18,944 bytes)

The file adobe photoshop 7.0, with serial.exe has been discovered within the following program.

Adobe Photoshop 7.0  by Adobe Systems Incorporated
Adobe Photoshop is a graphics editing program. Photoshop files have default file extension as .PSD, which stands for "Photoshop Document." A PSD file stores an image with support for most imaging options available in Photoshop.
www.adobe.com/photoshop
6% remove it
 
Powered by Should I Remove It?

The file adobe photoshop 7.0, with serial.exe has been seen being distributed by the following 20 URLs.

http://www21.zippyshare.com/d/35075215/.../Adobe.Photoshop.7.0.exe

temp:Adobe_Photoshop_7-1.exe

http://46.4.85.72/dl.php?f=Adobe_Photoshop_7.exe

http://s2.softlay.net/.../Adobe_Photoshop_7.exe

temp:Adobe_Photoshop_7.exe

http://192.99.21.32/dl.php?f=Adobe_Photoshop_7.exe

https://links.services.disqus.com/api/click?format=go&key=cfdfcf52dffd0a702a61bad27507376d&loc=http://softlay.net/photo-image/image-editor/adobe-photoshop-7-0-free-download-full-version.html&subId=3611044&v=1&libid=ispz7hgw01012gdk000DAk2r3wy9nh4ls&out=http://95.211.174.231/Softlay.net/Adobe_Photoshop_7.exe&ref=https://.../&title=Adobe Photoshop 7.0 Free Download Full Version For Windows - Softlay&txt= Free Download Adobe Photoshop 7.0&jsonp=vglnk_jsonp_14730756972471

http://95.211.174.231/.../Adobe_Photoshop_7.exe

http://188.138.25.56/dl.php?f=Adobe_Photoshop_7.exe

http://188.138.25.56/.../Adobe_Photoshop_7.exe

http://163.172.8.28/.../Adobe_Photoshop_7.exe

http://188.138.70.226/.../Adobe_Photoshop_7.exe

http://188.138.70.227/.../Adobe_Photoshop_7.exe

temp:Getintopc.comAdobe_Photoshop_7.exe

http://85.25.103.133/.../Adobe_Photoshop_7.exe

http://85.25.103.180/.../Adobe_Photoshop_7.exe

Scan adobe photoshop 7.0, with serial.exe - Powered by Reason Core Security