home

adobe_photoshop_cs_6_crack_downloader.exe

YourFileDownloader Installer

Gtone LLC

This is the Via Advertising bundle installer which bundles applications with offers for additional 3rd party software, mostly unwanted adware, and may be installed with minimal consent. The application adobe_photoshop_cs_6_crack_downloader.exe by Gtone has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the YourFile Downloader installer. The file has been seen being downloaded from dj234.yourfiledl.com.
Publisher:
http://yourfile-downloader.com  (signed by Gtone LLC)

Product:
YourFileDownloader Installer

Version:
1, 0, 722, 1

MD5:
474434ec9f352a6bc135da2812142d14

SHA-1:
3b8df6fd037daf9b4b749610eceabc7b72400e62

SHA-256:
8c507c85e6d7a23f6465b9b30d9b5c39f15e85b598c6d0ba8d7926b95ae7d8d3

Scanner detections:
1 / 68

Status:
Adware

Note:
Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Description:
This is also known as bundleware, or downloadware, which is an downloader designed to simply deliver ad-supported offers in the setup routine of an otherwise legitimate software.

Analysis date:
11/14/2024 9:02:59 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.Via Advertising.Gtone.Bundler (M)
16.7.4.17

File size:
7.4 MB (7,721,840 bytes)

Product version:
1.0.0.1

Copyright:
Copyright http://yourfile-downloader.com (C) 2014

Original file name:
YourFileDownloaderInstaller.exe

File type:
Executable application (Win32 EXE)

Bundler/Installer:
YourFile Downloader

Language:
English

Common path:
C:\users\{user}\downloads\adobe_photoshop_cs_6_crack_downloader.exe

Digital Signature
Signed by:
Gtone LLC

Authority:
Gtone LLC

Valid from:
5/14/2015 11:50:31 PM

Valid to:
5/13/2016 11:50:31 PM

Subject:
CN=Gtone LLC, O=Gtone LLC, S=London, C=UK

Issuer:
CN=Gtone LLC, C=UK, S=London, L=London, E=admin@gtone.com, O=Gtone LLC

Serial number:
100001

File PE Metadata
Compilation timestamp:
5/22/2015 2:03:26 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
12.0

CTPH (ssdeep):
196608:grEIMagzBr/UI0sfUT2BbMSEDdK2H7wKVMsYO0pu:gr3pcf/0bwHG0pu

Entry address:
0x7FA11E

Entry point:
9C, 89, 24, 24, C7, 04, 24, 5E, 4E, FD, B9, 9C, 9C, 9C, C7, 44, 24, 08, D0, 44, 84, 1C, 56, 8D, 64, 24, 0C, E9, 51, 0A, 6F, 00, 10, D2, 9C, 60, E9, E3, B3, 00, 00, 01, 45, E0, 9F, 8D, 83, 88, 0C, 00, 00, 54, 9C, 8D, 64, 24, 2C, E8, A3, 6C, 00, 00, E9, 4F, F5, FF, FF, E9, AF, CE, FF, FF, 27, 7E, FF, 0E, 6C, CC, 7C, DD, 80, BA, CA, B2, 93, 7A, 04, 95, 4B, DC, B3, A5, F9, 4C, 6E, A6, 73, 32, 68, 74, 65, 08, 52, 1E, 01, 00, 9A, D6, 67, BD, FC, 2B, 95, 62, F2, 47, C7, 8A, 36, BD, 5D, 03, BA, 75, F9, 01, 81, 86...
 
[+]

Entropy:
7.9687  (probably packed)

Code size:
1.1 MB (1,190,400 bytes)

The file adobe_photoshop_cs_6_crack_downloader.exe has been seen being distributed by the following URL.

http://dj234.yourfiledl.com/j5GEU23SrBBW3KJLZcu5LH6XlhQ59vIIRIWeBDy8km4v NZlFuDZbxbnyyxfupgHE 3FVwHTz18QlJwdToZkAWGFYUpx1n0JJ5JrFimnZfo mSiydGN14jVvIL18fEXgAWRK5BYtSP9LekjrRHFfxQE6QcMBf1rEA0pJ3QMVCP1YXiDW7m8q1 9XJuDkV2zyqEgxtM0pKfandm3hr3FP4qd4S WRZk uxwsFvtkwTIGdb0DW11ZJ3IRTG47ZX7TKjlywkaEWv82gTenL Bv0JbsdqESapvVs6 HzKbnp1S7qqtZigPnNRIX12SLYvsFRgfjARIb/0E/Llptdm8alDs a/QM2lr0GcobrVG/B7Cc9i7ciIvjufnen6ist/.../6HZxDojW0RstxoHerC

Remove adobe_photoshop_cs_6_crack_downloader.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.