home

any.video.converter.pro.5.5.9.rar.exe

Trusted apps DDd

This is the OutBrowse Revenyou installer which bundles offers for additional third party applications that may be unwanted and installed without consent. The application any.video.converter.pro.5.5.9.rar.exe by Trusted apps DDd has been detected as adware by 3 anti-malware scanners. The program is a setup application that uses the OutBrowse Revenyou installer.
Publisher:
Trusted apps DDd  (signed and verified)

MD5:
2546263575ee603cdce8201b32a0626b

SHA-1:
82ca0d6e951bab1e8bad2e3719c3f97ac54fe3d1

SHA-256:
67bc52fb506da16888c79f58e2d15436d003ae3b024ca4688029fc05e246895c

Scanner detections:
3 / 68

Status:
Adware

Description:
This 'download manager' is also considered bundleware, a utility designed to download software (possibly legitimate or opensource) and bundle it with a number of optional offers including ad-supported utilities, toolbars, shopping comparison tools and browser extensions.

Analysis date:
12/25/2024 3:13:31 AM UTC  (today)

Scan engine
Detection
Engine version

Avira AntiVirus
APPL/Outbrowse.Gen
7.11.210.156

Reason Heuristics
PUP.Outbrowse
15.2.18.17

Vba32 AntiVirus
suspected of Trojan.Downloader.gen.h
3.12.26.3

File size:
92.2 KB (94,400 bytes)

File type:
Executable application (Win32 EXE)

Bundler/Installer:
OutBrowse Revenyou (using Nullsoft Install System)

Common path:
C:\users\{user}\downloads\any.video.converter.pro.5.5.9.rar.exe

Digital Signature
Signed by:
Trusted apps DDd

Authority:
thawte, Inc.

Valid from:
2/17/2015 2:00:00 AM

Valid to:
1/28/2016 1:59:59 AM

Subject:
CN=Trusted apps DDd, O=Trusted apps DDd, L=Dublin, S=Dublin, C=IE

Issuer:
CN=thawte SHA256 Code Signing CA, O="thawte, Inc.", C=US

Serial number:
5FC2E761D03FE2DBA5A9877921C279F3

File PE Metadata
Compilation timestamp:
12/6/2009 12:50:52 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
1536:tpgpHzb9dZVX9fHMvG0D3XJ8Y7NeYRNgKJ+BCydtjkqIzjbanyUXZf2mGq6ZHi5F:/gXdZt9P6D3XJ7eqgKJ+BCUj5K2Om9Ec

Entry address:
0x30FA

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, 60, 91, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, B0, 70, 40, 00, 53, FF, 15, 7C, 72, 40, 00, 6A, 08, A3, 18, EC, 42, 00, E8, F1, 2B, 00, 00, A3, 64, EB, 42, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, 98, 8F, 42, 00, FF, 15, 58, 71, 40, 00, 68, 54, 91, 40, 00, 68, 60, E3, 42, 00, E8, A4, 28, 00, 00, FF, 15, AC, 70, 40, 00, BF, 00, 40, 43, 00, 50, 57, E8, 92, 28, 00, 00...
 
[+]

Entropy:
7.1026

Packer / compiler:
Nullsoft install system v2.x

Code size:
23.5 KB (24,064 bytes)

Remove any.video.converter.pro.5.5.9.rar.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.