home

corel video studio pro x7 v17.0.0.249 full version crack.exe

Igor Kramoren

The application corel video studio pro x7 v17.0.0.249 full version crack.exe, “Installer for FreshApp installer” by Igor Kramoren has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the Tarma Installer installer.
Publisher:
FreshApp installer  (signed by Igor Kramoren)

Product:
FreshApp installer

Description:
Installer for FreshApp installer

Version:
2014.7.31.1602

MD5:
ef87295b5619209cf14b99700878a89c

SHA-1:
fe930a78a7557ba3c92a08dfbdfeeea59705a341

SHA-256:
c61343f0d93a40a17cc17191c4d465029657a26b33c0193629a18fdc49874c40

Scanner detections:
1 / 68

Status:
Adware

Explanation:
Uses Web-Pick's 'File Product', an Installer which wraps various products and downloads and installs it silently through the process, hosted on TusFiles.

Analysis date:
11/23/2024 4:36:03 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
Adware (M)
17.3.5.23

File size:
314.3 KB (321,808 bytes)

Product version:
1.0.0.3

Copyright:
Copyright © 2014 FreshApp installer

Original file name:
TSULoader.exe

File type:
Executable application (Win32 EXE)

Installer:
Tarma Installer

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\corel video studio pro x7 v17.0.0.249 full version crack.exe

Digital Signature
Signed by:
Igor Kramoren

Authority:
Unizeto Technologies S.A.

Valid from:
6/26/2014 4:40:45 PM

Valid to:
6/26/2015 4:40:45 PM

Subject:
E=kramoren@inbox.ru, CN=Igor Kramoren, O=Igor Kramoren, C=UA

Issuer:
CN=Certum Code Signing CA, OU=Certum Certification Authority, O=Unizeto Technologies S.A., C=PL

Serial number:
7387754B86CE7036762F30C4689E7084

File PE Metadata
Compilation timestamp:
3/12/2013 2:21:45 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

Entry address:
0x14DB

Entry point:
55, 8B, EC, 81, EC, 2C, 06, 00, 00, 53, 56, 33, DB, 57, 66, 89, 9D, DC, FB, FF, FF, 89, 5D, F4, 89, 5D, FC, FF, 15, 74, 30, 40, 00, A3, 08, 44, 40, 00, FF, 15, 70, 30, 40, 00, 8B, F8, 8D, 45, EC, 50, FF, 15, 6C, 30, 40, 00, FF, 15, 68, 30, 40, 00, 8B, F0, F7, D6, 33, F7, FF, 15, 64, 30, 40, 00, 33, F0, 8B, 45, F0, 33, 45, EC, 68, 04, 01, 00, 00, 33, F0, 8D, 85, D4, F9, FF, FF, 50, 53, FF, 15, 60, 30, 40, 00, 85, C0, 75, 41, FF, 15, 5C, 30, 40, 00, 83, F8, 78, 75, 1A, 68, A8, 32, 40, 00, E8, 43, FB, FF, FF...
 
[+]

Entropy:
7.9537

Developed / compiled with:
Microsoft Visual C++

Code size:
7.5 KB (7,680 bytes)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.