mutants genetic gladiators hack cheat 2015 2015.exe

Salyutem Plyus LLC

This is the OutBrowse Revenyou installer which bundles offers for additional third party applications that may be unwanted and installed without consent. The application mutants genetic gladiators hack cheat 2015 2015.exe by Salyutem Plyus has been detected as adware by 7 anti-malware scanners. The program is a setup application that uses the OutBrowse Revenyou installer. The setup routine uses the RevenYou.Com Pay Per Install platform (OutBrowse) which bundles additional software offers inclduing toolbars, extensions, PC utilities as well as other PUPs.
Publisher:
Salyutem Plyus LLC  (signed and verified)

MD5:
4801d8f4f73f5f161541d74beaf9cd5f

SHA-1:
255c38abab6a05e0d7bb5ea07312999bc3badb34

SHA-256:
f75cfe00f91261fd78c9cb54db62bc8209867425fac53ab1f657629a7e192525

Scanner detections:
7 / 68

Status:
Adware

Explanation:
Bundles additional adware offers during download and installation using the OutBrowse installer.

Description:
This is also known as bundleware, or downloadware, which is an downloader designed to simply deliver ad-supported offers in the setup routine of an otherwise legitimate software.

Analysis date:
11/30/2024 7:51:48 AM UTC  (today)

Scan engine
Detection
Engine version

AhnLab V3 Security
PUP/Win32.OutBrowse
2014.12.27

Avira AntiVirus
APPL/Downloader.Gen
7.11.198.40

Dr.Web
Trojan.OutBrowse.55
9.0.1.05190

IKARUS anti.virus
Trojan-Clicker.Win32.Agent
t3scan.1.8.5.0

Malwarebytes
PUP.Optional.OutBrowse
v2014.12.26.04

Reason Heuristics
PUP.SalyutemPlyus.p
15.1.4.13

Trend Micro House Call
Suspici.3E5BCE57
7.2.360

File size:
574.3 KB (588,088 bytes)

File type:
Executable application (Win32 EXE)

Bundler/Installer:
OutBrowse Revenyou (using Nullsoft Install System)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\mutants genetic gladiators hack cheat 2015 2015.exe

Digital Signature
Authority:
thawte, Inc.

Valid from:
12/14/2014 6:00:00 PM

Valid to:
12/15/2015 5:59:59 PM

Subject:
CN=Salyutem Plyus LLC, O=Salyutem Plyus LLC, L=Kharkiv, S=Arkansas, C=UA

Issuer:
CN=thawte SHA256 Code Signing CA, O="thawte, Inc.", C=US

Serial number:
6B6BB9E1A48F64F47503D8DCF6A5D0D3

File PE Metadata
Compilation timestamp:
12/5/2009 4:50:52 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
12288:wskePEwHLfq6AnvbHCtQDDZRj9gEoug4sBQZXyq33xSYIXQOqC:ws4M/AvbHCtsxgIgkCqZv+

Entry address:
0x30FA

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, 60, 91, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, B0, 70, 40, 00, 53, FF, 15, 7C, 72, 40, 00, 6A, 08, A3, 18, EC, 42, 00, E8, F1, 2B, 00, 00, A3, 64, EB, 42, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, 98, 8F, 42, 00, FF, 15, 58, 71, 40, 00, 68, 54, 91, 40, 00, 68, 60, E3, 42, 00, E8, A4, 28, 00, 00, FF, 15, AC, 70, 40, 00, BF, 00, 40, 43, 00, 50, 57, E8, 92, 28, 00, 00...
 
[+]

Entropy:
7.9743

Packer / compiler:
Nullsoft install system v2.x

Code size:
23.5 KB (24,064 bytes)

The file mutants genetic gladiators hack cheat 2015 2015.exe has been seen being distributed by the following URL.