» photoshopcreativecloud.exe
Overview
Analysis
File Details
Downloads (19)

photoshopcreativecloud.exe

Installer Internet Web

AgileMax (New Media Holdings Ltd.)

The application photoshopcreativecloud.exe, “Installer Internet Web Setup ” by AgileMax (New Media Holdings) has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The file has been seen being downloaded from www.sendtowersnew.com and multiple other hosts.

File name:

Publisher:

Software (signed by AgileMax (New Media Holdings Ltd.))

Product:

Installer Internet Web

Description:

Installer Internet Web Setup

Version:

3.4.4.8

MD5:

efd8e5cd25ec8fb3d6453e30143a014c

SHA-1:

59ef1f56decb388e216731d6a7fc0447d8a0a71f

SHA-256:

bbe339362d4acf96958c5eabbb6df94245a336400f8664a1f56c52fbed2a4f71

Scanner detections:

1 / 68

Status:

Adware

Note:

Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Description:

This 'download manager' is also considered bundleware, a utility designed to download software (possibly legitimate or opensource) and bundle it with a number of optional offers including ad-supported utilities, toolbars, shopping comparison tools and browser extensions.

Analysis date:

11/15/2024 6:45:02 PM UTC (today)

Scan engine

Detection

Engine version

Reason Heuristics

PUP.NewMedia.Installer.Installer (M)

16.1.15.3

File size:

958.3 KB (981,304 bytes)

Product version:

3.1.5

File type:

Executable application (Win32 EXE)

Bundler/Installer:

installCore (using Inno Setup)

Common path:

C:\users\{user}\downloads\photoshopcreativecloud.exe

Digital Signature

Signed by:

AgileMax (New Media Holdings Ltd.)

Authority:

GlobalSign nv-sa

Valid from:

12/16/2015 6:04:31 AM

Valid to:

10/30/2016 9:53:45 AM

Subject:

CN=AgileMax (New Media Holdings Ltd.), O=AgileMax (New Media Holdings Ltd.), L=Tel Aviv, C=IL

Issuer:

CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:

112186313590F7C0AF7C143BC6BDE6200476

File PE Metadata

Compilation timestamp:

6/19/1992 5:22:17 PM

OS version:

1.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

24576:MKSxgTgYTb5VISBjR4+UL5WwuLCv9yUQ3YuEjHyq8pU:MreTgmVVH/U9WwWCv9yJ3aZI

Entry address:

0x9C40

Entry point:

55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, BF, A9, FF, FF, E8, 5E, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, 24, CE, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, 24, CE... 
[+]

Entropy:

7.9306

Packer / compiler:

Inno Setup v5.x - Installer Maker

Code size:

37 KB (37,888 bytes)

The file photoshopcreativecloud.exe has been seen being distributed by the following 19 URLs.

http://www.sendtowersnew.com/c?x=Kd0LE8wO7/Gy1vcwXf/pcgtZxJAqV1S7JKQGv5Pn3n8=&c=r8aDwJ5a1XTtyOqRm7wzIV2xd6FTl2eirpURLFmea5gQZe/UDR56yplAC1bafPFd2YN3HWQjiqAmmYEQ eXwbV0alDxTB9G O5CaZ2/jpXY1o lF3oDVSW4Lx lgnM3grjZ8h59HFN491DiCKaosSOA2Cb6hRZyZ84Fp2qzZlJFV3qJMqmLgRVpIsYH0UvkI&e=0&downloadAs=photoshop-programas-gratis-net.exe&fallback_url=http://.../PhotoshopCreativeCloud.exe

http://www.sendtowersnew.com/c?x=MBKjJvuvZu25/jA9xGmXlYYGz2gBidVMgy3haKsQlo8=&c=xhKqVzumMOgmpDh0 guQdgdnMZMjqwodqOeTq8yZjT8U2wvwqjz1vWjQMm5AOUwW2TgxpIb 24GvwWhIF5uIFzM dA3nZCKHbSeKZSVH5pM88440E/ SQYkrQfkjd/DeDFvU0semy1FQm/IUjKhiFGZ85ks750 Sc1gK9RKA7I9jI18RiehCLg6MR22pNmC3&e=0&downloadAs=photoshop-programas-gratis-net.exe&fallback_url=http://.../PhotoshopCreativeCloud.exe

http://www.bundlecentralbulk.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

http://www.bundlecentralbulk.com/c?x=/NQFToxw/lvDOJx5Xn1C1PYZD7ALKI36DnPioSEEofo=&c=GefJjLplXqBE8sylcxvJ6TTFltkgqpeRwvEtDo0QCsdYCkbg0FowdJ7DVpTBM1q sfNRvGXcC/MUAI6JwJOd8o3qrYK IKrKhxLUhRVPGRLa4DXb28apENdbOuYxbWDLr34qinYYtNBxxkgRgcHv8ZerXFP3kz UNK JJjg1D3c=&e=0&downloadAs=photoshop-programas-gratis-net.exe&fallback_url=http://.../PhotoshopCreativeCloud.exe

http://www.bundlecentralbulk.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

http://www.besttoursvaults.com/c?x=jx54ATo7V2zDpgisuV9eB/3d05O9lJXDLywFpLsMJrY=&c=aHZ/D/bQcHMvczrER4SP2T/WaWqCteEZ1ButybWjRmIVP pVcOcECpDW3v3XqSG79yu4/EMK60AJSv6HqxX3Ipi80MI3EpwvSVJsDljuvO3xpx377o 7Kem64V4xdV2J82kpdRf4clWlWDaVDo6KezYHOwLOH3JO/yNXhMtikjU=&e=0&downloadAs=photoshop-programas-gratis-net.exe&fallback_url=http://.../PhotoshopCreativeCloud.exe

http://www.bundlecentralbulk.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

http://www.bundlecentralbulk.com/c?x=JZ JL8/3MWs0 GnFkKLbOvgKmBbXz6U3kZm/Wd8AaU0=&c=5/Jk1XxRZJn9mVGOs3Gx7Mkh wXL5DIQ5U WufKVSHf44usgaPM2njvKLbK FYwvk7c/Sj5gbbxhehqWnvI3CMakdErykWrBi EGEEQR52nYknXdjW5XtRfgmjTeH/NnHLiKLvQJ1a3x1GfuqaRyFIGN3RLkivD53BkmLWxMYWM=&e=0&downloadAs=photoshop-programas-gratis-net.exe&fallback_url=http://.../PhotoshopCreativeCloud.exe

http://www.giftbulkstock.com/c?x=8T5hFooTT5hwJ0450PhxrXEYwHxBlHcZKDyYkgSN9EU=&c=aQjiUqjWyjnfkgvJznpP8KpaYVJ/zXIABMf9mk4x0pE8EnvfY1FRaSDmJtC6xH9z9lvHbvW8Msa 6kWwJM2ulz/C3c TxFhzVkzAhvt5Si cGmSwdq3xvq1UHH rwyO/gPjsByYtFPVf/COYcxnyNmSVliTovl728nWAMUbUbbA=&e=0&downloadAs=photoshop-programas-gratis-net.exe&fallback_url=http://.../PhotoshopCreativeCloud.exe

http://www.headsignchuckle.com/c?x=Ok4NTmEOxLhHFQhJhruh2I5H7FRQKZKDnKe1/FRzba0=&c=/vXOfE40ZAF7Oz0 2WPhPO9day9usiKEAbPFr1ni3BpaOX9s2TwXXYf1sSSQTc8ujQiYOthgzrCQSr3nNJh0Q88FoypypNs rabRMbL4foSSF8VlJmA7quCfYdABYXkppO kFaatIY5PNQ0tlO772IwVUTUyPTHXQNIkE/CuCQw=&e=0&downloadAs=photoshop-programas-gratis-net.exe&fallback_url=http://.../PhotoshopCreativeCloud.exe

http://www.headsignchuckle.com/c?x=wwymbp1hAjjmMCoUiXFeb5rAXocLC4HPawQfrmhxOTY=&c=5Ez2df0dalgFF7c9yiNpzDQR4tL7oJDsfYNSHlszoBJiq0dlPkqrHnc1JI3pSsnqAiPcepVrF6mjLtO3qXzQxclEZaK9e2ngc4PIOCqabnxz3WhoDFW9wIVRmPuWhA39nUTxT9m19cjgnFcJ1C9blvBGxYJ/4y5qYOD92tYMH9w=&e=0&downloadAs=photoshop-programas-gratis-net.exe&fallback_url=http://.../PhotoshopCreativeCloud.exe

http://www.sendtowersnew.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

http://www.sendtowersnew.com/c?x=MICjnJNJVeyBnLRnCz8fGhiTb7xBuSmWhEYrFw4b/nw=&c=G/0WSbghy8d3J7SJ wZA1OAoY gvj/qbxlXiuGN3U1YPEQdgO7RANoSKGIF29E3xVovNavpVeZJEYFpcu/1i5kKpmOhzIcCPjsQzSsGQaZeT9RootiKZ4fVL3z9bSKDuyaKTG e8Oog59Ax0QEWvhuqL1gaEmJdPmU1nX5LMyC4qk6lmvJqU6u ad5zTSGip&e=0&downloadAs=photoshop-programas-gratis-net.exe&fallback_url=http://.../PhotoshopCreativeCloud.exe

http://www.sendtowersnew.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

http://www.sendtowersnew.com/c?x=EcrepLL8qO1IOZII/kLZwsx4mAl dt16NqX3d77zdR8=&c=X3wVwz3NDZe7oUYQXvgctf2p03Yz6ZbX68dsKNFVHcWA6dZgMQ211iZFM4Vy0CSunC1MuQYtTv2p91wcenK2vLUFAadRZYPr3qRiam5WfCtfAJiWuvUPstJXaahXysNoMXsLVUkuU1fYOWqX1MF8Taj9ddVNwvigJ79VdgAEyTI=&e=0&downloadAs=photoshop-programas-gratis-net.exe&fallback_url=http://.../PhotoshopCreativeCloud.exe

http://www.sendtowersnew.com/c?x=LX6uE37axIvxgm4FRPhScs8cqYj1MkQkEIqi8A/I07c=&c=pMxg7z2EhhSuvJ8VWOYILS4HShqX/0eMDJCTfi1HxjEcwE QPJlQ OEm17bjSvahbw8IWklUAOOgTbuPARdDA/PU88m7eW6W/E7aLxFKprxQ2CuGbcoSBTCJRFOomItzEP7YYdO6d72wEpeaELUuFKeDBpXqVMwaAvfZwWeFQ qMTsW/8VcXYBPf40rhdK3s&e=0&downloadAs=photoshop-programas-gratis-net.exe&fallback_url=http://.../PhotoshopCreativeCloud.exe

http://www.sendtowersnew.com/c?x=NmAUUr9jOw2vY9XLt6vCvpsPKKGSz0q/B38b5nbHmK4=&c=WCr7J1lT5cGK9A7/c4/YhhqYyVXmaeoCHz2o5tX2SHhnqYOtLWm 2spBux81yYYU/MpjxC bJYhFRhe6VyzcHU7eHAptkzhLlEIO Sl33TmJfHXcaNcb/JsjI3X2CbOUXMwXWnhkSFhGl3IjZmXTUg5z1g4otke3c7KT4a/rMldV8bHewYsLqwZG Us MtOH&e=0&downloadAs=photoshop-programas-gratis-net.exe&fallback_url=http://.../PhotoshopCreativeCloud.exe

http://www.sendtowersnew.com/c?x=SOQ/D qP6F07y3vKBpSg81znkzcLoR8fxgdf1U0tr8s=&c=RFCsnpAay2vaKiGFvpJE0sGLcXSmHT ZgFRcRYYkVSQAOXJ2rE6R0FZTZ2hqYUNAyEAIVk1TmUQS3moqbJz yPwSWwlx0Iqs16AH14paUH4Ya4Ac8OuUyt27YPTuE7OzDWa6fuHUOx08XKFoj2ig SSkY/as/t2GZxhCE20U3io=&e=0&downloadAs=photoshop-programas-gratis-net.exe&fallback_url=http://.../PhotoshopCreativeCloud.exe

http://www.starsourcefilesnow.com/c?x=QyjHG1mMEWAdoEgsg0l1JIGXQdaRPqt5tjd6otXkYaY=&c=pzsHklHxXoG3JLtbsSY4QL73M zu7DspUOWBQVU5Pfu8BDmlPN wDxrlP/JxcHZyegfV7MAZwOmECVewIdUWwEqRKZKLautDF ghVZ5zbbs7kLoJx291OFNtVt/CNB1Kjr7gRFIMg/IR3OZGTZozLg==&downloadAs=photoshop-programas-gratis-net.exe&fallback_url=http://.../PhotoshopCreativeCloud.exe

Remove photoshopcreativecloud.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.