taig 1.2.0 jailbreak.exe

File

SAfe DownloaD gtl

This is the OutBrowse Revenyou installer which bundles offers for additional third party applications that may be unwanted and installed without consent. The application taig 1.2.0 jailbreak.exe by SAfe DownloaD gtl has been detected as adware by 25 anti-malware scanners. The program is a setup application that uses the OutBrowse Revenyou installer. According to AVG, this software downloads additional adware offers during setup. The file has been seen being downloaded from get1.0114design.info.
Publisher:
SAfe DownloaD gtl  (signed and verified)

Product:
File

Version:
1.9.3.0

MD5:
9b72f1bfcf50363683743dec508f66ee

SHA-1:
6c99bfa119040911381786a81c4fb09b74a21f86

SHA-256:
7a8a47d4d01023cb769ec3a8d46f1b0d6e69ec8ebc41c2a613454436b971bf1d

Scanner detections:
25 / 68

Status:
Adware

Explanation:
Bundles additional adware offers during download and installation using the OutBrowse installer.

Description:
This 'download manager' is also considered bundleware, a utility designed to download software (possibly legitimate or opensource) and bundle it with a number of optional offers including ad-supported utilities, toolbars, shopping comparison tools and browser extensions.

Analysis date:
11/16/2024 12:50:30 PM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Dropped:Adware.Outbrowse.E
5651644

Agnitum Outpost
PUA.OutBrowse
7.1.1

AhnLab V3 Security
PUP/Win32.OutBrowse
2015.04.20

Avira AntiVirus
PUA/Outbrowse.Gen
3.6.1.96

avast!
PUP-gen [PUP]
150414-0

AVG
Downloader
2016.0.3134

Bitdefender
Dropped:Adware.Outbrowse.E
1.0.20.545

Dr.Web
infected with Trojan.OutBrowse.296
9.0.1.05190

Emsisoft Anti-Malware
Dropped:Adware.Outbrowse
9.0.0.4799

ESET NOD32
Win32/OutBrowse.BU potentially unwanted
9.11498

Fortinet FortiGate
Riskware/OutBrowse
4/19/2015

F-Secure
Dropped:Adware.Outbrowse.E
11.2015-19-04_1

G Data
Dropped:Adware.Outbrowse
15.4.25

Malwarebytes
PUP.Optional.OutBrowse
v2015.04.19.03

McAfee
Program.Adware-OutBrowse.e
16.8.708.2

MicroWorld eScan
Dropped:Adware.Outbrowse.E
16.0.0.327

NANO AntiVirus
Trojan.Win32.OutBrowse.dqewlt
0.30.16.1110

nProtect
Dropped:Adware.Outbrowse.E
15.04.17.01

Qihoo 360 Security
HEUR/QVM30.1.Malware.Gen
1.0.0.1015

Quick Heal
Adware.NSIS.OutBrowse.A
4.15.14.00

Reason Heuristics
Threat.Outbrowse.Bundler
15.4.19.10

Sophos
Generic PUA PD
4.98

Trend Micro House Call
TROJ_GE.3D271B96
7.2.109

Vba32 AntiVirus
Adware.Outbrowse
3.12.26.3

VIPRE Antivirus
Adware.NSIS.Outbrowse.bu
39490

File size:
1 MB (1,100,584 bytes)

Product version:
1.9.3.0

Copyright:
File

Original file name:
Ionic.Zip-2015Apr11-175357-5a145f12-4fbd-4ac1-9947-0ad7fadf36b9.exe

File type:
Executable application (Win32 EXE)

Bundler/Installer:
OutBrowse Revenyou

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\taig 1.2.0 jailbreak.exe

Digital Signature
Authority:
thawte, Inc.

Valid from:
4/8/2015 7:00:00 AM

Valid to:
1/28/2016 6:59:59 AM

Subject:
CN=SAfe DownloaD gtl, O=SAfe DownloaD gtl, L=Dublin, S=Dublin, C=IE

Issuer:
CN=thawte SHA256 Code Signing CA, O="thawte, Inc.", C=US

Serial number:
69CC55B6077EC8DA48D66E1527EEB161

File PE Metadata
Compilation timestamp:
4/12/2015 12:53:57 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
12288:kMiy4IadS4ms5I6e66fEheKhqsZPhh0I9YpQme3MF0d9dUhBChsuzML5OSudR138:kbSaE4mvt/fSPiumcMFaYB4suzM613y3

Entry address:
0x75F3E

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
7.5486

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
464 KB (475,136 bytes)

The file taig 1.2.0 jailbreak.exe has been seen being distributed by the following URL.

Remove taig 1.2.0 jailbreak.exe - Powered by Reason Core Security