home

angrybirdsseasonsinstaller_2.4.1.exe

Evangelina Florina

Internet Widgits Pty Ltd

The application angrybirdsseasonsinstaller_2.4.1.exe by Internet Widgits Pty has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. It is also typically executed from the user's temporary directory.
Publisher:
Rovio  (signed by Internet Widgits Pty Ltd)

Product:
Evangelina Florina

Version:
20.14.0043

MD5:
6c105554cc47bae4e449cac33850b5f1

SHA-1:
71dacd24092fd339b74854864fdf3aba7e2467a5

SHA-256:
c78e1bb7ff7394168c1e94c967e08b3b80efd9314963870a19648f935f5c2fa4

Scanner detections:
1 / 68

Status:
Potentially unwanted

Note:
Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Analysis date:
4/25/2024 9:33:19 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InternetWidgits.Installer (M)
16.2.15.19

File size:
54 MB (56,637,520 bytes)

Product version:
20.14.0043

Original file name:
Daune.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\angry.birds.seasons.v2.4.1\angrybirdsseasonsinstaller_2.4.1.exe

Digital Signature
Signed by:
Internet Widgits Pty Ltd

Authority:
Internet Widgits Pty Ltd

Valid from:
6/6/2012 5:58:40 AM

Valid to:
6/6/2014 5:58:40 AM

Subject:
O=Internet Widgits Pty Ltd, S=GT, C=OI

Issuer:
O=Internet Widgits Pty Ltd, S=HU, C=PO

Serial number:
01

File PE Metadata
Compilation timestamp:
6/14/2012 5:41:00 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
1572864:x1Q8tc5645iXr3dBwaCQr6xGGuA5wp7x7QDRiQNG:TQ8c5A7YQmuA5k7xW8

Entry address:
0x1574

Entry point:
68, 38, 18, 40, 00, E8, EE, FF, FF, FF, 00, 00, 00, 00, 00, 00, 30, 00, 00, 00, 40, 00, 00, 00, 00, 00, 00, 00, B8, 33, 9B, B4, FF, D7, 83, 41, 94, 25, A4, 9C, 66, 16, 99, 9D, 00, 00, 00, 00, 00, 00, 01, 00, 00, 00, 0D, 0A, 43, 6C, 69, 65, 47, 69, 6C, 62, 65, 72, 74, 65, 00, 20, 3D, 20, 20, 20, 34, 35, 00, 00, 00, 00, FF, CC, 31, 00, 09, 68, 51, 0B, 0C, 41, 41, EE, 4C, BF, 7A, 81, BB, 48, 1D, F4, ED, 13, 1E, B0, 91, E7, 44, E7, 46, BC, 92, E4, 31, 01, FC, 9C, EB, 3A, 4F, AD, 33, 99, 66, CF, 11, B7, 0C, 00...
 
[+]

Developed / compiled with:
Microsoft Visual Basic v5.0

Code size:
36 KB (36,864 bytes)

Remove angrybirdsseasonsinstaller_2.4.1.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.