rename-this-file-to_candycrush.exe_.rar
Candy Crush Saga
Strategic Media Enterprises, LLC
The file rename-this-file-to_candycrush.exe_.rar by Strategic Media Enterprises has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. It uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions. The file has been seen being downloaded from easyfiledownloads.net a web site host known to distribute potentially unwanted software operated by
Amonetize ltd..
File name:
rename-this-file-to_candycrush.exe_.rar
MD5:
0f4392d134483eb3b99168b3acf2d544
SHA-1:
ef8a8514fc4c709b2ec29d8d49f540c52fbf3b0c
SHA-256:
d5eb138de7b22142ad5812ab5c63c8b4b5d21cf7f0603c664f3c147b984041f9
Scanner detections:
1 / 68
Status:
Potentially unwanted
Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.
Analysis date:
4/26/2024 7:37:05 AM UTC (today)
Scan engine
Detection
Engine version
Reason Heuristics
PUP.InstallCore.Strategi (M)
16.4.26.14
File size:
138 KB (141,304 bytes)
Copyright:
Copyright © 2013
Original file name:
Candy Crush Saga.exe
Language:
Language Neutral
Common path:
C:\users\{user}\downloads\rename-this-file-to_candycrush.exe_.rar
Authority:
COMODO CA Limited
Valid from:
9/18/2013 5:00:00 PM
Valid to:
9/19/2014 4:59:59 PM
Subject:
CN="Strategic Media Enterprises, LLC", O="Strategic Media Enterprises, LLC", STREET=4117 Spaulding ST, L=Antioch, S=Ca, PostalCode=94531, C=US
Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB
Serial number:
00E1943E07A73445C382AEC175B1A9F986
The file rename-this-file-to_candycrush.exe_.rar has been seen being distributed by the following URL.