home

skachat_igru_maynkraft_1.8.exe

iDatix Corporation

The application skachat_igru_maynkraft_1.8.exe by iDatix has been detected as a potentially unwanted program by 19 anti-malware scanners. This is a setup program which is used to install the application. The file has been seen being downloaded from gameconvert.net.
Publisher:
iDatix Corporation  (signed and verified)

MD5:
766c49b89b0860f130493054939e9f8a

SHA-1:
7df3425c34fdd5b082f418626b8b01f938d64d86

SHA-256:
b2cfd00cfdd3c2f47adc25c71d01f477f91a9d030c54087ca6020b7dd29d3283

Scanner detections:
19 / 68

Status:
Potentially unwanted

Analysis date:
4/26/2024 3:56:24 PM UTC  (today)

Scan engine
Detection
Engine version

Agnitum Outpost
PUA.Toolbar
7.1.1

Avira AntiVirus
TR/Rogue.1773816
7.11.217.78

avast!
Win32:PUP-gen [PUP]
150303-0

AVG
Could be an adware AdLoad
2014.0.4257

Comodo Security
Application.Win32.Agent.WEFO
21418

Dr.Web
Adware.Downware.9442
9.0.1.074

Emsisoft Anti-Malware
Gen:Variant.Adware.Graftor.168544
8.15.07.04.03

ESET NOD32
Win32/AdWare.Toolbar.Webalta.FV application
7.0.302.0

F-Prot
W32/A-6505d15e
v6.4.7.1.166

F-Secure
Gen:Variant.Adware.Graftor
11.2015-04-07_7

G Data
Win32.Adware.Webalta
15.3.25

IKARUS anti.virus
AdWare.Adload
t3scan.1.8.6.0

McAfee
Program.PUP-FIT
16.8.708.2

NANO AntiVirus
Riskware.Win32.Toolbar.cxrbnj
0.30.0.296

Norman
Gen:Variant.Adware.Strictor.55186
03.12.2014 13:20:04

Reason Heuristics
PUP.iDatixCorporation
15.3.15.6

Sophos
PUA 'WebAlta Toolbar' (of type Adware)
5.12

Vba32 AntiVirus
Downloader.Agent
3.12.26.3

VIPRE Antivirus
Threat.4150696
38050

File size:
1.7 MB (1,773,816 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\skachat_igru_maynkraft_1.8.exe

Digital Signature
Signed by:
iDatix Corporation

Authority:
VeriSign, Inc.

Valid from:
9/10/2012 5:00:00 AM

Valid to:
10/2/2015 4:59:59 AM

Subject:
CN=iDatix Corporation, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=iDatix Corporation, L=Clearwater, S=Florida, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
6A2BECD74BF6AAF73D2D909F5C4A93CD

File PE Metadata
Compilation timestamp:
6/20/1992 3:22:17 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:TBP1e+xZhWWjiuNr6/cpdPMorED6Lf8evY2qkVT6KbthvDgk2O5PmGzNOonQB2v8:uEfdk/c7DbYAhDgkFmuNOoG2vOQTG5

Entry address:
0x73188

Entry point:
55, 8B, EC, 83, C4, F0, B8, 68, 2F, 47, 00, E8, 78, 36, F9, FF, A1, A8, 58, 47, 00, 8B, 00, E8, 2C, 18, FE, FF, 8B, 0D, C4, 56, 47, 00, A1, A8, 58, 47, 00, 8B, 00, 8B, 15, 9C, 9F, 46, 00, E8, 2C, 18, FE, FF, 8B, 0D, 9C, 56, 47, 00, A1, A8, 58, 47, 00, 8B, 00, 8B, 15, 30, 9D, 46, 00, E8, 14, 18, FE, FF, 8B, 0D, 18, 59, 47, 00, A1, A8, 58, 47, 00, 8B, 00, 8B, 15, B8, 2C, 47, 00, E8, FC, 17, FE, FF, A1, A8, 58, 47, 00, 8B, 00, E8, 70, 18, FE, FF, E8, B3, 10, F9, FF, 8D, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
456.5 KB (467,456 bytes)

The file skachat_igru_maynkraft_1.8.exe has been seen being distributed by the following URL.

http://gameconvert.net/install.php?rid=628&url=aHR0cDovL2ZyZWVmb3J3aW4ucnUvd3AtY29udGVudC91cGxvYWRzL2ZpbGUvbWluZWNyYWZ0LnppcA==&name=0KHQutCw0YfQsNGC0Ywg0LjQs9GA0YMg0JzQsNC50L3QutGA0LDRhNGCIDEuOA==

Remove skachat_igru_maynkraft_1.8.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.