home

torrent-igruha.net-gta-4-3543.torrent.exe

Astonsoft DeepBurner

TOV

The application torrent-igruha.net-gta-4-3543.torrent.exe by TOV has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. This is a setup program which is used to install the application. The file has been seen being downloaded from s83f.storage.yandex.net.
Publisher:
Astonsoft  (signed by TOV )

Product:
Astonsoft DeepBurner

Version:
1.9.0.228

MD5:
7607968dbf6a55e9be2f3eeaf86f7a57

SHA-1:
d1287e248f8823d9e13464b423e07c311ba08d9b

SHA-256:
56fd71badb5172a5bd8ee03adfd67deadf8fe2f4791e512e81a35d1740de7aab

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
5/16/2024 11:01:57 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallMonster
17.2.9.8

File size:
3.1 MB (3,234,400 bytes)

Product version:
1.8

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\torrent-igruha.net-gta-4-3543.torrent.exe

Digital Signature
Signed by:
TOV

Authority:
COMODO CA Limited

Valid from:
10/18/2016 6:00:00 AM

Valid to:
6/7/2017 5:59:59 AM

Subject:
CN="TOV ""Smart PIPL""", OU=IT, O="TOV ""Smart PIPL""", STREET="vul. Zolotoustivska, 30", L=Kiev, S=Kiev, PostalCode=01054, C=UA

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00CB9F84F0BE4D752CCD2D047E2BB5500E

File PE Metadata
Compilation timestamp:
7/6/2009 6:15:29 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
7.0

Entry address:
0x7505D4

Entry point:
56, 6A, 2F, BE, FE, FC, 2F, 02, 33, C0, 03, 44, 24, FC, 4F, 75, F9, FF, 15, 64, E1, B4, 00, BA, FF, 0F, B5, 00, 42, FF, E2, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, BF, FD, 03, B5, 00, 81, C7, 12, 0C, 00, 00, 57, C3, EB, F1, 6A, 00, 58, 83, C0, 01, 33, DB, 8B, 88, 93, E1, B4, 00, 0F, B6, 09, 80, E9, B1, 83, E9, 07, 3B, CB, 75, 20, FF, 15, B0, E3, B4, 00, 6A, 64, FF, 15, 00, E4, B4, 00, FF, 15, 64, E1, B4, 00, FF, 15, 64, E1, B4, 00, 8B, FF, EB, E2, 09, E4, E9, A0, 08, 00, 00, CA, 9A, 64, 89, 22...
 
[+]

Code size:
650.5 KB (666,112 bytes)

The file torrent-igruha.net-gta-4-3543.torrent.exe has been seen being distributed by the following URL.

https://s83f.storage.yandex.net/rdisk/71976769467f39dbb6ac470d9ef0e2a56c107f337a4b14a0229607fa53ce21bf/5833139d/dll4NpZLX94vmedwr_MCoACsw5zkl49B0jXEgqjqA2hwVLdDYQSMdmq0YnY1AsRlsIpUIpE4ur6Hlb9ddOXD-w==?uid=431973804&filename=Torrent-Igruha.Net-GTA-4-3543.torrent.exe&disposition=attachment&hash=&limit=0&content_type=application/x-msdownload&fsize=3234400&hid=d2d842dbef3ddbcb9fd9ab523107316d&media_type=executable&tknv=v2&etag=7607968dbf6a55e9be2f3eeaf86f7a57&rtoken=gf2aA1gT7kFF&force_default=yes&ycrid=na-361faf81fa36cdde3265b9dcff5bfafc-downloader2h&ts=541d15e066140&s=0f2a3a3b62d3c2f12477153079f25b7fd18cce707e531c6002da3dce43112934&bp=/14/.../data-0.26:5859290706:3234400&pb=U2FsdGVkX1_DZ3bURH1S9obsuaUC4Npxoady7GHz3hyBRsKyR6FwBsRvLsqKM6EnKpPJg_Gcz7jwpk7Tpz0_DFvtFIlwP73uG4PKMSg-Crg=

Remove torrent-igruha.net-gta-4-3543.torrent.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.