ace_stream_media_3.1.11.exe

Innovative Digital Technologies

The application ace_stream_media_3.1.11.exe by Innovative Digital Technologies has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. This is a setup program which is used to install the application. The file has been seen being downloaded from free.tv4uhd.com and multiple other hosts. While running, it connects to the Internet address static.165.41.251.148.clients.your-server.de on port 80 using the HTTP protocol.
Publisher:
Innovative Digital Technologies  (signed and verified)

MD5:
9fdf337a75bb8e152871547eb46b234d

SHA-1:
63ef398fa26635ce2e0dccd26cce9ccc3e3be3aa

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
12/25/2024 12:18:54 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InnovativeDigital (M)
16.10.20.11

File size:
78.5 MB (82,334,592 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\Documents and Settings\{user}\My documents\downloads\ace_stream_media_3.1.11.exe

Digital Signature
Authority:
COMODO CA Limited

Valid from:
6/14/2016 2:00:00 AM

Valid to:
6/15/2017 1:59:59 AM

Subject:
CN=Innovative Digital Technologies, O=Innovative Digital Technologies, STREET=38/40 A T.Shevchenko Blvd., L=Kyyiv, S=Kyyiv, PostalCode=01032, C=UA

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
7408D72DB44FD7A1F25C606006DCFF6E

File PE Metadata
Compilation timestamp:
7/25/2016 2:55:41 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
1572864:OMQmC6WZ45B/yoG+XQnlZkd7cEdI9zFXhSW1p0MGncqBBx:OMbC6L79JaZkNct9z9hSc0FPBB

Entry address:
0x30D9

Entry point:
81, EC, 84, 01, 00, 00, 53, 56, 57, 33, DB, 68, 01, 80, 00, 00, 89, 5C, 24, 18, C7, 44, 24, 10, 98, 91, 40, 00, 89, 5C, 24, 20, C6, 44, 24, 14, 20, FF, 15, A8, 70, 40, 00, FF, 15, A4, 70, 40, 00, 66, 3D, 06, 00, 74, 11, 53, E8, 7C, 2F, 00, 00, 3B, C3, 74, 07, 68, 00, 0C, 00, 00, FF, D0, BE, 98, 72, 40, 00, 56, E8, F8, 2E, 00, 00, 56, FF, 15, A0, 70, 40, 00, 8D, 74, 06, 01, 38, 1E, 75, EB, 55, 6A, 09, E8, 4F, 2F, 00, 00, 6A, 07, E8, 48, 2F, 00, 00, A3, 04, 37, 42, 00, FF, 15, 44, 70, 40, 00, 53, FF, 15, 88...
 
[+]

Code size:
23.5 KB (24,064 bytes)

The file ace_stream_media_3.1.11.exe has been seen being distributed by the following 17 URLs.

http://free.tv4uhd.com/assets/.../ace.exe

http://www.towndeliveryvault.com/zG6OstHLrA8Rnj0fGXgn wFynbqhE9r6SrzcXMophvKTBDnxVdk4HwpiqX5ADs8iO9grPDTzE7wNNpsXUKUHFBS a9g0Wn0mfGwh6aZSmRSh0f8sez_aON8UdJXEHQkW RErV1Q3oQJhvoVH0ilmiRkJRsCjIzMwA3qW_RPEK64XjY_5wfbXiDpTIhUhJBTVHtx1m7XMXgFKfq9c8O2yQ0pbVxMCX3JUC KmgC1LJTgPppXwXLrFZY ebnRRo14dnlbtW04 Za3waP4HWwwhc8bAWLStU9AXw63JhCJAiSr ksWfiLTu B0WCUjAnhfYO5JpE rwmrkOg6whpUcnxr8tWHomKOLYTlkQFlHfb611gnNeMiVCJK uZEYqoQYxYCuSmAsZKt 2Oul9cciGfgKY2mJkv8NNyb3lBiLZa43s5n4F uf44URqP6pX7J3OxO38j_btzJQLK9l8RBh9ygZkUdsR0FCsIq278 FEX9OxbmQuF EJ2DT6zUrasu1xzSQOQpHyE3sguVJ4GEz0mjDCgaQofoEMPlAVLOGYVl6BSRSOlXQwIh6CjLhKvB_daWYzLxw9Flay9evJJagfmr4KrhOaIOBcM3sc7YFTNtjkw2x2X_lFXpgPpUbeFoLZfINqdY nFCQqZ5ngRRFn2Akis4ZEeHiuBwhE4pDchq3a8smajvyLF7bbAJ1AGAHDyiEwheL-GzkAAATqZDH9X8yGYDMVOOTA4StIIgmDjbGzpJBGeuOrdWSrMKwDBUWl4 cQBA==

http://dl.torrentstream.org/Ace_Stream_Media_3.1.11.exe

http://www.softportal.com/getsoft-31133-ace-stream-1.html

http://torrentstream.net/.../?product=tsplugin&version=latest

http://www.programosy.pl/.../pobierz,ace-stream,2.html

https://docs.google.com/uc?export=download&confirm=vZ5n&id=0B4FwPNg6vegycERpa041c21CQ28

http://livetv.sx/url.php?i=http://dl.acestream.org/products/acestream-full/.../latest

http://dl.acestream.org/products/acestream2-full/.../latest

http://www.alphashow.net/download/products/acestream-full/.../latest

http://dl.torrentstream.org/products/torrentstream-full/.../latest

http://livetv.sx/url.php?i=http://dl.acestream.org/products/acestream-vlc-1.1.12/.../latest

https://doc-10-9s-docs.googleusercontent.com/docs/securesc/2bja8rkbl2ro6mq1e714k4s0jnfq0rnq/6s03allkvssrvu7g80650k2349m5m5ac/1478030400000/01268822460955831850/.../0B7veJphUXNmBeXNKYUZqdnExUFE?e=download

http://dl.acestream.org/products/acestream-vlc-1.1.12/.../latest

https://download.mozilla.org/?product=firefox-stub&os=win&lang=ru

http://dl.acestream.org/Ace_Stream_Media_3.1.11.exe

http://dl.acestream.org/products/acestream-full/.../latest

The executing file has been seen to make the following network communications in live environments.

TCP (HTTP):
Connects to static.164.41.251.148.clients.your-server.de  (148.251.41.164:80)

TCP (HTTP):
Connects to static.165.41.251.148.clients.your-server.de  (148.251.41.165:80)

TCP (HTTP):
Connects to static.163.41.251.148.clients.your-server.de  (148.251.41.163:80)

Remove ace_stream_media_3.1.11.exe - Powered by Reason Core Security