home

fishing-planet-v0.2.22-2015-engrus-4828.torrent.exe

Astonsoft DeepBurner

TOV

The application fishing-planet-v0.2.22-2015-engrus-4828.torrent.exe by TOV has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. This is a setup program which is used to install the application. The file has been seen being downloaded from s51d.storage.yandex.net.
Publisher:
Astonsoft  (signed by TOV )

Product:
Astonsoft DeepBurner

Version:
1.9.0.228

MD5:
aafea619249134f9182280976c7d57ff

SHA-1:
e10fb7a90fed9ff8b34bdf41446518764392c27d

SHA-256:
b6ced5091b1f8f18fec89cdba621fe9b937365fac98f48a01e4967e20fd5e890

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
12/27/2024 4:59:45 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallMonster
17.2.15.8

File size:
3.1 MB (3,234,400 bytes)

Product version:
1.8

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\fishing-planet-v0.2.22-2015-engrus-4828.torrent.exe

Digital Signature
Signed by:
TOV

Authority:
COMODO CA Limited

Valid from:
10/18/2016 3:00:00 AM

Valid to:
6/7/2017 2:59:59 AM

Subject:
CN="TOV ""Smart PIPL""", OU=IT, O="TOV ""Smart PIPL""", STREET="vul. Zolotoustivska, 30", L=Kiev, S=Kiev, PostalCode=01054, C=UA

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00CB9F84F0BE4D752CCD2D047E2BB5500E

File PE Metadata
Compilation timestamp:
7/6/2009 3:15:29 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
7.0

Entry address:
0x7505D4

Entry point:
56, 6A, 30, BE, FE, FC, 2F, 02, 33, C0, 03, 44, 24, FC, 4F, 75, F9, FF, 15, 64, E1, B4, 00, BA, FF, 0F, B5, 00, 42, FF, E2, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, BF, FD, 03, B5, 00, 81, C7, 12, 0C, 00, 00, 57, C3, EB, F1, 6A, 00, 58, 83, C0, 01, 33, DB, 8B, 88, 93, E1, B4, 00, 0F, B6, 09, 80, E9, B1, 83, E9, 07, 3B, CB, 75, 20, FF, 15, B0, E3, B4, 00, 6A, 64, FF, 15, 00, E4, B4, 00, FF, 15, 64, E1, B4, 00, FF, 15, 64, E1, B4, 00, 8B, FF, EB, E2, 09, E4, E9, A0, 08, 00, 00, CA, 9A, 64, 89, 22...
 
[+]

Code size:
650.5 KB (666,112 bytes)

The file fishing-planet-v0.2.22-2015-engrus-4828.torrent.exe has been seen being distributed by the following URL.

https://s51d.storage.yandex.net/rdisk/60797208187a6b6903f4104549a66f9826a37637050fe8b08ef8ade742ea1051/583317af/75gHDkkGiP7JzxcXvqo1MVYttUug4QfXgSJoIj9oSLrFL9Ipo-Sp26I2ucjlLXqJ0FdY-GAXDcRaMzq9Sakv7A==?uid=312266706&filename=Fishing-Planet-v0.2.22-2015-ENGRUS-4828.torrent.exe&disposition=attachment&hash=&limit=0&content_type=application/x-msdownload&fsize=3234400&hid=ec31c7e4bfa916659fabb53ac7e5e7ca&media_type=executable&tknv=v2&etag=aafea619249134f9182280976c7d57ff&rtoken=ifyN8UJ29PKL&force_default=yes&ycrid=na-3bf40b2937adfd6231c0fd33862164ae-downloader1g&ts=541d19c2209c0&s=25b923b9eaf543af410cafde73a8f0f522b1365e96d5a27c61d24713fe034a8a&bp=/20/.../data-0.24:22600490458:3234400&pb=U2FsdGVkX1_auv6hBbpkdpZlzaa1UKBNssTs_AitlJZGP27gCXkPJ_KRnR-remO0wuBnRtu3SaNkLYgKdZVIqo2jpxUGpVVD6GjV3RU7DG4=

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.