home

grand_theft_auto_v_by_xatab-2976.torrent.exe

Astonsoft DeepBurner

TOV

The application grand_theft_auto_v_by_xatab-2976.torrent.exe by TOV has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. This is a setup program which is used to install the application. The file has been seen being downloaded from s126f.storage.yandex.net.
Publisher:
Astonsoft  (signed by TOV )

Product:
Astonsoft DeepBurner

Version:
1.9.0.228

MD5:
8a725004a0bfec39b51ad9d854f0615c

SHA-1:
b4e48b012233f40a8b683d3edb0e35b29c51dd54

SHA-256:
68e98916458f50bdb6803daa5eb83039c7a3ad0dc4eb17e7f52c92daf5b1c4b1

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
12/27/2024 5:13:54 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallMonster
17.2.4.2

File size:
3.1 MB (3,234,400 bytes)

Product version:
1.8

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\grand_theft_auto_v_by_xatab-2976.torrent.exe

Digital Signature
Signed by:
TOV

Authority:
COMODO CA Limited

Valid from:
10/18/2016 3:00:00 AM

Valid to:
6/7/2017 2:59:59 AM

Subject:
CN="TOV ""Smart PIPL""", OU=IT, O="TOV ""Smart PIPL""", STREET="vul. Zolotoustivska, 30", L=Kiev, S=Kiev, PostalCode=01054, C=UA

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00CB9F84F0BE4D752CCD2D047E2BB5500E

File PE Metadata
Compilation timestamp:
7/6/2009 3:15:29 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
7.0

Entry address:
0x7505D4

Entry point:
56, 6A, 35, BE, FE, FC, 2F, 02, 33, C0, 03, 44, 24, FC, 4F, 75, F9, FF, 15, 64, E1, B4, 00, BA, FF, 0F, B5, 00, 42, FF, E2, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, BF, FD, 03, B5, 00, 81, C7, 12, 0C, 00, 00, 57, C3, EB, F1, 6A, 00, 58, 83, C0, 01, 33, DB, 8B, 88, 93, E1, B4, 00, 0F, B6, 09, 80, E9, B1, 83, E9, 07, 3B, CB, 75, 20, FF, 15, B0, E3, B4, 00, 6A, 64, FF, 15, 00, E4, B4, 00, FF, 15, 64, E1, B4, 00, FF, 15, 64, E1, B4, 00, 8B, FF, EB, E2, 09, E4, E9, A0, 08, 00, 00, CA, 9A, 64, 89, 22...
 
[+]

Code size:
650.5 KB (666,112 bytes)

The file grand_theft_auto_v_by_xatab-2976.torrent.exe has been seen being distributed by the following URL.

https://s126f.storage.yandex.net/rdisk/70fbab9015463654a13ed61b339011a0a5857d64d8c0f0aaa8fc306fc6f2c856/583351db/75gHDkkGiP7JzxcXvqo1MfQmH8nT5Ar8LwXFzFIiSUvO0zP20Jy-oST9YlTkLg02NsVjqwMNHWQ1__gtzxulgA==?uid=312266602&filename=Grand_Theft_Auto_V_by_xatab-2976.torrent.exe&disposition=attachment&hash=&limit=0&content_type=application/x-msdownload&fsize=3234400&hid=9cc910bceea255b2f1b20da6a906c494&media_type=executable&tknv=v2&etag=8a725004a0bfec39b51ad9d854f0615c&rtoken=QRulErlIoc7q&force_default=yes&ycrid=na-cb9f82bce7d72ce813eb4f38c62aa086-downloader9g&ts=541d513c3ecc0&s=039fa66f0a566f668e412bbb24112468d9480adb175280a632f746440d403940&bp=/30/.../data-0.10:8863882653:3234400&pb=U2FsdGVkX1_flmIIzjmMeXcMvAapbBfK0Y9WKV13ySkoJu5A20QF1plLXUCipMN4taX2n48UMdqD7Dnlf3WGAHvjCVbsV_lkJZfeDWQz6KM=

Remove grand_theft_auto_v_by_xatab-2976.torrent.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.