home

minecraft---pocket-edition-0.13.1.exe

Prog Application

Destiny Dream S.A.

The file minecraft---pocket-edition-0.13.1.exe, “Prog Application Setup ” by Destiny Dream S.A has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The file has been seen being downloaded from www.headappsheart.com.
Publisher:
Internet Installer application   (signed by Destiny Dream S.A.)

Product:
Prog Application

Description:
Prog Application Setup

MD5:
065385f7b67e2da8435fe1b2bcf645f1

SHA-1:
4483092d275ee26af5a87481b1a209af010ebe21

Scanner detections:
1 / 68

Status:
Adware

Note:
Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Analysis date:
11/5/2024 1:56:48 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.installCore.DestinyDreamSA.Installer (M)
16.1.15.16

File size:
976.3 KB (999,752 bytes)

Product version:
5.1.7

Copyright:
Internet Web generic

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\microsoft\windows\inetcache\ie\{random}\minecraft---pocket-edition-0.13.1.exe.80o3amq.partial

Digital Signature
Signed by:
Destiny Dream S.A.

Authority:
GlobalSign nv-sa

Valid from:
12/17/2015 10:55:11 AM

Valid to:
10/2/2016 10:36:18 AM

Subject:
CN=Destiny Dream S.A., O=Destiny Dream S.A., L=Clarens, S=Vaud, C=CH

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
11217A75EB912AE2167326222C18D9E2357F

The file minecraft---pocket-edition-0.13.1.exe has been seen being distributed by the following URL.

http://www.headappsheart.com/c?x=T2yyRmZYycy4qsIKP6b0Mvo7Qh/rhDzMZ/3CcsbOhRk=&c=mN/gkanL4jz987jsuMK8XNFHtjozXAvoS4V9Uui23njB 7DRs7y59ZPCjtvZ3XBkUUCpWLRqIZGVk05xICz7ahRMsGkDfJ8dmzkHZ6tQ/4iYXA7XJr6juh bck5g1wZs&downloadAs=minecraft---pocket-edition-0.13.1.exe&fallback_url=https://itunes.apple.com/.../id479516143

Remove minecraft---pocket-edition-0.13.1.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.