home

plants-vs.-zombies-garden-warfare-full-version.exe

Hopogeru

Destiny Dream S.A.

The installer utilizes the installCore download manager which may bundle additional offers for various ad-supported toolbars, extensions and utilities. The application plants-vs.-zombies-garden-warfare-full-version.exe, “Hopogeru Setup ” by Destiny Dream S.A has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The file has been seen being downloaded from www.presentcenterclean.com and multiple other hosts.
Publisher:
Nedak   (signed by Destiny Dream S.A.)

Product:
Hopogeru

Description:
Hopogeru Setup

Version:
4.7.5.3

MD5:
4b3640afc6d1b9c6283ebaf9d7f0d8f9

SHA-1:
f45e8a2a3915cb9fc7d3c0ce7da7736ee966a322

SHA-256:
8bb166ca5fc135333cb83ebf7fb59427f5011a7a777a5192e581b90770594579

Scanner detections:
1 / 68

Status:
Adware

Note:
Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Description:
This is also known as bundleware, or downloadware, which is an downloader designed to simply deliver ad-supported offers in the setup routine of an otherwise legitimate software.

Analysis date:
11/15/2024 2:42:49 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.installCore.DestinyD.Installer (M)
16.3.20.17

File size:
1 MB (1,076,112 bytes)

Product version:
4.5

Copyright:
Lite

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Common path:
C:\users\{user}\downloads\plants-vs.-zombies-garden-warfare-full-version.exe

Digital Signature
Signed by:
Destiny Dream S.A.

Authority:
GlobalSign nv-sa

Valid from:
12/17/2015 1:55:11 PM

Valid to:
10/2/2016 3:36:18 PM

Subject:
CN=Destiny Dream S.A., O=Destiny Dream S.A., L=Clarens, S=Vaud, C=CH

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
11217A75EB912AE2167326222C18D9E2357F

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:cNNS9iiH//VgVWKXL3q4cWN89yEqUvA9Ja8C:cXSoif6VWKUWN89b49M8C

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, BF, A9, FF, FF, E8, 5E, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, 24, CE, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, 24, CE...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file plants-vs.-zombies-garden-warfare-full-version.exe has been seen being distributed by the following 9 URLs.

http://www.presentcenterclean.com/c?x=yDfrA5VsJtqR5YvXORKittNrPT1Z7AdBOsQg4N4OdGU=&c=CCwjkr26Vol42YzUTIMSx3L97YtoYykRADT6OrauaBpS DFBgylisdcptXm196mLb T3ygrCPNkFS6I4oY/yf8E6vFvQaFmGeNX1heRXAPHf5xPcgvmi6cwCsCUPDZhBvzLd9GUKW37X 4qXqDqdjw==&e=0&downloadAs=plants-vs.-zombies-garden-warfare-full-version.exe&fallback_url=http://.../#buy

http://www.presentcenterclean.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

http://www.vaultsheadcentral.com/c?x=i/kST7U65RpCXJqpVfZ2d35N7C4mouX r8JPybiIKmY=&c=qDYVTwxegCwklEdZ1aV7df8X8bhybcdKIAZdiypx5eOA6RtmqzXbnf5hmRQOUMUUJQk 4ng0Xds3gS55Dx9a203aRIcWizR INb8XzIo15EiLvWNInp3z DYjj2LSWJh8CittJO/v2UlenrqaORHv1Ck3QFK1R3EhQzm3bfLMctERDkUZN2pwYKt45XHfR x&e=0&downloadAs=plants-vs.-zombies-garden-warfare-full-version.exe&fallback_url=http://.../#buy

http://www.presentcenterclean.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

http://www.presentcenterclean.com/c?x=uUCMCFFigquscxLFQJd4AdJbpqMkpdTNNrBjzTUkZYU=&c=mzm8V9k66N2GELlGkysp 3thkZBYOfwIr8/TkLOI3MFGrpwvj6suz7ujlRzONDIxBUcYyZjTt5cOcCWvogT/lNoQiVXRLu5xrESdeqSneZesJpOc0S2PbfDiocSBykmFLp9F4DEAmSkEHWmimzvA2BbHQsBzdyb8WfpZRWkZh8mYBbPHZCW15BlEmHLlCLkt&e=0&downloadAs=plants-vs.-zombies-garden-warfare-full-version.exe&fallback_url=http://.../#buy

http://www.vaultsheadcentral.com/c?x=nFC /N45 Xpx/uce6SE7 JH7k7JDr8rKQN21CP192BQ=&c=zVgis0poni7Pc98ZZSyFjYU554B2OAEUVro2d26gzrSZueNZlk7BFaFofa9ZTnvr7TKKSvgZtK6sFOTXX7aZ41UGa9Vm78Lfn4niIOA7kjwC4Xrj3DuQLmMYiU18R6/oc5pyj9o3IkYoaeuTR1/ufw==&e=0&downloadAs=plants-vs.-zombies-garden-warfare-full-version.exe&fallback_url=http://.../#buy

http://www.presentcenterclean.com/c?x=KJXo4tgmcHVLs0RQLdRqewAaYvBwoBCMsxCCvFcjzQE=&c=KAFHP3bb7JxI5I4oaC0eh1wnI7Gi Dc530P p0oUyCKy5REwK5ILybWPnOUD27CVqmdUUC/Eu U1xoavFg9gAdzPCiNIFomE5tPTRYsoYXXycYV FR2zUTfdq5s4DEPBXQrFgTmjFbUo/p8hQ4BEl5wIG97SUrBdR6k7tUZxyrw=&e=0&downloadAs=plants-vs.-zombies-garden-warfare-full-version.exe&fallback_url=http://.../#buy

http://www.vaultsheadcentral.com/c?x=33i04fmDi7le8zYmcMtU3J4MfIdHG/257J2RfJyObKA=&c=8lIRuWTtU/8kXts5D93iXbuqaLpMj4Cl8JmPNZSKQZlSOeuigqQCifjBFOTemnAh HcwqXYi7/4MTjCrNe5karkbQ7s0j1p5ib3RRvl8nvtYxq0heDTWrPGazAzPXuUf8D7J6fmiGIELxuyZj4pNj2FlTGT8HBq mUviRL9OdruIhonVk329G3pA4A80z2YS&e=0&downloadAs=plants-vs.-zombies-garden-warfare-full-version.exe&fallback_url=http://.../#buy

http://www.vaultsheadcentral.com/c?x=aOxcgdc/DlpRB2mlkiE0O8fUNMWWihXEEVqriRoF7dQ=&c=S6wH5phcSPUCkT1EnA5y3MpGPzak r1MmRl1k6hvBFlvCniC66RW5P4DdTSLMF3QCPOAEhUYxbjcSDJM/o0bkQm2B1FUZoyCM0YSSawbc/Zo/IL7RlVtIzkXAhyyivCGsxm0Kx7Gm8lKws8Fxnbhkwf5/s7wXFvALO6rabgy2JY=&e=0&downloadAs=plants-vs.-zombies-garden-warfare-full-version.exe&fallback_url=http://.../#buy

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.