home

vzlomator-pravilavoyni.exe

PARTNER SOLUTIONS

The application vzlomator-pravilavoyni.exe by PARTNER SOLUTIONS has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. This is a setup program which is used to install the application. The file has been seen being downloaded from getfile-prosoft-one.ru.
Publisher:
PARTNER SOLUTIONS  (signed and verified)

MD5:
a9bcb507492d19863f56306d849d5a1d

SHA-1:
b2d97ce019fe85b14876f6e85c7563292b9e40bf

SHA-256:
0c61f9599fb4571a2d89d67baa67960d470635ba3901ae8723bdef180493c48a

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
11/15/2024 1:42:47 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.Somoto.PARTNERSOLUTIONS (M)
16.3.1.2

File size:
1 MB (1,073,696 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\vzlomator-pravilavoyni.exe

Digital Signature
Signed by:
PARTNER SOLUTIONS

Authority:
COMODO CA Limited

Valid from:
9/8/2015 3:00:00 AM

Valid to:
9/8/2016 2:59:59 AM

Subject:
CN="""PARTNER SOLUTIONS"", OOO", O="""PARTNER SOLUTIONS"", OOO", STREET="Carla Faberge, 8-B, office 408", L=Saint-Petersburg, S=Saint-Petersburg, PostalCode=195112, C=RU

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
0080369869C233B6CEAE812635F74AEA4B

File PE Metadata
Compilation timestamp:
6/20/1992 1:22:17 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
5.0

CTPH (ssdeep):
24576:GdJc/B54ae5D9TqsLnJ3AzYIwswURi8VGrpJW:A5hbDLnJwzYIw9e0pM

Entry address:
0x65D80

Entry point:
89, FF, 90, 90, BE, 04, 00, 00, 00, 90, 8D, 05, CC, DF, 46, 00, C7, 00, 34, 67, 34, 68, 03, C0, 03, C0, 90, E8, 30, B3, F9, FF, 4E, 75, E6, 90, EB, 08, 90, 22, 75, 05, 90, 90, 90, 90, 68, 0C, 5E, 46, 00, E9, 61, BE, 04, 00, F9, F6, C2, A9, F7, D8, F5, 0F, C8, E9, 8F, BE, 06, 00, 66, 89, 44, 25, 04, 66, 0F, BE, C6, 0F, BF, C6, 9C, 02, C1, 66, D3, E8, 8F, 44, 25, 00, 14, B5, F9, 8B, 06, 66, 3B, DE, F6, C7, 0F, 8D, B6, 04, 00, 00, 00, 85, F7, 33, C3, E9, 87, 38, 07, 00, FE, C8, F8, D0, C0, F6, D8, E9, 15, 22...
 
[+]

Code size:
952.5 KB (975,360 bytes)

The file vzlomator-pravilavoyni.exe has been seen being distributed by the following URL.

http://getfile-prosoft-one.ru/archive.php?site=ig&file=vzlomator-pravilavoyni&dfile=first-cheats-engine02&dzfile=ru&per=one

Remove vzlomator-pravilavoyni.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.