|
Info
|
Matching compiler(s): |
Microsoft Visual C# v7.0 / Basic .NET
|
|
Suspicious
|
Strings found in the binary may indicate undesirable behavior: |
Contains references to system / monitoring tools:
Contains domain names:
- 68.media.tumblr.com
- a.wattpad.com
- account.fishingplanet.com
- ak0.pinimg.com
- amazon.com
- cache-ak0.pinimg.com
- cloudfront.net
- collect2470ntysd.deltadna.net
- collect8982fshng.deltadna.net
- d2ujflorbtfzji.cloudfront.net
- deltadna.net
- digitalOpus.ca
- download.fishingplanet.com
- echo17.com
- engage2470ntysd.deltadna.net
- engage8982fshng.deltadna.net
- exitgamescloud.com
- fishingplanet.com
- http://collect2470ntysd.deltadna.net
- http://collect2470ntysd.deltadna.net/collect/api
- http://collect8982fshng.deltadna.net
- http://collect8982fshng.deltadna.net/collect/api
- http://download.fishingplanet.com
- http://download.fishingplanet.com/patches/
- http://echo17.com
- http://engage2470ntysd.deltadna.net
- http://engage8982fshng.deltadna.net
- http://icons.iconarchive.com
- http://icons.iconarchive.com/icons/emoopo/darktheme-folder/128/Folder-Nature-Leave-icon.png
- http://icons.iconarchive.com/icons/majid-ksa/nature-folder/128/flower-folder-icon.png
- http://ns.exitgamescloud.com
- http://updates.fishingplanet.com
- http://updates.fishingplanet.com/patches/
- http://wiki.teamliquid.net
- http://wiki.teamliquid.net/commons/images/1/18/Crystal_maiden_freezing_field.png
- http://www.deltadna.net
- http://www.deltadna.net/qa/engage
- http://www.fishingplanet.com
- http://www.fishingplanet.com/consoler/lang/
- http://www.telize.com
- http://www.telize.com/geoip
- http://www.thomashourdel.com
- http://www.thomashourdel.com/ssaopro/doc/
- https://68.media.tumblr.com
- https://68.media.tumblr.com/avatar_4b20b991f1fa_128.png
- https://68.media.tumblr.com/avatar_a6abe54fa29b_128.png
- https://a.wattpad.com
- https://a.wattpad.com/useravatar/CorpseDragneel0.128.192903.jpg
- https://a.wattpad.com/useravatar/YasYeas.128.870434.jpg
- https://account.fishingplanet.com
- https://d2ujflorbtfzji.cloudfront.net
- https://d2ujflorbtfzji.cloudfront.net/key-image/691c98df-8e89-491f-b7ac-c7ff5a0c441e.png
- https://images-na.ssl-images-amazon.com
- https://images-na.ssl-images-amazon.com/images/I/71L8cVOFuAL._CR204,0,1224,1224_UX128.jpg
- https://images-na.ssl-images-amazon.com/images/I/71QdMdCSz5L._CR204,0,1224,1224_UX128.jpg
- https://s-media-cache-ak0.pinimg.com
- https://s-media-cache-ak0.pinimg.com/236x/cd/de/a2/cddea289ff95c409ce414983f02847b6.jpg
- https://steamcommunity.com
- https://www.lebanoninapicture.com
- https://www.lebanoninapicture.com/Prv/Images/Pages/Page_92120/meditation-nature-peace-lebanesemountains-livel-2-22-2017-12-19-17-am-t.jpg
- https://www.lebanoninapicture.com/Prv/Images/Pages/Page_96905/purple-flower-green-plants-nature-naturecolors--2-28-2017-4-06-40-pm-t.jpg
- iconarchive.com
- icons.iconarchive.com
- images-amazon.com
- images-na.ssl-images-amazon.com
- lebanoninapicture.com
- media-cache-ak0.pinimg.com
- media.tumblr.com
- na.ssl-images-amazon.com
- ns.exitgamescloud.com
- pinimg.com
- s-media-cache-ak0.pinimg.com
- ssl-images-amazon.com
- steamcommunity.com
- teamliquid.net
- telize.com
- thomashourdel.com
- tumblr.com
- updates.fishingplanet.com
- wattpad.com
- wiki.teamliquid.net
- www.deltadna.net
- www.fishingplanet.com
- www.lebanoninapicture.com
- www.telize.com
- www.thomashourdel.com
- xbtest.fishingplanet.com
|
|
Info
|
Cryptographic algorithms detected in the binary: |
Uses constants related to CRC32
|
|
Suspicious
|
The PE is possibly packed. |
The PE only has 1 import(s).
|
|
Safe
|
VirusTotal score: 0/70 (Scanned on 2022-12-16 16:47:18) |
All the AVs think this file is safe.
|