MTGAInstaller.exe

jsalmans — Tue, 23 Jan 2018 23:21:52 GMT

I am not the creator of this file, nor am I affiliated with the creators. We had a user on our network report that this file was blocked and so I investigated on our firewall. The firewall is reporting "Virus/Win32.WGeneric.pjeib" and VirusTotal is reporting "generic.ml" for Palo Alto.

File Hash: 8d7c493fd2a51f2cc2bf212e4cd39130d305cb3d758962c322b54bad2052b1cc

Link to Virustotal report for the file: https://www.virustotal.com/#/file/8d7c493fd2a51f2cc2bf212e4cd39130d305cb3d758962c322b54bad2052b1cc/detection

Current VirustTotal Verdict: 5/65

Description: I haven't downloaded this myself but the user is reporting it is an installer for an alpha test and it looks like it is from a gaming site.

Re: MTGAInstaller.exe

mivaldi — Wed, 24 Jan 2018 22:10:11 GMT

Thank you. The sample was submitted for FP analysis.

Re: MTGAInstaller.exe

mivaldi — Thu, 25 Jan 2018 18:24:46 GMT

The verdict has been updated to grayware and the associated signature has been disabled.

The reason for the grayware verdict is that the sample downloads an unverified .msi package.

topic Re: MTGAInstaller.exe in VirusTotal

MTGAInstaller.exe

Re: MTGAInstaller.exe

Re: MTGAInstaller.exe