home

18 wheels of steel convoy 1.0installer.exe

Kopig

The application 18 wheels of steel convoy 1.0installer.exe, “Kopig Setup ” has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the Inno Setup installer, however the file is not signed with an authenticode signature from a trusted source. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions.
Product:
Kopig

Description:
Kopig Setup

MD5:
d12c7675e49e6e07227b8a0ae845626a

SHA-1:
62a52f97a51f45d8ac77e6ed1e21637f993221a0

SHA-256:
1799e16cb5e873237f8ddef7042f2b661bc3a94ef4d09021920991ddc1bbe83a

Scanner detections:
1 / 68

Status:
Potentially unwanted

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Analysis date:
12/27/2024 1:44:42 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCore.RE11 (M)
16.3.9.12

File size:
1 MB (1,091,211 bytes)

Product version:
3.8.3

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\18 wheels of steel convoy 1.0installer.exe

File PE Metadata
Compilation timestamp:
6/20/1992 2:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:jNXQHOUE8Vy1GTGYDlui0BGtdjNQRLMYjk2co+bQNiCs3qJfTKGY:jNAuUF7lu5+jNQRokFx+bQThep

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, 53, C9, FF, FF, E8, 9A, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, 24, CE, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, 24, CE...
 
[+]

Entropy:
7.9096

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file 18 wheels of steel convoy 1.0installer.exe has been seen being distributed by the following 17 URLs.

http://www.bestcleanshare.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

http://www.bitsguardtoday.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

http://www.bitsguardtoday.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

http://www.bitsguardtoday.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

http://www.bitsguardtoday.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

http://www.bitsguardtoday.com/c?x=u1uELg85K6xmRFo0767 qjVHcQ0po5NF0lWk8whO65E=&c=DD/KtnHKiOCos5cqTVFvuxvPiwPoLt jx755icEyHIpllP1a3c4bLjQRnRJ1j6OX6N5efAr AH7Dqr9O/0m69FG7PN8ouEU/dQhL5Hl/DJpXdOscIqEfd X1/izD81LwirFap rXU4AcDaaOe2HR3oI3Ez6yIlyE38/A93/3e/dUIiuSXA3dw5i4bUwZboS1&e=0&downloadAs=18 Wheels of Steel Convoy 1.0Installer.exe&fallback_url=http://.../18WheelsofSteelConvoy.exe

http://www.bestcleanshare.com/WVl6OTRQVWx4VjFaVWFUWnBUMlpuZDJaWVUwVXpSRmxrZWpSdlIyOU1hMGQ2ZVhJMk1pVXlRalJGTldrM1JrNXNSU1V6UkNaalBVWjNRWGxsUzNKaFNtMTNZbFJQUXpsUlRsaHVSSGd3VVRkVk9EQkRTbmh0ZEcxeGExRnFiak5YZFVoc1FuVm5UR1JRZVRsblpqUkZiRE41Ym5Vd1dtRkhZa3gwWTNWMk5rcHFjVE54VUNVeVJsZEtRV2cyTTNGelEwWkNkMVpQYjI5TVlTVXlSbk55YldzNWIyVjNPREJGTUhwaGFEaDFiaVV5UW5wWkpUSkdWbFJsUlRkb01UaFBZa00xZWxSSFdWQktVMGh2VVcxVVRWUmphVFpuSlRORUpUTkVKbVU5TUNaa2IzZHViRzloWkVGelBURTRLMWRvWldWc2N5dHZaaXRUZEdWbGJDdERiMjUyYjNrck1TNHdTVzV6ZEdGc2JHVnlMbVY0WlNabVlXeHNZbUZqYTE5MWNtdzlhSFIwY0NVelFTVXlSaVV5Um1OdmJuWnZlUzV6WTNOemIyWjBMbU52YlNVeVJqRTRWMmhsWld4emIyWlRkR1ZsYkVOdmJuWnZlUzVsZUdVPQ==

http://www.conceptsgiftrepository.com/c?x=zIoB9VqUmUNIK2QXFluhQ78EOvUofVI4FpOWmakE5ZA=&c=ztro7E gY3k ZvOatJoLgUA7cBZQgIteo2tq5K6Lat7gBKDo6dh/e281B1S7KpsWnRrfGfUhAQu uGDGr4nhRKPgzIHXF6u67gETN0N Vup2WvXpvJXWjJjVgRyuc1tnt6bvIPejN fOyGTdkWoN/dMR1OUpqk5R7sml60n Ddx19GEB8nQl8BrzZBXl3DsE&e=0&downloadAs=18 Wheels of Steel Convoy 1.0Installer.exe&fallback_url=http://.../18WheelsofSteelConvoy.exe

http://www.bestcleanshare.com/c?x=1RF6ZzcvHuOhdTiQxX3Z2iMjaCSztm/WZxq5YrXgxtg=&c=rMWW9Rkl23gw3OmAQs7fQ3bKfqmpDj938zwQTHJlaPym9UM3sORrlqgY YPKZUjA4q2o/Zdk0sCcEqbZKfubzcCuj3i0de2B2CrK4dBHfw5Ezq6Hrd6VrrVr/wNlFGCr02gAFCJO576R6pHC1JIQxPL/qy4kl6aauI0OXFAvBRMPxC5JI1/fq3RWzVPtTkkU&e=0&downloadAs=18 Wheels of Steel Convoy 1.0Installer.exe&fallback_url=http://.../18WheelsofSteelConvoy.exe

http://www.bestcleanshare.com/c?x=vVcB/4mCM8zrobHWm3qQpfSStJcw8MLY91ogLFjAYac=&c=W/JLFzIpJZzKY2bqVk4I31p808CJbtCSMzssTqjKSs1tdh8QU0fKGbnyeDjwfn zk80Jz2eUW4oRGkEKwG9jfpPyDFRAK69rCY9Qrz4wreyHevFihzAFFm32TE5F4or kul0GzV1Y7mPgND77zrcllcLtB6A0zvxkXa7FB tCV9NsWXCHWhTy sRRY3oKtrS&e=0&downloadAs=18 Wheels of Steel Convoy 1.0Installer.exe&fallback_url=http://.../18WheelsofSteelConvoy.exe

http://www.bestcleanshare.com/c?x=dx5UBsLlbvCumCLX1SJcMa3KOqOQ07TdmYAwEYFwnr8=&c=ivnH/yXNA/3aNKSbR01CjTXlnl/IRqyQT3FI/ e3yndtBNDstVYJ4E8J 7l3tLAbKDNyyzMLYkMGHyxa8EC6ZvbiyRswdsfNmiS/16rg0kiGA57tZdCtcJ/WPKps7wBf3xG6VT7ur3ANWvSvsR8iYnX31rCsqlbPe 9fZaPveVPgWNHboZhrzAPgu3ElAWmr&e=0&downloadAs=18 Wheels of Steel Convoy 1.0Installer.exe&fallback_url=http://.../18WheelsofSteelConvoy.exe

http://www.bestcleanshare.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

http://www.bitsguardtoday.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

http://www.bestcleanshare.com/c?x=GKszK3RnWG jIkH7kbdu TQK7iUKS0S/FOgz3Jd9ic8=&c=1O5l31IoWKUnOt in30mYGhbNVgPey/YB9tzlOevYyxRyKeLEZcDW30OKpLsn1J0e2qVDe5I/JUJ3fUT1xudCUhkUN0o4Rvw4Zg/9cJkm1UMlka1k8c3 XMp7b6eZ1rOYKxhdHXzNw6JkXu3lQL9iT0ys8dZZj BsusyB6FfLHBq8Y6URFN0z4Azv4AfqMmI&e=0&downloadAs=18 Wheels of Steel Convoy 1.0Installer.exe&fallback_url=http://.../18WheelsofSteelConvoy.exe

http://www.bestcleanshare.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

http://www.bestcleanshare.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

http://www.bestcleanshare.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

Remove 18 wheels of steel convoy 1.0installer.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.