converterlite-1611.exe

Bunuda

The application converterlite-1611.exe, “Bunuda Setup ” has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the Inno Setup installer, however the file is not signed with an authenticode signature from a trusted source. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions.
Product:
Bunuda

Description:
Bunuda Setup

Version:
1.1.5.2

MD5:
1e4822762c8a2b297b64aa3b4aa709cf

SHA-1:
f061589f120691e737086b2a01542c5d4c1a38d8

SHA-256:
d4fdf343c28e47e456b3eb3d89021bc0de6dbb0185b2d48aac862df5af04dfe2

Scanner detections:
1 / 68

Status:
Potentially unwanted

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Analysis date:
12/27/2024 7:57:22 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCore.RE11 (M)
16.5.19.16

File size:
943.8 KB (966,470 bytes)

Product version:
3.0.9

Copyright:
Internet Fast

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\converterlite-1611.exe

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:8iyj9YsuZBREotGGpMQ0k+Zj8z05CDt8cWZ2nN6P7VpP:hcys0B9GGpMQ1z05oXAPhpP

Entry address:
0xA5F8

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, CE, 8A, FF, FF, E8, D5, 9C, FF, FF, E8, 64, 9F, FF, FF, E8, 07, A0, FF, FF, E8, A6, BF, FF, FF, E8, 11, E9, FF, FF, E8, 78, EA, FF, FF, 33, C0, 55, 68, C9, AC, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 92, AC, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 26, F5, FF, FF, E8, 11, F1, FF, FF, 80, 3D, 34, B2, 40, 00, 00, 74, 0C, E8, 23, F6, FF, FF, 33, C0, E8, C4, 97, FF, FF, 8D, 55, F0, 33, C0, E8, B6, C5, FF, FF, 8B, 55...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
39.5 KB (40,448 bytes)

The file converterlite-1611.exe has been seen being distributed by the following 50 URLs.

http://www.packagerepositorypackage.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

http://www.packagerepositorypackage.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

http://www.packagerepositorypackage.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

http://www.packagerepositorypackage.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

http://www.packagerepositorypackage.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

http://www.packagerepositorypackage.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

http://www.packagerepositorypackage.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

http://www.packagerepositorypackage.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

http://www.packagerepositorypackage.com/WVl6OTRQVFEwZURoa1pGTnFlRzl4Y3pkVVpHczBVVmQyZGpZMVVGSm9PWGMwV1hCNWJFcGlhWE5XY25KVU1EQWxNMFFtWXoxelFWQlJZVVkyU1RnM2JFeHBhbVkwUlhWV05sQlhTa1JMZUU1WVF6RXpVVmg2UTJWclVsUnFUVEZtVW0welZ6azVVRnBCSlRKR1ZrSndWWGN6UzJ0UmFqQjNjVXhCVlhCaFRXZGtaRzVHYURJM1pYUTVWbXRPY0NVeVFuZEtTVTFKUTJsMGNuWktObFJtUkhjd1EwMTViRTVqT0hGc05sUTVNWEkxY1VwS1JFRWxNa1lsTWtaSEptUnZkMjVzYjJGa1FYTTlRMjl1ZG1WeWRHVnlUR2wwWlMweE5qRXhMbVY0WlNabVlXeHNZbUZqYTE5MWNtdzlhSFIwY0NVelFTVXlSaVV5Um1SdmQyNXNiMkZrTG1OdmJuWmxjblJsY214cGRHVXVZMjl0SlRKR2MyVjBkWEF0WTI5dWRtVnlkR1Z5YkdsMFpTMHhMall1TVRFdU1DMXphV3hsYm5RdVpYaGw=

http://www.packagerepositorypackage.com/WVl6OTRQVEF6UkhZbE1rSnBiRll3ZFdwUGNHSnNiMjV1YTNnNU9HNXFNbm8xT0VGcFRFTjVaRXhQYlZKdkpUSkNVbVpqSlRORUptTTlWSEZvZDNSb01tWlNaaVV5Um1kdU5tdHZORXhHUVc1WmFVNDVXWFowUm5kTldWWm1PRVpqZFV3bE1rSWxNa1pTYUU5Q1dIQkpNelpNUW5KelpITm5VWEJTWnpoNVpsZFRORWhtYTJsU1JHbEhhRnBhSlRKQ1lTVXlRbGxCWm0xMlVYaGpjMnhsUjA4eE0yOVhNRTF0YlU1bGJqRkxPRnBrVWpKME1sVkpaMlprVVhZd1ZESktiRGhoSm1SdmQyNXNiMkZrUVhNOVEyOXVkbVZ5ZEdWeVRHbDBaUzB4TmpFeExtVjRaU1ptWVd4c1ltRmphMTkxY213OWFIUjBjQ1V6UVNVeVJpVXlSbVJ2ZDI1c2IyRmtMbU52Ym5abGNuUmxjbXhwZEdVdVkyOXRKVEpHYzJWMGRYQXRZMjl1ZG1WeWRHVnliR2wwWlMweExqWXVNVEV1TUMxemFXeGxiblF1WlhobA==

http://www.packagerepositorypackage.com/c?x=uMSi0yDyuG6lt0zESVVWji3mSkWwXWqUJY2BTAhQPBM=&c=pqXu8zs0CAHFB5MJb0ZxdXpsWrzXM7yhFhXkxv4P7g6qY/xqaN3A2H/v/WyABuWAdypo6tJmKv9Yogok1ZoImFIgNj4ift5LFm8LDDWMgFE59t4Veewz13uceqiDV5ssb7aT5UrPWpULwi8e67uWp3wZ5nupB5AdBGFzHvx 3Bnn/ha1U6t5Uiz5ucNz1T00&e=0&downloadAs=ConverterLite-1611.exe&fallback_url=http://.../setup-converterlite-1.6.11.0-silent.exe

Latest 30 of 73 download URLs

Remove converterlite-1611.exe - Powered by Reason Core Security