» Cube-World.exe
Overview
Analysis
File Details
Downloads (1)

Cube-World.exe

Hukur

SpeedySetup (Alpha Criteria Ltd.)

The application Cube-World.exe, “Hukur Setup ” by SpeedySetup (Alpha Criteria) has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions. The file has been seen being downloaded from www.bundlessendquick.com.

File name:

Cube-World.exe

Publisher:

SpeedySetup (Alpha Criteria Ltd.) (signed and verified)

Product:

Hukur

Description:

Hukur Setup

MD5:

513904ff9faf06250039fa2257941c16

SHA-1:

f713b3381e7d4901eaf44a08ec2c3dda2a9ca50c

SHA-256:

f50e9cb14119c2375cefa2f397f1451bb3c7b73c369d528c63f76cd94a1758af

Scanner detections:

1 / 68

Status:

Adware

Explanation:

Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Description:

This 'download manager' is also considered bundleware, a utility designed to download software (possibly legitimate or opensource) and bundle it with a number of optional offers including ad-supported utilities, toolbars, shopping comparison tools and browser extensions.

Analysis date:

12/28/2024 2:06:11 AM UTC (today)

Scan engine

Detection

Engine version

Reason Heuristics

PUP.InstallCore.AC (M)

16.8.6.13

File size:

1022.9 KB (1,047,496 bytes)

Product version:

1.4.1

Program

File type:

Executable application (Win32 EXE)

Bundler/Installer:

installCore (using Inno Setup)

Common path:

C:\users\{user}\appdata\local\microsoft\windows\inetcache\ie\{random}\cube-world.exe

Digital Signature

Signed by:

SpeedySetup (Alpha Criteria Ltd.)

Authority:

GlobalSign nv-sa

Valid from:

1/6/2016 4:43:41 PM

Valid to:

8/20/2016 5:07:00 PM

Subject:

CN=SpeedySetup (Alpha Criteria Ltd.), O=SpeedySetup (Alpha Criteria Ltd.), L=Tel Aviv, C=IL

Issuer:

CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:

11216B7B9B1E7ABF6047433BDBCDE9234400

File PE Metadata

Compilation timestamp:

6/20/1992 12:22:17 AM

OS version:

1.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

24576:Fa1lP0Hq9f51nrrAH9FC5RxA+Zk85wKFWJ2wmpMxs0mUCy:Faz1Bt3AdclZbVMeL0

Entry address:

0xAA98

Entry point:

55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 2E, 86, FF, FF, E8, 35, 98, FF, FF, E8, 9C, 9B, FF, FF, E8, B7, 9F, FF, FF, E8, 56, BF, FF, FF, E8, ED, E8, FF, FF, E8, 54, EA, FF, FF, 33, C0, 55, 68, 69, B1, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 32, B1, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, D0, 40, 00, E8, 26, F5, FF, FF, E8, 11, F1, FF, FF, 80, 3D, 34, C2, 40, 00, 00, 74, 0C, E8, 23, F6, FF, FF, 33, C0, E8, 24, 93, FF, FF, 8D, 55, F0, 33, C0, E8, 66, C5, FF, FF, 8B, 55... 
[+]

Packer / compiler:

Inno Setup v5.x - Installer Maker

Code size:

40.5 KB (41,472 bytes)

The file Cube-World.exe has been seen being distributed by the following URL.

http://www.bundlessendquick.com/rhjE9GEii5u64EGP0GZlBi6nAkJMRT dz7yUIGreQ59xa OwR4uxEMBnqjzFcCeKjR9bG9_mhwUi3VqmXScBj5rIZq RODOwiNjomyTiq3 KDQpLT2AEvbnPzN2uAoFPFDd3mp24oWL0smvHRRMiMEbbVtkDIu5QSjk_UQgrLGr6pkhvp5wUZ5QFZ5XMqgB9hnIVZxORzOnQZBrLgDfpYpQBG_WYelHeQyjW1g2pLllHqICl_JnJBXfDYDT5 ssrfqDi2UGfqPfJy0 8rnwxuQp0MlTHiXBA0nk3PzmhVO92ubFObUgU8YNslANc113L9o5ybcugeXd maleEw5 wqlSzR8g9uMlaJeMq65228jS j45oQJvoDSFoI9SRLqIhrlRJicDbsETBCslEGOPZGAFWef7iwEDMq_34ivZqswGcMRe5iekly3b4VxP9fMY1r0MA7dJLiZVTCXydmY18LLhRKt3boYD1phbWcZi7XnsNkb8 IOmpRJOm4nEJNqHEYGPhmhKogfTOuO5mVSk02CmWqZ503QiYS_7bAM9QTbw_ICB8RhjuGSEf10ZIvkzYQSgGD7-Gy8AAEQ3F5NaDM0S7OJMguB_ODjkgA o30oCtxrbPFBubECFTYU4ekxdsRcgn 1kfAA=

Remove Cube-World.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.