CubeSetup3.exe

Cube World

Picroma

The program is a setup application that uses the Inno Setup installer. This is installed with multiple programs including Cube World version 0.0.1. The file has been seen being downloaded from docs.google.com and multiple other hosts.
Publisher:
Picroma

Product:
Cube World

Description:
Cube World Setup

MD5:
bb18810631c3a8ddc7808c554e4ad73d

SHA-1:
046540be95ba4ec1c85c18777eb03588e54cbfcd

SHA-256:
ea02e7d2bbf581371ca90443e729b051f6baf52620cf04c2a1f9557b3f5f1f43

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/25/2024 5:48:24 PM UTC  (today)

File size:
1.5 MB (1,620,442 bytes)

Product version:
0.0.1

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\cubesetup3.exe

File PE Metadata
Compilation timestamp:
6/19/1992 6:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:CQif0paVuOs/7kL8zYXMg0NYssj7RAkYNZyCLzBcPKgARXTKVcLg2rprS1QW/yb8:C9MpaV9anJwGX/LuPlARXT+cB9hWPeU

Entry address:
0xA5F8

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, CE, 8A, FF, FF, E8, D5, 9C, FF, FF, E8, 64, 9F, FF, FF, E8, 07, A0, FF, FF, E8, A6, BF, FF, FF, E8, 11, E9, FF, FF, E8, 78, EA, FF, FF, 33, C0, 55, 68, C9, AC, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 92, AC, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 26, F5, FF, FF, E8, 11, F1, FF, FF, 80, 3D, 34, B2, 40, 00, 00, 74, 0C, E8, 23, F6, FF, FF, 33, C0, E8, C4, 97, FF, FF, 8D, 55, F0, 33, C0, E8, B6, C5, FF, FF, 8B, 55...
 
[+]

Entropy:
7.9913

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
39.5 KB (40,448 bytes)

The file CubeSetup3.exe has been discovered within the following programs.

www.picroma.com
About 8% of users remove it
Niconico Live Encoder  by niwango, inc.
Publisher's description - “Based on XSplit engine SplitmediaLabs, of Ltd, is a high-quality delivery of software useful feature is incorporated into the rich to live is: (smiling Live encoder [NLE abbreviation]) Niconico Live Encoder.”
www.nicovideo.jp
About 2% of users remove it
 
Powered by Should I Remove It?

The file CubeSetup3.exe has been seen being distributed by the following 26 URLs.

https://docs.google.com/uc?authuser=0&id=0BwESxyhqvzltdlpZeWJycGI4Rjg&export=download

http://www.bestfactorydelivery.com/aPTUhUTPG XR4gYbIejmtptR QTJjma0RgfWvk3cfx6YFIEWOUSaoj4EtV2XYyzPrCK2y4oi2XXxD1zbcmMdDSqkgG8EOaf5W4Ff9pOf5o95xPjpLsTqWqH6270QakAEs_8Tb8yEJWrq Zd5vOj9JHbSuy4YpWg1xroSjNl8MIqu2wutToAVKK7U9bhIMdjxdI6CdDVb2viWKNljVijsqiP jlirKQ==-Gy8AAEQ3F5NaDM0S7OJMguB_ODjkgA o30oCtxrbPFBubECFTYU4ekxdsRcgn 1kfAA=

http://www.downloadappsflash.com/udec9gFdmJtTqvdpvKO4Yli77C37cUBINOApXaeYyTdZ12OAvdLvKFMNf4pw_gZa7xxjlPtFiKszvEHbE94tXeOVhQR6Xvj266jboCb37utYWnjiHwG1FU8jlw3ZdjLrOGg335AjireStQPZbFCGWuDBbKBXUQfGfmAN Gj39lPGaZ0WFPwNKlWPO6plzCq_sgPpP1Ox-G1EAAGRwXmtrO4AkZgCwAQcuEQUaDma3lW0fh c5lkBfZNy2vVmKJkvQ q1aSD6Rq7zU 5GJNbSOCzplFuwFA78s_W2og1bGKQ7DSZ7HeQ==

http://www.bestfactorydelivery.com/mVpZNL8b EoFYFW1VZ8pJTaAc5yznFpvUOkrznTfej0E7OILps1ZH7_FiTMmLxjWqyVWhtaqd5TOi gXSbukuIXjobt6elRSTmVI4GlqVDBBCL95wbgmUbjcVimvvnZwlEJDpDKqJWrigaML2ielVT7a57AKx5o_TJg5D4CgPaMaVUzdyVjHbnkBMWcH8BtFK 6g6clgsz1UPLbVMuaGR0Y9bDceNA==-Gy8AAEQ3F5NaDM0S7OJMguB_ODjkgA o30oCtxrbPFBubECFTYU4ekxdsRcgn 1kfAA=

http://down01.waxoo.com/c08b9a80f6a8a0b48526bd71094945f3.exe/cube-world?id_file=4810&expire=1400295398/603/.../exe

http://www.bestfactorydelivery.com/TmbbZqyrZh1 ymX4bfZ lGij2kSOYXcMlFBCKa094hbrTa1eVxkZHXd_bkdyXRCsTuoklT6WlZZAHsETeP6WpsJhpq626EBVtVA9sJ9MIDYf7ASxcLLUdMkxiq3qf20vBGWJsij Ot8YfXBHUIUSzgkw_ShLpvuQWKPpVndcZdzwHyyGcUD9ANhROlXUOQZf_T5cbzcQPLG8nu8qsg yE5Pwrt2E7w==-Gy8AAEQ3F5NaDM0S7OJMguB_ODjkgA o30oCtxrbPFBubECFTYU4ekxdsRcgn 1kfAA=

http://www.laboratoryguardtours.com/4YtuBsfMR97Mmync KlMLGblFMuP3mw7sD4U5gd7oBoTcxOvlMpWcuka3FEf 9IpzPT9jeFOR1vnYeQcYQ2UmMN4RUxzkfFKr4eFVTlplXc2gXWKvc8IbndGEE BvrkCDcuo8HESIlwR6tL6182smQVSfc05xZK7mJIn5hcGobxN VUXqix_IhCYhG0cQfbF vb2sXqq-G1EAAGRgu_d6AKd0AcMGHLhEFGg4mN1Wtn1sz3NdAn2hbp6XciyaKICLK69A8gnt2S4fpwgaueXOjj6gx4I82R k5p6rQCWiBINgJMJgDA==

http://cdn.goodpackagescities.com/c?x=iD0bznzoYDi/rRmrk0hURowvnfI3KNOWSPDz8ut sYE=&c=MD72MPyhrMiAmbJnmVzwjdeLKWvYZArdv1zfKuZ79UiWP/Y MzTG2D34HwS5zStggn8fSfbimHb8ULMfMEMLDQ==&downloadAs=Cube-World.exe&fallback_url=http://softdownload3.com/s4m/.../Cube-World.exe

https://cdn.discordapp.com/attachments/194506639842344960/.../CubeSetup3.exe

http://download616.mediafire.com/5n3cd2zhrktg/.../CubeSetup3.exe

Scan CubeSetup3.exe - Powered by Reason Core Security