home

DesuraInstaller.exe

Desura Pty Ltd

The program is a setup application that uses the Nullsoft Scriptable Install System installer. This is installed with Desura.
Publisher:
Desura Pty Ltd  (signed and verified)

MD5:
9270f4332ff25e4c9af51c9fa7ded6c2

SHA-1:
8694863a4fe8989de4e57d249ba23e637dc36cd7

SHA-256:
40c980d762bc1dc1c6085de4c7647f96adb673cc2692c56e9891e2999610f56c

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/25/2024 7:17:05 AM UTC  (today)

File size:
1.2 MB (1,252,424 bytes)

File type:
Executable application (Win32 EXE)

Installer:
Nullsoft Scriptable Install System

Common path:
C:\users\{user}\downloads\desurainstaller.exe

Digital Signature
Signed by:
Desura Pty Ltd

Authority:
VeriSign, Inc.

Valid from:
6/18/2011 8:00:00 PM

Valid to:
6/26/2012 7:59:59 PM

Subject:
CN=Desura Pty Ltd, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Desura Pty Ltd, L=Melbourne, S=Victoria, C=AU

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
2E2D1A577D59A673909570EAB69AAE6F

File PE Metadata
Compilation timestamp:
12/5/2009 5:50:52 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
24576:0ZGi17Jlm7QH3hdwyy4EP28w7+jJzw/XFgEhDB6BBNK7Xx/mlJ5sqia:0VLm7isG7+FENgEW/0Dx/m3Ka

Entry address:
0x30FA

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, 60, 91, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, B0, 70, 40, 00, 53, FF, 15, 7C, 72, 40, 00, 6A, 08, A3, 18, EC, 42, 00, E8, F1, 2B, 00, 00, A3, 64, EB, 42, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, 98, 8F, 42, 00, FF, 15, 58, 71, 40, 00, 68, 54, 91, 40, 00, 68, 60, E3, 42, 00, E8, A4, 28, 00, 00, FF, 15, AC, 70, 40, 00, BF, 00, 40, 43, 00, 50, 57, E8, 92, 28, 00, 00...
 
[+]

Code size:
23.5 KB (24,064 bytes)

The file DesuraInstaller.exe has been discovered within the following program.

Desura  by Desura
Publisher's description - “The aim of Desura is to provide gamers with a dependable interface which delivers the content they want to play in the quickest cross-pc way possible. At its heart is a digital distribution application which can serve (and patch) games, mods and addons to its members.”
www.desura.com/about
About 5% of users remove it
 
Powered by Should I Remove It?

The file DesuraInstaller.exe has been seen being distributed by the following 16 URLs.

&onid=2121&oid=3001-2121_4-75792302&rsid=cbsidownloadcomsite&sl=en&sc=us&topicguid=games/tools-editors&topicbrcrm=&pid=12774907&mfgid=10250149&merid=10250149&ctype=dm&cval=NONE&devicetype=<!--esidesktop&pguid=d53ace92b6960744bf753a1a&viewguid=h34vwfDUYgqWAU3XmvC9fUvZf5zw4ihL@dfe&destUrl=http://files.downloadnow.com/s/software/12/77/49/.../DesuraInstaller.exe

http://i_mp3-es_gta-san-andreas--jurassic-park-operation.firtaporedo.com/crawled_soft/2/2/.../229857-669902-gta-san-andreas-jurassic-park-operation.exe

http://ec.ccm2.net/ccm.net/download/.../DesuraInstaller-1.0.0.53.exe

http://i_mp3-es_no-more-room-in-hell-1-04.fareditrewiry.com/crawled_soft/2/2/.../229090-668525-no-more-room-in-hell.exe

http://gsf-cf.softonic.com/869/486/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3333336&instance=softonic_fr&type=PROGRAM&Expires=1474518916&Signature=iFp6-2B-CALgI44gGF9L4qE4V0TQkNCjWhxfAggWtdLY2YKgDt8Wwz5xxH6U1tSkOUlEvEIW3-1tAL7IkaHv5fKaSQcdAaTZ5ta-vlPht70~ob373Hkl7H-Ng2M9dZUhSGcsxobX37QeCPvCGKXXTB7FpkxefLu~SWQJ1H1b20A_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=DesuraInstaller.exe

http://i_mp3-es_eleusis-1-1.fhoaicoraresk.com/crawled_soft/2/3/.../230457-671309-eleusis.exe

http://i_eazel-com_mount--amp--blade-warband-demo.fareditrewiry.com/crawled_soft/2/3/.../230942-672247-mount-blade-warband.exe

http://i_mp3-es_erie-1-08--desura.fhoaicoraresk.com/crawled_soft/2/2/.../229907-670062-erie.exe

http://downloads.uy-files.rocks/desura/.../DesuraInstaller.exe

http://dw.uptodown.com/dwn/ufXPINhROosoO71BWuplChb3VQFWtk9oOFd2dcGAg-1QzFLHMvNkoPHk2xsYEnacdwP2axTdbm4YdqTMb6-uQDK2f0uBtkTKCpO7iIYfK24BNquzQwDhBBtbPfSp_gom/5teTJnnaNXb1pnu5z3xCXnF6GEYzoa5FdmdMNfBs-0LArGCfjvCvu7tHYnLBHrrIopoyEBiYLzC9ty_pssn1iKDyX9bTC7AAJa-ciGEQDNuHWLxnko7MwfC2Pnht7Xt8/.../

http://pf.vitplatform.com/crawled_soft/.../2/229132-671347-cry-of-fear.exe

http://p_descargar-mp3-es_erie.fareditrewiry.com/crawled_soft/.../2/229907-670062-erie.exe

http://gsf-cf.softonic.com/869/486/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3333336&instance=softonic_en&type=PROGRAM&Expires=1449219376&Signature=TNwejMkLk9HRbg7ujJxWxE23K4IyeOERZJxXi1~vymJxTL0gaPHsTHuWunRkwcwoS2mWpC96ap32lVZbAmqq1DiKNAiCIEndUpcLLVFnqyE9dfpU2AAMxKuXVSk-aaOqSkQfdJeONuCqUUHlFfht~7bKZNYF01O231lwRdBHN3w_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=DesuraInstaller.exe

http://gsf-cf.softonic.com/869/486/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3333336&instance=softonic_en&type=PROGRAM&Expires=1448847229&Signature=JwmuJ--gQ206MFSXr0b4rVFkGiomO8OY1JGq0z24FLVS9o4JvdzAPBwlM03m7CIyzgSatUeY5xr2a-9E6qJfIVy8o9Ep2cjhyIrf7p9KYG8COKSknJc-BR-Ko1~VNkAy1gzq8LMXbhz6xQaildxiE0za9DhKNhl9BMNDZQoQX1I_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=DesuraInstaller.exe

http://i_eazel-com_gta-san-andreas--jurassic-park-operati.fawedixarfores.com/crawled_soft/2/2/.../229857-669902-gta-san-andreas-jurassic-park-operation.exe

http://www.desura.com/DesuraInstaller.exe

Scan DesuraInstaller.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.