» directx 9.0c.exe
Overview
Analysis
File Details
Downloads (9)

directx 9.0c.exe

Rak

Migopeho

The application directx 9.0c.exe, “Rak Setup ” has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the Inno Setup installer, however the file is not signed with an authenticode signature from a trusted source. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions.

File name:

directx 9.0c.exe

Publisher:

Migopeho

Product:

Rak

Description:

Rak Setup

MD5:

69169f9ae09e56bfdd26ece7343c5309

SHA-1:

6a08be19641a861e8700e83eb0e72b2b04dcf6bb

SHA-256:

9668a0240bd58d593f2955f62d0851c38da93e6b29d048d59b188b0f2c55440c

Scanner detections:

1 / 68

Status:

Potentially unwanted

Explanation:

Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Analysis date:

12/26/2024 6:14:23 PM UTC (today)

Scan engine

Detection

Engine version

Reason Heuristics

PUP.InstallCore.RE11 (M)

16.4.13.20

File size:

990.4 KB (1,014,159 bytes)

Product version:

1.1.2

File type:

Executable application (Win32 EXE)

Installer:

Inno Setup

Common path:

C:\users\{user}\downloads\directx 9.0c.exe

File PE Metadata

Compilation timestamp:

6/20/1992 12:22:17 AM

OS version:

1.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

24576:d615G+2R0mHqtlcxbj2NxkxGC/BmtN5K7VQVrB/VHk3ZbPv8v:dYn5Wp2NxvNK8rcZbPv8v

Entry address:

0xA5F8

Entry point:

55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, CE, 8A, FF, FF, E8, D5, 9C, FF, FF, E8, 64, 9F, FF, FF, E8, 07, A0, FF, FF, E8, A6, BF, FF, FF, E8, 11, E9, FF, FF, E8, 78, EA, FF, FF, 33, C0, 55, 68, C9, AC, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 92, AC, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 26, F5, FF, FF, E8, 11, F1, FF, FF, 80, 3D, 34, B2, 40, 00, 00, 74, 0C, E8, 23, F6, FF, FF, 33, C0, E8, C4, 97, FF, FF, 8D, 55, F0, 33, C0, E8, B6, C5, FF, FF, 8B, 55... 
[+]

Packer / compiler:

Inno Setup v5.x - Installer Maker

Code size:

39.5 KB (40,448 bytes)

The file directx 9.0c.exe has been seen being distributed by the following 9 URLs.

http://www.bytesendclear.com/WVl6OTRQV1UxTlRCd2FYQkZTbkpOWmpWV09GcDVOelpvWjJwamFXZ3pKVEpDUVZSSlVTVXlSa2hvTW01MFVHNU5iM0ZaSlRORUptTTlhWFZ6VTAxR1QySWxNa1poUmxOc2VXSkljVVExTjBScE1pVXlSbk40WkdsMk9GTTRjM28zZGpodlkwNVRWbUpSVUZjMVExWnZiVU5zVjJaalZFWm9WV1Y2VmtZbE1rSnFlR3RZVldZMmMwOHhhWEpYYnpBek5XMUhiSFIzU20xeWRXZDBSSHBGV2toUGVYaFlWVlZqVkd4MWFGVlRZMGQ2TjI0MlVrcDRaMHMzTWpSSWVqTXdkSE5HTUV4TFVrZGxVMDB4WTNKT2NsWkNWbWgzSlRORUpUTkVKbVU5TVNabVlXeHNZbUZqYTE5MWNtdzlhSFIwY0NVellTVXlaaVV5Wm1acGJHVnpMV1J2ZDI1c2IyRmtMbkJ2Y21Ga2JtbHJaRzluY25rdWNHd2xNbVpUZEdWeWIzZHVhV3RwU1ZCdmNISmhkMnRwSlRKbVJHOWtZWFJyYVNVeVprUnBjbVZqZEZoREpUSm1aSGgzWldKelpYUjFjQzVsZUdVbVpHOTNibXh2WVdSQmN6MUVhWEpsWTNSWUt6a3VNR011WlhobA==

http://www.bytesendclear.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

http://www.bytesendclear.com/WVl6OTRQVEpITUZkamFuZzRRM1UwSlRKR1VVVjFUMU0yY1Vack9IcGhkbmN6SlRKQ2RHbHFjWGc0YkhCcVlta3hjVGRKSlRORUptTTljekV4UmpKd1ZHZHpOMjVXTTBVNFdsZHFha2hyZFUxS2FHbFFjaVV5UmxKR1dqSTRUblkwWVU0NFZXWlpUa2RKZUVrMU1HMVVPVEV4TlhoTGRsTWxNa0p0YzNKWVZtWlNTa3RQUVd0WFpVNVhNSE54U1RoSE5rOXpRVVF3TjBwS09YUmlkV1Y2V0ROeFVFOHdjM01sTWtKR1prOTBNRVJpZWlVeVJqQjFWRlJWUWs1Wk4xUkVTMkpWY0dWeWNHODBkbFZRVURBMlpXSklPVFphYkhjbE0wUWxNMFFtWlQweEptWmhiR3hpWVdOclgzVnliRDFvZEhSd0pUTmhKVEptSlRKbVptbHNaWE10Wkc5M2JteHZZV1F1Y0c5eVlXUnVhV3RrYjJkeWVTNXdiQ1V5WmxOMFpYSnZkMjVwYTJsSlVHOXdjbUYzYTJrbE1tWkViMlJoZEd0cEpUSm1SR2x5WldOMFdFTWxNbVprZUhkbFluTmxkSFZ3TG1WNFpTWmtiM2R1Ykc5aFpFRnpQVVJwY21WamRGZ3JPUzR3WXk1bGVHVT0=

http://www.towershostingtour.com/c?x=0lk7OtL3z1IWxoI9W3c2dYB/cjYBt9GxMA0aVKyUrtk=&c=jusKetiWO6BBoi10F2F2dMpdAv9 6jJyIP381Td3meLpIJgdLVczzq441jwNYSly7LR sq0JeAsQ6JdYjraOcPQZAYOjrTpSVu41qJ1MntTQnUeWNW9O6eXBl9pclDIsSHzHmn79QtSZYEUcCqh9BUOmFGShjb1nz7H0e6GdTUKV02dLCtX lebt8erlbtvF&e=1&fallback_url=http://files-download.poradnikdogry.pl/SterownikiIPoprawki/Dodatki/.../dxwebsetup.exe&downloadAs=DirectX 9.0c.exe

http://www.bytesendclear.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

http://www.bytesendclear.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

http://www.bytesendclear.com/WVl6OTRQVTFZT0ZjM1dFaHJTV1JoVGpOYVJTVXlRazFOUzNSTU4yZEdTWFpyY0daTVkwWndVRzB6ZFUwNVpVSjVNQ1V6UkNaalBWUkZSR1JYV25CUGJGUjJabWt4SlRKQ1ZISkxKVEpDVFhCVGVFSktSMDUwVTBzbE1rSk1WbWxsWjB4UVlrd2xNa1k0VmpWRVRTVXlSa2RoU3paeWNYRnBibmw0WVhaTmNVaHdUVUZhUVc0bE1rSnRhM2czWjIxWFYyTnlWblJoVURaUmFrcE9kM0pGY1NVeVFtdE1WM1JwVDFNNU5sZERiV05WZFdsb1RuTkhhR3BYUmtad1ZscERkbEZ1ZDFsck5IVjNKVEpHTkhORmJuZGFielFsTWtaMldtdHdReVV5Um1obkpUTkVKVE5FSm1VOU1TWm1ZV3hzWW1GamExOTFjbXc5YUhSMGNDVXpZU1V5WmlVeVptWnBiR1Z6TFdSdmQyNXNiMkZrTG5CdmNtRmtibWxyWkc5bmNua3VjR3dsTW1aVGRHVnliM2R1YVd0cFNWQnZjSEpoZDJ0cEpUSm1SRzlrWVhScmFTVXlaa1JwY21WamRGaERKVEptWkhoM1pXSnpaWFIxY0M1bGVHVW1aRzkzYm14dllXUkJjejFFYVhKbFkzUllLemt1TUdNdVpYaGw=

http://www.signtowntoday.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

http://www.signtowntoday.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

Remove directx 9.0c.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.