home

dmge-latest.exe

DMG Extractor

Reincubate Ltd

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from www.tamindir.com and multiple other hosts.
Publisher:
Reincubate Ltd  (signed and verified)

Product:
DMG Extractor

Description:
DMG Extractor installer

Version:
1.3.15.0

MD5:
c5633cab85eefde7099d91b70303e8bf

SHA-1:
ba7f15f126a9e6d69ea442e40984b25efbc7c935

SHA-256:
12b6584872695f227509bb49807c2ce99ef087cf6455b0507630db688cc925d9

Scanner detections:
2 / 68

Status:
Clean  (2 probable false positive detections)

Explanation:
These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:
11/5/2024 3:36:07 PM UTC  (today)

Scan engine
Detection
Engine version

Clam AntiVirus
Win.Adware.Domaiq-130
0.98/21411

IKARUS anti.virus
Trojan.Win32.Badur
t3scan.1.6.1.0

File size:
3.3 MB (3,454,320 bytes)

Product version:
1.3.15.0

Copyright:
Copyright (c) Reincubate Ltd

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\dmge-latest.exe

Digital Signature
Signed by:
Reincubate Ltd

Authority:
VeriSign, Inc.

Valid from:
4/24/2014 1:00:00 AM

Valid to:
6/23/2016 12:59:59 AM

Subject:
CN=Reincubate Ltd, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Reincubate Ltd, L=London, S=London, C=GB

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
626DBE65C8A3CD1B464DB33676FDCCA1

File PE Metadata
Compilation timestamp:
12/5/2009 10:50:58 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
98304:6a0Z4EwRm13908Sx3QJGzJyd3KaFGYgrcfukTHPawkEA:xRRou3QUzJeDu4FTHPayA

Entry address:
0x325E

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, 30, 91, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, B4, 70, 40, 00, 53, FF, 15, 7C, 72, 40, 00, 6A, 08, A3, 58, EC, 42, 00, E8, 09, 2C, 00, 00, A3, A4, EB, 42, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, C0, 8F, 42, 00, FF, 15, 58, 71, 40, 00, 68, B8, 91, 40, 00, 68, A0, E3, 42, 00, E8, BC, 28, 00, 00, FF, 15, B0, 70, 40, 00, BF, 00, 40, 43, 00, 50, 57, E8, AA, 28, 00, 00...
 
[+]

Entropy:
7.9882

Packer / compiler:
Nullsoft install system v2.x

Code size:
23.5 KB (24,064 bytes)

The file dmge-latest.exe has been seen being distributed by the following 23 URLs.

http://www.tamindir.com/indir/MjAxNy0wMS0xMyAwMjowNDowMw==/dmg-extractor/windows/.../

https://www.netzwelt.de/.../30751_2-dmg-extractor.html?sig=de49f49ea50c27bb5b35ea03fd71332b

http://s7764.chomikuj.pl/File.aspx?e=ocMKdB1oF4SkIbQT6_SdhWc9BzCDrfaWfokMaEwWwhNvL3lP5Epu_hTz_PW5CkeSwXD6P4a30GmaUMdLPf_xbtvp0IOCxyF-xvuH-T62WCYrZf7Sjo7UGTdh0zrxleSLm8leTD3E-mcPBq8u5YA9Aw&pv=2

http://www.tamindir.com/indir/MjAxNi0xMi0zMCAxODo1NjowMQ==/dmg-extractor/windows/.../

http://s7764.chomikuj.pl/File.aspx?e=ocMKdB1oF4SkIbQT6_Sdhb_eu33f7OzqdDfchHvWWRojfq0hPGgUYTpCZMmT_3jMEiS-4W5kWu9elcH4NJpWuvSM-6CuPtQwGjvEhQl40rxSrI-5mY4PgjYyU0qOaKQQ5xBEkWYC744As5wnoMYtUw&pv=2

https://www.google.com/url?hl=es-419&q=http://mandrillapp.com/track/click/.../www.reincubate.com?p=eyJzIjoieEdTcERDZ0Z4WGs0cncxQm0yMjhpQmtNUUdvIiwidiI6MSwicCI6IntcInVcIjozMDEzODkyNixcInZcIjoxLFwidXJsXCI6XCJodHRwOlxcXC9cXFwvd3d3LnJlaW5jdWJhdGUuY29tXFxcL3Jlc1xcXC9sYWJzXFxcL2RtZ2VcXFwvZG1nZS1sYXRlc3QuZXhlXCIsXCJpZFwiOlwiY2I2MmY4NzM3NzMzNDM0MjhlMmQzZDQyOTdiYzQyMTZcIixcInVybF9pZHNcIjpbXCIxMmUyODA1NjVlOTc1NWZjN2NiOTNhZWM1MDQ1NGQ1NjIyNWM1YTcxXCJdfSJ9&source=gmail&ust=1468207960999000&usg=AFQjCNFOAlPg7Rpo213CJVwr4JTbutQ-9Q

http://www.contentdlapplication.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

http://www.reincubate.com/cdn-cgi/.../chk_captcha?id=2f91c4d637d048e3&g-recaptcha-response=03AHJ_Vuu7fjL83d_kOyIfM9pbOojMcMlnfnrY5hoy4PTmOmS211vIpfNXmM6VbzkdmTM26y2CrFOp26WmJnD3cAYmhdsIGBYYKfjVQQjsDu4qKjuRAKrihFV79QhtHhFMvShDeuAWhH4ekrBy-mz-GWRUJ7rxNBVTE0vUHCIYrelp1p9yfWhFn6emr5m3pkHHJ4HNGcphWclaxq5ZBdfUwCQoUg5L3XQjo1zYjeIt93f60cUsk4aUMIDJcbFBx_akPNwuwCuQc32rCRdfa5pjFu5JJX-XlViqHUEBRORDpfbSv7ni0MPEycs4HnQEVznQ3ztB_cbViVArs4N9FfKUBCpVt9Hrg31Ru8dI05ezmPe66tIUkjhqh1PtqCHD7sW0AkLisRnYeBl8zawlE2KydOCvUM0VBW3Ibq5e5IzxBUlmQ9BKMaPXZlt5blBUqjQDx84tDhHSnai9AmRUmjSB1Gvhwq_-8YHNntK7sbUEfgj0mudW2NkdKFFyNr7SdYvuMNKErV2v58pVeJ7dups3IqFBhNGGjeTEdgRmWL3OaaUrUnVbmZsaEtzMOshrlU6ZWpJxa1WTec6sfyluTsGLBAuiXQQo3pd43kQckwJ1bBEtkYhYxiAi2Y0BNvcb_N9wUT1YLvmD6qMGH9a96DXjKYXrHuT3rwNv_U2TIR8ARcHSaxSvvT_WYPitAenfJCO9pjRfkjjQNKIZo-DvbYy7FAbObA_IbW9dypEK0qGB2z6KLPMB1SSxA7OVlNeWFtxViRH9UUwX6biI564g5J4Ee9VH1D3Z3W0QmBc6nqq81EqTc3MEXf5Ie6hwtb47YtdqjVdHBJfGn1EJgvIj6FldFB6G2kafX2AS3bv8-mQSYRV6N9Ecra_IW2gahF4WjspfCSsjtojcx27pX

http://www.tamindir.com/indir/MjAxNi0xMS0yNyAxNzozNToyNg==/dmg-extractor/windows/.../

http://safe.windows8downloads.com/external?url=reincubate.com/res/labs/.../dmge-latest.exe&forceHttps=0&panel_lang=en

https://www.reincubate.com/res/labs/.../dmge-latest.exe

https://dmg-extractor.en.softonic.com/download-tracker?th=1/.../16MIOzRwqccoV7ljLqr7zNhX bQeje4mZgFexWoca qNgIL6kFdXxO1UM7pN vHZa6Tjxk EcnOK5tNjYFSs5IHsoT5mMtiFp2md2wo=

http://r2.computerbild.de/exec/r2r.pl?m=w-cobi;u=http://d.computerbild.de/downloads/.../dmge-latest.exe

http://www.reincubate.com/B147B60C-E359-4D04-9F72-BDDF4DE03625/FinalDownload/DownloadId-C85FB02D802A90726423F6AD52590A23/B147B60C-E359-4D04-9F72-BDDF4DE03625/res/labs/.../dmge-latest.exe

http://s7764.chomikuj.pl/File.aspx?e=ocMKdB1oF4SkIbQT6_Sdhb_eu33f7OzqdDfchHvWWRr4rgUqeMgq-lkoYeyNca_OnTLkwnggz1VhmZaaFztkkqngCvvMYgq1tqf-Pf2ZjLlaOM9A0ONivRImPEvv8JF4O8hXO2PO32wLTjLvoyOEgw&pv=2

http://files.downloadnow.com/s/software/13/57/34/.../dmge-latest.exe

http://dl.cdn.chip.de/downloads/.../dmge-latest1315.exe

http://www.freedownload3.com/download_now.asp?d_fname=dmg-extractor&fno=131643

http://dmg-extractor.en.softonic.com/download-tracker?th=1/.../16MIOzRwqccoV7ljLqr7zNhX bQeje4mZgFexWoca qNgIL6kFdXxO1UM7pN vHZa6Tjxk EcnOK5tNjYFSs5IHsoT5mMtiFp2md2wo=

http://www.tamindir.com/indir/MjAxNS0xMC0yOCAxNToxNDo1MA==/dmg-extractor/windows/.../

http://software-files-a.cnet.com/s/software/13/57/34/.../dmge-latest.exe

http://mandrillapp.com/track/click/.../www.reincubate.com?p=eyJzIjoiWEROR0ZDVHdtNWpuanh0NzRwbThLWG1CQjBvIiwidiI6MSwicCI6IntcInVcIjozMDEzODkyNixcInZcIjoxLFwidXJsXCI6XCJodHRwOlxcXC9cXFwvd3d3LnJlaW5jdWJhdGUuY29tXFxcL3Jlc1xcXC9sYWJzXFxcL2RtZ2VcXFwvZG1nZS1sYXRlc3QuZXhlXCIsXCJpZFwiOlwiNzhjMDY5YmZhOTZlNDczMzk5Njg0ZjU2YjA0Y2ZhNDVcIixcInVybF9pZHNcIjpbXCIxMmUyODA1NjVlOTc1NWZjN2NiOTNhZWM1MDQ1NGQ1NjIyNWM1YTcxXCJdfSJ9

http://www.reincubate.com/res/labs/.../dmge-latest.exe

Scan dmge-latest.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.