home

garry s mod-13.2.exe

Sogekalen

The application garry s mod-13.2.exe, “Sogekalen Setup ” has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the Inno Setup installer, however the file is not signed with an authenticode signature from a trusted source. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions.
Product:
Sogekalen

Description:
Sogekalen Setup

Version:
2.6.5.5

MD5:
25bde1d267ddab772ec115480c56ef57

SHA-1:
cb04d82a6e72ad0d53dd7b068982bc65a3838732

SHA-256:
8534c10083700c264b58d9163a2ae8a45abd950e3208fa679e59116b1ab6ad4d

Scanner detections:
1 / 68

Status:
Potentially unwanted

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Analysis date:
12/27/2024 7:06:25 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCore.RE11 (M)
16.3.13.11

File size:
957.6 KB (980,593 bytes)

Product version:
1.7

Copyright:
program

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\garry s mod-13.2.exe

File PE Metadata
Compilation timestamp:
6/20/1992 5:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:ADUYtEgdi3Tj86cdg9oHmTcQEUnpPGzHDBP1XRsH0iUwwtV9kOcDs:AY406mTTEUn9tH0iwGI

Entry address:
0xA5F8

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, CE, 8A, FF, FF, E8, D5, 9C, FF, FF, E8, 64, 9F, FF, FF, E8, 07, A0, FF, FF, E8, A6, BF, FF, FF, E8, 11, E9, FF, FF, E8, 78, EA, FF, FF, 33, C0, 55, 68, C9, AC, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 92, AC, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 26, F5, FF, FF, E8, 11, F1, FF, FF, 80, 3D, 34, B2, 40, 00, 00, 74, 0C, E8, 23, F6, FF, FF, 33, C0, E8, C4, 97, FF, FF, 8D, 55, F0, 33, C0, E8, B6, C5, FF, FF, 8B, 55...
 
[+]

Entropy:
7.9122

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
39.5 KB (40,448 bytes)

The file garry s mod-13.2.exe has been seen being distributed by the following 8 URLs.

http://www.presenttagcycle.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

http://www.presenttagcycle.com/WVl6OTRQV3BaZVVOSFRFNXlTSFpxYVhsS1FVTlFOWE0zVkZSQlNIZGFNbmh4WldnMlVIUkZNMHBxYlZaaU1Fa2xNMFFtWXoxaWJ5VXlRbkUyVmxWSWNUbHVhbTFNZW1oRlF6aEVZMUZ4WkRoeVRWQmxPQ1V5UWtOVFNYQjBjRkpqYkRGTU1TVXlSbU5NYjNWaE5WTlJhbkJIZVZoUFQxRnlZaVV5Um5WeWVHeHVhWE5JUm1ablpIUnRhVE4xY2tGemMwSTBjbVZ4Tkc5R2VGWlBOa2h1ZWtOTk5uQmthM0Z6Vm5KME5ISnVUR2RYVldwQlFWb3hkR3RoYUVkS0ptUnZkMjVzYjJGa1FYTTlSMkZ5Y25rcmN5dE5iMlF0TVRNdU1pNWxlR1VtWm1Gc2JHSmhZMnRmZFhKc1BXaDBkSEFsTTBFbE1rWWxNa1pwYm5SMllUSXVkMkZ5Wld4cFluSmhjbmt1YVc1bWJ5VXlSbVJzSlROR1ltTWxNMFF4TWpBeE16RTVKVEkyWXlVelJGSnZZMnQ1UW5sMFpYTWxNalptYVd4bGJtRnRaU1V6UkVkaGNuSjVKVEpDY3lVeVFrMXZaQzB4TXk0eUxtVjRaU1V5Tm5OdmRYSmpaU1V6UkhOdmRYSmpaU1V5Tm5CeWIyUjFZM1JMWlhrbE0wUm1lV1ZoY201dlpIWjJZVzVzWkdWeWRIWm9ZelJzWTJOeWQzSjNiR3cyTkNVeU5ucFViWEFsTTBReA==

http://www.presenttagcycle.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

http://www.presenttagcycle.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

http://www.presenttagcycle.com/WVl6OTRQVGcwWlVKdGR6a3pObmxpVTNreVlUQldVSFJ2UVd0QkpUSkdUbXByTlRCcWRtbDZVSGh6Y0ZSWUpUSkNXbWxSSlRORUptTTlURlV3VFRkUVZIZ2xNa0paWVVaaWRVcE5kM1JCYTJwdE5FRktWU1V5UWs1UVJWcENXbGcyU3pWT1ZXNDVTRzVQUTNSemJHYzJabVpHYzBSeE4wbzNOM1YxVUU5NmVuTnhWVlo2V0c1Q2RWWmFTamx4UWpKVFpUZERkVXRqV0ZOblJ6TnljelpFY1ZvelZWaFlRbkZQVW5aaFNXNGxNa0pJVW5od1dYcE9OakV3TUROWk9IUW1aRzkzYm14dllXUkJjejFIWVhKeWVTdHpLMDF2WkMweE15NHlMbVY0WlNabVlXeHNZbUZqYTE5MWNtdzlhSFIwY0NVelFTVXlSaVV5Um1sdWRIWmhNaTUzWVhKbGJHbGljbUZ5ZVM1cGJtWnZKVEpHWkd3bE0wWmlZeVV6UkRFeU1ERXpNVGtsTWpaakpUTkVVbTlqYTNsQ2VYUmxjeVV5Tm1acGJHVnVZVzFsSlRORVIyRnljbmtsTWtKekpUSkNUVzlrTFRFekxqSXVaWGhsSlRJMllXbGpKVE5FUjJGeWNua2xNa0p6SlRKQ1RXOWtKVEkyYzI5MWNtTmxKVE5FYzI5MWNtTmxKVEkyY0hKdlpIVmpkRXRsZVNVelJHWjVaV0Z5Ym05a2RuWmhibXhrWlhKMGRtaGpOR3hqWTNKM2NuZHNiRFkwSlRJMmVsUnRjQ1V6UkRFPQ==

http://www.presenttagcycle.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

http://www.presenttagcycle.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

http://www.presenttagcycle.com/WVl6OTRQWGxyYVUxblJUUlpjMUJXYWpWV2RrRlJUSFl5WjBKSlVXMXVRMjgwZVRGS05tcG9NWEZaTWs1RU56UWxNMFFtWXoxU1lYSjNaWFZ6ZVZKWFdDVXlRaVV5UmtOcVprTXhjR05NSlRKQ1UzTkphVXQxTjJaeWRtdFJaMjFoV2xFMUpUSkdhSEpGWVZOcFZHYzFNbWQ2ZWlVeVFtTlBKVEpDT1hkQlowMDNSM1IxY1cxU1oxbFRZU1V5UmpoaFpFMUVaMFZxUkROaFNXSm1TVGhJYUdNMllteExaa1I0Vmt0VVIzUm1WVmRJT1d4M0pUSkNZa1pDTTJKNlNXbGxielZWY1ZZbVpHOTNibXh2WVdSQmN6MUhZWEp5ZVN0ekswMXZaQzB4TXk0eUxtVjRaU1ptWVd4c1ltRmphMTkxY213OWFIUjBjQ1V6UVNVeVJpVXlSbWx1ZEhaaE1pNTNZWEpsYkdsaWNtRnllUzVwYm1adkpUSkdaR3dsTTBaaVl5VXpSREV5TURFek1Ua2xNalpqSlRORVVtOWphM2xDZVhSbGN5VXlObVpwYkdWdVlXMWxKVE5FUjJGeWNua2xNa0p6SlRKQ1RXOWtMVEV6TGpJdVpYaGxKVEkyWVdsakpUTkVSMkZ5Y25rbE1rSnpKVEpDVFc5a0pUSTJjMjkxY21ObEpUTkVjMjkxY21ObEpUSTJjSEp2WkhWamRFdGxlU1V6UkdaNVpXRnlibTlrZG5aaGJteGtaWEowZG1oak5HeGpZM0ozY25kc2JEWTBKVEkyZWxSdGNDVXpSREU9

Remove garry s mod-13.2.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.