home

icreinstall_installer_minecraft_launcher_by_zyczu_sciagnij.exe

Debegarune

AGORA S.A.

The installer utilizes InstallCore which may bundle about 3-4 offers for various ad-supported toolbars, extensions and utilities. The application icreinstall_installer_minecraft_launcher_by_zyczu_sciagnij.exe, “Debegarune Setup ” by AGORA S.A has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions. The installer is marketed through download protals and search ads as Minecraft but will also install additional software offers which include adware, PUPs and browser toolbars.
Publisher:
Beseg   (signed by AGORA S.A.)

Product:
Debegarune

Description:
Debegarune Setup

MD5:
fcaad15b7ff45f87252e665c290e917c

SHA-1:
36f55cdbacb48240fd2851bb3fbb68c71431281a

SHA-256:
c2633f543f9504a83e5d5d286a35e1f800988f114b9dc18cd82b679c55293229

Scanner detections:
1 / 68

Status:
Potentially unwanted

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Description:
This 'download manager' is also considered bundleware, a utility designed to download software (possibly legitimate or opensource) and bundle it with a number of optional offers including ad-supported utilities, toolbars, shopping comparison tools and browser extensions.

Analysis date:
11/15/2024 8:43:45 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCore.AGORASA.Installer (M)
16.4.14.2

File size:
923.3 KB (945,416 bytes)

Product version:
1.0.3

Copyright:
Fast

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Common path:
C:\users\{user}\appdata\local\temp\icreinstall_installer_minecraft_launcher_by_zyczu_sciagnij.exe

Digital Signature
Signed by:
AGORA S.A.

Authority:
Symantec Corporation

Valid from:
9/9/2015 2:00:00 AM

Valid to:
9/9/2016 1:59:59 AM

Subject:
CN=AGORA S.A., O=AGORA S.A., L=WARSZAWA, S=MAZOWIECKIE, C=PL

Issuer:
CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
615B57E3504C929E3B64ED936D1CE68B

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:swcSeGbEsZPjsFsNgE0NqxzJVd74pgZnO0G0I0STS89EirLZfk:sPwPwiNOAzJ0GZnOAbSu8WirLNk

Entry address:
0xA5F8

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, CE, 8A, FF, FF, E8, D5, 9C, FF, FF, E8, 64, 9F, FF, FF, E8, 07, A0, FF, FF, E8, A6, BF, FF, FF, E8, 11, E9, FF, FF, E8, 78, EA, FF, FF, 33, C0, 55, 68, C9, AC, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 92, AC, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 26, F5, FF, FF, E8, 11, F1, FF, FF, 80, 3D, 34, B2, 40, 00, 00, 74, 0C, E8, 23, F6, FF, FF, 33, C0, E8, C4, 97, FF, FF, 8D, 55, F0, 33, C0, E8, B6, C5, FF, FF, 8B, 55...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
39.5 KB (40,448 bytes)

The file icreinstall_installer_minecraft_launcher_by_zyczu_sciagnij.exe has been seen being distributed by the following 40 URLs.

http://www.newbodylaboratory.com/c?x=j6uXy5eSFwreV8Y5bScUPyAhwZ1 f4MC8K0YwiqmRmY=&c=4QeXlQ2Jzx I0Qksbdl2aViLtm6B38sXIWOzqhRxxlQoRE/5ayhYWzMJhvTKp3gnDhoaWcY6cMySOAIAJDUzOyKyH0TUo6jXRYGCVeB8e8H3xP4joy3P/A5fXHUhW5XuSx2kAt0N00icNkN5Lv8aKQ==&e=0&fallback_url=http://bi.sciagnij.pl/0/.../zyczu-mc.zip&downloadAs=installer_Minecraft_Launcher_by_Zyczu_sciagnij.exe

http://www.flashbesttowers.com/c?x=Hzid8SXpMRZhu00P7yRVsh1912iV8Mirrmlqob6RZVk=&c=OqWwaHRHKm1Zyu/KHh0F8nscqiBlkrKl2aDR9HQux0eyGheULIwtHtaRGijLMTm bMU59gn9xt/Fmiq0Cx9LTxawH3ITD4dTEcW/GF8VEA0AQM85aPqwumV0TuaDUCoA&fallback_url=http://bi.sciagnij.pl/0/.../zyczu-mc.zip&downloadAs=installer_Minecraft_Launcher_by_Zyczu_sciagnij.exe

http://www.guardconceptsbundle.com/c?x=Nl5u2BTcXVl5amgYAdzNBXxk4YEx1zRrVX NHuEJd1w=&c=zItIYxCZfVJAgzk4X878HjKvJOKn1GUcBa3Hxae9ySCTBX9pQUOWFmGfM3Z62IIoW6/vVKj3UnuhqsV pGrhlCI/4C2uAmHc5wdLWVKQRlrDEaDEmqg79q/n1Ds6y5i7au/ipT3PeVhMYl9 PEhxeg==&e=0&fallback_url=http://bi.sciagnij.pl/0/.../zyczu-mc.zip&downloadAs=installer_Minecraft_Launcher_by_Zyczu_sciagnij.exe

http://www.shareclearbundles.com/c?x=wGrMURu9x URK7szgPbrLAHXh0iDiSX7nrjn nrb94o=&c= EM6qX16rA3869901MjGfg4lfSLOtax5Ig6PSOuekha59XMJerZ1tl2KnNtDyVtLTtbC8orfXKIDJLh7NIcmwkyXITwvKLaAlKbV9dCrqQZfFCsGsczgdUhKRv0LcCOm&fallback_url=http://bi.sciagnij.pl/0/.../zyczu-mc.zip&downloadAs=installer_Minecraft_Launcher_by_Zyczu_sciagnij.exe

http://www.bundlesvaultstown.com/c?x=Ndi4zXh11hUADwQraneOpvGDANMfDI3HQGv7fT3SpXg=&c=XGNBPK1kXlLUpG94z9U1EkK8i4K6BsLbkzto0NItvfGGZGeV4PYvDYpJF1tQj1PGQC9NHcTiSUnjvrNTlWayo9ExHSh4XcqPSbNJrm hLMsj/WiE3D47NcNNQfjhIIPDh1fgi vP51qab97g1ozjYA==&e=0&fallback_url=http://bi.sciagnij.pl/0/.../zyczu-mc.zip&downloadAs=installer_Minecraft_Launcher_by_Zyczu_sciagnij.exe

http://www.shareclearbundles.com/c?x=bZMBJLikK1KLMiqdf6dJMsxXNUjkTrpy906CAjBGhe0=&c=94c0FXDRMb8o8kORsbBGtKifVZ5hJYWtUpM07rL8xVzM7ZmcrgMSopgLWmEJmPBVSYo5od/DSfarplx7PaOCp8PrucTNxBxTMOQXcRZ/N8ZRr3BjXkvZMSMDg9YBWVtZ&fallback_url=http://bi.sciagnij.pl/0/.../zyczu-mc.zip&downloadAs=installer_Minecraft_Launcher_by_Zyczu_sciagnij.exe

http://www.bitssharenew.com/c?x=l9K81yxocQOIzl8iAcFqPn9kaP9VVL1QQSOH/p8GYG4=&c=qWITVAKemvn2oBAD2SpNZ2r93IQvgwYuHQoX9ScvLSTj5lfgYAIDkn1IyfVqWvq5q5HtU0gxEQVDa0LruWqCSrBNqp9RpUY3VHb5DL9Kwq55YWlz2cE3MqUtJtdaepOg3Kpv/mzz7VF TqkFeGsxvw==&e=0&fallback_url=http://bi.sciagnij.pl/0/.../zyczu-mc.zip&downloadAs=installer_Minecraft_Launcher_by_Zyczu_sciagnij.exe

http://www.sharemegacycle.com/c?x=xXP2VLYqtFUUW 5OdIe/5j4TbIdRqWbfrk8u5n93 Oo=&c=1CugEyRVIyG3o5rSiFhDJzByqmQOdzl0wX8sX1pT6I2yUeq5FAR9daMT2w e6AWeD6cZPe3Nv1Zubkx6cOvReqU82dGXACBnecEWDOuJTFNr0Lfk/dGnYaEaNjp OV0Oa24F uZCoUq3rcU4JrvHCw==&e=0&fallback_url=http://bi.sciagnij.pl/0/.../zyczu-mc.zip&downloadAs=installer_Minecraft_Launcher_by_Zyczu_sciagnij.exe

http://www.sharemegacycle.com/c?x=opykvd5oLFT5a86mM6m0AqfT2VXxxo5g1TqbUNVHqfg=&c=hlpES2Rei0zaFp0AZCg2KKeqtqj KcdzkdYP4sSGZbRIDi4QsfgdmPbw5zYtd 64S6lPA7iBeXffbwrBcRzwRU f25qUCX90cnB51LRcou0ZQXEfSK Xa1WSQL1w5Dx hggjwmFYVVSeKpMuhamGSA==&e=0&fallback_url=http://bi.sciagnij.pl/0/.../zyczu-mc.zip&downloadAs=installer_Minecraft_Launcher_by_Zyczu_sciagnij.exe

http://www.vaultsharestock.com/c?x=cDKqd 1lKkW1qGgtcDH8T4juCzlxRi3zb/1qFuTFPxE=&c=lU8g8Qpr1Fp6kn1SHbus1Q0SZJk70S3PT7tukJVxFjt2/PlPV2Rq0UwgV8ToPih1uTcTa0zSggJo/tObhyq8uMadOAH8SareSmFwQ39RfXIoeZu8EG5sg9LXdKNTxe7S&fallback_url=http://bi.sciagnij.pl/0/.../zyczu-mc.zip&downloadAs=installer_Minecraft_Launcher_by_Zyczu_sciagnij.exe

http://www.vaultsharestock.com/c?x=NDP2sTUPJtS7ubc9xPGEWmnRa8vEUzpUcp0Lpn0aufw=&c=CZmvTQKfGzCi5yGZLdxoJfGA7NFx0PG5yH/x2g8COJ vEgTKJd3PZZkyN5l/b0uKYPNx4y7ehxGLsRJICnOisuLp7NM50hrnqif6lUkycAwaUEaKMc7i7Ys0SFrPSOi4&fallback_url=http://bi.sciagnij.pl/0/.../zyczu-mc.zip&downloadAs=installer_Minecraft_Launcher_by_Zyczu_sciagnij.exe

http://www.hosttowersapp.com/c?x=sN85VMl9fJtrI2yOoqZxpe4eqDmDF2sB1rwRSShnqAM=&c=v4tSvs/bqO9dux8DucMfNEGbRRQ/vyh6p9EC3k/NspdQjGHTNwZhY1HMXJSkEf521gPNJymlq5Xj2cwFHRKKqyYzBX79lTTqIyx80QNtmPrIVW S7Yd33bx2zHsDcVFM&fallback_url=http://bi.sciagnij.pl/0/.../zyczu-mc.zip&downloadAs=installer_Minecraft_Launcher_by_Zyczu_sciagnij.exe

http://www.filenewconecpt.com/c?x=ilChdDoZUei6JWQYRu17mPbJpGrtfxcW 39NnYbtNEI=&c=LYQlIxVpAgQ/ZrfUAXdH/FDsk5zysdCB4k4LDg1fMivMdFPbjCvnESkW5ev9jGQIPIYMTAU3PxClMEhrQS9tPvhlNvH0rCIqgV0MlOAJ65Mexv3tuF9CfDRbpgIN8gDSfvJcIXj7gBocSyusYaCqqA==&e=0&fallback_url=http://bi.sciagnij.pl/0/.../zyczu-mc.zip&downloadAs=installer_Minecraft_Launcher_by_Zyczu_sciagnij.exe

http://www.bundlesvaultstown.com/c?x=TWWXB6uB12lw6CG IPOpfEeAFdnYGbEuKCPEDGufS Q=&c=QaQHwPihIW4WMU7VOGbbqMQgAcLOgwfcALH3betKl3nbgf6lv/n6By51H5Y8Vw5EBXNJT2S/Oz4lG2Fc1zHkKAcWgFKRrzU3yC2lUHiXZOVWeSoJw3sCl3N/eoSzaTESBiChRX0hXiXiiIEe69Lpzg==&e=0&fallback_url=http://bi.sciagnij.pl/0/.../zyczu-mc.zip&downloadAs=installer_Minecraft_Launcher_by_Zyczu_sciagnij.exe

http://www.vaultsharestock.com/c?x=3UXKaogL0PCGiXjAqvuEJFC6HvTBXZCoZ1BaS2nDwM4=&c=81xTzEyOn3g8PHa309Kw4AK20nt1D Zoept9GLvOgN8M3mP7fN5xpMoCxYLwmeqvKaKd39W6iVpIPcO/gFM3kpEYI 9d 2jmBILbO9Qd43x2w4fXQo48NK9uplakfetW&fallback_url=http://bi.sciagnij.pl/0/.../zyczu-mc.zip&downloadAs=installer_Minecraft_Launcher_by_Zyczu_sciagnij.exe

http://www.vaultsharestock.com/c?x=k5fZgDabiP2BJhd9n4 I2EvBRh7zG7B90FZPo9OSkzk=&c=DC5Ezrbub/hdwxptMGxvRn2D0HWFulJ9496ShD/aMlsvIJCUXCz/8HGxI2rvMYgMzKheR7yKtCQEl7CnHbsKoAQrgPADY5yyPqhH5O7BFFApKImVIP8DmNXneEtWB9Tk&fallback_url=http://bi.sciagnij.pl/0/.../zyczu-mc.zip&downloadAs=installer_Minecraft_Launcher_by_Zyczu_sciagnij.exe

http://www.gifthostingdownload.com/c?x=r4SNODyqIqJ8VKvs4YoAaNCduvhwt7xMIwt6jMVhmoQ=&c=944Hfun0Dhzu1B80I1lA9SpqmzXAHouv9mUU wz39dt07SkgwINBhLh9gx36mEYCM APqcYQ1OAO7tNEfe8mWCtFDTcn/HFme C0JHPkTp2ZUAmKWGWMxIjfY8q8vyk0 Rd/XwZyL7sZFa7adVrLJA==&e=0&fallback_url=http://bi.sciagnij.pl/0/.../zyczu-mc.zip&downloadAs=installer_Minecraft_Launcher_by_Zyczu_sciagnij.exe

http://www.vaultsharestock.com/c?x=GL4g85Ph3ySE/UKIVwjj59bwjlV4KHz baia5Q8eXE4=&c=jegmErNBcWot4TiMDppSa2DsxnJ48a6XGQBoxQr7FsjKSeNp4PAHEZ 3JWzEPKzV5 xgWv3L8xpocUsA5/abQgLVRIh3yiQtYgvN8kso2aU91pYOpTyKkYnYCIeKoszd&fallback_url=http://bi.sciagnij.pl/0/.../zyczu-mc.zip&downloadAs=installer_Minecraft_Launcher_by_Zyczu_sciagnij.exe

http://www.bitssharenew.com/c?x=IItjtI0z6vjrF4pT3mEINSq7Ij3Ngwm6dZRpXArNcUA=&c=N4vBgm2Jny9XTOelR5QOx 9udAIx9vozfTwX0qEbDcDN0PVcdEzHLxrHFib6QVL5vTJ6Xp86z84afrx3usBqpnQduSssTbGDwOluAf1irOCzDSMX5LqaIT/s6eGPyyu13ZJMOw8Vps1mSm3B6a87gQ==&e=0&fallback_url=http://bi.sciagnij.pl/0/.../zyczu-mc.zip&downloadAs=installer_Minecraft_Launcher_by_Zyczu_sciagnij.exe

http://www.gifthostingdownload.com/c?x=VECAqXnaX KIVv1IHjKcBqoFJMnfs2dCdVYqXYK Iyk=&c=eLvDW8m0kunn5yMjKWTwT0gwxz69/tXG7PAfxfY1a7PCQ3jq08Q7mvaDxntqcbV5KMu1p MxNhYVZNWgxMSmBpEeubfNkJ cYnwwsiEg3H3dFPCZvBfwxTJAWDArXA6TvudhAskwJmbsdmDa 8tUHA==&e=0&fallback_url=http://bi.sciagnij.pl/0/.../zyczu-mc.zip&downloadAs=installer_Minecraft_Launcher_by_Zyczu_sciagnij.exe

http://www.hosttowersapp.com/c?x=J8YcJZaFlszJ6V3sAjgDj6zH2nL1qUCDd4QGTE2njAA=&c=jIyVXgwiDLeovtoWZeywT31wZLUJWSpVKFxne6tDUt5gmveRATYsQMZEeacys7c1KV8yjseTqJrFsdrTmNHrE1Rv2XELXqUChid4QNA7aO3rBk8DB35J/OE5I3XJajO6&fallback_url=http://bi.sciagnij.pl/0/.../zyczu-mc.zip&downloadAs=installer_Minecraft_Launcher_by_Zyczu_sciagnij.exe

http://www.vaultsharestock.com/c?x=sJ29nzuGzXsckHyqrOMMYpEHmB7Od5GIq aU9XhqkXg=&c=FLtgWK y51U2FIsSLQv54oUtuiRBYgmSSaQuA5ZwLzEx0z8nNvEZnd9JJ G5crwIQpuHddVDSwnwOCkXXGJccagBhDwZn9JBK4X7KN1c1cfH 2t49Kdoxnr3ID6dCMWd&fallback_url=http://bi.sciagnij.pl/0/.../zyczu-mc.zip&downloadAs=installer_Minecraft_Launcher_by_Zyczu_sciagnij.exe

http://www.bitssharenew.com/c?x=biJYCPBozBQN3o/UwPoZVf8jk7mPFnO2IzBoRo1yjCg=&c=CbhLz01j2BUO8w6ajO2 Fm4IxFWIQ0mtXrrL33s0XxaJfqOphCvUscssyz7I5J6CfVewOQ/3vHO1AJ3PawMGjshgRzJiVyILivhVviL4/pLUA8 yrxDVgEI5U863E9xzVugiwwVfumdazEutA9vFOw==&e=0&fallback_url=http://bi.sciagnij.pl/0/.../zyczu-mc.zip&downloadAs=installer_Minecraft_Launcher_by_Zyczu_sciagnij.exe

http://www.signbinariesfarm.com/c?x=9xQnGV20czXFig5swBNJGTwuJltQFDtdiGwxxDTTDU8=&c=2kF0I0NOgk btaVqnwkce6OwjGPrcbRMbJxnX bidRG1 iWocaGHuic5kRSM2 iGEvDhLFW SrbUPreDdkkC4ORt5Fq8CZR2gLYhgRRRdNB2F/FeuYTSoB MeO5milrz&fallback_url=http://bi.sciagnij.pl/0/.../zyczu-mc.zip&downloadAs=installer_Minecraft_Launcher_by_Zyczu_sciagnij.exe

http://www.worldapplicationcity.com/c?x=8Ti5E4otgOXbFeU6iaYlHRVD bh8Efmj4IHg95i8JiA=&c=r76DPvOKHNOFbvsmEObRLBsh3Exp9y2Eq0L5Xsbn9LALbAzmE113/OY2lSmbrdFzRXM0xSjtGHXLGw6Jje I8Cr2Nn42PdI/SUyu1gYk2VeKW2mCz6ouBOA7eCMWDaA48iWFSZe JofO1BvhgegpuA==&e=0&fallback_url=http://bi.sciagnij.pl/0/.../zyczu-mc.zip&downloadAs=installer_Minecraft_Launcher_by_Zyczu_sciagnij.exe

http://www.guardconceptsbundle.com/c?x=MI2yVU7EC0Gr05ss4W3JtCvgkEnA8KnFf0L5rOCtcyM=&c=qJqL8s5uMLhlfs IrlVuIjFV/ypTE8vRreHbK3NJO5khsx07ZsXUpLhQU/4ie7OBlLiMrBCSO2mbj7mr4RsP 7SjJTnlo3agBwed6968/aMhKiGgFpzdUC5 i9XHVLEc57pAdlN2RQSP54EVKhcQkQ==&e=0&fallback_url=http://bi.sciagnij.pl/0/.../zyczu-mc.zip&downloadAs=installer_Minecraft_Launcher_by_Zyczu_sciagnij.exe

http://www.vaultsharestock.com/c?x=gpIOVyuLpyCe0KWhRLIi 1HMRpg5qrdQqWqInzm1sRc=&c=DUubwqocfKq5LeECQzpmQqaNwGFweRvbDJ78tlCvU1/DZP5H9j6dIUReG5z5tEuIJF0AjEWiv3ZECsPbi8yPddROx jnfE4yrsZStrirDBUeNlV7aQXivJNLJvGtZkYL&fallback_url=http://bi.sciagnij.pl/0/.../zyczu-mc.zip&downloadAs=installer_Minecraft_Launcher_by_Zyczu_sciagnij.exe

http://www.vaultsharestock.com/c?x=m/ybq3ye6AAFa/ 3c1nykv0gNw3AuKDWYn4/cbpCR8M=&c=uIpTHDXNC4hwZlXxiFwnB8/WWt1cdm1pjBDKhsxWvSIBlMIvGgdwIbtE2VThi7DAJynvK/TQ91Gsodan6pWF5kzeDBUfnEyBPBRMeTQ2rDbFkpchyeJJV lElG8qUJhm&fallback_url=http://bi.sciagnij.pl/0/.../zyczu-mc.zip&downloadAs=installer_Minecraft_Launcher_by_Zyczu_sciagnij.exe

http://www.binariestourdownload.com/c?x=WDN5V7AxBCKamXHO4/Wt8Z8AKwYiAIf4xhlupRQgVRA=&c=VKzQxqZhcAeGldGkWsRgRSPM UIUTOIZ7qfstRNn8Tvl YRSTPmVoj8DZXGaGCY51YTvX8BCPdhqk5wgEKrnKIx9AtA0YKbNJFlLmaVodijDUjC6fzZe64hgLub5/twS&fallback_url=http://bi.sciagnij.pl/0/.../zyczu-mc.zip&downloadAs=installer_Minecraft_Launcher_by_Zyczu_sciagnij.exe

http://www.shareclearbundles.com/c?x=hUdAU4 E1HQ pdOkU3omcULvFYuPAZ9PVuVqz nSGNI=&c=lERxBRQq1p5N1CyiSnlcJhvY3XY4pLq58dVIa4AkBR1LI39BNJ953DiV4RUT8UVFS1f1HyZHdCxszVMOsss10cOCWJNJn3FgSDlrLb0ThTo6NvL4BQRN/Ket8X2UBk5K&fallback_url=http://bi.sciagnij.pl/0/.../zyczu-mc.zip&downloadAs=installer_Minecraft_Launcher_by_Zyczu_sciagnij.exe

Latest 30 of 40 download URLs

The executing file has been seen to make the following network communications in live environments.

TCP (HTTP):
Connects to os.solvefile.com  (207.189.109.121:80)

TCP (HTTP):
Connects to cdnus.solvefile.com  (207.189.109.121:80)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.