home

installcl3.exe

Internet Explorer

Plasq LLC

This is a setup program which is used to install the application. The file has been seen being downloaded from dw.uptodown.com and multiple other hosts.
Publisher:
Microsoft Corporation  (signed by Plasq LLC)

Product:
Internet Explorer

Description:
Win32 Cabinet Self-Extractor

Version:
11.00.9600.16428 (winblue_gdr.131013-1700)

MD5:
e728bb187a3d0231fc7ddd33c0e7db80

SHA-1:
c0ad573e84be89e40b7b3a6471a8db8aaa3df250

SHA-256:
482e87df0b1578947dca2178d145353839fcfd104a73c3bb58ddd69efb3fd85e

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
1/15/2025 8:45:53 AM UTC  (today)

File size:
64.4 MB (67,505,544 bytes)

Product version:
11.00.9600.16428

Copyright:
© Microsoft Corporation. All rights reserved.

Original file name:
WEXTRACT.EXE .MUI

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\inetcache\ie\{random}\installcl3.exe

Digital Signature
Signed by:
Plasq LLC

Authority:
Trustwave Holdings, Inc.

Valid from:
1/12/2015 2:44:14 AM

Valid to:
1/16/2017 8:44:14 AM

Subject:
C=US, S=Oregon, L=Portland, O=Plasq LLC, CN=Plasq LLC

Issuer:
E=ca@trustwave.com, CN="Trustwave Code Signing SHA256 CA, Level 1", O="Trustwave Holdings, Inc.", L=Chicago, S=Illinois, C=US

Serial number:
065F523015DE30C5DB3C113C990F32B254C856

File PE Metadata
Compilation timestamp:
10/13/2013 10:50:27 PM

OS version:
6.3

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
1572864:p5YKpYY/vgPrQUApFSFvlhmHIi46JRTdZnJGnFb9I46gGJR:nY+IPwFSXhsXXZnUt+46gER

Entry address:
0x67CC

Entry point:
E8, 07, 0B, 00, 00, E9, 05, 00, 00, 00, CC, CC, CC, CC, CC, 6A, 58, 68, 68, 75, 40, 00, E8, BD, 0B, 00, 00, 33, DB, 89, 5D, E0, 89, 5D, FC, 8D, 45, 98, 50, FF, 15, 70, A1, 40, 00, C7, 45, FC, FE, FF, FF, FF, C7, 45, FC, 01, 00, 00, 00, 64, A1, 18, 00, 00, 00, 8B, 78, 04, 8B, F3, BA, EC, 88, 40, 00, 8B, CF, 33, C0, F0, 0F, B1, 0A, 85, C0, 74, 07, 3B, C7, 75, 16, 33, F6, 46, 83, 3D, F0, 88, 40, 00, 01, 75, 17, 6A, 1F, E8, 30, 09, 00, 00, 59, EB, 43, 68, E8, 03, 00, 00, FF, 15, 6C, A1, 40, 00, EB, C8, 39, 1D...
 
[+]

Entropy:
7.9992  (probably packed)

Code size:
25.5 KB (26,112 bytes)

The file installcl3.exe has been seen being distributed by the following 11 URLs.

http://dw.uptodown.com/dwn/hCGdbyNZzdQaSMaZJPrlOvSQzBDOA1qiY2qCf_N-ky746FWpRRi3eR46pgyNXmm0T-Xy1JC3yO5sA2dMB0qk8Horn2adWN7minixKSc61Xd2V0OEg9B03_mnP09gCUw5/OgC7DDm9NKbQX0uoQgP0ad4FqDkTE3NAPmuRSZ38pb0mIRC2wSPxYvfxai-K2AhSdmNEsfv8G8phQA5emC7AXxnXPzRI7WVeybO44T3ydKrnwU3deXYbhI3q_kpCbSQ4/.../

http://dw.uptodown.com/dwn/yAIYTs3ImBIluSUhVDd7yDjqnz1AahfA9qsxKLi3kt9LmOJMUEJAoUvGxakjhk0qwyPigbsLltw-Ivb-5CBfEXPqPLcKG-k5wj-aj0WAwgCB-nTh7RHJqc7TpaV8TcQL/cHzBx46RMShSqBG0q6I7lsflU678N2vFrhWVdHZ0DnwcflxBfpQSYWHF7IM4r_yTsxvIgXKVTaQwUm-43M4HaH4chVaof-ON0o3XhxrkGN6ymWrhgJ7ZljjO1wcif6yA/.../

http://dw.uptodown.com/dwn/aZcDC5x0d3v08RNIVgjOdmCBwY5U-sfN8sLZXW-RgCYl1i6tVIxmF-RLDp7uEeOCeS6QPrLYut0dW65NoN8SYzFGblMxk-pYjiidn0-PEaGs39hxX-Ze9ts0W3GcEhZD/5nYknrwGelExBBhGpKp3SPJL47bGcCB7IYu8YNioo8sgGBWqw5NKXaW-wPlqDtZ0dEcIlfCaM0vKxxsngwHa3MdmWoDXWU6FURABmxEewwfiR0NTXDdA-vkqlwZJataH/.../

http://dw.uptodown.com/dwn/iAGEDte5mWnuLzXPGaiLxhVROhvgXseLMLtZX8ah1V26evSanrR4jnCfuNRDM1v3mlrjPBCFZQmS-P9UtGPqBNdYF2YH96J3rroTDUomE_6j6o1UQI4FUTc7tagIYB-E/4HhPZN8Hv2dzp9N24BaMlj8cQ3zCE2btLSDlpEzkqSyB42Tks3TVMwXXxrCawrNvngIltRHpJUhOR-cMsRhGXpA4B8EM97IDnuYV0SCAJPAMkWlltHGcsf40mahyhmvf/.../

http://dw.uptodown.com/dwn/iEncxp0RsBweUVFIjmh0drwjWoEozGIyP0eBXhfZHwTKWyMVC4K44ARf5sT2HUF21UvNNfa9dwKfNNVyPKrizYheiT6_HrrfCUpZv2yo9TbiKJIfuWG8mFYhHkyH9M-3/k9xOATciZE98cddC_Mbs9DM-85RbTMuRTpuKBwuSB_7gLJpTxP0zKmIH3EQ6t7tdeZ3mLsU67vHbvvMC3SJ7bwG88XDcv6sjmFM_UKGuyZErdLfxoBohvgFaRihZbSpQ/.../

https://dw.uptodown.com/dwn/pK0_yWFR3Omu0CChZTvrdizMZmqYdS49X185GIFL46uZKNahK2xzV_1O22lIh9SmiogHpUf9_A2BK0tyG8hKNIFkR7vqEZi36QYKyUMg6yIlIEvNtknEpoFS5_hvriIf/bPf8QgmonRfOZ7-q5ViX75cwQxVclvvZAgLOkfh-pBACOOkaZZ47wSF8Bi-TJOH-OMDwbPeLnyWVz4PDcFeJ0fYPSDg_pX0qufuBhTg34zJBEzx3-vtqtbfgLh6z5iCa/.../

http://dw.uptodown.com/dwn/6W4ar3II-el8urL6qhb5gQvadGfYmWdWbvrMFSjGVetSuSbbGKUyeM5pUHv3L24ipYdVoYOwU7Kjwxy4LLD9C4TdzFQCxJdmNpMsiX7TEsohifQTS6em5c-BUgkvCGi0/.../

http://dw.uptodown.com/dwn/y0AXe2Lv1wadREEbu7aBrDZn5dEFGAFIDKMfk2UnAH0ydFQ5iFqpaoft43b2LKkjnMKBx84igEdX3RjmPwuMY0dB2VEeMK6LopwIJXm6n6zqHWrJIzt33Ss5NJheGKSW/pe6GIgzEZu5xK99iNGhwWar2Fw5vFqfhMBiDj34VcE1PneSsxCMXvmiRWDrmJldBXkm6vv4aSpRK_jDm2aYQfByMqvTH91Q3HS3ouof4mesRg4BBw1aw9g15wjk2QDfg/.../

http://lb.cdn.m6web.fr/d/c/a/8c56e71d31fa2c12281fa9797873fec7/56a60e9a/soft/.../comic-life_3-1-3_fr_140140.exe

http://dw.uptodown.com/dwn/8_2t_GuhvW-egpFBkMDs-I65-VV7HybMYtgWG7q4CyuP_HJ76fx84B6iVxXvNjDfZfg2SH7ijBVUPmAjhNSTdz15uRl5H2F4tv3FNCfKS4vn_1rtlN9vUpLLACXEUlzM/L_IKHRjMVND94QLhPC3jxXrEMneMybp8oH1RCO4vxlWCJLpgrJkKA1CfJuBKzQay4OCizIsT_NzBYV3FLwgEGkVps_X_1s35FHIlk4fbiQQtR4piBEVedUmDMU2aAAPO/.../

http://downloads.plasq.com/InstallCL3.exe

Scan installcl3.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.