home

installer_directx_11_sciagnij.exe

Tutal

The application installer_directx_11_sciagnij.exe, “Tutal Setup ” has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the Inno Setup installer, however the file is not signed with an authenticode signature from a trusted source. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions.
Product:
Tutal

Description:
Tutal Setup

MD5:
0d46a43c982d58cd1b5570602022bedd

SHA-1:
8383a9b6eb006eb88b9e1f71d330183996acb89d

SHA-256:
2639c3f36c69ff25814f5bc7b555c8b218a81562e53e567e87468def03149b6a

Scanner detections:
1 / 68

Status:
Potentially unwanted

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Analysis date:
11/16/2024 1:45:08 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCore.RE11 (M)
16.3.18.15

File size:
1 MB (1,068,339 bytes)

Product version:
1.7

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Common path:
C:\users\{user}\downloads\installer_directx_11_sciagnij.exe

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:Sn0SHPvp1wR5NFs8gNSBWODwDCJAfWfnz5XrTg:S0SJmw8gUBWHmAur57E

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, 53, C9, FF, FF, E8, 9A, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, 24, CE, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, 24, CE...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file installer_directx_11_sciagnij.exe has been seen being distributed by the following 50 URLs.

http://www.signbinariesfarm.com/c?x=j8chX05dvZV 3gscepLdcfw7psc2Zg/LAjQTsathmGg=&c=wbDtEwzKLJXTHkuCYz5WhM D3XgsQIAofhYBoi61m0feih1aQFPyOW/aZNcY1GPdyu3 gdJPl7iArFAZk2BqRfetFd64ZXXt/zTx0lZGKWm4ub1gazVRMkZFWWVdo8Zz&fallback_url=http://bi.sciagnij.pl/0/.../dxwebsetup.exe&downloadAs=installer_DirectX_11_sciagnij.exe

http://www.signbinariesfarm.com/c?x=gtRLZKoWQ 9DH/0qmyd/DwemOQdbAl6fYtX3r118p 8=&c=zaadbRpJlhi8Yl1Hmqt1E3SoQZmNnRMf7eELFauNdI01ev5AwfoQ5PgQYSrHfzS4e5huzB0OvXUvYUOronbLsKnI IcsEbBsmbSFcqAQLHzXOraUt56IwgmvjzbANu k&fallback_url=http://bi.sciagnij.pl/0/.../dxwebsetup.exe&downloadAs=installer_DirectX_11_sciagnij.exe

http://www.signbinariesfarm.com/c?x= 6CvEm5yMOTiDHQD6p7ZNhS0c6tlsbwCR8GJhtkR5Xg=&c=sVrv3FYlhoq5zpcGoW0RTk EFzPQwQ1m4ld7mEPmbLalGfv50JY0RL1ISx0nXFSDeLKTZbs684feLf9GJqS7koKiveZV0rv6m/P SvftRjVN/0IM9IyYNazodVGsYBTk&fallback_url=http://bi.sciagnij.pl/0/.../dxwebsetup.exe&downloadAs=installer_DirectX_11_sciagnij.exe

http://www.signbinariesfarm.com/c?x=3vZpBpVlnnH4VYKOk6rDOxJAjz/xsamXc/QalkAzm5o=&c=wCwiJ2DVVXi88fHlDNNRLLG5djwIQ66P4ATmHLo1WvZvF8GN4rgaP4U0TuvcYKeNWEKgRldMLqcANX3/sxGXVibdWUOpPM6xII1ZJsiD7C5f1Mx67sypXFTcIwZmoHee&fallback_url=http://bi.sciagnij.pl/0/.../dxwebsetup.exe&downloadAs=installer_DirectX_11_sciagnij.exe

http://www.signbinariesfarm.com/c?x=qJlpTGYhncUIecGKkhec9L5w4hC2yHCU7t6s4GveM9A=&c=T0Tb1CicgP/wCKqWgg9DHPH1OKncRaj27xWpgjLVde1v00Xb30GoUKCqKf3N/VVyi5PeQxJDWUu26DGrFbwvnHZw21PWao/m4gIVi8Og8VJV1mt0j1Hkda UVkCy/gaN&fallback_url=http://bi.sciagnij.pl/0/.../dxwebsetup.exe&downloadAs=installer_DirectX_11_sciagnij.exe

http://www.signbinariesfarm.com/c?x=m/O4uKnxCx8ODgRPv4nak LJQlMriWTnJoQwAWMRB2c=&c=S8IPIV1mj BsvSyRcDRCXwF5hAxTMGFOzBygof7bBivcK7OJyPq2rNrVykQgjvd8pTlEfodCiaBnmrIhS76V5q3QoKhrGPaATNNunI sGdRgtcIsl4klQjopmMIW/e/z&fallback_url=http://bi.sciagnij.pl/0/.../dxwebsetup.exe&downloadAs=installer_DirectX_11_sciagnij.exe

http://www.signbinariesfarm.com/c?x=GlfD3aa4clmS3iwI3dZMKyPjGdkcBDMlYot7l5YleMI=&c=WXl5WDzRBVGvfkZt8EI4LhujKGsCm6pA F6k77WJ61lq/Eedo3CGjny9in4nVG2S9tN0XdCsBc61RgHxxeyNtPpxMBZVJEuI/IE5OXxdUDnuikWZv7FkqWxkplCBKrD6&fallback_url=http://bi.sciagnij.pl/0/.../dxwebsetup.exe&downloadAs=installer_DirectX_11_sciagnij.exe

http://www.signbinariesfarm.com/c?x=PGW7PFYRvGVBQL2D0kUeblhBE1VB T1QLqID7Ll5VYY=&c=4bjnM9SRoKJh7we0ECwI YXt/9dfAWqLr0VpRq1Sy 8gt04EbmhAt1P8LUw7G3dxEd4LG/kgsGUZowNWHTgY91fumYg1i0TXENtArJEfLRiB48t1jCKre5tvIP z00co&fallback_url=http://bi.sciagnij.pl/0/.../dxwebsetup.exe&downloadAs=installer_DirectX_11_sciagnij.exe

http://www.signbinariesfarm.com/c?x=vEbvDvotCtpeHWNGRI5FDlQ6IlxNifbX2lPX0Nm6IxU=&c= Er6hr1kys795 bimyGr 3g2rQfkbAkzcV5oz tj6iEGnlav5CNJUk6of8Vrr 5QecKDmhlzIx2pMCgTIOty5RsXL2GGTD CGEoehkphiU1Grk OiT 7z1mwVUe 7wg&fallback_url=http://bi.sciagnij.pl/0/.../dxwebsetup.exe&downloadAs=installer_DirectX_11_sciagnij.exe

http://www.signbinariesfarm.com/c?x=mdE0kU9palU681h8JOT1Rc5Y4X2 8 mgozxkCE4PyHI=&c=Meoe0pqnVOr2PhNRVG3sELdznrcCH/vzvt6oDPY6ai IhVzKO7Ef6kmZKGOvLcrxQkCuej7pr34y R3l g5EToXreOlwTW8qLqSJKCMqGFCOHV9JcarLdWeQj2rkidwD&fallback_url=http://bi.sciagnij.pl/0/.../dxwebsetup.exe&downloadAs=installer_DirectX_11_sciagnij.exe

http://www.signbinariesfarm.com/c?x=W2DC5q4t2X2KV dyYwYPS5X38s/C7SiNUwqnCDX3hjc=&c=mj9zCUNUzdfkwWdmJwXZhRVsCCrs2cQgMkMS4MGcPC8cgBiYaHtCvAFXTwi89l5wMuc5uTdDNmDVq2yWhCdUiK BVh1e7EiVoZKno0G1GRiONtzA38fBWScFCJFNTEir&fallback_url=http://bi.sciagnij.pl/0/.../dxwebsetup.exe&downloadAs=installer_DirectX_11_sciagnij.exe

http://www.signbinariesfarm.com/c?x=fFVx8TEEnXQAgLlfYB0Djj9V2AGCSFeq0a Kl0rsS0w=&c=TYNrohx VAb4B/VC4H4CHTZTMoYc8psXblYRjaebuge2NYJaXDs7CE4N6WHpyB3/mwNG/iOXHcmz 0htL9AWXCUM2EhyYI5V0qN6yfI09mJeqBUUhR3xSveO3jf5hcKD&fallback_url=http://bi.sciagnij.pl/0/.../dxwebsetup.exe&downloadAs=installer_DirectX_11_sciagnij.exe

http://www.signbinariesfarm.com/c?x=6oRLpN5tzOuSQTOpJHWGwzBJoiIOLuG7Ditd5oWjg5Q=&c=byVUML/xY8PQX1yqz0WDAOHKGWbU3TkvYDyMbtEc tXb7FvwSAD5BilhkDU1UQl/OGeD Cs9EENT9Nfft9H/cW8OleXj6CGjvWwPEmUBGkARyYjuOSKfLfyIOtFMsiQ7&fallback_url=http://bi.sciagnij.pl/0/.../dxwebsetup.exe&downloadAs=installer_DirectX_11_sciagnij.exe

http://www.signbinariesfarm.com/c?x=24xysL39hqe526IQQhPtnX28QBVrTDA PA2B3N/QkOI=&c=zVfoN3qzBJYfRZsN02FgY4LXLy4Xmgr6Km5MuAN6Juytv/FemJ/KiF681Yr487owNsNVae7CLCfEcS8XjyITmNxbYO1M2NeRZH9GqaQVB78f21mhHY6sFVrRfO2eBuXJ&fallback_url=http://bi.sciagnij.pl/0/.../dxwebsetup.exe&downloadAs=installer_DirectX_11_sciagnij.exe

http://www.signbinariesfarm.com/c?x= eLTRrt Kpf7gbQrJqFz1wTeo7tHGHnX0qsmxLYhdRI=&c=tVW/4h7DF6vm93tW8waHSC9JE7QTSuqymLA5FpbyAf7Q2jGfsQmkKr0oiv1kedNkTXoHSia8F53RZQw545sVlY/PtV0mohclL0Irpel3r7b/tVIhR6dvbDK08P3mdpsj&fallback_url=http://bi.sciagnij.pl/0/.../dxwebsetup.exe&downloadAs=installer_DirectX_11_sciagnij.exe

http://www.signbinariesfarm.com/c?x=/VEPFnDpdg iBq4dR1Lf 6X6oTQ84V0ajUwYNxaE6OI=&c=wi6c3iRvnwsKaFoRRuovgzh8SAvvjR7hneQ397BwlNOkl5TZTTh lkJgNT90ss/GH8M8OyRAmK8UAmB/iQO9kc6Z9Wbq5HunDPJPjldP2sWPVRTrMtFFY9NRkuWOOEaW&fallback_url=http://bi.sciagnij.pl/0/.../dxwebsetup.exe&downloadAs=installer_DirectX_11_sciagnij.exe

http://www.signbinariesfarm.com/c?x=sHJPBUImB1Hf c3Ft8PQK1x5zUNcJvVmjj4Btg7idKE=&c=/VPexBqW/0U4Ykr60S9ooeyUvkFHeNpleypCA7eAQ6A/ZVSi5qEiyJIbZdn55YbXcHjkAXpuMr38mfD58KO XJYw912SJugaVNDZPdL5YFgZSLvIfsoFeZKYlWiQwRJX&fallback_url=http://bi.sciagnij.pl/0/.../dxwebsetup.exe&downloadAs=installer_DirectX_11_sciagnij.exe

http://www.signbinariesfarm.com/c?x=DEqukDNG6duIrrx X79ek8gZO1HUsneXpc6Z4P4O jo=&c=kWhPRoCA280r7TQ4e/XRe7P4bWmy3kG8J50qFYzhiL ZeFeflUIRfYs1vPo1oZxchSgbSAP2LErAdLXrppg BrKebBgfdiPXkTZ0x1yGdkY9Ea8s2LeahQEs5nS8qxj4&fallback_url=http://bi.sciagnij.pl/0/.../dxwebsetup.exe&downloadAs=installer_DirectX_11_sciagnij.exe

http://www.signbinariesfarm.com/c?x=tmFOCTRSdZsKVxFIMblOzRO ixM1PKRtg/p 2GJhJI=&c=Hh0u57IM4Xy4AouspTVKVHi2GoJeSB98XS73re/VayCH0krCCzM12A dDbfrmRQzQbg47JpT30mnnV0E9ApdBcuOKQn mpi7CPCnLBTX1xQdnx6KZisRqiujVfiQWx/b&fallback_url=http://bi.sciagnij.pl/0/.../dxwebsetup.exe&downloadAs=installer_DirectX_11_sciagnij.exe

http://www.signbinariesfarm.com/c?x=/gbTWalyt5dU8mj3cVhwDeV2QPu6geBtxxy1yXXP5Ug=&c=wDirzrCJ/uKq55NUhWoQim/GG9ySfjHtMYXK/OUZGXIl4GgatXxPGS4eZ01y3yKsNA9vfoMOFZZq3RNteVZFfVn13q8tBykJzUuFrO4jg6X0WDNYDEezIzExX ynNyee&fallback_url=http://bi.sciagnij.pl/0/.../dxwebsetup.exe&downloadAs=installer_DirectX_11_sciagnij.exe

http://www.signbinariesfarm.com/c?x=BaiXnDSVzwtXxblmXQc6cIERxjh3/ Yp9rbyRgY4eA=&c=2JPpejdtj3JCQl o1RPtOiIcG2JPVdXjfMN4/zBAPflDexdVsFj8Be0cwIPIYkT0GbwINZB8J8N9iAHqMzN81 Z/rl tV7l1ju6gq8cfduXzaMBsr1SOvpw9 v9bViNH&fallback_url=http://bi.sciagnij.pl/0/.../dxwebsetup.exe&downloadAs=installer_DirectX_11_sciagnij.exe

http://www.signbinariesfarm.com/c?x=yCFCZdbWFhV6j3AjInfMijr IxqNDuX1oc9cpPL3hGA=&c=4ZrDwv7zRV42Me8sUba3W/v8obB4yqhNWFNntCzZpd14B7zO5jM3CYYOjyokG3ooqS13EXXVBGwF8is/jt/WwIA6G9Mq7VfAKJ7BfEzHv62JOl6oq1JhGst9WR27dfZ3&fallback_url=http://bi.sciagnij.pl/0/.../dxwebsetup.exe&downloadAs=installer_DirectX_11_sciagnij.exe

http://www.signbinariesfarm.com/c?x=Cto7cX7WnKaU/Q2wDcR/zun9yh4kPrK0jk28TRjg0vI=&c=IvaHgjJow6AmmwZlp4ONRJcBo10kToRw9dNIY98KHzDATMDXkPhLFJ2PyLoSx5iB1rIIGqroPlxEyz5HDc4ig3KiNbgMPW/3uGH rtTyK74XzqsdgZ6KfR2wHv1NA4Wu&fallback_url=http://bi.sciagnij.pl/0/.../dxwebsetup.exe&downloadAs=installer_DirectX_11_sciagnij.exe

http://www.signbinariesfarm.com/c?x=taMlvTJQUwZimNQt5/ithDb5w/XKG2V8 I8N Zv/pKA=&c=FF77eYl1iHRUVdum16nFWpYzWRhgWv05YrqVzFtNfuDqfFasv8Ck6bXTpq pm/b/oSRkRIGGsXJvmjyCSNBMZOGlLnTs2q9ckdfaLZ057yHOqT9mRqtECn52qsUe/9Ll&fallback_url=http://bi.sciagnij.pl/0/.../dxwebsetup.exe&downloadAs=installer_DirectX_11_sciagnij.exe

http://www.signbinariesfarm.com/c?x=cXR9HzZIlAsZmOSZj6b8WbpyBwEGF9Hkd27NDHkV8QE=&c=PCnUi1g1ybsPsp0m7vama xU65vdueonvY6tznoAUdimDL7A9uNTwjUuSz2SBImTZe8RAZBqMPZRt1leJ pq9aDOEepkHr34Yu qrr3MUHRV691aBvsaBCxsBevJj GB&fallback_url=http://bi.sciagnij.pl/0/.../dxwebsetup.exe&downloadAs=installer_DirectX_11_sciagnij.exe

http://www.signbinariesfarm.com/c?x=fc5K77p59V8Dh8lwvn3aC87g yPV2d2lffSyEBH82qU=&c=1ozzA3NFFWWJzi/0L8V3JVCounknOuYe4H9Bae1rb/x2MLnYgrmPwLCzSVncPMPO6VhhB6PELAP4NqxQAsTcu9V4xqk1PS/wnsU3vKUfurFP9a2ZVeUn8UA7s9JCFqdw&fallback_url=http://bi.sciagnij.pl/0/.../dxwebsetup.exe&downloadAs=installer_DirectX_11_sciagnij.exe

http://www.signbinariesfarm.com/c?x=ECvaG3gZnlZUQQ1ovBcl/Hvp/DQ2ww8u1PnZqXDoqNQ=&c=npu6IWbZhbb3cZMlr9BCiRD8mf1EfBI7RaWPMwQk6K4wXuhCfw94PADG5ZXFS2WSXsgcCXIbRSoscst4XEwWVBC3IuvIXIDpEldqKhcvrHYN/UH1SjABaPJgPJyE9ffR&fallback_url=http://bi.sciagnij.pl/0/.../dxwebsetup.exe&downloadAs=installer_DirectX_11_sciagnij.exe

http://www.signbinariesfarm.com/c?x=hOxtTdsgu9PGIF5gDeoDamNSo0dhBbObtRPWecgclyI=&c=Z9l9lC3SMEjNXRBzp0oPloaCz7lVkl8no0UQ/ZesDfzvcC2mVilpqhyg/LaKn3NKa7s6YwV033PYkkU d4QNUbGr4gHYk6SAOcRnL6EF3FGL3EBXaDNikXSv06ouu3xi&fallback_url=http://bi.sciagnij.pl/0/.../dxwebsetup.exe&downloadAs=installer_DirectX_11_sciagnij.exe

http://www.signbinariesfarm.com/c?x=1je1bO2Gu1rsj5unU dKxxpGzsNvyHyPKE1R4fjsts4=&c=oWrpd51QI7vjKFhCWP1W6m6WmFXI0 EUcdkPShmnx02QJKEKq4n HtXS1Jtireeimw7x e0WcL/TXUwoH9zTIcxUs2Y7nor yXIya8r4KJJrErY6PabjMdHkRqdCetJA&fallback_url=http://bi.sciagnij.pl/0/.../dxwebsetup.exe&downloadAs=installer_DirectX_11_sciagnij.exe

http://www.signbinariesfarm.com/c?x=fN7wxJ7vQChleoFjlWWsa JU1eC9hpUR 8ut75PlRMw=&c=v0eP Kz4PHBfZ42EonHbIP9blmcwamHcu9XtEprBRS/2IejQpCLM72iYuIyt0IUtrpEcyDZ keAo85NU6d ghb0RZhs pCLf2L1IRdWEi16e8sBAX0uCaygyQhE7Ps n&fallback_url=http://bi.sciagnij.pl/0/.../dxwebsetup.exe&downloadAs=installer_DirectX_11_sciagnij.exe

Latest 30 of 108 download URLs

Remove installer_directx_11_sciagnij.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.