home

installer_microsoft_powerpoint_sciagnij.exe

Tutal

The application installer_microsoft_powerpoint_sciagnij.exe, “Tutal Setup ” has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the Inno Setup installer, however the file is not signed with an authenticode signature from a trusted source. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions.
Product:
Tutal

Description:
Tutal Setup

MD5:
59758792b84c344565abed33d1fb4969

SHA-1:
96d514b55f8ff6f054bf13870ac703bba4542888

SHA-256:
4bf113a5e0d5f61aaf446bf29ce14afbefac195ca8467d3311da6296f8cf94b0

Scanner detections:
1 / 68

Status:
Potentially unwanted

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Analysis date:
11/16/2024 1:25:15 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCore.RE11 (M)
16.3.18.14

File size:
1 MB (1,068,339 bytes)

Product version:
1.7

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Common path:
C:\users\{user}\downloads\installer_microsoft_powerpoint_sciagnij.exe

File PE Metadata
Compilation timestamp:
6/19/1992 10:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:zn0SHPvp1wR5NFs8gNSBWODwDCJAfWfnz5XrTg:z0SJmw8gUBWHmAur57E

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, 53, C9, FF, FF, E8, 9A, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, 24, CE, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, 24, CE...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file installer_microsoft_powerpoint_sciagnij.exe has been seen being distributed by the following 50 URLs.

http://www.signbinariesfarm.com/c?x=pibuzbGwNxAy896vkcnyHZvXw6qrSb/buCcEXqYt3 E=&c=m f9fPdpAtj9RTN fRSv35PeByhmpOxVFoeZaurPdrp8T 9uO/QM9grMpxE6bJ59ZSAVGpptYbI qhfbukRJmV3K Zk/LZTqW7A40KjMDvKn8ivLimVo41vrlJNXOoS9&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_PowerPoint_sciagnij.exe

http://www.signbinariesfarm.com/c?x=03 T7Qw2YxfKgKxH2ISgXpsspZJ8qigDcHeaIXuec4w=&c=oF SiEeYL2luhr9VhrGsPwApeQD4mFmpJpIFfHDJuj6zGUVMWB7bm5nmCaILXy 0kqL9O3bJaYw2AZc J5XSXIDqVQTFRQSL HwCTHE5Vt5wzJnX/ks83Lh1n0WxM2WY&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_PowerPoint_sciagnij.exe

http://www.signbinariesfarm.com/c?x=xtjixG457nvycB0XJKtdrlIzBf/DNPOGbrRKIIWQw5I=&c=0rQdupfyna/7tBqgeSnIGXdMtk4vuw1VY1 X9vn1kufRDQOfs2JWhJ20gLtvQO7OlyCmPnPeTW9hGWxGruT5mxdN1ssNaeozf20vUeAnCf srZuO24fuY6ekwPmLq8qV&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_PowerPoint_sciagnij.exe

http://www.signbinariesfarm.com/c?x=4sI1HjQPzuf70YyQy825Z35 8tIbkgaocA/mvJLoxxo=&c=oMnrjJXj3wxvh2DKKYs/bBftDIPO5 arsNHn54vvY0lTpuiQ0O16O/7/v4cuztfUYBsAZXKY7tuzw5no13H8amRQdqDysEidM 9GMg81X8tpkLjHhSSbSJ0VlwUZ5NLp&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_PowerPoint_sciagnij.exe

http://www.signbinariesfarm.com/c?x=uPM1cxa82ZOCLPxwAnYrfDV/t8 6t8QhhO8skB GpjI=&c=pjZ0njhHMhBojvzAHUq2q3PjHBEk1dtz5UHx0ZF3vkFYSHVnYxTH0JUURdaxhVrgYwGbGlievaerCePyS9uqqbRdGy8LNBtym23FQD sVu4/OhkUtQEfj1cdbnWUlTIv&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_PowerPoint_sciagnij.exe

http://www.signbinariesfarm.com/c?x=rMhdKGagHMkvzPhmC41hK2syOaXniqXtuipM86vX2Vo=&c=3Qg2Mw6XIXb4WXVFH/iFLgynBPibb01fCBne2TUDABHCrYRIj2G8awTphzrMpJDHK4oFCWiBaVmWPIn5IIUuhfy8YFasU7YroHtPUYyeKmLjA3IKQETsF4MyQrZIR/jr&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_PowerPoint_sciagnij.exe

http://www.signbinariesfarm.com/c?x=ecpKlzO6yzBnNHQ9B Mn9tey5THfIaCeq7xQt5CugQo=&c=egjjXfs41LBsSlCBJv4TA/xT13T78cA3J5jPlWErBby0bb/DWwcd8VgXqBj7R7B08jWcMa6b1GakTkxmXb435E2wkb7m982GHOeFZBr/9WN6XyjaoD5XIpB8HqEuuRkX&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_PowerPoint_sciagnij.exe

http://www.signbinariesfarm.com/c?x=2xDO1ZJUAVb7IgBojlRapqKacreIk/RtDQv2wjgdQ9U=&c=h07s6fEMHiEbS47J5ETjoRGgqOLX61hwgDNpPELbKEZ0itJgUYG91U JvGXakY2xYKXLyi3VG2iihxMtcBpODIecn/kxJrLv5VDMViKbdLfHiwiVLpcVxuUvrNMZbO5z&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_PowerPoint_sciagnij.exe

http://www.signbinariesfarm.com/c?x=FXy6F0dpf0M3QYyEvAPp7nWJRBqEqwTgkZfSawoQ0Y0=&c=IfWKEVE4rWA5keHtOVlq8hlXj/L20oSGQ07dxcfJ57UPe Jyc4ii L7w5bShZPVhmBzFGT5IbuaahKHjwrUeZ3gfdfZnZgeWnxTaN34ADjjTsKIoiygm9ZA1s7AeIYiw&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_PowerPoint_sciagnij.exe

http://www.signbinariesfarm.com/c?x=cjIinPgIN/6vDdFcPFzaphPc2vYDP4eiL70F866N8xE=&c=VXlm2wR2rInMBQLnF2whc1mRMPrFd0WEzLjWORGxkbw1mjwKkIbsYvDbLMm0GUXEKH305ybakTnaRXRJ6jcFPFyKP7rSNpnA0r58LM1 qmH2jKT/aFT74DNRI5LnkeNf&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_PowerPoint_sciagnij.exe

http://www.signbinariesfarm.com/c?x=Vvlqmu3L2/fzfT BZ57/PSH2UumvnfNbgqfZbgJLB4k=&c=DIEDxv5kIjcb4VR46no4QiVc5SJD0lG1wSSyqGhVr4ZPZO5EZ99qWZZSAZuS50pQxkkgfn5 zBHIZYpDqbSchKQMK4cJEFvNHEdeXsh6Zrpvua1GYnpElxbY4WNpzLO &fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_PowerPoint_sciagnij.exe

http://www.signbinariesfarm.com/c?x=537Ll3J QVcr0KVQj4nwNOQ5UtCA1LwfAQEkj1MBUFc=&c=toANbi32U9TLI pT6MfICsg7Ej1g0WgP22 2e4Mq3154XmZg3FNp4SHmbc7ZChmXOUHgmltbpRAxyyV675ovteVfRSbzC76Z1WPZk6zsHyCM4NMAPBgx0QuOOFCXN2PG&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_PowerPoint_sciagnij.exe

http://www.signbinariesfarm.com/c?x=PWINjcUGUjYolaeEKGoObjKECVxmrCWP30CKOLuG1tE=&c=eCVb2bQHYXf6d9pmPz hw0jhMOSQMDLu7AS3U4/eIC693YDT9ATGGqyy1RbEU5nujVgp2SofhIWKFU70OAKa/AtYeUGFWx22YzbLYrpcl9SH7YcLhQQotaK6CmB//zRD&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_PowerPoint_sciagnij.exe

http://www.signbinariesfarm.com/c?x=ZXccVusN6WHzqhO 66Xb6FKXNB0okA2PgvIX9OCYUDU=&c=vTsGTIZbFzEE0P6i3juOVzuUVQ3/fzZlp6NHNKMGGxAhK8DoVJfKqI4Mnm11Z7X2/gUIyXEpnVbnmQ2AvwACXvsIM/vOlhQ7GZHRwKcU663bsCvkWx0rQ 0z/pglDnyN&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_PowerPoint_sciagnij.exe

http://www.signbinariesfarm.com/c?x=JBtb/jrL7u2KjFQ 6sN 4QEl9n92252FbuNU70jdJ8Y=&c=DoLGgV5a00n0EFP8eMiTZggecwQEreSlurNUxfWKqBAEUQU1gAMHybg1k620iE4ft3tgdZJTXpXJCc4i GZqONcdMW kW32bou3L9V8em O90Uzlw9gNABUtXEPYE63x&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_PowerPoint_sciagnij.exe

http://www.signbinariesfarm.com/c?x=r/ixbqHBbPqZ9ZPIX7/ryLqQHPSjPd7he2OOXWy9JPQ=&c=x6Hm6hthTHk7bZ3oE6lmLZByNzuPgUZzCQBvIEnNs1HDnrDX3q7z MyJmdO7zzLkhSNhBxPNutgObcLP/uIvSJIPQQMqRSSapyntDj8TWt/pxCqJzKobUWEaimgZuQCi&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_PowerPoint_sciagnij.exe

http://www.signbinariesfarm.com/c?x=aaVhiVSGCgNiFWkmqgIis3z oFe5bA1R3gQw1FoI5p8=&c=xrR6HQ7VhX4jdvFfXfCSkNsCbAC Pw695KpI00LbuAeLGzM1W4DwbO9Mcm0CYv5BaRR0HZHvHUjG9FWpqi93O6kr72B QGZ01IeRj36HwGNFmD8nn5rxd9rxrQDxaNhw&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_PowerPoint_sciagnij.exe

http://www.signbinariesfarm.com/c?x=wPRnlaF6 KrcezMkTTkE0McRFLYI/wmdkdzG3ErrGfs=&c=Al4lsxUcCfBZ i8TUnO8KxHfaZ32UtTJG1opxjhnk12fTZg7jwv1aOXcHGWFviBLk0m2I1u NqCxO1RLUaJ7PaUZ5crtlngBR8sTziv8vcRzxgumXdWDdp2HHz/nnYOO&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_PowerPoint_sciagnij.exe

http://www.signbinariesfarm.com/c?x=2irWQe3KkzoBH0QKHYXyhEoUm3kxP2VDhicLObJMrdQ=&c=dV3tfmLyWCd0V3N5mOIBQIp0TMPTho/xo4n0c9Ox5jSzBbQqSkFFTjJoFOcKkZgXn8qYjAHbCnyZeA9m509DkTl8MNBF8SRFtD 4CVG2oLsV/JrygM1qlTGrjGdBD1x/&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_PowerPoint_sciagnij.exe

http://www.signbinariesfarm.com/c?x=sfBNgfZIXhLN/qEo/8vAg1WxD2zj4Cd5z3E96CiSRAQ=&c=VqlPIYdyAjjczxhSgw bOYfiwKLmgVs237gILbHkzJlWDzJi6p06FCwkfvbGONLz/HaQA2U0AJYl2jqy3juQL9zefv4P G/ECgSMZWI7Yr1NuUN2oicnYljPOcWU8R0r&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_PowerPoint_sciagnij.exe

http://www.signbinariesfarm.com/c?x=n0jWSOcOvW 2QoRmtj7cKCafWIUGyIb44JxmnQMgTl0=&c=sY5Y3nvlTpBVlYiaTxWI0BcfFZslcGM9Bf21lANZw7MXmrPkesxiuJQfB/5rjTSz02yOXrGFQXgp50N 8DrelhWQyLtTtIrLPRYfdUXeS2FfWPIZqD4H2pAhFWuiDl6 &fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_PowerPoint_sciagnij.exe

http://www.signbinariesfarm.com/c?x=cSDFngLuCtjPi8YiqzOIwiy6bTEv4P4CPT6/b7qIH5w=&c=FJMMWrpPgZhnXZFXY453vsKSIapQxTeGQd6Rb3c81q3uRr42zXzCsK TzSYx2b 2djCiVq/D1VQb5sfI 7m3YaZjoofqCrVs1JBgYpsFivIy6erlgJ5hCknfep3tmCJP&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_PowerPoint_sciagnij.exe

http://www.signbinariesfarm.com/c?x=wUTYXrII7eOIoJH2sFTiB4eMF6nZpjkV J/zVbCF Ls=&c=GFPs6qq0m47eebbHtJp/9TGW84SlQiwExWeCo/NKrCAeJdtFewNTINgnkcxO1t0Yd 4Yw465R1EkSMJvH5rIgyRADr9iu0nlcB89W0bU6GXociTju2R4ThrfHoUb UdZ&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_PowerPoint_sciagnij.exe

http://www.signbinariesfarm.com/c?x=QrjRGdbVNvZI3295lyoNpmogfin1FKmWotU05t9Q/o4=&c=mXbAI5JrlNgYQikVRP43N3 VWzGDnGNgCIMYAD0l3iyO3giLbuKwITVMJdfa0o8JlsO9jBs6ELdUf1Ustwu7v64wMYWxgKbKIKatueukQj48HJB39S0ft3iy59ck7TP2&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_PowerPoint_sciagnij.exe

http://www.signbinariesfarm.com/c?x=olyuTHNf1kSPH25LUHjBQ4yjORrgBT29rzv1qEam7Nk=&c=ZiHsm3jdT6cdvBf21rR/cK6SCBdYmJqWKssVHHWqkEF4pam4h9aURwhSOeD1gzd2/oyVv1WPOdLRFHXs4Q 6RWiXBvMsXbT5t/HOEXX77s9ttDTwd9JrFBR0nY65hDml&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_PowerPoint_sciagnij.exe

http://www.signbinariesfarm.com/c?x=yan7zCYZI2dmyT2PNe/FDbL5Wam/E4Q3gFnwblp7 c=&c=EPtct66hOmtyjtIds3gNBMUvt/zAgDUCn6BRnpyPHL060oSip/t1GJppW8KY63tJSECG1Ww1jxOTKqDrYQBnHHypV9AQuCY3QfjQF5v8IRzPn 76gTLGpZhROT6ulrtG&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_PowerPoint_sciagnij.exe

http://www.signbinariesfarm.com/c?x=XnXCseLv4zqehRBDuqZm3D8sVpjGHt1XXmdau4R2 g=&c= T/eJSp8lB5LDHc6sg/CKkgYCjPp1eWHz/CL1MLxkIm8FlPTtY0ixABGVxAaK39ZOotcmx7BOzSsEbmsTnrYjXwo8atyn29S wIW0evlfUjnmj9xe wHCOrpkloFvLHd&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_PowerPoint_sciagnij.exe

http://www.signbinariesfarm.com/c?x=BFY7IvKlQSeDHnlkpwSnjgQjbBndO0waWObd0BUegP4=&c=jGQ1sHcKGaYBrtsPO0wHxFSq1HX73OWnpadzfypCMZyG252FlZb87l6EWeQYVVUqYMeXLYrPluqT7h2HtzHIyyvZ22xqruVlkRz2Xxvt3zfh5E a2AWx1acls0rEXGYF&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_PowerPoint_sciagnij.exe

http://www.signbinariesfarm.com/c?x=7PQ6H4fPENCKyJsEqOwIWFr0tOUKlT1AXxtQmnQiQC4=&c=15qaL79MUTy6QK6E ViAOFwc1IQXWSOXKeOOzNRhrdMdQN6YWFQKhiyeNnUT7V7dFvSnki h8NNH3gxX0aoQwJf9RizH7vjdQiM/ sT9fujw/GHovuwtPuUSHhLr792y&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_PowerPoint_sciagnij.exe

http://www.signbinariesfarm.com/c?x=CgGHKWFhyjqmh/Y24ZfV22Mr7Tv9mRWDCLHQraqRzM4=&c=NGxy/rve9kFuXWZ3Zj9mqekG2n95iwCk5S3hkDvSEVVBN0IhPHSq72/MfkiiHhR0U5gZSSww81qrVZMzruNavcXdxVnHIK9Y/X/j8YK7geA8XCR/Iu20PFO4ELnvkeZV&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_PowerPoint_sciagnij.exe

Latest 30 of 213 download URLs

Remove installer_microsoft_powerpoint_sciagnij.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.