home

installer_microsoft_powerpoint_sciagnij.exe

Debegarune

Beseg

The application installer_microsoft_powerpoint_sciagnij.exe, “Debegarune Setup ” has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the Inno Setup installer, however the file is not signed with an authenticode signature from a trusted source. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions.
Publisher:
Beseg

Product:
Debegarune

Description:
Debegarune Setup

MD5:
32f04340e436fc26eddede4a55cc1f78

SHA-1:
ecc16faa48e8df8596a1c9ab0f00045e1d9f7f75

SHA-256:
c7aeaef53fca5677bfc07c3ec2fd42c527e97bdd8df14dd580e12bd933a81e7a

Scanner detections:
1 / 68

Status:
Potentially unwanted

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Analysis date:
11/15/2024 8:47:03 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCore.RE11 (M)
16.4.13.14

File size:
915 KB (936,976 bytes)

Product version:
1.0.3

Copyright:
Fast

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Common path:
C:\users\{user}\downloads\installer_microsoft_powerpoint_sciagnij.exe

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:rwcSeGbEsZPjsFsNgE0NqxzJVd74pgZnO0G0I0STS89EirLZ0:rPwPwiNOAzJ0GZnOAbSu8WirLa

Entry address:
0xA5F8

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, CE, 8A, FF, FF, E8, D5, 9C, FF, FF, E8, 64, 9F, FF, FF, E8, 07, A0, FF, FF, E8, A6, BF, FF, FF, E8, 11, E9, FF, FF, E8, 78, EA, FF, FF, 33, C0, 55, 68, C9, AC, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 92, AC, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 26, F5, FF, FF, E8, 11, F1, FF, FF, 80, 3D, 34, B2, 40, 00, 00, 74, 0C, E8, 23, F6, FF, FF, 33, C0, E8, C4, 97, FF, FF, 8D, 55, F0, 33, C0, E8, B6, C5, FF, FF, 8B, 55...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
39.5 KB (40,448 bytes)

The file installer_microsoft_powerpoint_sciagnij.exe has been seen being distributed by the following 50 URLs.

http://www.downloadstodaybest.com/c?x=vp5gYkzJOR sovret4/epvGcq7GxQdKoffGMRrVCKTM=&c=SOmnA15niBM3AxlJ0lomCGZ2uZ1B1of3AaLG52bEDVhPYyoNJjBxXqdko78 TwB/ Pt26Kyg9DLlbq45EtBTgcPnKZ9j2YEkKmSk23rJDpVh2VR3adzFKYibtDZiPzBS&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_PowerPoint_sciagnij.exe

http://www.applicationsbulkbundle.com/c?x=hOeiygPc7 RX/tybFEqkgWP Z6m4v4O6tm2U8ebWrXE=&c=a5qyIBoVk89aACAaAB0TXIJtOSJE GKn0cJYT6ss6xvNK0nsVuXlMnMGMFLMP73j32Ewa29zUqX5Iwb2prXs2kN9fO56Atb8deUtY9U3yb7Jt4o6bxUsPt96Oepxtmn8&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_PowerPoint_sciagnij.exe

http://www.stockfuncontent.com/c?x=zh2ykiJ9rnK8WHoYmyZiuA7oQHHOwNrE7DcqWQqHPfY=&c=4d 96dby0nYcTgHHs7I vfXvg2jJEEhpUKJs6oC3wKSv07Kt2r6eOPW20I sdzw5r5vdlRMJ/20iCC0CTY03dP7k0DeI9ddDfExsKR4UOIJHsUdHCqVIJqgriXs X04k&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_PowerPoint_sciagnij.exe

http://www.vaultsharestock.com/c?x=EOIBt3w9YXyWtkBMyaL327 m8Gex60yVx2N6W MOhws=&c=B60acY80IFDUkn50E3iwafCawxuUrssiN9CTI91boVodyfFKjidBCV3eVGHwZN4p az62MZgl7hgBiCNRcrROTei24ucYB/UemNBO8hh7QNDpiuCZLtDuNSFNdp3K5ux&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_PowerPoint_sciagnij.exe

http://www.townbesttour.com/c?x=ci fXECbyd8ZER0rtZRJU7bKsUhaLcpdixa/Y/ojvws=&c=ZZBLLfSf4NQYcRjBYUcxVV/8uKY xkJVnnBNDhX12DO4zyRlNO valFFNctE5k4C 1ve3CRYRW9BIDq1o8W5k6Zori090YC3bkdf MXMhc5C971sIioWhzhIpjCrDSZH&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_PowerPoint_sciagnij.exe

http://www.downloadstodaybest.com/c?x=nqJ fi7llJM3lvUJwn5Ly3Qy990ZwWLjKgBx0po8s g=&c=mNTNbsYmvbpYuskD5tZqw4puQAl5 9a6lEzXw3ubHQZaU2siy6UTEQ9VRoiAb0MHUyPkY4m RtsIdnH uBlHhOH2FP80ghWzBTw6JWxjPG jgY8NtuXejFyJf2GTB8IO&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_PowerPoint_sciagnij.exe

http://www.vaultsharestock.com/c?x=F944rBqyl5fLKzcMpZ6ZP/TcirWGFn/iHxRFssYzrO4=&c=Xa5tH6OF3ZAigTlsubJT RRBnFrlpKEB/W4sk3896z0MlW0GMmiKrXwhaK0U0/771oXsD5D4h0BOgh2bxzIrNNRekZpTrQK3sgun8EwEbLxrblryo9TChzeHruQP e36&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_PowerPoint_sciagnij.exe

http://www.applicationsbulkbundle.com/c?x=UHYO6m CFMJgN KnUXN/CvcXVxYQL4F2chMpy4s2MdM=&c=VQ7ilsUvbvbGqEhhUlTIbAktWp542Ocvjn Cd9wDuM4iD yDEY0lwlUKFqKdZKMliGNUxJYOYrhVQNgz9867OWmnHUn7sNMpAhcccztwOLWhFkdZ/Bg8JzvBMrd0PTMu&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_PowerPoint_sciagnij.exe

http://www.vaultsharestock.com/c?x=y5DymQUiaHR86W5rg0lG52O25rQSUj37MH3qdL301Lk=&c=bekLgpwndpldC9ZSBBSQZgUn53OQMZLPIGQek5e/E2WuLfd aDKoZuqhjR5woNQ6qKmkSvqj2lNKuQX2/AYnbjQmhGRgYy7webGV2Dr4KxsVJwQGq9ZtyA16Lt41JKAH&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_PowerPoint_sciagnij.exe

http://www.applicationsbulkbundle.com/c?x=39IFr4uJXIAxSwlN/1N3K5EE4AszFncBUkcTu/qOONE=&c=oXvFQAANTw2GS0e3nSQ6QG iIrf J17ob9ZuoEN81nKS0 WNksiBJPVxv2QNd7YmmG QhXwMQLxOiFftCVS4hz6vSh0P23zX9p7AeygRunUlQpdE3njA ocG42xVXUE&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_PowerPoint_sciagnij.exe

http://www.applicationsbulkbundle.com/c?x=9mAYEmxFzM bFizHF9gzUMhZtKtUl4nc6f96bgLkkE8=&c=iybW4GN/drXK8zM3g8T9ttkxVWpFZ108dUYnKdviBL1KBIfVQrYd2hh5l5lRqOC2yVDSb6wwZ4pt1g4ZLQBcntAFhpgpbxyp2i5Zgh5iag4D3a ErDnUuYmaM8t6CNta&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_PowerPoint_sciagnij.exe

http://www.downloadstodaybest.com/c?x=tqyuV52XXISviI9ghavx0cZOhZCXxCQ xTBoj8eOm7U=&c= lZgIWVejcp1xNdQs66XXAQYwSDY0fY 624 w4HFn8TwlFIrsH1NlZDmCJztJiNrZ uzPiB3mu19K7 dZ8GRIrPGeWAvNcBUO9F8PhP7wFaUWSB7TYU6oLP/LyvNmAsX&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_PowerPoint_sciagnij.exe

http://www.appstoursbulk.com/c?x=8V1cYVR/XisS qPLYLg6K8lEZcl/dAqMGylzh0oO17g=&c=sExlQso6/L3ICPaIesjLAOCWncSNpMFI7IEc ybE8qEcf4tZCz0 QTPMspS FjORhJdQw8gKEloKmFnft2Ph3ateR1XfMfhRFHA3OwRAhWOKdut ckz3SYgVEHh0d7qR&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_PowerPoint_sciagnij.exe

http://www.vaultsharestock.com/c?x=2xk/BUnBbK5TDi515FCuZBZ2ch4uyb29KAIzXWdkKgo=&c=dJkrmrYgSNKDyDR5mKc6PXNkMN0ESViP8wf6dCREjK43R2UgQbYMi/H6B6ZwPCXuOsOxmDgUqz6WbcAP7T2Sxx2hxUKoOVCAq3 5j1ebkGzu/OOiv76nGQDIoQGrT2Af&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_PowerPoint_sciagnij.exe

http://www.vaultsharestock.com/c?x=RGMoD5CE9d/y J/mM40lyagzZAjIva5YJa2Nla8VpBc=&c=TZ55kWaC5dnM6D/J6nA9LK/nDSoWSkMRcxE0jhqqYyPShNxWWUpMB6H3oHqaaM47Q6zpLYxjftDXgwQJwVtpMLakoLkDJIHlEHw1v01lYzJWs2tPKKPcvH2NJhIzc12H&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_PowerPoint_sciagnij.exe

http://www.vaultsharestock.com/c?x=XeMsgkwY9i6POH6H4ga6g6YD2hBvhCNUig2do0Dxi1s=&c=tmAi5TMT/B rr6cKQoyFkeXzxe 5xNRbFpuj2rRXIzCPJ0uJC6zimmAL99 4lw2VhpMJy2fC4PU1oZNxf3/kkrJWYJXl1bton3R0IX2/Hpm7v/3b6MT2Tejaq2rlO1S &fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_PowerPoint_sciagnij.exe

http://www.vaultsharestock.com/c?x=Ee2HrTyc /vHQUNAKDEc5SF6Hqa9lkk5TGLshXwzpCg=&c=Mrr1cEdjyvdAodpY8KD5bQlDYtd6KGKcFVCoMVHPdVZP6IbtdwsrnIMCDxCSixwxrG4TxI0xkbMqeESu4l9Wvd7gEVZNTLtgWgRNDensw3AGtrOmOqHBMrdjoknqS0kE&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_PowerPoint_sciagnij.exe

http://www.vaultsharestock.com/c?x=M zNtzyG31gcLO2oZRgCghEYZdzAx1VUXC9sY8tRSHE=&c=ziooVD6B0Jn5jaVeJwhgOYp8OlcesXYVpUUZjNeb006j6QB7J3D02hiXD oSCGSFgaCZaR3oVvryDhYnYezpGQQewzFK9dwFA6hPyh3AP0as5gWg5wx1ivLxcyqlbOAb&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_PowerPoint_sciagnij.exe

http://www.vaultsharestock.com/c?x=O9sYAAVb416JkWEarl45RojrQ4QrCtEBapuDgnxSunc=&c=JNINjg9Dy29levhZoDBe42u0/d9kDcMdGpdyM/HioML1l00zNiZVbzeQq4zrl57dX2uFDZBgse5JxGoi0s4uZDYpFiVb/cq3tT1FXWBJyYu9RQuTBGJaZi90GPhSZo7Q&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_PowerPoint_sciagnij.exe

http://www.tourcentralbundle.com/c?x=WHOYgDXFkj/iByspdPjxygspK4fBdG4nk6lJolQKUKA=&c=fc0Ev2XvfHZbQkNREWGyAVUmSCGIoVBajVE3/hHu3vpxL1Czpv0qvsbQ3AH9vfF0hgd4CpyG1GgnUBSzhtVF5Gpp7UZwtvmpxtFI1Izl/mLhRpyfCj34ywihGov272SL&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_PowerPoint_sciagnij.exe

http://www.vaultsharestock.com/c?x=WA/7Cr46ub5ucYPhj1RQMwgKggK8bQpnCZPTRtFBfJc=&c=eOkhlZeAoqKnYqqsruoVtQdMSxGQ5FGnRq10DrKOAWCxFa8c2e0yHvLlG/lnfivbVQ2potn904PmJWUGpM5T5HGs/4gMRo7vYmWw53azw7HtJCn5PEu9iPRclO26JInk&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_PowerPoint_sciagnij.exe

http://www.shareclearbundles.com/c?x=6nO17Qpiod/XyPDhjxyywVRLAOzQJoHwJN9iG2bpEt0=&c=4f1neyKxOMqPq6azKVaO9f/jsnastwtGjaM4nNZOWEq0DZZYiw32/h8RK/MOGAOMXPpyzFSAMyYFM/oJ7Kx2EaYwyYxcJkrZXv2qkyoC4DnAefmVMhTzKaWUnMnd1bJ8&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_PowerPoint_sciagnij.exe

http://www.appstoursbulk.com/c?x=0zApgscWSYf/mqHiglC4020s8oyfI0RRKpeTJh0PsTc=&c=o42oM53KF6bNq3RsmjUnOAv90tsJIrKeNvfQti98wdWIS5yaNy3IbxPdaae6c847PfhPlWtU7MzbLePVodvfn0NQ q17PcNXl1 6giXwjObmH/wa2uVbacAXvENof2bb&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_PowerPoint_sciagnij.exe

http://www.downloadstodaybest.com/c?x=W2CZCRCOL9N9W/ EseChf0B/kWA8FvQXPdyHX5 dqb4=&c=Pi6FzQ bqQNjpLVigZY kS6cB VaTCkSHNDICds6XT3xikV969MLXaPkwPoyopCNAYJbxKBmOLq7IDvDUqA30/1fngSGnI0j5zBsqa45fV5U 959klsFz1DukmbIo Be&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_PowerPoint_sciagnij.exe

http://www.vaultsharestock.com/c?x=/lbhIrT1jpe4nvwY1EC8q6bmUxGzWMSp2nodXjmtq0E=&c=VtcGXil809tNg9eNN1Nl83KvlYTt5JJ2KcnsnIsC p4QhJEud63m8NewZc5GVd9EoMmJLFu0k9PRjFTHDKYcOhzuf1R0QLPSZmUumxmfWr0ouc4TQX5x/17Dht7 tEgo&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_PowerPoint_sciagnij.exe

http://www.vaultsharestock.com/c?x=ryzAgLesUgftGfcCrlJNdqUozgkJUhR7rPxfVZrHRpo=&c=cC8GOUTYBPBD7BdLxC9c5WUrBDLBdMCk9Pi8L0MuLlcDNeWjB83PfsFMjUeauezX7OnLU5Obr8ljWx6yn iOVL7whsv/iwhzro/qxTGZ0YheyY5gUHx8teqQ6jL1z9Lc&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_PowerPoint_sciagnij.exe

http://www.vaultsharestock.com/c?x=bB3Zr9g545MENMyPfhwnr3ZFdHW2Wrw5OqaZSrPDbvc=&c=eDKC1FXh182/SDACBoj7aSsN8u urbiAgHnRKe138loeNYl4GM8DSl2x6isWVg1A8hY5DhYJNvFlnRDK3piw2gC6DfbnUyvBLXdWz/xQeavILxpov0lc2RP8jGVmk1pQ&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_PowerPoint_sciagnij.exe

http://www.binariestourdownload.com/c?x=/8LTc/VZfF3qCK5DfnyWmnMQR8p3CqP8hEoCql1VaH0=&c=/nCdMGT4561GnlynYfgAkQLH841GYTAud/zc7HLPddWzDJA/ktGG1V2bkkcLZdUXJp2s3G/iGRhdsKWRNHTTPrLU0D/g/7HdaNhoS0vnc9nR5t7PJWx5Wg3yk0Y4W0Gw&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_PowerPoint_sciagnij.exe

http://www.vaultsharestock.com/c?x=aK8unuDm/4LOXxCGP4MVIXE v25iWH8XvM9sfn63Rzk=&c=18wlXm4bCb7z 8zSv1oQseZaJjvM6fJM6b/UjU8ItuNtIldKx47ueIkETWUO8RjyCu7eFa4SgZLSb7vvpzbmlzgDfnvecqcGFDIsHqqS1q39CdaBaolTqUyQ5DRbUs z&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_PowerPoint_sciagnij.exe

http://www.vaultsharestock.com/c?x=tNlh/adeQORRKtt9dBopYKbeq2L0qT4vGxzKR0irXY4=&c=UNPh4TOWoA1vFdk/cukqKUKtyzq3xAHJtGEpT0UwYfRrpKxL6jbmKof1FM604AY8xaGwovcBEFNypL2Pguec3GTvz7kZno4zxMrNy/Msey0xSHx leLVFpZn2hTGNM8V&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_PowerPoint_sciagnij.exe

Latest 30 of 123 download URLs

Remove installer_microsoft_powerpoint_sciagnij.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.