home

installer_microsoft_word_sciagnij.exe

Prog

Dove Max (Fried Cookie Ltd.)

The Fried Cookie installer utilizes the InstallCore download manager which may bundle additional offers for various ad-supported toolbars, extensions and utilities. The application installer_microsoft_word_sciagnij.exe, “Prog Setup ” by Dove Max (Fried Cookie) has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions.
Publisher:
Soft web   (signed by Dove Max (Fried Cookie Ltd.))

Product:
Prog

Description:
Prog Setup

Version:
2.4.1.3

MD5:
3da465177c8909b12eff85ef6b5e5600

SHA-1:
4246a71f7188cb8f81dad82889b0d22aa730e75d

SHA-256:
f43d70440f5322472606988146d755990c1e2b7b6f370a502e6d82e311c5fa7e

Scanner detections:
1 / 68

Status:
Adware

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Description:
This is also known as bundleware, or downloadware, which is an downloader designed to simply deliver ad-supported offers in the setup routine of an otherwise legitimate software.

Analysis date:
11/24/2024 5:22:45 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCore.Installer.Installer (M)
16.1.8.4

File size:
912.8 KB (934,704 bytes)

Product version:
3.2

Copyright:
Internet Generic

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\installer_microsoft_word_sciagnij.exe

Digital Signature
Signed by:
Dove Max (Fried Cookie Ltd.)

Authority:
GlobalSign nv-sa

Valid from:
12/16/2015 1:33:00 PM

Valid to:
7/24/2016 4:27:26 PM

Subject:
CN=Dove Max (Fried Cookie Ltd.), O=Dove Max (Fried Cookie Ltd.), L=Tel Aviv, C=IL

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121CE9583D2CC8D85A6A453411F33888A7F

File PE Metadata
Compilation timestamp:
6/19/1992 11:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:zH1Cc40vhBQ0MWzwHC8y8U9hh2t0E+F0+W6a8rM6c:zVCP0JB4KHzh2tD+F0+WF51

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, BF, A9, FF, FF, E8, 5E, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, 24, CE, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, 24, CE...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file installer_microsoft_word_sciagnij.exe has been seen being distributed by the following 35 URLs.

http://www.signsbodydownloads.com/c?x=ODGR5HVwNmPBt2VEHkB67H4SL/pUg8zLlOBIiXj1 PM=&c=ana6/ar HCZWPPt7Czru3Rg2GqLqJMY twZ0oi2xFRcwLnu67kI0CH NnZwO91YvP26Ruu8gSHbuJJgx9h0jhXkLdnBqwbrYnGZ9Yww0nNOH fqPk0YpgKfLQpreUE9&fallback_url=http://office.microsoft.com/pl-pl/.../bezpatna-wersja-probna-produkty-microsoft-office-i-office-365-FX102858196.aspx&downloadAs=installer_Microsoft_Word_sciagnij.exe

http://www.sendpresentcontent.com/c?x=YQEUsmYJRLCgg52CjCM1S971eLrhCoZfkHL4Q8 GNdw=&c=6mB4/MsrqMZW86Q 8aqBHOxxqWzeWF t35SOkyekzRWWvKtFEl2KTj5w9yG4R5Mn3FhPwDWI2QnN2T50JYEOJuLUKPr6taWwCywVkokCmbAt JSnvwOotLT9ecXyYnb&fallback_url=http://office.microsoft.com/pl-pl/.../bezpatna-wersja-probna-produkty-microsoft-office-i-office-365-FX102858196.aspx&downloadAs=installer_Microsoft_Word_sciagnij.exe

http://www.bytebodyhost.com/c?x=iNRxpZY/u5xH1PO zIERSqEMLg/k9HB//em8UgekFNk=&c=bOMWGN1mLGDSEa8EPIIyorVsu8GCOfWWypZk1UPCLOPNy49XIM2vgik5rtZtVN75kLNRQBKuEthPCbZhkHd6iPSbHfoLNWnYdrWLp9Me4UJUJKyR8FF193MQxb15wFKC&fallback_url=http://office.microsoft.com/pl-pl/.../bezpatna-wersja-probna-produkty-microsoft-office-i-office-365-FX102858196.aspx&downloadAs=installer_Microsoft_Word_sciagnij.exe

http://www.conecptbundlesranch.com/c?x=ujHmeOArj8 SvyrEZzeXSKZa P60bUJ k mE9ONwaeE=&c=uhtqzfoM cG aHWtIhfK8ytiktEQMNvX3kGWyTW1O22BXkO89n 1w2Hogt/GyJm3fldhS/QmmK4N XSNutGVI01mbl/p6szGrUJom8tXECgsykfUEPK6nqpT8Bn6JIP7&fallback_url=http://office.microsoft.com/pl-pl/.../bezpatna-wersja-probna-produkty-microsoft-office-i-office-365-FX102858196.aspx&downloadAs=installer_Microsoft_Word_sciagnij.exe

http://www.centergiftdelivery.com/c?x=yJxQlyZ8ZisoDJG 51oqDYg9HJuANWBGCWqdlc4MKHQ=&c=0Uy2E0jC8KIgiMisWGvAW8rtP89HZBV2moi0enYFegYK4w5loJNhMVvB/T4tTfIb1U7IHkzDbGZcVWoJSW5V60D3pgDnajrrPmQpTXSGAVlVT9Qz9qf5ojdKOdxNVm9m&fallback_url=http://office.microsoft.com/pl-pl/.../bezpatna-wersja-probna-produkty-microsoft-office-i-office-365-FX102858196.aspx&downloadAs=installer_Microsoft_Word_sciagnij.exe

http://www.hostcityheart.com/c?x=h39Jtb18aKoA385w8rYGGVfoK1dBR1xL7SD 7gRXDt8=&c=QXndawJlUNpETiqUttkW cBk LLrAF9uluxwYSlp4Hfs4WyAyHtUUdUtgnefYwccAgP6Qz0uQKOwYJFTDN4yjdSYpR0gwXX261rz5VRhv/hn bwvUxHR44TYiqx5I5bu&fallback_url=http://office.microsoft.com/pl-pl/.../bezpatna-wersja-probna-produkty-microsoft-office-i-office-365-FX102858196.aspx&downloadAs=installer_Microsoft_Word_sciagnij.exe

http://www.bytebodyhost.com/c?x=WgHglgGeRhpPe9FXkSmwsADl08YuI wAswxU8 LaVvk=&c=NAmbS/hAMi1x5pns98Or6gMvYyg7WJk2tobIuAtpYY9Fvcyw mILw9lzYn3JK7CBzdi/mfI/KbxiVl8/ZSP1OcH2jFDdmM0rzfMMeEJPqrgoUuqh8IE8 8SYpLF9BfYN&fallback_url=http://office.microsoft.com/pl-pl/.../bezpatna-wersja-probna-produkty-microsoft-office-i-office-365-FX102858196.aspx&downloadAs=installer_Microsoft_Word_sciagnij.exe

http://www.contentbulkfarm.com/c?x=XheobFjldNLuU5SrJttJYxDrx1UNuBPE2ZuvpovYXhA=&c=mXkHyO/upPNlAK8d80v6RpApREJthp1d5sc9nfXz MBK3nauZPb1idcaFXHVbR4ew/Fxu19dLNzlJ/dFaFBZCVy1pzgJ1ZczQU2Yk0OB1m3KhX/Znyt7Vlb0kwlZT 3u&fallback_url=http://office.microsoft.com/pl-pl/.../bezpatna-wersja-probna-produkty-microsoft-office-i-office-365-FX102858196.aspx&downloadAs=installer_Microsoft_Word_sciagnij.exe

http://www.centertodaytower.com/c?x=ILF0mrZRt2lKsX6Pt6HJ7QYNvuZsk5azoDVBSrrCjvs=&c=KO01mTCtX7koHFtLxb4myXH5daS93LHTyBktJX3k3R YYIEJ/Q9pDS6uTUTO6h23gaSgIdvg/qTufLbXtu23LQGNycmdr t9B3XCYKaz4/44vO1FKHk0o6f4Fdbe3efV&fallback_url=http://office.microsoft.com/pl-pl/.../bezpatna-wersja-probna-produkty-microsoft-office-i-office-365-FX102858196.aspx&downloadAs=installer_Microsoft_Word_sciagnij.exe

http://www.signsclearcenter.com/c?x=4FGA2ohqsTVJk8VAKL kgH6W8rScx6CKf3LGBv9JIfU=&c=YrU ULqt3z83xzLzrYGMflLMuJfm PlRhWqsLVbQ6QbSkR2m8XBN4tYc3DnNPUMoSNMrTUjheREg3wrjp1KdtBV77U/PcR0RZF9KpU7TvUgl05v7oOp4vPh6belg1cuh&fallback_url=http://office.microsoft.com/pl-pl/.../bezpatna-wersja-probna-produkty-microsoft-office-i-office-365-FX102858196.aspx&downloadAs=installer_Microsoft_Word_sciagnij.exe

http://www.newtowerpackage.com/c?x=sWIYO GnZ5141AGZoWwItv nLe7CZ8xyy/fXdP8Z38I=&c=0g3YFjL7t3Rt3aDQO18AjGCgnhm9UwNTqwEM uiI1edGmAl/a7WcWWx7fNPU79BU83rGAYMM2y0ff0mSPOQFnTw0QCiL1/MhHyJ49LqW/EVlwM1O121Nix0My 9hM39a&fallback_url=http://office.microsoft.com/pl-pl/.../bezpatna-wersja-probna-produkty-microsoft-office-i-office-365-FX102858196.aspx&downloadAs=installer_Microsoft_Word_sciagnij.exe

http://www.bundlegiftcenter.com/c?x=4gbbiPbNrtPK 8RJ01bnywFQlsdEXtVECpa 6A69Nxg=&c=rVP1humsAsYvWLOUiNkHTIG8P/ep3HZuSfRhDuL4lnluNp3pqXc qTaulqEwjZfXzQUPKaNqdNFLNSmea8SZ4We15MAAcTzkc1keWNpEBPWLNTC2EfvWNKGRRNds9Jtv&fallback_url=http://office.microsoft.com/pl-pl/.../bezpatna-wersja-probna-produkty-microsoft-office-i-office-365-FX102858196.aspx&downloadAs=installer_Microsoft_Word_sciagnij.exe

http://www.applicationsnewconcepts.com/c?x=7EiUpRU cHXi3RwTPyWht3zl0aWgpqwq1zv4CORxcIk=&c=Qqn94xHNh6ACnASFAveila9h9yt10VJ/SzXnikmEn72D3Mxn0N2Vgs38d0Aq3rquLzsOlqEbc5KJ1J7JL/tLtviz7Gk4bGTX2RRrIfY51hqOoJIhzCVqntIrtcNpvSxo&fallback_url=http://office.microsoft.com/pl-pl/.../bezpatna-wersja-probna-produkty-microsoft-office-i-office-365-FX102858196.aspx&downloadAs=installer_Microsoft_Word_sciagnij.exe

http://www.centertodaytower.com/c?x=CF8/ as6/DYqO2SIJed4Lo2iyVDudLqg7tYoVKLnMjc=&c=n57zz6xVmp9JECOM31/WdsLYjjKa2M9UMxGfayuKM6XcBofGLLMq056tf B9O/ozEN7HyOHRH3jy bIGrgYG7YlKsHwZeHL7qwKaKMHXItqFO27iqRQZE1Kb6Z6XM7zo&fallback_url=http://office.microsoft.com/pl-pl/.../bezpatna-wersja-probna-produkty-microsoft-office-i-office-365-FX102858196.aspx&downloadAs=installer_Microsoft_Word_sciagnij.exe

http://www.centertodaytower.com/c?x=1xidNhsicqBMpj yf5Y4UXUSpcrvve4zze1CNZw/7sk=&c=gK4wStU8mCwivjf6eRwcdx PCKf7/qFNyQg8N6I FzyU/fC/ARAXoQmBWKkQ8fG7xuqpr/Bi4St4hbApt/zCK6WL8U5zxJI0MU31fz OR7saw1W7fLRcZRiXnSFFShur&fallback_url=http://office.microsoft.com/pl-pl/.../bezpatna-wersja-probna-produkty-microsoft-office-i-office-365-FX102858196.aspx&downloadAs=installer_Microsoft_Word_sciagnij.exe

http://www.hostcityheart.com/c?x=fe/6GcxV9qQwULeMYVL7e/wGj51n7TUKbSzZypWqGww=&c=fR9r3ScVkBUqgvFO8fGeQRiAPtfkLsDvIkOPKQOa5qFnWopXlJqNeOsxsVZskUl0pFlMgm6rcOPXtkFL6YqzfTksfRdaQM4fDa4liOYIwnVGmyji5a02xNVtRzD9dgkG&fallback_url=http://office.microsoft.com/pl-pl/.../bezpatna-wersja-probna-produkty-microsoft-office-i-office-365-FX102858196.aspx&downloadAs=installer_Microsoft_Word_sciagnij.exe

http://www.binariescentralclean.com/c?x=2ZjImOhSnewWdwcGjcnGyjTGx/dixyX/pNB7yXQ9euI=&c=Pa3f2PRVCes2P3ENPy7MlfAzpjN4XIYctBq8bt0IAsM 6fEXxpCmmQ8wueuKeKsGLHC4pGGljonhq/JrKUV9OWOIpr29jli/R0pKnagFH kAK34ysqUzYLnu6q4rteSI&fallback_url=http://office.microsoft.com/pl-pl/.../bezpatna-wersja-probna-produkty-microsoft-office-i-office-365-FX102858196.aspx&downloadAs=installer_Microsoft_Word_sciagnij.exe

http://www.centertodaytower.com/c?x=nx0jQTeRvS89j/IIi/fNjuM2DH3aPxeJt/OP8z z7xs=&c=2r34aumyl9jXzIq6UUNvqrSaczM9luaI6j691nAU0N1q9l/24RSwn7TH2kFMT6XKyD4P1yg/zOmWNPt7dDRsQSQpzYzbHfZqOsMFOx54/aw0O0N6oQWP7iKHdoEgeIHb&fallback_url=http://office.microsoft.com/pl-pl/.../bezpatna-wersja-probna-produkty-microsoft-office-i-office-365-FX102858196.aspx&downloadAs=installer_Microsoft_Word_sciagnij.exe

http://www.capitalbestclean.com/c?x=bd2vgYMRe8cGUJvHtsbS/JvRj64DDMPfySYveemCiMk=&c=PkiGS2xx6ETn1dgrm4mECp7XnoF1UjU9UK20CfGXrtWO24xU9J6iR5TQOVG0iIv0h0Ba/mGVBNcjzsZNykMHr5jXfkpstt3ADGIvYPmzxfPciiQ6yX 2Tl Qv3bScLet&fallback_url=http://office.microsoft.com/pl-pl/.../bezpatna-wersja-probna-produkty-microsoft-office-i-office-365-FX102858196.aspx&downloadAs=installer_Microsoft_Word_sciagnij.exe

http://www.towerbundlesafe.com/c?x=Dmk2X5W8yqFyOf HT5/IOsL9G9Tf02sDO3MPwMlTKhM=&c=LmyChznQevWuhkXt7HjP7XkBP2K8ZP8bh71NZebcj4NWSgAwOpDwpHM1dYZK7pDrle8WGmiEtJx6s51PPY7y5JB3meyHRM zhKWEgg82z1X3rJ5xsaGowZcTSYmab20l&fallback_url=http://office.microsoft.com/pl-pl/.../bezpatna-wersja-probna-produkty-microsoft-office-i-office-365-FX102858196.aspx&downloadAs=installer_Microsoft_Word_sciagnij.exe

http://www.conecptbundlesranch.com/c?x=nRlYK/SlmMRaXXsRyb5pCFGMq46PDTPUOqjPPmHSJHo=&c=p38ggiWsszFeF406Z87RVjoB9mJsMu23fqY4TMiaye2ZxmHKg4VB0UEZeYtLbNFthSLlOS5vo4OgDS1dZLUJVasQ1Z0ZSDqfYhXOwU/zUmm72SwmuW5rW8faumYqKhM8&fallback_url=http://office.microsoft.com/pl-pl/.../bezpatna-wersja-probna-produkty-microsoft-office-i-office-365-FX102858196.aspx&downloadAs=installer_Microsoft_Word_sciagnij.exe

http://www.stocknewcentral.com/c?x=/GXQoK7/E2cMxoYuRQY564Nei0MmOjtjyReS pPSxCY=&c=PBclZ1myK51C9wmTlHCHHDZUYUNgVuVKmmqqeLqPhWUEQu3nJvijgQ5nuVO8BDLqSctxAsNgm9Esi4FwjAzIxDUxjnVDkju6vGFSTHJJ z4UuDgXbuvSEZh4Ukb9 1n&fallback_url=http://office.microsoft.com/pl-pl/.../bezpatna-wersja-probna-produkty-microsoft-office-i-office-365-FX102858196.aspx&downloadAs=installer_Microsoft_Word_sciagnij.exe

http://www.newtowerpackage.com/c?x=WGXQU6by wIHB98pVTs9j8CP2tRUlbAqJk0 pq0in0E=&c= qzAkDZbydtESlLQV07KtKTUL Me6UtwGkAcIOgWBkGPbwIFwyLSn4mKSNxO5BEX13C opvHD22uCoIc45Aw85dbfa04 bMkH7ZxnnwQ/GiNbTUx i4GzELwnZArWwIs&fallback_url=http://office.microsoft.com/pl-pl/.../bezpatna-wersja-probna-produkty-microsoft-office-i-office-365-FX102858196.aspx&downloadAs=installer_Microsoft_Word_sciagnij.exe

http://www.newtowerpackage.com/c?x=/GZk93Y76EtY8A 9g XEihbcNDUzxkM91CMsKsVE4z4=&c=pFFbqHw0BAX/W5xrDjD0sRHL5PwBXa3lx5bnqCzMuHLZ5MB/6DlNYt5ZtuRMXEHFNfzT6hZj0ooiA5Q7Nec097we7GWccPhy1H3kiOnRr6FV0ooWozQj0NKkpc BifSL&fallback_url=http://office.microsoft.com/pl-pl/.../bezpatna-wersja-probna-produkty-microsoft-office-i-office-365-FX102858196.aspx&downloadAs=installer_Microsoft_Word_sciagnij.exe

http://www.presentstockapps.com/c?x=MSJ5PQIHO1TUhrwp8WJ7oJl1eMNeBO32SEMLDhMYrZw=&c=EbR4QgZoRgXRp29TZZCs dlLJvTRLsnblK3kENs4cXnvyCjwz5tIXuTk7sjkkPitzmUn9uC31vcSbu61SuS8j53wsfBH2Idw7Sx/jdg2c28Ubt9yo5g984BvulYObp p9t0hkFXtX8TURnloYmMd/A==&fallback_url=http://office.microsoft.com/pl-pl/.../bezpatna-wersja-probna-produkty-microsoft-office-i-office-365-FX102858196.aspx&downloadAs=installer_Microsoft_Word_sciagnij.exe

http://www.downloadstourfarm.com/c?x=k8gxS22sf6VaQqsYo/NLJ 3pX/jZsqTbK0vNjhwsBk8=&c=cUzK0N5dWSxzZgxpytiuAYF5L0uY/x0ERQdrFnk/kS20 FUwmxWTYuGB/YjbMjEavNfodcJedL4p9r/PVJM17u3gpwtJQqt14hTJSJf6WRC/BZNEAmJlbFqg1j2bKEgX&fallback_url=http://office.microsoft.com/pl-pl/.../bezpatna-wersja-probna-produkty-microsoft-office-i-office-365-FX102858196.aspx&downloadAs=installer_Microsoft_Word_sciagnij.exe

http://www.capitalhostingflash.com/c?x=qI4us9OSqsyH/vNRksM7vrdRRDjiMbj8FxzJiTjHips=&c=YBmuko4tyrr5hAUIF b73yXN751InOTxRAHCp67y0NG6pxApVZAuV3AX9Ra8DMVYmmZsahyKUzNvopSEcIFtEW2 E4Dub pk1D5kUh1/oyxRyIIxK0PkQgLPB5TEMCry&fallback_url=http://office.microsoft.com/pl-pl/.../bezpatna-wersja-probna-produkty-microsoft-office-i-office-365-FX102858196.aspx&downloadAs=installer_Microsoft_Word_sciagnij.exe

http://www.centergiftdelivery.com/c?x=dacemSvfOnL AtcCPDkw7Tct4hc/gF bmogPw37LfMg=&c=QguZKfLMo9chZxRT9hB yHdZyAghloSh6tfLZXkVtctEf6HtP4YZ5ND7wPhXNg/5eU7wnTYhxPsktoth0agjdgK QhSyAiSkwOPOultdtFdV8wt85a1EUW0QJJjRZHQ&fallback_url=http://office.microsoft.com/pl-pl/.../bezpatna-wersja-probna-produkty-microsoft-office-i-office-365-FX102858196.aspx&downloadAs=installer_Microsoft_Word_sciagnij.exe

http://www.applicationsbodybulk.com/c?x=ki5r0X43nqVIOA2m A/4JDKSJvaUOZdtzdWnRlVACnQ=&c=gw0DfyTAp4TRLCUWrxXd2jPHwJSmq8YiRACVFKAUOzOZFzC3mT8VuCC6LTMSF2x/gVH8LMYAP8MCytCVmgiw6qsr4dbWglpPXSQ4sQNMibi6N7v5P3fWYYryLR4ZAXjS&fallback_url=http://office.microsoft.com/pl-pl/.../bezpatna-wersja-probna-produkty-microsoft-office-i-office-365-FX102858196.aspx&downloadAs=installer_Microsoft_Word_sciagnij.exe

http://www.capitalhostingflash.com/c?x=9ystfuXRCsbBa1jioq71DBEklZRq7tkt171O0wzPCfk=&c=ClLh2g222DyjR/pz0SJRTgsvDHlrARYTjKN5mc8RAd7/CksMuDc8lgIcjwAeoFWYWeeOsWWSyi3nuuVGbo6tNnTnzf/y6JnGYcwsy1D2upfLPqpMeY0vrOTshpNI5qyG&fallback_url=http://office.microsoft.com/pl-pl/.../bezpatna-wersja-probna-produkty-microsoft-office-i-office-365-FX102858196.aspx&downloadAs=installer_Microsoft_Word_sciagnij.exe

Latest 30 of 35 download URLs

Remove installer_microsoft_word_sciagnij.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.