home

installer_microsoft_word_sciagnij.exe

Debegarune

AGORA S.A.

The application installer_microsoft_word_sciagnij.exe, “Debegarune Setup ” by AGORA S.A has been detected as a potentially unwanted program by 3 anti-malware scanners. The program is a setup application that uses the Inno Setup installer. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions. The file has been seen being downloaded from www.stockfuncontent.com and multiple other hosts.
Publisher:
Beseg   (signed by AGORA S.A.)

Product:
Debegarune

Description:
Debegarune Setup

MD5:
7f54be3d0f87fefd9605d99517343080

SHA-1:
8228d0c3a152b66d27100e06775185a2ccb6d5a0

SHA-256:
506369defb4afc27d798dba2b424ce9e09e5df04fd524ee86da810590bfe2a57

Scanner detections:
3 / 68

Status:
Potentially unwanted

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Analysis date:
9/29/2024 4:20:51 AM UTC  (today)

Scan engine
Detection
Engine version

Dr.Web
Trojan.InstallCore.1411
9.0.1.05190

Microsoft Security Essentials
Threat.Undefined
1.217.1229.0

Reason Heuristics
PUP.InstallCore.AGORASA.Installer (M)
16.4.14.17

File size:
923.3 KB (945,416 bytes)

Product version:
1.0.3

Copyright:
Fast

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Common path:
C:\users\{user}\downloads\installer_microsoft_word_sciagnij.exe

Digital Signature
Signed by:
AGORA S.A.

Authority:
Symantec Corporation

Valid from:
9/9/2015 2:00:00 AM

Valid to:
9/9/2016 1:59:59 AM

Subject:
CN=AGORA S.A., O=AGORA S.A., L=WARSZAWA, S=MAZOWIECKIE, C=PL

Issuer:
CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
615B57E3504C929E3B64ED936D1CE68B

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:hwcSeGbEsZPjsFsNgE0NqxzJVd74pgZnO0G0I0STS89EirLZfk:hPwPwiNOAzJ0GZnOAbSu8WirLNk

Entry address:
0xA5F8

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, CE, 8A, FF, FF, E8, D5, 9C, FF, FF, E8, 64, 9F, FF, FF, E8, 07, A0, FF, FF, E8, A6, BF, FF, FF, E8, 11, E9, FF, FF, E8, 78, EA, FF, FF, 33, C0, 55, 68, C9, AC, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 92, AC, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 26, F5, FF, FF, E8, 11, F1, FF, FF, 80, 3D, 34, B2, 40, 00, 00, 74, 0C, E8, 23, F6, FF, FF, 33, C0, E8, C4, 97, FF, FF, 8D, 55, F0, 33, C0, E8, B6, C5, FF, FF, 8B, 55...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
39.5 KB (40,448 bytes)

The file installer_microsoft_word_sciagnij.exe has been seen being distributed by the following 50 URLs.

http://www.stockfuncontent.com/c?x=NTQZEGv8wcLwlx VUKG77ryp/TEhMyXjay5EhJK8tVk=&c=mU5PtStDsf sx2bvFMx5VqsvUQqRNO19XJhxkWkTlUm9PraCr4O 7uXdxNtm8r9pdY9 Tb4q m2cMVyigpbKXAGowU DACT9y9CcTbXB wTxn4DUGbVSuBjX95iww5ij&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_Word_sciagnij.exe

http://www.vaultsharestock.com/c?x=elp23NyKR5QsSy1NlvS1TfXnbpMeG3Zwub388iEmSSM=&c=xx h1uozlQRTp961cu 0O0tDjWk/TYVhCvr6USJjdWmD61gLXu Zb9Rge0SsKS5Ae4eF1HHl7bbBRWudmzlWEXW6jqFI93hSHcGcVfLoeus7bOVxuI 6knCKQwMfh2vS&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_Word_sciagnij.exe

http://www.appstoursbulk.com/c?x=Tioz7HuVQAUwgHU464cpttFjD8KeMae1F8Y6r9Cw82U=&c=Wes9hqRP31mA5W5 vvpxIFv6ZqEn6JgaroxRtqI1 SV9 /c0P48cL5qyXLuRViLPmL9H0v4iyV5ThzNInjL85nUFiD7Pjxze3uYm0nfii5OCyc/LwscM4TlImLcjxn4&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_Word_sciagnij.exe

http://www.shareclearbundles.com/c?x=ogRoZCgoHtMUzzq8HgSP4pmM57iTdSYsZxxmb6u/bHs=&c=LhHJTY5JATcHn9sMBeA19Bcr/2UUaghrfRvqOrrHrbevHRWZvNs11qq40HTaPkQWDF9alZy3WoKBLpQuRpoPmoZjKMvjo371/O/Qwxws21dKN5b7Rea8Z3c48kEF5Zea&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_Word_sciagnij.exe

http://www.bundlesvaultstown.com/c?x=31EdETj4m0Hvecri9IC9vnrddemdkXTj73f4ASwhZQI=&c=SF9dZRhj426s8CxeDL2jqlsfMzhHl3LcQFW8khSq C8Uf5Iq5NVdYXYKh7fpVm14gG1rYX1V2Ko0hlGrldor2vhqfKJCdkJT2d1sOynvUsZDKFcXDIaVhVW9pJmVukAIIXtnzpkjukjns8j2y OtQg==&e=0&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_Word_sciagnij.exe

http://www.hosttowersapp.com/c?x=Ipb3V3 TlRyTp9tN 6G9nNxrbJ0FTpswGBSMrUk/5a0=&c=dg1zXMl4sJ1vvPRomLn59 4H8aDGTys01fTZnGDI9 impgT1nUMKOIIKH4RddZItHVvLl1h75er0Q1DDx B8/mT2J/T8mYIybioHt8bTbQwoKXzxDPvFmPlx18Dpo0bv&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_Word_sciagnij.exe

http://www.stocktowerspackage.com/c?x=3Zb2wJsYWq1pWxYlo3CScy/2amq27kdcnD1TRznkUl8=&c=DvtGLhKwxZZ3iUxAQ3vtlkX1g5kwDxTWoy3HKiRn1HCd9ePKaybdqYC2bdPL0HFyP3XANHS28OH5npf4wmtAuyUFKeF1RA2BtsZx4NRPsYrUFfw8Ea5eaqeKHz82pIz/5d015CJlB94dA e XjjkHw==&e=0&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_Word_sciagnij.exe

http://www.stocktowerspackage.com/c?x=wFAiCROj4fbXqtPz KrFbNhkgCEfKTpY4R7Tu6IZVio=&c=8XLjhFTxHVRprA947 gZcrk3XVbmziPfGiF9O319BwHTvDvh3xgA0ZZnVaAufGr2F/Mh389299XQLmOvLkZXb/qOh4KMp EA0XPwPVwA5Ul6V8O8nFnlOE1SnAji0nax&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_Word_sciagnij.exe

http://www.applicationsbulkbundle.com/c?x=7ZbyH148p X4W1pzJYl5CkB9CXNUEixUolzD54LGwts=&c=JKw8FWMRc1ESZvyi4WdzSEjUOC/PjPk5OwJro6weNzskDLYFL4reaxs93huug4lEr4iWhNp2fn9lWOjkrBeUzud56BFWAYzZnroVbeDS5FGOo0iHeHHKLRyTKi UL3sI&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_Word_sciagnij.exe

http://www.appstoursbulk.com/c?x=nFbk8nO2LkYR9tUxGv/4mCauQeHtNTsoEMgUCEL4Kts=&c=oL2GSfryjo1x66cgCs/mUwvs WIKxWJj3LoPDrKb4LsgAAebrezoDQm1W7c/cTF77l/Hm8hG7CRmkEHbOY78U31z6BVHZeKXJkGdqIgaMHfnpUAY4NWVM0w0GUffLvV7&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_Word_sciagnij.exe

http://www.contenthostworld.com/c?x=pfl z e3IOAlYsYjm7FAJedpQoHQuVVlVJlOKYPcNZg=&c=twdjsj2NdClNiS6vdWbN/7ILs3S7NqFenaE8tz4ioRL4vab9OBU/ASNK2vNPN/AjbSmb4yLd7fg0ZfJsl77vedjF1Ua zVE2ytbwRhzS8o4JTT16eDpjkDU3K/vXX6A6kn/UYiAUV6dcUePHX/B/YQ==&e=0&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_Word_sciagnij.exe

http://www.citypresentbulk.com/c?x=PdtMcTUU4XB9bWgUCkJgx6JmF42cfz7H8SBfyKjQQ4Y=&c=nuJ2fGZaA1oZ4bGZUl9lOlu12JolkEfCz G0Cd4sm27OkKO F4TGNESYLPg3fytfOJrc6FEhTpFgjZJbSMDdZS oOYeFqEWehw7CSLoUSS1RjNuebCKWsMJRTWTH9xi2AZq P96PKatKNdmshRkBaQ==&e=0&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_Word_sciagnij.exe

http://www.stockfuncontent.com/c?x=rqQZiVz58IT 28SvGtvdfawPa/VF1co/lHcujAenaEE=&c=Cb6xmYWfwwP7Krs6VSpWeSLJJwRp6OIe8gtwlNBkM8LxvtX0ucantyFQTgNDFtEN/tlJiJst42QqkmTBE9NvnlyXUAs9YudV8aCLlEyXXiuNhr4hB72AUDKoqPTuUgfy&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_Word_sciagnij.exe

http://www.townbesttour.com/c?x=Vwa6XEXVSn PF4Io5EivHTbi4DJivdoWaVeWjH15jo=&c=W876tB7tO261jpBHDhb1NQa7qULBgeB5faE9wzwR9M3tCX6npxlcKbeBsSdzPke5vP9GAfkB2/a9iA0mxIyDsp4Ujgbw8tg1JvLUUTCEAPoQkvutDnEQZjkOIrbVX/9T&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_Word_sciagnij.exe

http://www.sharemegacycle.com/c?x=FFYIqaciqEfLFLoprCDAw9QJMOg M7rJHT8lxEJZ DQ=&c=hH1PUIA7rwratL7Lnb5Vss5EzKdYw782pLGd3tZ2O6OwsKVF1OjWv5vzwCCDpm0GPo7m9gyUoOicBJTMHsrgliPDFcR5x5Brw5V76s3zF6imp5xZ7st JLFHYW2wahujK/W0OAl4QuuLW2nj8L79VA==&e=0&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_Word_sciagnij.exe

http://www.contenthostworld.com/c?x=qTcnM7V0D/skRvb6Wwuxbz0XHZP7SLhHgkBTdj PrWg=&c=E2Fr 97l6vjUMGFkK/xIwkaeeIs0B4ewPqdArsnRs81fKI7lpYvBnDdCcg0WYT59bV7pawYFocEODMIQ43/zn2RTJbrl3uArDt/0DF1qCUC5dnIy2bOMIALXKxvq2K RIovcnHUxrgTVFgx7uvtzPA==&e=0&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_Word_sciagnij.exe

http://www.citypresentbulk.com/c?x=mElpIZX4z GPyUNMkcDATVZirppPTUsk8zLBKFjUVjc=&c=PYq2j3K8mCFG0rzaunYcaVhEZQNHHpCpg3qztiGY7BEAkcixvHyIUE0CzqTKSvoJU9v0P7cTPcCQqh pcUK8aRz2XnhMpn9J5glqjSL84JrfAJOxLd7oTXpzxNYpJ4knUvA7i5OwX7bp298AJt/00g==&e=0&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_Word_sciagnij.exe

http://www.downloadstodaybest.com/c?x=P0LNZSXeI//7ox14khok0XTcUu wXXNOo66kQCJkOnc=&c=PKTEu29hiYGIomQUrMzlKO7sNIE2bBOEPH6z4WeOmAv7kywxr9Z4XX EhsocRyK4nHr7XCftybOTqUuLbUzeHGoF0xIirlb3PoHdeKIX8sN d9cEE281FXceIfK70P9C&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_Word_sciagnij.exe

http://www.gifthostingdownload.com/c?x=VlzJNyAJKxH6NB0lNszgGA4tMIZeeHuJ99fcLJrmhVE=&c=avuhP6NPF2cTPyXpVXxIQ02hCE12nI8Vn0ArK8Y/YHlzY8VtY1f/k9TmP2HqUm31jreqK456uB0xv W5P24yPlG6mYfHfOhJN/4FtXfSlO67WbDjCM0iRFX1S2Lxeh2J /RZN4w1UpdBNTDLk1BIUg==&e=0&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_Word_sciagnij.exe

http://www.bundlesvaultstown.com/c?x=NqpBH1Paal9lidjaRegYG7fx38CjzgElla7NKf3MwRw=&c=hwpDzjRy7od8TTXdqBGR0As8WGabHq3lNA0AQR2cIvh0RKcB0F0PtbQuP4elduBVtZqIEaLVRhCDwqRMiOwLNGA78t5hmq0MzYIP6v27/ZPceSvTOSZnEOhxS3 7A7IP8Jnvb2BEjaeA9sgbaHVhtA==&e=0&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_Word_sciagnij.exe

http://www.bitstownsigns.com/c?x=88N3x12DgABBD8I5TNhMDgsSmPIzrIy1lF4vTiykNws=&c=JbZpHmDLa8tUZRExotfTrIdI0MHjYmiJ6t pnqiGVcOiPy0ae6iQP9fJjfcAwwRxpUA95B5N1uCPxYNpPyvGMFU2u7CK4ygVU4d D6Is4xp61SR84dHUOfp W0tyAQyP&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_Word_sciagnij.exe

http://www.bestcapitalclean.com/c?x=O2aSaRm8AE80D2jqcn98O9s/CI9AzZrt245Nge8Q2dE=&c=Blbh2xPiyqIpjrneVXuAOoDjtRH0MdIkH5yr1VbIwNTQdx0Z6vhpYRN8x0mb2vovOUQxGLfOF71Pp25VbTa5weAHYAwktQPbSMQg6BisX69MLEfk2l3wbhkQKpe2LFMy&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_Word_sciagnij.exe

http://www.gifthostingdownload.com/c?x=XeqqwToltrQjPIpnaX5e9KxxN6GmXdUNjOSXUt6z7Og=&c=r6icTG82Ap0OTNwAotf0zJgYf2rPrrCvlid0cdyfO/mlaDHvtig0wfZLGwABjkEdm6sNL9bgADjFZ2hXqgQPCu4CFGhHELXIUDf VYkO9X7saAKTg10OYlA9dRU9FtLK9PaFBPLg9hmJJqmqlQqJsg==&e=0&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_Word_sciagnij.exe

http://www.hosttowersapp.com/c?x=/K5IV6xAgB5UdHJs6Vm/rriI43XgmSmYcCL6o2HjM/0=&c=aauG2MKruNFXJL7Nb9CRmttmrcKvtiUIytDyluIN5txBCDEoyhyS5l78AdQXo18mTukhb01JczEr7JshkDi/9wuy/FonfMsCPY0r6uqZZjIBc2ed7B 4PTiDuVVV0Iuv&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_Word_sciagnij.exe

http://www.gifthostingdownload.com/c?x=nTS2x/3ihihzOpOaCXtEExb7eManR/M3R7kJiZbCnCo=&c=7F6SWJyv6YY5r7THNPMgEGUGiz0Cg1mBaH8JONH6gYxQT89O5bNSlsV 3w00ID/lf11e9gS8uOWOJCF 1mis5ARGGbkvexone3X6Cp POh1tJRz14 wHkMbAUazQhMnbiFO3W9EK8CCkCO3IWiA6kQ==&e=0&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_Word_sciagnij.exe

http://www.newbodylaboratory.com/c?x=bYCF SlfGzWCFgrJr FYpQTC6uTUac6VpA87Bu6Wyc=&c=1UQako9JLu9QYPVMnwTkxZHn6H3r8RO5NbsMr9TPKTKu0JSsAidQMEet EzLAQBK3u/KskqdkNiRQbXhgegviVGrS8NdmotzZyV8gutKXuOgIV3Kd1HOYyHUMbwjYUw4upADASngJ/Y8PUPRjGCd6g==&e=0&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_Word_sciagnij.exe

http://www.gifthostingdownload.com/c?x=McfPV5nYt84PnggWelYgUD0ev4QyCjeE9Fh72Bzxmkc=&c=2uUjE9f6xi87IsFEp6G8hfzTrDi3B77PRkutGXLWt394NJKp5GMCtRPc/9eju p0hZ5qq S7UPwn7 HsSDywlBs8Z/9IezT5by5eGYtylnBcj6wy00 U9D8NdJ95WxAcqZrFsEa0DlrGDqYFe/QfmQ==&e=0&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_Word_sciagnij.exe

http://www.filenewconecpt.com/c?x=bfTe4sb78wL2oag7/AYj/I2KtlFKK1qTbakXbwpeZQc=&c=MJFowsHE8SP EyTfodA6 PKwIez7dSnZDef8dBoCVJsgsk8eXR8nmcDJW G2gWYrR01m0xMyQW86bKEfnzsiIvkAMFUT3dZEsnnLxuUZhW0UOq2W1V7cg5/nTTi7qCAw d/DXl488nbiZRWTad6OBA==&e=0&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_Word_sciagnij.exe

http://www.gifthostingdownload.com/c?x=cic/r fxMGgBOd2a3DSdY5sqmf7 oQP2wb2Mpearcmo=&c=ocFcqevC4AcrPY76dIwuWt1MvQEz6fDa2PwGTEgWod9DNj4Zrj3fPDgLaNT8oNijHs9a9Jd8Rfox7/ypcsvjIg7ji2jcjRduQqrxAczfG910XdWVpcXSzTYrhWwaaj8LYlPrUwXX6QB/88HrxfiMDA==&e=0&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_Word_sciagnij.exe

http://www.vaultsharestock.com/c?x=ZAkfVsPq7ifNxe/lWCmAutnoPVjTXup7x/9t31Dj9nY=&c=1yhHOLTNyq5eJg4UvMwnOhZKAJkHPmNvSyFirW7RPzsX0JUTr5noBiXH0BYH7fg2f H5e6L9D6glr f4FgW5IBO1jzHl9jlCt5jBwD9V9QjEz7NyW9v ot2J1O9pHuuI&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_Word_sciagnij.exe

Latest 30 of 71 download URLs

Remove installer_microsoft_word_sciagnij.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.