home

installer_microsoft_word_sciagnij.exe

Funusikem

AGORA S.A.

The application installer_microsoft_word_sciagnij.exe, “Funusikem Setup ” by AGORA S.A has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the Inno Setup installer. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions. The file has been seen being downloaded from www.hostbundlecapital.com and multiple other hosts.
Publisher:
AGORA S.A.  (signed and verified)

Product:
Funusikem

Description:
Funusikem Setup

Version:
2.8.2.3

MD5:
6768c83cfed1b2c06812c0c65ff47927

SHA-1:
b92b2d25f22a04f814e39dfae324d884648a3759

SHA-256:
482e2b1110aaccc24f861ec76e630f67b1c788f2cc54696c76d1c64c84d75e56

Scanner detections:
1 / 68

Status:
Potentially unwanted

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Analysis date:
11/16/2024 5:20:32 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCore.AGORASA.Installer (M)
16.5.4.12

File size:
934.7 KB (957,176 bytes)

Product version:
1.4.6

Copyright:
Fast

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\installer_microsoft_word_sciagnij.exe

Digital Signature
Signed by:
AGORA S.A.

Authority:
Symantec Corporation

Valid from:
9/9/2015 2:00:00 AM

Valid to:
9/9/2016 1:59:59 AM

Subject:
CN=AGORA S.A., O=AGORA S.A., L=WARSZAWA, S=MAZOWIECKIE, C=PL

Issuer:
CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
615B57E3504C929E3B64ED936D1CE68B

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:63mdjVK18l5wmIr/dcFOEw6NUyZOYBwBCoHH0elc:6WZV7Ir1ei66aUBVvc

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, 53, C9, FF, FF, E8, 9A, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, 24, CE, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, 24, CE...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file installer_microsoft_word_sciagnij.exe has been seen being distributed by the following 49 URLs.

http://www.hostbundlecapital.com/c?x=uD1qhZ3CwBi1HyVTZhZlus3TVcVNaiC/kf432K6BlPs=&c=A4xTOj1PbR0sFR2J7VtMJ9Nq0etSfZd/ksNh57wLAAg7f9Bi0b4/fyK62tqQEj64AO/0ku 336q7GJ88dfUvD75 rLvnVttRBOTJuUsw2ZVUoSCw0mMHyJmIstkbf6U &fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_Word_sciagnij.exe

http://www.universecleancenter.com/c?x=W5auwehXuRRV67dz7FUlOu6CuwxIi LawjdVsOv8dnM=&c=pfoUmXjvAUT31RxPX brSVskPdb9asKp Swc7ItErMZWBy0QqhVrqsWeUrOUhCaSJ88DuPKZCgK0GvgY8dsAQOgHwSHzn8LhUr3cwWxvtZk05saTPlKhS/Q5MLuumZ0G&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_Word_sciagnij.exe

http://www.metasharefarm.com/c?x=uuBstYBtKw/GkWFtPEsPoYpHzQyjinQhxH6OZLbthz4=&c=5AWm GsrBiyJcMKb6tnZ9R6XUQ iaeJSy/Di1tEjts6i3z0cWmf7rZaItqZAS3Fg/Lxqq3DEU2sETPGHgck1yoR7sNor9bippv0YAbYp8GiNU6L8/5OKYarAup/mgEChFmJSRJ1F/swKzsCthshZ0w==&e=0&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_Word_sciagnij.exe

http://www.todaygrabpackage.com/c?x=pYadgiiTXlKI4oc4LkuNxB485oSXD1LGd8iCc26vr84=&c=cN9DYrz4jStTp2soRQt8F8KYW/zZKONj11GzaJ82GDymU6jKCXNp24TU0jXba4AGasAehnM1Gq0rtbgbH9lZYMIP7JCdX3hE0iote6BhBcOKaxtzeE7egp5mhr/RP8xM&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_Word_sciagnij.exe

http://www.vaultscontenthead.com/c?x=brmDZtHrILCnMQGK4fYyzSNPQxCw2grhzWMWXSP/4w0=&c=2Q3fzq45BJ J2txkRmlRD/RYYjwS5aizschcIdp8GB4u4VN wMhExpvTuE7Wh7ThyR4iegOayWeqPaWUOtPx2b/xg5YcaHBPEPsIwFDIcOHaHqpvAtB1nDioMJlQCwE0&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_Word_sciagnij.exe

http://www.headhostingfactory.com/c?x=2BbjQeY6BY9rfNiDKf syZDtorDGjxDrqf9sOb5DeFI=&c=JwOKoUGoon4Bx/wDEpX5DRt/bwjDdGYe8lHpw ZcA5lPtYt7OCEAFHSnZBNtMKv8S6jSg3Y2/Q9z1qxHAzXDJNMgHWInLAm0aAaz32NMN7XDiZK6D94zDIrZAyoGdAu1&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_Word_sciagnij.exe

http://www.downloadstoursquick.com/c?x=FfA7NCOVXuvehrm1qZ6iq6ZHlk7Q 2VPDkSGoNlJH g=&c=KA6jQVzO3JLx1UBsFCDzSvY0xMPrX3dYxXbPQ4AHw4y IXvJoCGM8SpELNud4j5/10ZgMLbNlQRM fHi3nYYaqKdoyZHqbdzIeAo0uEGOnCU0QSlQaFlhhyZtM6clxUnkOEepiBCOKygBWWlfqusXQ==&e=0&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_Word_sciagnij.exe

http://www.hostingcontentconcepts.com/c?x=5lGtBnCUjOP6CCXH4ih3ot7/MaxeaibSWKQh9EcEero=&c=KhwN/CCDp34E0SJyiCb/m2xSvAo4mbNP QCAi3nNM3VMruEi5x65/0fgpwvqlWCI3oolpv8IBs Q4GN7bXKbe8oI77nKZZRNwjoGCtFwyWg2O7MFNFEA7CbgCKhljclWS Pbu2FAG29OQR1R/i7mvg==&e=0&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_Word_sciagnij.exe

http://www.contentdltour.com/c?x=wVv/N5Dmn4p5 EQ1K0kE2CTYjY840nX73dLmQPznP7w=&c=xbA17Cw/GtiOd70xxoItDUcJuFVVf1OwTE5kV2t077el JTdUJlm4SkDpQZGb esI7hLZtwoDgjRYtf 41fg3UkMXbdxrXOMX8k9VzmeURhzrXflo1R0IjWWjHQIPnwYlXQxmjMOOZx9jOJuS60nQ==&e=0&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_Word_sciagnij.exe

http://www.vaultscontenthead.com/c?x=2Oan2LpSimGkTY VlU4AShc9XDBjKD/hJpo4OJkcMOc=&c=hcT63CvMuwho3AWqnFovGvOF5g054fzkbYrIxOiOImTjzn YJM2tyWgPxe6ckRKm2O40w5 jw5mS9mXZ94LOM5mZVIvZHviwVVm/nOvbo5QGM2BDBD9mn lBfvoNzUpo&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_Word_sciagnij.exe

http://www.flashcitybundle.com/c?x=F2YhUTiC/4QHBIYy9KX0HwBMqZnILcPf8Cvz2PQt4po=&c=11XSqDdMEqTqXunrdP9ho9dMqLcDHsCGgnLoSNz3iTB33tWceyYWWnAg9KGJpKyYrynm34BwTSVbdoyzwQgg83iDsy3jD7dDJQbhWJ2XyVgu/HREgUWkCxsROJDOSn/Z&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_Word_sciagnij.exe

http://www.townuniversepresent.com/c?x=xaPgg/l9cY8J cheABNmDwB/z5JtM/r 9DjKdAx8kbU=&c=fXiuZRsK24HwBalRer D0P9ruAiwv9GV7pwoWHTrDKLNtbsypTi7sGibxkMSBZrILitYCglT15DYgobnKwAVNNuYGyRTIpI yQ5pMhElhnwYbk0qGpQAO34iqztvPUCdrc7vMxLYV t9CL3G1EOEmg==&e=0&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_Word_sciagnij.exe

http://www.todaysharecontent.com/c?x=Ce d6ELlC2Tc3bdSGLrRFClU01iIl0zWgwCILJ2A1xY=&c=akS36XeFTo1iYa54Rw 0nUQjl9BaaVaov m6uB9wvLmCVZyyqDkawxbfGSkJpVucH6njRiaYwTb9B8hyguShym7BEDGmn8s335tBgDH7 xCoakzZCF2pCGlCTwM3VDuT&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_Word_sciagnij.exe

http://www.applicationcleanbulk.com/c?x=h6xgZMdx/cYLnqwsRhCXME3gZ0NPE8Tg3phFjU9aMXY=&c=vzFNEmoDgC2R2erYYsCUllj93t8OOxoy/v59h2AREjoP 3gQVtZGlW7tGGDLU/ngjK0Po0rahYDgNcSB72kgWtfyCCcXp0tq/yJbJfVsCFRCDYbHvZpeILtXYVRowLsb2C5ccK730Zi91wCF28hsKg==&e=0&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_Word_sciagnij.exe

http://www.headhostingfactory.com/c?x=KmlE6vS10UyzZzYWw/ASogwuwPOa4pfW4m4OWXz4hzc=&c=CaCHP/T7O4MdIobZqIdds 3kUnub/BZm87J1RHXo52pEZa7DdB1NuYfDvF6C/D11ct0E81qf5ejhrIZEf3vffo xuvRyIvx61Wi6 S6mKtoKdvncRL9HMhXAcOKZioE9&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_Word_sciagnij.exe

http://www.townuniversepresent.com/c?x=fnCAWq 6NLFFwFUFM sFW /MD38KSZvNiTaNRNzv0d4=&c=A8AT6EHLvY25rDgPBvmi1ncXhCJyDV8kKCozJrVpeFpnjt9zL6gKS2bJZexdnrr1v10pEMEPlN/g5iFGSr75ipydgkj7p0eO0tOCRRFyAcHJFS3LBcU9rf/SWuc/0FgJ0tASwdcHxm0SwNiaj3oN/Q==&e=0&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_Word_sciagnij.exe

http://www.stockpackagechuckle.com/c?x=4aM0bR/XYjOJ QxZDi4wuS/riEZpAXba2GU4d8ynALk=&c=jOBiS3UKegKpKMXIIFhYrvbNxV2VejPKJrOZLRpCN81D/DBBNtb0FQY/aCikfYFE1nzmpHMVB aBpJXfbNSOM6G5eg4z YSRmUuMuFp8CDfpQkezF1APf588yFaKV/zm&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_Word_sciagnij.exe

http://www.stockpackagechuckle.com/c?x=JMgF iRHBO1YEe7Ac4Rr1SlhyTjqB3hRCgJFunInhzc=&c=Md06 LFIcSjZlaVfq4YWJEpXF8CraeOXKkMwzTxdvrsIXOGXbVnrax41IsmtqdhPv4qEKhUsBLK04fhf1slsbppiisUk1GlBUL5jJ7e73OeRx1/b995 MlBqa/w701Z5&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_Word_sciagnij.exe

http://www.hostingcontentconcepts.com/c?x=RrnXiEyw2csVvHCOSw2Z1Dfc7OS1DnhuYYRkJBlkBVM=&c=o3ls6ewZEoNQ3aAh v0IicHjF6nfqUGkfLZGGLj2yg Rn/3uktgWiNZvp17i6TPFU7n9 H3gOMLljlRx/5 H42Qehnf GdpXRLvGsIvxufpIn pXVMB00gvj87zu6M 6Flbb6MnYl6wzUwDkG/wfrQ==&e=0&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_Word_sciagnij.exe

http://www.deliveryflashpackage.com/c?x=jFYSGTG4SV2tCCe8WLjJdo0JDDxCE82Z5HtDzvLFlZY=&c=tlUjT/ePFK9Tmv54x8SM1P5TetGzGoaSMFMg3z Xbg IB9aUHIaFThmSIdVRn55pgwJx74VanZVh/2Fr4KYhnRZLeXYwppDJVrqhkRfMbftxYur7dTmK2ozu38tlG0qhP5nvyd57nzJ12hTToz8 Fg==&e=0&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_Word_sciagnij.exe

http://www.headhostingfactory.com/c?x=8NTE5e7hFIpfW7XyqySiZifAZxnc6/pjqivxLs2r1/o=&c=CpPvIeWpEzSVJadKYtfp99oMQsm6BMWKq9J53aAYDrkjjW/6bdfc6cA7eo6NB0fPcMe9pAUxP7lbBVw3fU5AYzSaN/JEYD/W70QhKzdpIaoX6rOBLtfIiA87I1S4xyfz&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_Word_sciagnij.exe

http://www.tourstockheart.com/c?x=4KZm2iOYCWmQv4i7zfsN4pB9T8ck6oZONMd54UYecks=&c=L6O0g/8ebz1KfQKPtOXzLKeZkfDOVez2EoHrb3eUB1xcvWy/iSR4/NpoAoE3aTlj Vpi4ftveau/t8qW/gZcnHuxVHRNZBoXpcAJPr8nlURhFj80fuuL90jEqGaWtl6a&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_Word_sciagnij.exe

http://www.universecleancenter.com/c?x=eOrrg8EFSEIF/9cTVKDlTZJ8/EztsANDehkXoDuM09I=&c=LPZETjOkQRJyiCu2cxkA47zSUetLgG3K2NgbY5VGVqNM74kQoguxb28QK4RY37nnIwoepLsNAZDLbRg08Eb2hl20vuYuaXBc0Z6/vEmC7LB2T66YPoU5GOLofQrd0 77&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_Word_sciagnij.exe

http://www.universecleancenter.com/c?x=OV6/O39hcnclCmpRZSAEMgi55aS9MjJn sWKWjnK5SM=&c=ZdiFNmNG4 GprRMHOqugYUJOGZ9dBPCwy9cyE7GtFspb6c0mEydD5MyClPM5o0zqZl/c2XNbKDDHTmyS5xkkYpAe bLnRin2TcSojPa2WDNCXBcSitlwwZR7X93kpplC&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_Word_sciagnij.exe

http://www.hostingcontentconcepts.com/c?x=tMRZHX78RWVadipfiCBFPgrQoHGEoY69GWgEGWf8KYM=&c=zqLW3hGmMH9LT/8omhN3PYD1Hxc4mEfRyxIk 2lCuWvma3XoMQyDdeJAcOE6/SDMtSM8/m2GSspfc6WOGmqT/OuLdZjZBMVECY 2XBVAQs3WKhtGnK3HheSJqPLN313944HpgsacYiIgN6AKmdb6nQ==&e=0&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_Word_sciagnij.exe

http://www.vaultscontenthead.com/c?x=B1vqdfFVohuQmXVHfbL20M03yRxl21w6ekl1zsNaU38=&c=m6xulwj 3auz22mipCXHJZIBs1iY31aEP3SdnzvORCeYYykAz6GnWs/vmA5OnEqqh/X6zve5MXsN9DcbnGEg4W dM7rw1yC9DzLcIMNUn5C3e9T4v8Fq6XN8An1T9qx2&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_Word_sciagnij.exe

http://www.deliveryflashpackage.com/c?x=SEKmZ0aBDbm62fHqr9BljF9eFtE5XpKKOKnWxaL Jmw=&c=jFJuu0CaxsGdVrfjvBQLRNKR4lJzNPTTG/X8G1koVq8zH9N8Ts0sUZiTbxtzaHqpV2McxIN6skAynKh1Q/l0Nl5tvBwGiTcK9gHJSw46t15cU6YMjYRMEVWanjTkpKfzzJw2wQn75gyfr93eatjvUA==&e=0&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_Word_sciagnij.exe

http://www.townuniversepresent.com/c?x=vUtFrWLftLGwhTIFXwah/ww 3aZh9deg5r1rvs4nUCU=&c=DWpUBoogVGFeqcLFO1BQIeV2 Fl1ZLFPPb kBPnnIaU4qB0XRvl/ilxRi jzdqxZZ6vkN2fuQGRqm/pY4/7UA2fgylNAK/5tyEjZRLpMOutJ 7OXkMrRIATS2y2OmTpzGEuAF9Y3AtxQEH3JQyiQWA==&e=0&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_Word_sciagnij.exe

http://www.hostbundlecapital.com/c?x=C6 XHWkuADA7KDvFDKa2cU 34B7cCY/6d06bec7CCqE=&c=94SMAHWo7X7pAg4kNNksZ7BBaAbMgRDtrIuzQWX/Od8EQjQRCsEX8oNfOupzWtxoehDudkpM6o2GJJgHwa0ZiV2aKSMaAGlwO0nkqN/zB7NT8XKTe1rZSaGKy9iI5XtB&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_Word_sciagnij.exe

http://www.headhostingfactory.com/c?x=kjCvqQ4JXb6zlp/AWFpL9HPvNTRM5pV3MMcdB8ZVBq0=&c=rlafMUmOyuBfoTWKMYZmfxEVGXhUaiw6ogDQNK6vEEU7OwU FVZLO4YAMzXwDXRftxVCXOOzL2jQ9OF8GX1Y5zUhQt8118SRWza8GR3X 7W8qUtpmk95lTFxw3bk1036&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_Word_sciagnij.exe

Latest 30 of 49 download URLs

Remove installer_microsoft_word_sciagnij.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.