installer_minecraft_launcher_by_zyczu_sciagnij.exe

Funusikem

AGORA S.A.

The application installer_minecraft_launcher_by_zyczu_sciagnij.exe, “Funusikem Setup ” by AGORA S.A has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the Inno Setup installer. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions. The file has been seen being downloaded from www.contentbytenew.com and multiple other hosts.
Publisher:
AGORA S.A.  (signed and verified)

Product:
Funusikem

Description:
Funusikem Setup

Version:
2.8.2.3

MD5:
6539849cd4073d4412c02dad4d261855

SHA-1:
fba4aefbbe4f0fc6fdf96219ac1da6142846993c

SHA-256:
032b14d7d96790cefefec3efdb15759b64889367e1d0c73e418847b1f6c61c1c

Scanner detections:
1 / 68

Status:
Potentially unwanted

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Analysis date:
9/29/2024 8:24:14 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCore.AGORASA.Installer (M)
16.5.4.16

File size:
934.7 KB (957,176 bytes)

Product version:
1.4.6

Copyright:
Fast

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Common path:
C:\users\{user}\downloads\installer_minecraft_launcher_by_zyczu_sciagnij.exe

Digital Signature
Signed by:

Authority:
Symantec Corporation

Valid from:
9/9/2015 2:00:00 AM

Valid to:
9/9/2016 1:59:59 AM

Subject:
CN=AGORA S.A., O=AGORA S.A., L=WARSZAWA, S=MAZOWIECKIE, C=PL

Issuer:
CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
615B57E3504C929E3B64ED936D1CE68B

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:b3mdjVK18l5wmIr/dcFOEw6NUyZOYBwBCoHH0elc:bWZV7Ir1ei66aUBVvc

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, 53, C9, FF, FF, E8, 9A, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, 24, CE, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, 24, CE...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file installer_minecraft_launcher_by_zyczu_sciagnij.exe has been seen being distributed by the following 36 URLs.

http://www.contentbytenew.com/c?x=HzXug8Dp5dd8ifKzjHBRQW/0GvOjLMkeEOKiJUcNKVQ=&c=wI1CebFEgOytlUDQ7V0ueLNtk04 HVcu39G2jhvLY8F2kf9dNEuBNRD7hrDdcBYPmIDZIlKePPTHK8dywc6rdeZJxcGHvLjwcrvFaJPpOgzoXrxP25oxqmtHZDjLkk1FObPySfjl8RH4s4qluZL3CA==&e=0&fallback_url=http://bi.sciagnij.pl/0/.../zyczu-mc.zip&downloadAs=installer_Minecraft_Launcher_by_Zyczu_sciagnij.exe

http://www.downloadstoursquick.com/c?x=0fjo86Fu5ogQPSNR4qONLkDZxULDhYL1buJK6uG8qqA=&c=urP8IM2AcJ26fioM8keU0440C5V9IB2cfRyXG3M2r3Rm6B5uinFVidXvvj3cfX2ycN1rV6muG/xqhXQswkhOp0E4sCgoYYCi8tbj3Z/m4DAPFRJevbeOVpGOO wig54jpjn702jwPotcvjAu7HWhTA==&e=0&fallback_url=http://bi.sciagnij.pl/0/.../zyczu-mc.zip&downloadAs=installer_Minecraft_Launcher_by_Zyczu_sciagnij.exe

http://www.deliveryflashpackage.com/c?x=KKQgpAzp/HWAPUUOEBDb610PTRLIJbZun8r0t/xO0/c=&c=j2fOSNJ12C/uHBSU q8LUcj/YZyiLMS0AOUzfLinVylAD5N7fODGFHKZx7GpxH9i DqqQwkdq7J6rv50pJnuDBIzeLkAiXKXZFhovC0id8D0Nm6wxtrwktFucUC/M 8VxFsOqAPxwNvQRAxvGlXcDQ==&e=0&fallback_url=http://bi.sciagnij.pl/0/.../zyczu-mc.zip&downloadAs=installer_Minecraft_Launcher_by_Zyczu_sciagnij.exe

http://www.flashcitybundle.com/c?x=0AtU LDHPyoNPyUkSr2VVOQBSwITuzIMvkbI082LR0k=&c=KYc0aqocG9E4cERPc9b2P2SnJ6IH8A1F9Y/Irl7HX8NjIJ59qID4NzbxN3ZS3sejwONH6Ldlb lAsa6l924XK5p3rjW lSF7Yx93Orf3BHBHSD7s1PW8GEDoxxxoZXRU&fallback_url=http://bi.sciagnij.pl/0/.../zyczu-mc.zip&downloadAs=installer_Minecraft_Launcher_by_Zyczu_sciagnij.exe

http://www.deliveryflashpackage.com/c?x=clGtReP6sP78/xX5pvf q Q3b4NmWNLo30iN12tRgLA=&c=oSxowgAuTBtuiwtXOka7wlBHNQzEmzmYrQQEPR7gtMrTJndd1CpIfi1oeqJm0aHaVF/5TFiznxWRmYedKycAfIYfIH4vQwMru6LA4vAE2zPU2SXP75qh78oREMiK9f5/HzcaAnwi/vyqPSQKeS7vLA==&e=0&fallback_url=http://bi.sciagnij.pl/0/.../zyczu-mc.zip&downloadAs=installer_Minecraft_Launcher_by_Zyczu_sciagnij.exe

http://www.downloadstoursquick.com/c?x=FRL4eYHNi/ibQ4R1khzRLi3 7oAKNFnovZgoDZqTU50=&c=gTfhGydTxiHKE2FSf194vsb7AeR8J2qzEXX7U4uMCc/dc49NlAOm3Ev 7RweRDWjpxuNpBNW2i2jxJc4uGW4BtWRPfyrNLPzrilurWFm0OqmzPyAJX14gPAwkkgzKwy9cRcwv2kHOBx0zbpimZBQPw==&e=0&fallback_url=http://bi.sciagnij.pl/0/.../zyczu-mc.zip&downloadAs=installer_Minecraft_Launcher_by_Zyczu_sciagnij.exe

http://www.contentbytenew.com/c?x=0dQCid7mTHzk22O8vM0imlFCwMa4m93cbqUZa7DCqWs=&c=pcv4DBfLjhq6PQ7egCQozIn8d0e9lLpcu5/ya4eMreSZs0 h6WniJ2m/I7FkkgK6oC44Cv9oZTo9uSKcmeMSPcGOuaIzb 50z pIlXKr4Kuw8TptzQFvFGHYQlALvRtmiMwhdJB5kjw7OSXhYieGpw==&e=0&fallback_url=http://bi.sciagnij.pl/0/.../zyczu-mc.zip&downloadAs=installer_Minecraft_Launcher_by_Zyczu_sciagnij.exe

http://www.tourstockheart.com/c?x=tBQENZ2lSG1DVHVOBjlgNZ0nqy OrIHsULKx2SwDvaI=&c=hzDEa8x58zMmYRXuU0ppsfFZGl4UN9U5i84a6dHBn2vwhwP7n5KU ZNxBpo jPZ5WpfQGOZe05HMTWJejZgyDSl2NzT0Qc9zgm2AMvqKVnViPbVYMJfX894jfbPBOB4z&fallback_url=http://bi.sciagnij.pl/0/.../zyczu-mc.zip&downloadAs=installer_Minecraft_Launcher_by_Zyczu_sciagnij.exe

http://www.deliveryflashpackage.com/c?x=51t45Drd35 Z3evPhhfIC4fNYspeEQvRTVahP3ol0sc=&c=CJfhNXQiBfaN5t8rkNB1vqUzAxxOA1DQ6yZBT6LJvFv e8009d75qbMThn6H h/v7dBK/lfVx5Rxq4xY3 gkpSragZUytRXdgkz2vrK/tad5cmfJDmfZK2stE6CSNCtkzOd23WBkmqYO8fv9udVQ g==&e=0&fallback_url=http://bi.sciagnij.pl/0/.../zyczu-mc.zip&downloadAs=installer_Minecraft_Launcher_by_Zyczu_sciagnij.exe

http://www.townuniversepresent.com/c?x=EtZyY3b18WGkLqyqaJQHqWOlT5KtA3EvhLH7ZzijC/g=&c=rUd27CD9iNm9JKrko/4Ayidlw7cenTmIdifffNnK8C qbyk/G/t8QZF39V9GtZE0eQef4SioKDSj2xsfqShJOrxbMuJF PC1WySDlYkaqL4KEx/qJMgh9G5tij5rKuyWq69oftBM zd3IJhG39g04g==&e=0&fallback_url=http://bi.sciagnij.pl/0/.../zyczu-mc.zip&downloadAs=installer_Minecraft_Launcher_by_Zyczu_sciagnij.exe

http://www.hostingcontentconcepts.com/c?x=l8wjd1JoJucEAdJABk2cnUjOVcjHG6sP/9yNcXhIE6c=&c=lWD2UAoNxiYjqLwjQTN0k8Hv/V6pOQV Hi6fPBIDhfm Ou2ezPIpbVS9udmaeBH C4QyhXGikfm74a4aF9mfn9/b9w3Q q9ruJ4QeMdxVGt3Aft6 PaNZg47k jiWe2lPOyp4FMTwSWoNhVPhgcIxQ==&e=0&fallback_url=http://bi.sciagnij.pl/0/.../zyczu-mc.zip&downloadAs=installer_Minecraft_Launcher_by_Zyczu_sciagnij.exe

Latest 30 of 36 download URLs