home

lineinst.exe

LINE

NHN Japan Corporation

This is a setup program which is used to install the application. The file has been seen being downloaded from 113.171.224.212 and multiple other hosts.
Publisher:
NHN Japan  (signed by NHN Japan Corporation)

Product:
LINE

Version:
3.1.4.73

MD5:
2a3cfd5cfc5555388f0150eb96a562f4

SHA-1:
7dc6ce6c3a96ea44af62f8400e3a1f886d83f530

SHA-256:
941e95d41d3eb36c29aef1815a40cd2e36878f6d5414db88523e9a4783088298

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/14/2024 9:05:15 PM UTC  (today)

File size:
11.5 MB (12,089,384 bytes)

Product version:
3.1.4.73

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\lineinst.exe

Digital Signature
Signed by:
NHN Japan Corporation

Authority:
VeriSign, Inc.

Valid from:
10/22/2012 2:00:00 AM

Valid to:
12/22/2013 12:59:59 AM

Subject:
CN=NHN Japan Corporation, OU=Hangame Division1, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=NHN Japan Corporation, L=Shibuya, S=Tokyo, C=JP

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
7592D0FBD0AAE618C3D6191974FE408D

File PE Metadata
Compilation timestamp:
6/25/2012 11:24:36 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
196608:wiMIVJ9gUoSMXviRSgUsHVFuZsTX4QA5Zk/9REMxzRD1h9HZq9RGs6vCo7aWH:wiiUqviRNHzuZsVHEMxJ17Y9RkKo7P

Entry address:
0xB14B

Entry point:
E8, 7E, 2E, 00, 00, E9, 79, FE, FF, FF, 8B, FF, 55, 8B, EC, 5D, E9, CE, 18, 00, 00, 8B, FF, 51, C7, 01, 64, BA, 41, 00, E8, F6, 2E, 00, 00, 59, C3, 8B, FF, 55, 8B, EC, 56, 8B, F1, E8, E3, FF, FF, FF, F6, 45, 08, 01, 74, 07, 56, E8, CC, FF, FF, FF, 59, 8B, C6, 5E, 5D, C2, 04, 00, 8B, FF, 55, 8B, EC, 8B, 45, 08, 83, C1, 09, 51, 83, C0, 09, 50, E8, 3A, 2F, 00, 00, F7, D8, 59, 1B, C0, 59, 40, 5D, C2, 04, 00, FF, 35, 88, 1B, 42, 00, E8, C0, 28, 00, 00, 59, 85, C0, 74, 02, FF, D0, 6A, 19, E8, D3, 1E, 00, 00, 6A...
 
[+]

Code size:
98.5 KB (100,864 bytes)

The file lineinst.exe has been discovered within the following program.

LINE  by NHN Corp.
Publisher's description - “A global messaging service loved in over 230 countries worldwide. Stay in touch with your friends, whenever, and wherever you are! Use LINE on your smartphone while on the move and from the PC while in the office or at home.”
line.naver.jp
About 8% of users remove it
 
Powered by Should I Remove It?

The file lineinst.exe has been seen being distributed by the following 9 URLs.

http://113.171.224.212/.../LineInst.exe

https://doc-0s-3s-docs.googleusercontent.com/docs/securesc/8d8gg9o3daianifc3fnieujflbaihkl4/pvtp6f7l49df52rb993d26a7a7gh0n60/1432533600000/.../12028849848649361554/0B_cGvZ_RoCxrU0FSYzFEdkVRakk?e=download

https://docs.google.com/a/.../uc?authuser=0&id=0B5cMuSiBhbMZV0JfdWV2bm92Mzg&export=download

https://docs.google.com/uc?id=0B5cMuSiBhbMZV0JfdWV2bm92Mzg&export=download

http://jp.softyp.com/.../Download-line-3.1.4.73.exe

http://linepc.info/wp-content/uploads/2013/.../LineInst.exe

https://docs.google.com/uc?authuser=0&id=0B5cMuSiBhbMZV0JfdWV2bm92Mzg&export=download

http://dl.line.naver.jp/naver/LINE/.../LineInst.exe

http://dl.desktop.line.naver.jp/naver/LINE/.../LineInst.exe

Scan lineinst.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.