home

lineinst.exe

LINE

LINE Corporation

This is a setup program which is used to install the application. The file has been seen being downloaded from cc.naver.jp and multiple other hosts.
Publisher:
NHN Japan  (signed by LINE Corporation)

Product:
LINE

Version:
3.2.0.76

MD5:
007211bb469ac29d34c8528a3494fb9c

SHA-1:
e2c423bd6280e7baf6bddb75ef995b53a9f00342

SHA-256:
7415710fdd1d0ff74c23c434aa40ff72f23f7391b9c885e8b8f754517f07d5b3

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/16/2024 5:43:44 PM UTC  (today)

File size:
17.2 MB (18,012,192 bytes)

Product version:
3.2.0.76

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\lineinst.exe

Digital Signature
Signed by:
LINE Corporation

Authority:
VeriSign, Inc.

Valid from:
4/23/2013 12:00:00 AM

Valid to:
4/23/2014 11:59:59 PM

Subject:
CN=LINE Corporation, OU=IT Service Center, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=LINE Corporation, L=Shibuya, S=Tokyo, C=JP

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
6ED5E8BAA907625786245226043A6035

File PE Metadata
Compilation timestamp:
6/25/2012 9:24:36 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
393216:FT2Mf4hsthNapVIJNUEsxFriMTqAG5uasIROFEIigkoX:FiMLZaAJNRM2NfsbqxvoX

Entry address:
0xB14B

Entry point:
E8, 7E, 2E, 00, 00, E9, 79, FE, FF, FF, 8B, FF, 55, 8B, EC, 5D, E9, CE, 18, 00, 00, 8B, FF, 51, C7, 01, 64, BA, 41, 00, E8, F6, 2E, 00, 00, 59, C3, 8B, FF, 55, 8B, EC, 56, 8B, F1, E8, E3, FF, FF, FF, F6, 45, 08, 01, 74, 07, 56, E8, CC, FF, FF, FF, 59, 8B, C6, 5E, 5D, C2, 04, 00, 8B, FF, 55, 8B, EC, 8B, 45, 08, 83, C1, 09, 51, 83, C0, 09, 50, E8, 3A, 2F, 00, 00, F7, D8, 59, 1B, C0, 59, 40, 5D, C2, 04, 00, FF, 35, 88, 1B, 42, 00, E8, C0, 28, 00, 00, 59, 85, C0, 74, 02, FF, D0, 6A, 19, E8, D3, 1E, 00, 00, 6A...
 
[+]

Code size:
98.5 KB (100,864 bytes)

The file lineinst.exe has been discovered within the following program.

LINE  by NHN Corp.
Publisher's description - “A global messaging service loved in over 230 countries worldwide. Stay in touch with your friends, whenever, and wherever you are! Use LINE on your smartphone while on the move and from the PC while in the office or at home.”
line.naver.jp
About 8% of users remove it
 
Powered by Should I Remove It?

The file lineinst.exe has been seen being distributed by the following 11 URLs.

http://cc.naver.jp/cc?a=dwn.win7&r=&i=&m=1&nsc=line.pczhhanthome&u=http://cdn.line-apps.com/client/win/.../LineInst.exe

http://www.tempf.com/download.php?id=2943&key=&mode=program

http://www.filehorse.com/download/file/.../

http://dl.cdn.chip.de/downloads/.../LineInst32.exe

http://www.linepc.me/goto/http://dl.desktop.line.naver.jp/naver/LINE/.../LineInst.exe

http://software.thaiware.com/download_url.php?id=10138

http://www.mediafire.com/download/.../LineInst.exe

http://line.softonic.com/download-tracker?th=8yS3 KGEYLiw7GKMHzA/.../JxF9y7isU27cKfIH4WR03UCYU=

http://line.en.softonic.com/download-tracker?th=1/.../qiUxs3qIM3SMNyOv81u40d mYWxLSv24R9wahobRYi5xkjAL3EYqY52 tUtjaE5oP05TXiwGIUkexoc4Dug=

http://dl.line.naver.jp/naver/LINE/.../LineInst.exe

http://dl.desktop.line.naver.jp/naver/LINE/.../LineInst.exe

Scan lineinst.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.