home

lphant-v3.51-installer.exe

Lphant

The application lphant-v3.51-installer.exe, “Lphant : P2P client ” has been detected as a potentially unwanted program by 2 anti-malware scanners. The program is a setup application that uses the Inno Setup installer, however the file is not signed with an authenticode signature from a trusted source. The file has been seen being downloaded from download1509.mediafire.com and multiple other hosts.
Publisher:
Lphant

Description:
Lphant : P2P client

Version:
3.5.1.0

MD5:
9d6090e5ba5d8cd89b1dded9fe261f3e

SHA-1:
a407fc9bc702b61a66edee1ba51bf3112484f745

SHA-256:
827885b793b9051d297fb816489224eb24e262c60bd9beebc6d9206daf5143da

Scanner detections:
2 / 68

Status:
Potentially unwanted

Explanation:
Bundles the Conduit Toolbar and/or Conduit Search Protect.

Analysis date:
11/5/2024 4:39:31 AM UTC  (today)

Scan engine
Detection
Engine version

Dr.Web
Adware.Conduit.37
9.0.1.0209

ESET NOD32
Win32/Toolbar.Conduit (variant)
8.9932

File size:
2.8 MB (2,922,143 bytes)

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
English (United States)

File PE Metadata
Compilation timestamp:
6/19/1992 11:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
49152:/2YLzyyg81in60c2gVuQgfU+kK6Co7J3/6OjTvceSm6QXJCh2zsEOumsrJhqYlzm:ec9A6w66BkK6b3/TTEeSm6QZySs5Jsru

Entry address:
0x998C

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 3A, 97, FF, FF, E8, 41, A9, FF, FF, E8, 6C, CB, FF, FF, E8, B3, CB, FF, FF, E8, 12, F3, FF, FF, E8, 79, F4, FF, FF, 33, C0, 55, 68, 32, A0, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, FB, 9F, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 9B, FE, FF, FF, E8, 06, FA, FF, FF, 8D, 55, F0, 33, C0, E8, B0, D0, FF, FF, 8B, 55, F0, B8, D8, CD, 40, 00, E8, EB, 97, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, D8, CD, 40, 00, B2, 01, B8...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
36.5 KB (37,376 bytes)

The file lphant-v3.51-installer.exe has been seen being distributed by the following 19 URLs.

http://download1509.mediafire.com/wl7166aavdbg/.../Lphant-v3.51-Installer.exe

http://download1509.mediafire.com/5lu34cy9eggg/.../Lphant-v3.51-Installer.exe

https://secure.innodl.com/.../lphant.exe

http://download2069.mediafire.com/9s605ajzw2og/.../Lphant-v3.51-Installer.exe

http://download2069.mediafire.com/e1ra071kyyqg/.../Lphant-v3.51-Installer.exe

http://download2069.mediafire.com/v4elw91lubog/.../Lphant-v3.51-Installer.exe

http://download2069.mediafire.com/mwkldp5a42eg/.../Lphant-v3.51-Installer.exe

http://download2069.mediafire.com/yk1g491fh5xg/.../Lphant-v3.51-Installer.exe

http://download1982.mediafire.com/gqb78dtbgyhg/.../Lphant-v3.51-Installer.exe

http://download2069.mediafire.com/we2i42xkhwvg/.../Lphant-v3.51-Installer.exe

http://www.nowapplicationgift.com/c?x=SMyG KtLxmLzBh44wiNXNtTrNuFTT98FEb4FTuHSTGY=&c=Ln32KIriP9MOQoV4ZzD5eHSdjqlPRmaqZLQfb6hLvkYCUinaPjFh4iKEZGlalBEi5YQCYNcUG Q/Nmiy9YZNxn4Q/VhCbp/VHhtBZK raC6C6Lkdti6ZwAhqaJ3CRyYKJbEzR2d/7VvtUvW2/lHvl CEQXr36H7RBbvDAU7AeeDuP54PbOaytWredyYQjnIt&e=0&fallback_url=https://secure.inndl.com/.../lphant.exe

http://download2069.mediafire.com/xntz4fhwhh3g/.../Lphant-v3.51-Installer.exe

http://download1982.mediafire.com/tf2e2oeht2mg/.../Lphant-v3.51-Installer.exe

http://download1586.mediafire.com/mn9o18um7ahg/.../Lphant-v3.51-Installer.exe

http://download8.mediafire.com/za96xswg8dzg/.../Lphant-v3.51-Installer.exe

http://www.afterdawn.com/software/.../download.cfm?version_id=11493&software_id=1407&mirror_id=0&installer=0&perion=0&air_installer=0

http://download901.mediafire.com/uh3af96dz8og/.../Lphant-v3.51-Installer.exe

http://download2069.mediafire.com/3uh613ocxyig/.../Lphant-v3.51-Installer.exe

http://download1982.mediafire.com/hwptyvq9xufg/.../Lphant-v3.51-Installer.exe

Remove lphant-v3.51-installer.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.