home

plants-vs.-zombies-garden-warfare-full-version.exe

Cagolig

Destiny Dream S.A.

The installer utilizes the installCore download manager which may bundle additional offers for various ad-supported toolbars, extensions and utilities. The application plants-vs.-zombies-garden-warfare-full-version.exe, “Cagolig Setup ” by Destiny Dream S.A has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. It is also typically executed from the user's temporary directory. The file has been seen being downloaded from www.presentgifttours.com and multiple other hosts.
Publisher:
Huful   (signed by Destiny Dream S.A.)

Product:
Cagolig

Description:
Cagolig Setup

Version:
3.6.3.0

MD5:
374df72248113b20f0ea626429b2f155

SHA-1:
69466c1566d5332ce1204a086ee53d018d4f4d4f

SHA-256:
71d0e888d8601b6f77a01d0973e1fd9bcda36d4e6259e090db2c1101b3e69632

Scanner detections:
1 / 68

Status:
Adware

Note:
Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Description:
This is also known as bundleware, or downloadware, which is an downloader designed to simply deliver ad-supported offers in the setup routine of an otherwise legitimate software.

Analysis date:
12/27/2024 9:02:37 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.installCore.DestinyD.Installer (M)
16.4.10.18

File size:
989.7 KB (1,013,448 bytes)

Product version:
2.0

Copyright:
program

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\plants-vs.-zombies-garden-warfare-full-version.exe

Digital Signature
Signed by:
Destiny Dream S.A.

Authority:
GlobalSign nv-sa

Valid from:
12/17/2015 10:55:11 AM

Valid to:
10/2/2016 10:36:18 AM

Subject:
CN=Destiny Dream S.A., O=Destiny Dream S.A., L=Clarens, S=Vaud, C=CH

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
11217A75EB912AE2167326222C18D9E2357F

File PE Metadata
Compilation timestamp:
6/19/1992 7:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:ao9v/Sb8ISdMPNf/kLkfz8HF2+7jDBVCyP39KvlDVJx:a6SkaPNXkQfziF2sjL8l/x

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, 53, C9, FF, FF, E8, 9A, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, 24, CE, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, 24, CE...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file plants-vs.-zombies-garden-warfare-full-version.exe has been seen being distributed by the following 27 URLs.

http://www.presentgifttours.com/c?x=HPQsYf64zPxQMo/k f1KIO6BezxvVIwgEQfRMrmBI s=&c=ieTNWzkO3mKV6ppdSjatyh5/XPmYd57MUApIeiy2vRo/LbPrylcWci7VT8zexd04OPMcrdREcxpMaP0Mch kHFBpP/0W9qjbSPJ15y2mLEetzP1KMR5ZBUkmrSkbuKbEpnGW96wMaovkgsDn7 3ykZTTYW/qC1QVu33e5NAxTilfBuY11JXAPIjtJRThFJdJ&e=0&downloadAs=plants-vs.-zombies-garden-warfare-full-version.exe&fallback_url=http://.../#buy

http://www.presentheartapps.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

http://www.dlflashstock.com/c?x=LT3kT0YzmckmgT8ZhMTHDvpo68lxehbYle9nP8C/7P4=&c=2N5nBqXtpCFP doCtE8NtCGCUmo9xlZ46Kwo0hYaynSPLWKEnel0dWaIEw2XBFQeKq2Z2VauPeVmS2tAEZsikipBVqPsfzIAeRuSgGIAZFWnem2rpFYm/JM2HdPfwkzSg RXtqcll5xww6rUE6JT9eVtwQZ2t4WF/i3zU6Ts1k8=&e=0&downloadAs=plants-vs.-zombies-garden-warfare-full-version.exe&fallback_url=http://.../#buy

http://www.sendcurrentfarm.com/c?x=lnWJQivZ1qLhCqzji8ToHwgRCB1qTtgnlPA BsXNMkA=&c=SJ3h3dXVZy2/zl9v78E FuSapSL4hz9i4Eeqg/anvlRnt8 bHXUF7Sn8LmRNa7QpZk7o9mAMTqT87m4zUybPs5kJtQFFUsoofstD Tjoq4UM/JaOHmX7WeAHK35Zqc 71u0tZgZg91e4inUE4tbbVFzmsDFgemZ/G7Zv9Um6xr32ZBQDjBQdYzeE/svjmC h&e=0&downloadAs=plants-vs.-zombies-garden-warfare-full-version.exe&fallback_url=http://.../#buy

http://www.bundlesbinariesnew.com/c?x=L49/DXkiK49NGrowHuyQFuE0g7m1/QCZy9bEx2QeQwk=&c=f0SeDo7/QnaS9Ahwg6TNNKU11pTp43AOW0XbmBCfn5NyfZR/ CVf7wYO45Q8AtVT3kfhOyNjuRnN6e7YnICbJT6SnbojJQlJBbnNgfCeYhhIOq H8Iyj9osO2xD49/H6kXlNk4ElWzOfkOW/yaC8WQ==&e=0&downloadAs=plants-vs.-zombies-garden-warfare-full-version.exe&fallback_url=http://.../#buy

http://www.gifttowndelivery.com/c?x=Cz5rMzyj 23G8hee7P4qWqRWiz2rxxn0udEfn6tTYww=&c=s0b5bpUSBTvCMLowWyEuE7szj008JJV0I9GT3YJo00HZhRiw5nIRB1Y4UojGX3Qu0kw9qdBjm7Xcev6AFe4zHoeqOmscVScf ZZfPsCbbsrUlpdZqYGzHqoWvzOxTDoCkcn24yajYLEw7 n0MfvJkkciC24dfrfWbSg3yk0rlSM=&e=0&downloadAs=plants-vs.-zombies-garden-warfare-full-version.exe&fallback_url=http://.../#buy

http://www.giftpresentbundle.com/c?x=0ySt6WmQsoz5uU5MyIbn4SVGuFi3uJKBea4N6REEPzo=&c=mvyffSPCohQR8sc108eG171/XwP0 VKmAnpHEL/xLnojRF3gCXs46LhilUU 9EjDnRJR1yb8pPm5aHYLMZ5nzzTE gmreSZfLXPGcBN1huXNcPxjqPQGxScFvgX2ZwqTxdQqz3dkbyTyLoXP/AFqGRfCXi s1bYrC5osILMDmjE=&e=0&downloadAs=plants-vs.-zombies-garden-warfare-full-version.exe&fallback_url=http://.../#buy

http://www.sendcurrentfarm.com/c?x=vjpUXn0RafSVfXdoBdAppgLB KXhADD5bOz6fsc5iI4=&c=bIAievIaja6qwu3CGi1frdevWA8iuMV1FB2UsyHJ cqg4W4qQn0oRkMtQBUrtu4nfQkHKe31DwGQXJ2JQ7ANQwJOkwFxhnrsG4iI1g1JqxBkXlTjajiPxQA6Hf/W/gkT/zjdt7gagG43ZPijPnJWEdJTj5DPQ0qatXDPMXrE98fFOokU1PzZW1fCrFSgKTJ6&e=0&downloadAs=plants-vs.-zombies-garden-warfare-full-version.exe&fallback_url=http://.../#buy

http://www.softwarebundlebulk.com/c?x=8y2Uvoxz34mPUeQfr9B xLQaIQfZ3zz8OURPTpFg4wU=&c=n2UR1TQsV1WElFVBrjQqVo XepwwOSXrUZAYJURTLe0eTyRX9v XRFkDZvqCgWdghalGaGX9FNQjddHHT4li20taHvkYOQoStLqH9y3mxzFxFHbORm1xhuIKdDSc7Kk5lhu95k4Bv8IeylWnuwksYWzgVWUltqX rE726U6N8bPKGVUU2aLh5COV6Xs7pBrL&e=0&downloadAs=plants-vs.-zombies-garden-warfare-full-version.exe&fallback_url=http://.../#buy

http://www.newgiftcontent.com/c?x=qqFKfVMfVYdLhGfa tMLI30/Azn2Ofwl USLq7wHy20=&c=s 51uIbOVro3WqkImGs3SeSQu3nROKuNwN8hshvVcSAPUpBAFCu7ypCA/wEoC1p5rxRtbOeaKL7Qf 1UmK7A8hpGsinnvzXMxspD4PN6Tk4qIUwwprN79vH0VKTLRYfzidd0yps14c7/SeqeSAl/Qwur4Ftm/Lvx4Est49kW460hDd20mVQNfuxSyAies3aa&e=0&downloadAs=plants-vs.-zombies-garden-warfare-full-version.exe&fallback_url=http://.../#buy

http://www.presentgifttours.com/c?x=lro2pvBIPQkqOTb9MJ2clpApaBswoCc90AfypbbBbdQ=&c=lQCCdQI9s7QXI1lhz97RmuZIng5MNoS BGPXIluyirijHRKlmDnE5UZa Noa9VME3nSrH1Zn6Cl6jWp4rdcvbwX6XXPR44NK6up8aq5iTyQ F9MjeG7cTRAalNGNmX0K7eYWFg2NOKxLSAf/1OjFxmZA FANErn7pBYY06uHMuU=&e=0&downloadAs=plants-vs.-zombies-garden-warfare-full-version.exe&fallback_url=http://.../#buy

http://www.deliveryvaultsdelivery.com/c?x=zJ686M9gSiZCoMNcdFCucYooqMSCzSj3lZ5i5hcJLDU=&c=pE99sL/TJX1keZuQPxv0HRR21CWhUuVTFGto2n3F7C1FKgkOxaUYfn8IW2qHSE4hEp0viuKU/tblCFFLTsDZyK1zCcOZ4wRbG/J0ne5I1v/7YILrQg4SYygjLDiAC88vyM RcCEhz3E0MMRwWx0/KQ==&e=0&downloadAs=plants-vs.-zombies-garden-warfare-full-version.exe&fallback_url=http://.../#buy

http://www.nowfactorymeta.com/c?x=GiF8j iANYZNGw55XPril1vANhJdy78fS5H6dlJBBI8=&c=Uqu3gv4tqB66 bp90wt9bREzj0Bv4HZWLtoPUBn2pWHuwCGS1jFczqgn8P8q8pWA1GTUMbVmVQP9sB0PN3AWDH/Ft1Nfycy1XR48x6IgEl8DE6TNCVWzkazHo8/zHwhjiN4Hr2KI3RQW /DkJ3qMLt4m56ntBYFtg3k7s66EeLt51EuRUwsePO8aDWmFpcQN&e=0&downloadAs=plants-vs.-zombies-garden-warfare-full-version.exe&fallback_url=http://.../#buy

http://www.deliveryvaultsdelivery.com/c?x=DurSoAKK6oca2RV1VAsoiSrMO/mlftw CiPMTOactn8=&c=diB0XU5otlbpWH5zzfFp1CDvaim8XuGrcqJUSrh kcPMKN/HBKTxN4vDvGHW5zZegsdurSseCELSzsK1Alc/nqP705lf/7BsXbvZRz8baZftP5SCR7 9hNw8i/hvMg4/ DT3YpA7Wmven2ZPiNJRGtk0BeOJnsGqSF1Bifbob1oOxQIPb8tIvhAlWw761R1N&e=0&downloadAs=plants-vs.-zombies-garden-warfare-full-version.exe&fallback_url=http://.../#buy

http://www.flashtowerfactory.com/c?x=050SQucb9G4IE1vNoogm5F6N mte2ai/e aw1Fwu0bU=&c= 22xFdDKPPo2jo5VDzUMbX/WZlwLmKDjcXaJhzDFrmG6MmUfLXF4kjWPLW2WkH97l/gSUKIr1/xudWFOSixV1HZ35YH16yP3YjWBXCI94F0nJoqyRa PjZ5ajp8i39AB3xERUUU1kNlXAVF5rjEQAg==&e=0&downloadAs=plants-vs.-zombies-garden-warfare-full-version.exe&fallback_url=http://.../#buy

http://www.toursheartbits.com/c?x=HqaesIq9LPUbZ5yMN5UFrFdpv4VlsQ6n0hFJOXOfWKU=&c=Xe6bKWEtWUF/SYcPRgfNKEB5pXfT3fYWQHf Edf7mpPkgJKEOeErVHdQ1zO80HiAPN7fPppe4/bwRXJ5ii3S6v6sKBuVN3nb2wYRx/RlBmhdDpF8EHA06hKZ9YRgySifuroeBW6el4Wb0giX9t17AA==&e=0&downloadAs=plants-vs.-zombies-garden-warfare-full-version.exe&fallback_url=http://.../#buy

http://www.presentgifttours.com/c?x=Z7JUveJpdV69DI2 Guz3kal 9CgnuGdEvNe8KdyweBo=&c=WB x5f8xpOwpW0O0Iw9prto3Aq9ky/vx48SFjBxVLsstBwmZLecfz8GIQbos9VWuV Kz11Jawe/Hfjcg4uHU3fZU03kgXI4JYhOikOd1hve/prmWmofUqe/GCqCBxo/WEO4u3GjZHJihDd0cPb3QMQ8zE6b cQS3PaheXCNSaZo=&e=0&downloadAs=plants-vs.-zombies-garden-warfare-full-version.exe&fallback_url=http://.../#buy

http://www.tagsendheart.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

http://www.sendcurrentfarm.com/c?x=FaWJtiKtMeEILc3z59jaJuZ X60JHqiC4uYIEe29Qlw=&c=3r1EMoj85nOdneRO30zbHiWllJi8oUl95qCegiVKPqYGmuYLaON7Zevj4pXyPcFrwtYmcEf4j/6bbz9sOObVH7vO2EsK 5VH0vhq 9ybsM3R6X5jPM1aawhOeJC/FT8vbcSMwTyb/9d9qP8a4Bs/7B17gX1TqlYPzqSvmERR5NanlM5SaZFiBllkXs3xnoYq&e=0&downloadAs=plants-vs.-zombies-garden-warfare-full-version.exe&fallback_url=http://.../#buy

http://www.contentsoftwarepackage.com/c?x=U2lzvgwHTQuwvxK5TA3Eg3yTDj2sVdx2qwjEkFAikD8=&c=5gMUuYr8SEBixPbnJK6G4 fXg09n62kIa6rJcnJ4jLLyGqrAVV4hKwEojWU3FPDUZdKRBJceB3lHNE55WENJqntFYTejSAu7HXyPjxKuUOLqOeMocp6NMa6gUEsvCxYC5D/C2Nndlmn/blku4DrJdSyaGO3CMaWW0wvVXbkHiuVidZyonPC9JIanTMhKBKGj&e=0&downloadAs=plants-vs.-zombies-garden-warfare-full-version.exe&fallback_url=http://.../#buy

http://www.presentupdateguard.com/c?x=0NmB1uuLQDZLO3Mc6I3fexXypTcSWgsi4e1US2TfoIs=&c=eBUN4 6guTVzJnkvxF9oqPUb2hPzUc7ZirwisP/srOLHFwwI/Ql2hKaNLpl6/QR6rzC6pdq2g2lupaMww mwI/7u dcM84GdQpMkL1OfINv7IwUOZqWoAJIcB2F7Fxw8X9WJdcV0nCR0eHKP0U1kWQ==&e=0&downloadAs=plants-vs.-zombies-garden-warfare-full-version.exe&fallback_url=http://.../#buy

http://www.sendcurrentfarm.com/c?x=zzQCQoD3er2ACo me4MxRdtg09EA9xbAGWLmnSzW7oM=&c=ecTfMEAIHz1GyThQiWoZ8ygfznlQQfRYCu Y4US5tidJx7YepvZylzK6OHJjQnUKIJMXHsD97ayignXd2MNPbPnFGqhpBQWscbva0GnZyO/A6U2gpIQasbR/O06VlUPuUfx pJ9kF7eOv93iwW5f23l5SYIMcc/YhLjRtrKrhgq2SX78w5yGdtYRJg48OfHz&e=0&downloadAs=plants-vs.-zombies-garden-warfare-full-version.exe&fallback_url=http://.../#buy

http://www.headcleancentral.com/c?x=v CRxOFdJCB4P7TcvKWLJFBAqh yP15ULm5mELXCtZI=&c=I5/5jqrTz9yjmmyrn cGODlfmpE47sRBhWHAQ/AUqyUgnFeRhEadjTZbvT/b7fS7m0AeDVbkHrB3FF0L82INFYwnhC348F/RGGrINVgrnfIOKpT JRIrc6eAJATyVzDuwvW7w2Pw0K1Fmq Qadg5AGYnDrTEXZx1B1s kj XMFJkXPUIKn27EIehsW4iYLjq&e=0&downloadAs=plants-vs.-zombies-garden-warfare-full-version.exe&fallback_url=http://.../#buy

http://www.presentgifttours.com/c?x=hVAkXrpKWf68WDALS9i0uA2vROtODKA1rLGUipZsGu0=&c=DL1/1cTY68J EIf0UTUWxwWPTcMR4y7rR5zvy7KM58Lppoz52PuYqcWSpFLWOOk1HtziJNc/bwKsDmNOnj6jSDHZ7y/R0oiyFxcKWfTQfx/edRNEGeVyoYuvsgB8FMetrZjnjxecYIKPgOUoblUcC1dR0BLOe9IjuWL1kK5LdC 107SpbGVrenF4vADO0pio&e=0&downloadAs=plants-vs.-zombies-garden-warfare-full-version.exe&fallback_url=http://.../#buy

http://www.contentsoftwarepackage.com/c?x=zWw7dqpBd7pB9pevRwKqvMmSBN2eFYxi3FO0xAPMiU0=&c=vEX 03NELI/oZ86NpG1EJlQnJNvVfHphll1yjlfkYg lQy PJ1K0etfi91e4dhM3IAsxcTx6g7RJw1ifr2OaD4K5Q6DOjFCJmmPZzjcHWD10zBIqDgl 8KPn ijuN2/rPaXNt0/yaFcPDvCI20VNdw==&e=0&downloadAs=plants-vs.-zombies-garden-warfare-full-version.exe&fallback_url=http://.../#buy

http://www.newgiftcontent.com/c?x=u2yjn5um1cPOt8rMWmJeHVSoU Rsj Do51meCaY0YO8=&c=KVNlYrUnGCNUgNQf3b0H8R8LlAJgO/4zBxP4W3AZbuLOHGVgsDSOLnERjegiIU/uFMgb49D5p3m dbi2Anl kVxW iAyC0bKeYIlhYS1BsRPkPAXMXVgB3Ex/KZV6AhlPybj5ynbWSWk3CgWKwO8Khep4eMfSO/z0YFDtUREbyHmzeozqjWmHUkfgHT/0AAZ&e=0&downloadAs=plants-vs.-zombies-garden-warfare-full-version.exe&fallback_url=http://.../#buy

http://www.newdeliveryfiles.com/c?x=175DgLMzGfJZsypnP5/PV 8m/vCrVpMT 9HloDQM84U=&c=SMWGnYxyT2oRM5P8x11xGVFmDoImTIurspZOFA2spjJS4YPfvAqOyTCnvAw/8Mjwv/w7vApdG2bjeElw59RrjOkUwak odp98EQIwayCRh efagoy8OPOLTdRPrkY/jYfxYMMfV0seIISC6oKL0CTI8/rD/Iq7jajB9Aca17niWaF79PUK1Z2LqO6Zal4kDN&e=0&downloadAs=plants-vs.-zombies-garden-warfare-full-version.exe&fallback_url=http://.../#buy

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.