home

pobierz_daemon_tools_lite_32-64-bit_wersja_stabilna_v10.3.0.exe

Linogu

New Software S.C. Marek Lubas Mateusz Ponikowski

The application pobierz_daemon_tools_lite_32-64-bit_wersja_stabilna_v10.3.0.exe, “Linogu Setup ” by New Software S.C. Marek Lubas Mateusz Ponikowski has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the Inno Setup installer. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions.
Publisher:
New Software S.C. Marek Lubas Mateusz Ponikowski  (signed and verified)

Product:
Linogu

Description:
Linogu Setup

MD5:
632eb2bc70da3904fd41afa6bcfedf77

SHA-1:
c843dddf3697f858e9a6006d729a25efa711f1dd

SHA-256:
8a5b34ef3144619824a237402335cdde21db56188d3133f2a1b54d67c8b4941d

Scanner detections:
1 / 68

Status:
Potentially unwanted

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Analysis date:
11/27/2024 10:32:20 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCore.NewSoftw.Installer (M)
16.4.13.15

File size:
1012.2 KB (1,036,480 bytes)

Product version:
3.8.6

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Common path:
C:\users\{user}\appdata\local\microsoft\windows\inetcache\ie\{random}\pobierz_daemon_tools_lite_32-64-bit_wersja_stabilna_v10.3.0.exe

Digital Signature
Signed by:
New Software S.C. Marek Lubas Mateusz Ponikowski

Authority:
GlobalSign nv-sa

Valid from:
1/25/2016 2:04:52 PM

Valid to:
1/25/2017 2:04:52 PM

Subject:
CN=New Software S.C. Marek Lubas Mateusz Ponikowski, O=New Software S.C. Marek Lubas Mateusz Ponikowski, L=Zielona Gora, C=PL

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
11214BB66B174061C414C796047FA27A14E3

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:pDkDBWZo5S7wtTkDyvqUwOx6t4aJ9hmiK0GyRDLawz81k:poDBWo5S7wtTkDS7wOxiJ9hm+G0LHz81

Entry address:
0xA5F8

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, CE, 8A, FF, FF, E8, D5, 9C, FF, FF, E8, 64, 9F, FF, FF, E8, 07, A0, FF, FF, E8, A6, BF, FF, FF, E8, 11, E9, FF, FF, E8, 78, EA, FF, FF, 33, C0, 55, 68, C9, AC, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 92, AC, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 26, F5, FF, FF, E8, 11, F1, FF, FF, 80, 3D, 34, B2, 40, 00, 00, 74, 0C, E8, 23, F6, FF, FF, 33, C0, E8, C4, 97, FF, FF, 8D, 55, F0, 33, C0, E8, B6, C5, FF, FF, 8B, 55...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
39.5 KB (40,448 bytes)

The file pobierz_daemon_tools_lite_32-64-bit_wersja_stabilna_v10.3.0.exe has been seen being distributed by the following 14 URLs.

http://www.appsfilesbundles.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

http://www.appsfilesbundles.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

http://www.bundlefactorycycle.com/c?x=zKbkPPqUxmcUcFoDfPbclEljSWKt1BgWjafWJ2sMqJY=&c=LVhsRxRCtmkgvZPxh3SDqV2yw33ejsU3O7RFU6DIg3aECq7ueL2kCEzRSS8/3KLKn496XWRXdXRZyDcGFgDva5JH/Ff/YcRaCDBHR/aP7XNH/2CqZliqEoFuex S6nEW&downloadAs=pobierz_Daemon_tools_lite_32-64-bit_wersja_stabilna_V10.3.0.exe&fallback_url=http://.../

http://www.bundlefactorycycle.com/c?x=Piry0XbFlEn99K/3ItL0YurR6m4Ob6AUs3rLz4Bz7HQ=&c=2ACGj5oHUYDXAlb4nnX6KpmXdbyBFdftukom61yfWM8W/X1G1G9eqfONobmw25aruJwciKiD7yAEiGcVevqsoLFco4o7Yil818hOQUhsrePliIUCNz0m9efKHJiJRYWw&downloadAs=pobierz_Daemon_tools_lite_32-64-bit_wersja_stabilna_V10.3.0.exe&fallback_url=http://.../

http://www.applicationsbundlecontent.com/c?x=OLS4kWK6QtaIvwLjj 1V1GTwSIuQ8A/zj8gUn5hYhPU=&c=6tqPly1 ioonL1R4EggPE1J0bl4CvlBdPzhiDg2NUtUAuhWH5GzqOvhi nx4L9jvhybVlgfNCvfA6LmuA6R0aGT43zZH3FAC7H8p6Z4/Y8xcD9ZPQ6hX/DkRdk4TdPgM&downloadAs=pobierz_Daemon_tools_lite_32-64-bit_wersja_stabilna_V10.3.0.exe&fallback_url=http://.../

http://www.appsfilesbundles.com/c?x=ae1rLMIFTglicZ5Mbj3q1yFSSL9QYXN1xWxDubx166g=&c=t6XDDgnaoRgjxsRkPABNSFpz39CHKCJjTBM0cpX7oHwuc8ybqmJBE4u8GYxAJ06GtuD mO4skz4ZPTBFcaWdpWXj4Cbupby1LkRsGbceP8ieOohC8vWNRZHDu5iojTKd&downloadAs=pobierz_Daemon_tools_lite_32-64-bit_wersja_stabilna_V10.3.0.exe&fallback_url=http://.../

http://www.bundlefactorycycle.com/c?x=3g8mGJw2/nbJNyh6j05EBCMjw7VNElDVXfjrfnSswCQ=&c=7ug4oWeeYElHTK1t 4ASHESIYeooudLonCg1vawKLDhKf4WN26b9wGGs5 R6X2w/rQO/hjbS9NLHxOHGNGahVHn3EK3ERLYmaoML72mBBb/V/3bo626gafoDvoXW0eOz&downloadAs=pobierz_Daemon_tools_lite_32-64-bit_wersja_stabilna_V10.3.0.exe&fallback_url=http://.../

http://www.bundlefactorycycle.com/c?x=U6z3XMXLGKV5RfJZ mkto2o4PYNDXPEmJeJDoB0eiAQ=&c=4AeAG3r3ccCJ/2Hs1wZZv8XdAJtZLivmYV0NQm820yMZP 3dlqOBqDaxvwqUBK6gVtyQC38BlCDhMn04rNsZaPN77VByFPhz1sKeGZ70AxDbD aRWptNgHf5otCnemj0&downloadAs=pobierz_Daemon_tools_lite_32-64-bit_wersja_stabilna_V10.3.0.exe&fallback_url=http://.../

http://www.appsfilesbundles.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

http://www.appsfilesbundles.com/c?x=ysQaTHDrtZ9uTyYdH72Vsd5lTZi88kzrCkcNPdl8e/c=&c=0ko5xQadB7DnKHGnnTkLhnslzEefQWKeNbSYAnnQ7hADLt7jNm xmnirjNwK8LOMzOW N34 KV7R w4WzlNvHQK13CkZ2xDUfRmxHR7y1wjrn/ZemXKA5lVIH1au6EKmBmG/n2CUXNOjOkrq HS6bfabYqKD6IIBKF1fbbX9Wcc=&downloadAs=pobierz_Daemon_tools_lite_32-64-bit_wersja_stabilna_V10.3.0.exe&fallback_url=http://.../

http://www.appsfilesbundles.com/c?x=pM8tb3E2XMaAzxINDR/cyduZVB1uhP/DdAxr4jTsgNs=&c=XTzQ2A6PMVb/3ZscqsYNqp96xtq BLxp81HXXUx9 o2/IY07BmsyY5ko3Q i7YloV YkfF7zJ3maRphhnpcCD w/ZvlMVyxEyiiYMnawrt ufQlqXzp5Sw7zSgpZR87k&downloadAs=pobierz_Daemon_tools_lite_32-64-bit_wersja_stabilna_V10.3.0.exe&fallback_url=http://.../

http://www.appsfilesbundles.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

http://www.appsfilesbundles.com/c?x=k2fbAmIJ6Hcn6Z3Ls0Xq7vLQ6BKnzH8uzmnSJPXlde0=&c=Ee VcdDtRHYHQNYEro3Uv5UBWvkN5wgmGBNbcqjTvKN0tCQ4OdFLBl9lY/W04TITh8dvJpP2nusUD3NK2g5QQTBk9mghtPvpIVX6 XolWwhPyrNUm2xTB5 j fl99xMkuTrSXB43Lme94qHgbIzIaPxWyXdex2NHl22BeQyB4ZI=&downloadAs=pobierz_Daemon_tools_lite_32-64-bit_wersja_stabilna_V10.3.0.exe&fallback_url=http://.../

http://www.appsfilesbundles.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

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.