home

pobierz_hamachi_2.2.0.420_v2.2.0.420.exe

Lama

Kabikamoh

The application pobierz_hamachi_2.2.0.420_v2.2.0.420.exe, “Lama Setup ” has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the Inno Setup installer, however the file is not signed with an authenticode signature from a trusted source. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions.
Publisher:
Kabikamoh

Product:
Lama

Description:
Lama Setup

MD5:
9b969c781222f8ff919d2f254292bad1

SHA-1:
4d52f1d337907a9bfc99501c938a7a879fd56fc5

SHA-256:
6f09344a3ee25f86791c88fa09a8e8226c12bafb3be9e0dcedc8f474e4d3cf61

Scanner detections:
1 / 68

Status:
Potentially unwanted

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Analysis date:
11/27/2024 10:27:15 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCore.RE11 (M)
16.4.13.21

File size:
1014.7 KB (1,039,045 bytes)

Product version:
4.3.9

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\pobierz_hamachi_2.2.0.420_v2.2.0.420.exe

File PE Metadata
Compilation timestamp:
6/19/1992 3:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
12288:tuv9cIzgrS0hZ9JGroxkFbZSouqKijrXz960CGweU0XmsIAktEDTDpjETKG+Iqs:tuvXzgrHhZ9J9ED96CnWsIvIpoT7

Entry address:
0xA5F8

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, CE, 8A, FF, FF, E8, D5, 9C, FF, FF, E8, 64, 9F, FF, FF, E8, 07, A0, FF, FF, E8, A6, BF, FF, FF, E8, 11, E9, FF, FF, E8, 78, EA, FF, FF, 33, C0, 55, 68, C9, AC, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 92, AC, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 26, F5, FF, FF, E8, 11, F1, FF, FF, 80, 3D, 34, B2, 40, 00, 00, 74, 0C, E8, 23, F6, FF, FF, 33, C0, E8, C4, 97, FF, FF, 8D, 55, F0, 33, C0, E8, B6, C5, FF, FF, 8B, 55...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
39.5 KB (40,448 bytes)

The file pobierz_hamachi_2.2.0.420_v2.2.0.420.exe has been seen being distributed by the following 12 URLs.

http://www.appsfilesbundles.com/WVl6OTRQVkJoWlUxSGNXNDViMW8xYlVWT0pUSkdhRkJUWlZOVFFYVmhNRU0wUW5BemR6QkhXa3NsTWtKeU5HMUNUMUZqSlRORUptTTlNMm8zT0RFd1JrUlZjMVZPVEhOck5HSTVTRkZJY25aeVVreDRXVzlvWTA5dVlqbHdkVGxXWlhKcFdVaDVSWFp2TW1OaGRtNXhaeVV5UmtoVFMwVnFWWGxPTjBreVFrTXdWa0ZIYTNkRVlWZHhNRkVsTWtaQ1UzZGpaa0l5U2twelN5VXlSalZuVnpGaFVUUnFWVGRxTTBzbE1rSmpKVEpHTVhJeFV5VXlSamMxVDFaVFdWRnBURGxGTWxjbVpHOTNibXh2WVdSQmN6MXdiMkpwWlhKNlgwaGhiV0ZqYUdsZk1pNHlMakF1TkRJd1gxWXlMakl1TUM0ME1qQXVaWGhsSm1aaGJHeGlZV05yWDNWeWJEMW9kSFJ3SlROQkpUSkdKVEpHZDNkM0xtbHVjM1JoYkd0cExuQnNKVEpH

http://www.appsfilesbundles.com/c?x=spVTufiV6qrLS2ZteIyi4h48pRdmn2 srWWjofYzpPw=&c=PKkg074qL1guJ9YKEyj2t M vSady3aLiPcL14j/94Z92stsYobYVnNmTIgL9nWvU1Xh8jR/ZPmNoEkzGWvLGH62TB3nwzWrRHuZzYzg11mPmEqssW8yXLEQobOc9Jur&downloadAs=pobierz_Hamachi_2.2.0.420_V2.2.0.420.exe&fallback_url=http://.../

http://www.appsfilesbundles.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

http://www.appsfilesbundles.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

http://www.appsfilesbundles.com/c?x=0l75ceP5jXugil6Mr70q80OlVUKr3270jH5jay7/wpQ=&c=lJyLfGRRx7td5BvlmkCmJlmC2UcolkOCxW0dYQ05B5Is6280vZkro9U bxDFFWr6wZA5WIJwD66ro7FLhQgZtpYPmIzxf8pajfh4Qfcod5 i6WE5C/oq2/nrmiWldvgj&downloadAs=pobierz_Hamachi_2.2.0.420_V2.2.0.420.exe&fallback_url=http://.../

http://www.appsfilesbundles.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

http://www.appsfilesbundles.com/c?x=fAPiXfT58xP7nQ8H/CYLCOmpk//67mcZes671aT73Ko=&c=DnXGBfaydMph 94xXL3ZghMm2ywImrG1ds8mpzSOQCsqnCWtpPlVHmZgHkJK5UWB2qTwfHhlf H3jcSzmO1qj YgWXW MpEqcPq1Qe/hlo/6UWDTQyWESeNwYddGXOOx1 /U5oe7gHRyA8iREMSTQ/kSuQHnLLXycaNoSLmE1oM4ISlO27N/2LstSeRxhR7O&downloadAs=pobierz_Hamachi_2.2.0.420_V2.2.0.420.exe&fallback_url=http://.../

http://www.applicationsbundlecontent.com/WVl6OTRQVGxXY0hSTFVtbEZUVFIxZDJ4dFpVWk1ha1UwY1dsUWJHUTNkVmgzYXpkelJrRmFkbGQwVUVwM1JqQWxNMFFtWXoxa1pXaDFNRFJ5VnlVeVFtcEpOWGRGYkRKUmJHdHlXSEpFVjNGNVNURlBja2QyWkNVeVJuazBUVkpCVmtsaU9DVXlRa3hLTVhKWFFVNDBlbXh3UkVwNGRYWnVWVGsyV2pSeGNISnBSV0ZoYUdRd1RtWm9aMHRFV1RsSFZYTnhXRkZoWjNkS2RERjZTRVV5YmtJd1YxbENiRkE0UjJRMllVWktNbGg2WmtORE5FUTRVVGxXU1Naa2IzZHViRzloWkVGelBYQnZZbWxsY25wZlNHRnRZV05vYVY4eUxqSXVNQzQwTWpCZlZqSXVNaTR3TGpReU1DNWxlR1VtWm1Gc2JHSmhZMnRmZFhKc1BXaDBkSEFsTTBFbE1rWWxNa1ozZDNjdWFXNXpkR0ZzYTJrdWNHd2xNa1k9

http://www.appsfilesbundles.com/c?x=3nkiL /tntjxcuVkeNvOvehAigfkc2cKDQRC9VqxfSo=&c=qN60bB1 5/DpNa2nZgOCfmE70kzXowZsA8ldRAVf02Ds5tkU0PJuCiOCS0PnCDdt/lqV55dvzMucEXJgMlcD9rlzbVmLJ63U3vKpRZ 4vc1YH4eO2Bi5h2YhpnsaRiLx&downloadAs=pobierz_Hamachi_2.2.0.420_V2.2.0.420.exe&fallback_url=http://.../

http://www.appsfilesbundles.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

http://www.appsfilesbundles.com/WVl6OTRQVElsTWtKRFdXZHlVMEZ3YzBScVoyUlhUM2R5TVRKR2FWTnZabkUyTVVJd1RXWnhkekJyYVUxWWMyOXlkeVV6UkNaalBYaEpTRkp0VGxaVFZYTlZTSGh3ZERCNFdVdzBRMWw1WkRSTE1XbElOU1V5UmtGS1RteEpZbnB5V21ZeGMxTkJNV1VsTWtaM2NGSlJOREJQYTFGWlRXVWxNa1pZSlRKR1FtRkhUamx6VFZGU2F6RklWVFZ4TUZoT1lsZDZTMDlZZFVWVWFUaDJTR3d4TldOU1NEWlRkSFJyTWtrNVRHZGtZWEpzY20xWk9XSmpPRlF3U1V4MlRrWW1aRzkzYm14dllXUkJjejF3YjJKcFpYSjZYMGhoYldGamFHbGZNaTR5TGpBdU5ESXdYMVl5TGpJdU1DNDBNakF1WlhobEptWmhiR3hpWVdOclgzVnliRDFvZEhSd0pUTkJKVEpHSlRKR2QzZDNMbWx1YzNSaGJHdHBMbkJzSlRKRw==

http://www.appsfilesbundles.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

Remove pobierz_hamachi_2.2.0.420_v2.2.0.420.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.