home

pobierz_java_se_32-bit_wersja_stabilna_v8 update 77.exe

Mep

The application pobierz_java_se_32-bit_wersja_stabilna_v8 update 77.exe, “Mep Setup ” has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the Inno Setup installer, however the file is not signed with an authenticode signature from a trusted source. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions.
Product:
Mep

Description:
Mep Setup

Version:
3.8.2.4

MD5:
30cab4bfdcc60c2de0abbadc46d27da7

SHA-1:
1937f77ff625a7bf00c938f92537ed641348371d

SHA-256:
d50b76f56b9d5b2ae4df7e63dcdc9f0fd01dcde7bb96e2b0285682fa7d46270a

Scanner detections:
1 / 68

Status:
Potentially unwanted

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Analysis date:
11/27/2024 6:44:53 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCore.RE11 (M)
16.3.24.15

File size:
1 MB (1,076,920 bytes)

Product version:
4.5

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Common path:
C:\users\{user}\downloads\pobierz_java_se_32-bit_wersja_stabilna_v8 update 77.exe

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:mWNe1PqOjjTc8OfvNGnIFdkO1T2fP8kmhcLnBgfDZZPi3DKmxAIwetKQuR:mM+ZjX+vNa0kcTf5EnYDZc3DKLIwmKF

Entry address:
0xA5F8

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, CE, 8A, FF, FF, E8, D5, 9C, FF, FF, E8, 64, 9F, FF, FF, E8, 07, A0, FF, FF, E8, A6, BF, FF, FF, E8, 11, E9, FF, FF, E8, 78, EA, FF, FF, 33, C0, 55, 68, C9, AC, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 92, AC, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 26, F5, FF, FF, E8, 11, F1, FF, FF, 80, 3D, 34, B2, 40, 00, 00, 74, 0C, E8, 23, F6, FF, FF, 33, C0, E8, C4, 97, FF, FF, 8D, 55, F0, 33, C0, E8, B6, C5, FF, FF, 8B, 55...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
39.5 KB (40,448 bytes)

The file pobierz_java_se_32-bit_wersja_stabilna_v8 update 77.exe has been seen being distributed by the following 9 URLs.

http://www.bulkbundlebest.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

http://www.bulkbundlebest.com/c?x=WQM9RFcGEZMizzmnj6LdQrOHJfBKnlwG7FYeGHrIR0o=&c=oegO9We ZAXsdUkRl6Fr0GoLx6N/r9affKpkA23SYWjxUiXy9bMA95gBRbUFcb6O0q0xmikqMPFokAy0FViWDnZ9zrR8kgHJWSrHuOrY6EEbupc8vVMBje3l69WYcL63&downloadAs=pobierz_Java_se_32-bit_wersja_stabilna_V8 update 77.exe&fallback_url=http://.../

http://www.bulkbundlebest.com/c?x=lcoXB4m6I2wPkkyqNE00 ZqRhwfC0JNOsI9Y53nniEQ=&c=TuWOp4ymvqHpkfiiNnbqtRlgf7z4CtnYEPZrdNlJ6UbF3AKTsPmk8z d9nGB351/BedRNUNN9xa nqnhXF8vA9Z8ngME12d3oY86oRgh3T7Kqc VLQlLcYq51xUEnqfE&downloadAs=pobierz_Java_se_32-bit_wersja_stabilna_V8 update 77.exe&fallback_url=http://.../

http://www.bulkbundlebest.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

http://www.bulkbundlebest.com/c?x=G8qzpMhMIWkuRUgrvUugjkMA/jezEpOgJaR61o 2ZFQ=&c=hw5j9MUVvOaoGcr6N/RknQqojZI9iN9Zs/3/3GJO9rEO7hpLvXzmMsg2pYbP7MTQtK6ibISrOeJzvEUTdZqx/dWGKpxRkPbzo7WO InHL/ZYabqY9D aFEYiEUPl3BWn&downloadAs=pobierz_Java_se_32-bit_wersja_stabilna_V8 update 77.exe&fallback_url=http://.../

http://www.bulkbundlebest.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

http://www.bulkbundlebest.com/WVl6OTRQV3RLWWpadlJGRk5iMGsxYlhRbE1rWXhSMjh3UmtWQ2FqTm5jVEZyVnpOVVlsWkZlRWRZTVZGSlpFeENTU1V6UkNaalBVVXliVWRuZUU0NFF6TkpWMVZMUVU5REpUSkNkbU5KWWtoWmFsZEhhRU5TVmlVeVFtZzNKVEpDV21oSGRIcGhUWEJEU0ZaVVl5VXlSbFZDUldjNEpUSkNjR2xoVkd3MVoweGhObXR1WW5aTWFVMDBaR0p5YjFseVlWTlVhWGx3TWtRMFFtY3dSMHRSVW01blprNVFVVmhCVkdoU2REVnZTVTlTYWxWblVUZEJaazgwUjJaTWJFSTNSQ1prYjNkdWJHOWhaRUZ6UFhCdlltbGxjbnBmU21GMllWOXpaVjh6TWkxaWFYUmZkMlZ5YzJwaFgzTjBZV0pwYkc1aFgxWTRLM1Z3WkdGMFpTczNOeTVsZUdVbVptRnNiR0poWTJ0ZmRYSnNQV2gwZEhBbE0wRWxNa1lsTWtaM2QzY3VhVzV6ZEdGc2Eya3VjR3dsTWtZPQ==

http://www.bulkbundlebest.com/WVl6OTRQVk0zZUUxbmNFeFpUMmRaYjNOS01DVXlSbk5UZFhsS1pIbFpRa05vU2xGalYyaFpORWRHYjNGT2VVdDJSU1V6UkNaalBYSlJaRmx2ZEVOcmRHVldObU56UW5GRFRuWlJPVWhJYURBNWQwSnZXbEl3YlZWUVlqbHNXalZVYTNBd01WWm1kR001TkVOeVRWQnpVbU5xTjI1WFRrazFhMmRoYUhwMVMwMW5lWFZZUWpsc2FqSkhTbFZ2ZFZVelpGSmhSRlJ5ZUROblVXSlBjelpGTmsxQlduZHJXbTVZZGpKV2FtcFZWMnR4WVdaYWVTVXlRbTRtWkc5M2JteHZZV1JCY3oxd2IySnBaWEo2WDBwaGRtRmZjMlZmTXpJdFltbDBYM2RsY25OcVlWOXpkR0ZpYVd4dVlWOVdPQ3QxY0dSaGRHVXJOemN1WlhobEptWmhiR3hpWVdOclgzVnliRDFvZEhSd0pUTkJKVEpHSlRKR2QzZDNMbWx1YzNSaGJHdHBMbkJzSlRKRw==

http://www.bulkbundlebest.com/c?x=SgI7H05kr9Yf7mmvYwIiXG3M6xIkZrmONX9JmvrZbjE=&c=rX5hFIbgqq/lO k232DaBv8f7m8dxip39WCrMmwWr4p25v32OxYU7U/hWx LX6Kg 1lfUaEUP0TTafMiOV/IJie4u/8jtA/eYVddM5kbZbNjp 8vj79vs58x0lSe7n7&downloadAs=pobierz_Java_se_32-bit_wersja_stabilna_V8 update 77.exe&fallback_url=http://.../

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.