home

pobierz_teamspeak_32-bit_wersja_stabilna_v3.0.19.exe

Linogu

New Software S.C. Marek Lubas Mateusz Ponikowski

The application pobierz_teamspeak_32-bit_wersja_stabilna_v3.0.19.exe, “Linogu Setup ” by New Software S.C. Marek Lubas Mateusz Ponikowski has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the Inno Setup installer. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions.
Publisher:
New Software S.C. Marek Lubas Mateusz Ponikowski  (signed and verified)

Product:
Linogu

Description:
Linogu Setup

MD5:
edc5c7abbe15cd396d808587ec377c09

SHA-1:
91f00022f3fb5b926d57aa70880dfd06d03ca317

SHA-256:
75dce21dac492e57d26bba07d1c89308de95acda0488bb7920110538d1e69e4f

Scanner detections:
1 / 68

Status:
Potentially unwanted

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Analysis date:
11/27/2024 10:33:00 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCore.NewSoftw.Installer (M)
16.4.13.13

File size:
1012.2 KB (1,036,480 bytes)

Product version:
3.8.6

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Common path:
C:\users\{user}\appdata\local\microsoft\windows\inetcache\ie\{random}\pobierz_teamspeak_32-bit_wersja_stabilna_v3.0.19.exe

Digital Signature
Signed by:
New Software S.C. Marek Lubas Mateusz Ponikowski

Authority:
GlobalSign nv-sa

Valid from:
1/25/2016 2:04:52 PM

Valid to:
1/25/2017 2:04:52 PM

Subject:
CN=New Software S.C. Marek Lubas Mateusz Ponikowski, O=New Software S.C. Marek Lubas Mateusz Ponikowski, L=Zielona Gora, C=PL

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
11214BB66B174061C414C796047FA27A14E3

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:mDkDBWZo5S7wtTkDyvqUwOx6t4aJ9hmiK0GyRDLawz81k:moDBWo5S7wtTkDS7wOxiJ9hm+G0LHz81

Entry address:
0xA5F8

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, CE, 8A, FF, FF, E8, D5, 9C, FF, FF, E8, 64, 9F, FF, FF, E8, 07, A0, FF, FF, E8, A6, BF, FF, FF, E8, 11, E9, FF, FF, E8, 78, EA, FF, FF, 33, C0, 55, 68, C9, AC, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 92, AC, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 26, F5, FF, FF, E8, 11, F1, FF, FF, 80, 3D, 34, B2, 40, 00, 00, 74, 0C, E8, 23, F6, FF, FF, 33, C0, E8, C4, 97, FF, FF, 8D, 55, F0, 33, C0, E8, B6, C5, FF, FF, 8B, 55...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
39.5 KB (40,448 bytes)

The file pobierz_teamspeak_32-bit_wersja_stabilna_v3.0.19.exe has been seen being distributed by the following 9 URLs.

http://www.appsfilesbundles.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

http://www.applicationsbundlecontent.com/c?x=t9jm6GOaa18mk2EngGb98lLEZkK1Y99F8XEYpiCL/KI=&c=/b2sN6bFpUBfTDan/fxZs30MlztTKSKrEIe1DeXOEkF4WKYcImTbglPFnI0KXpOPt6sIxhrn1PTZSc/lnRT5ubhM0yHCnytfAPBhP OyQIh5R1dKDrs/nMfePYLh8LQ9&downloadAs=pobierz_Teamspeak_32-bit_wersja_stabilna_V3.0.19.exe&fallback_url=http://.../

http://www.appsfilesbundles.com/c?x=IbnAYFBdKge1JXe7Q/YeV2Z8tc/GLqnB1XEhR01lgMs=&c=WME/0V3VF4ANBg1w8ySrrlN1L94TuNSbkb7xdYD7CGHczP 9cgbyoWJYcYZzEZXui/yCX/D1Sbft1KcaL2/0nWalludVSF7REHJB6SEMoMR1j3b1/W3gSPDMEV3XHk59&downloadAs=pobierz_Teamspeak_32-bit_wersja_stabilna_V3.0.19.exe&fallback_url=http://.../

http://www.appsfilesbundles.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

http://www.appsfilesbundles.com/WVl6OTRQV3hKUW01QlkzRXlVVzVhTlUxSlJsbDZkek5ZSlRKR2JUbG1OMGh4YVZrM2JYWlNSVkprVUZWWVVHbHBNQ1V6UkNaalBTVXlRblpQZVhObk1HRndOVTlHWlZFbE1rWWxNa1o0U0VGcFZrb2xNa1pPYmpObVRuTnJkM055TjFWd1NrbFlXSEpaWlZGRk5sQkJOM2h0ZGtkTVVsUTRRMUprTm5GcE4ydGplbXB5VFRsS2NEZElaMHRyU2xnd1lreDNUMnBNYjJZbE1rWk1VbUZKVW10VGNtZHphVVZMVFVSa1YxaDJSMkpIZFZVemVqbERWRGhCYkV3bE1rWktWM1ozSm1SdmQyNXNiMkZrUVhNOWNHOWlhV1Z5ZWw5VVpXRnRjM0JsWVd0Zk16SXRZbWwwWDNkbGNuTnFZVjl6ZEdGaWFXeHVZVjlXTXk0d0xqRTVMbVY0WlNabVlXeHNZbUZqYTE5MWNtdzlhSFIwY0NVelFTVXlSaVV5Um5kM2R5NXBibk4wWVd4cmFTNXdiQ1V5Umc9PQ==

http://www.appsfilesbundles.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

http://www.appsfilesbundles.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

http://www.appsfilesbundles.com/c?x=s flm6LK 87kxzhnFwq5Ylo6xvE52eay58DnfIKBL/k=&c=LrlMHNM4VK30ayWTj1S1 wbY17wDyKJXj01oCXFk3SJZYxgkg0mq6u1FVY7zIQ1wIV/6ltxfU3or3eFTIXoce/J5o7ZEtXmvoueZXD7SQLwKx/dbHbMsCi4s8RJ5YTjK&downloadAs=pobierz_Teamspeak_32-bit_wersja_stabilna_V3.0.19.exe&fallback_url=http://.../

http://www.appsfilesbundles.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

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.