home

pobierz_winrar_32-bit_wersja_stabilna_v5.31.exe

Linogu

New Software S.C. Marek Lubas Mateusz Ponikowski

The application pobierz_winrar_32-bit_wersja_stabilna_v5.31.exe, “Linogu Setup ” by New Software S.C. Marek Lubas Mateusz Ponikowski has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the Inno Setup installer. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions.
Publisher:
New Software S.C. Marek Lubas Mateusz Ponikowski  (signed and verified)

Product:
Linogu

Description:
Linogu Setup

MD5:
e7294cb1c9c2a8802aaa6c86982c36f0

SHA-1:
f1952d8587faf85f42f3fcedd9bb211cea139bbc

SHA-256:
6faf705ea1c9dcb6a92bedfda6296975e64cedbe3581fe1e7f20bd5634eefae9

Scanner detections:
1 / 68

Status:
Potentially unwanted

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Analysis date:
11/27/2024 10:45:55 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCore.NewSoftw.Installer (M)
16.4.13.16

File size:
1012.2 KB (1,036,480 bytes)

Product version:
3.8.6

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Common path:
C:\users\{user}\appdata\local\microsoft\windows\inetcache\ie\{random}\pobierz_winrar_32-bit_wersja_stabilna_v5.31.exe

Digital Signature
Signed by:
New Software S.C. Marek Lubas Mateusz Ponikowski

Authority:
GlobalSign nv-sa

Valid from:
1/25/2016 2:04:52 PM

Valid to:
1/25/2017 2:04:52 PM

Subject:
CN=New Software S.C. Marek Lubas Mateusz Ponikowski, O=New Software S.C. Marek Lubas Mateusz Ponikowski, L=Zielona Gora, C=PL

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
11214BB66B174061C414C796047FA27A14E3

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:7DkDBWZo5S7wtTkDyvqUwOx6t4aJ9hmiK0GyRDLawz81k:7oDBWo5S7wtTkDS7wOxiJ9hm+G0LHz81

Entry address:
0xA5F8

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, CE, 8A, FF, FF, E8, D5, 9C, FF, FF, E8, 64, 9F, FF, FF, E8, 07, A0, FF, FF, E8, A6, BF, FF, FF, E8, 11, E9, FF, FF, E8, 78, EA, FF, FF, 33, C0, 55, 68, C9, AC, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 92, AC, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 26, F5, FF, FF, E8, 11, F1, FF, FF, 80, 3D, 34, B2, 40, 00, 00, 74, 0C, E8, 23, F6, FF, FF, 33, C0, E8, C4, 97, FF, FF, 8D, 55, F0, 33, C0, E8, B6, C5, FF, FF, 8B, 55...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
39.5 KB (40,448 bytes)

The file pobierz_winrar_32-bit_wersja_stabilna_v5.31.exe has been seen being distributed by the following 12 URLs.

http://www.appsfilesbundles.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

http://www.appsfilesbundles.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

http://www.applicationsbundlecontent.com/c?x=l2lYhthpslNV6qVVai4Gs9PCyX Yp5JIW4GPqMsCmvU=&c=h5NLEPeMutPB7ZUSatr7rRzhJ Emd6/Ni1c7rkEFOWc4KOehzQI9da3KsIpYNb9ntudIcnoQTKES7M7Lb2M1/0 eJS0tzZ2zS5qR3SdRB 1cZg6BEFKKK/WNX0b zuzz&downloadAs=pobierz_Winrar_32-bit_wersja_stabilna_V5.31.exe&fallback_url=http://.../

http://www.bundlefactorycycle.com/c?x=8sLgUnywQKswWQmlE5yT 0hh2LC Y/ w0MtsIJzsqJY=&c=K6CJjhs/umtz71f4z6eYwrtQA2RL4EphEdjHydPVgRYMi9ZgcPRZuBLwDVBr9On5li8GiS2f7STN1kbwZRNEhPkDcz3hNbke/2qiVuPoJ6M9CpYb1yjOlZ5FYQHvIoWp&downloadAs=pobierz_Winrar_32-bit_wersja_stabilna_V5.31.exe&fallback_url=http://.../

http://www.bundlefactorycycle.com/c?x=UlW1H3aArG IZK3QInFogs6MTOvDVI/ xr9OfwIfJFc=&c=i0CNQOBIruR14gzsHFj7jU11q39CdN1CSdittes7I RZpYHo6QaKfrAzXdfWUEWB SznH5lNdQY81srnRjKbE84b3tKVhSeUWI1DutIk8Bl3/uqjf2DrgAESYtpBNjLL&downloadAs=pobierz_Winrar_32-bit_wersja_stabilna_V5.31.exe&fallback_url=http://.../

http://www.bundlefactorycycle.com/c?x=k80Jr83xEDEljuQWRtg9tqJRV4lGUvlPxe9t NtYTUs=&c=/IB/JljmZW7fmJSetsyEf27MVJ9YrtqkL5MbJd9v2tqkPXRvFQXmDvHOZksjyBebVIpK3SzmIC7Ai1oQcoXPGNM3tmwdmDi l6i/SaqQNGSd7NRSF9fIk6W71OeJ0CTh&downloadAs=pobierz_Winrar_32-bit_wersja_stabilna_V5.31.exe&fallback_url=http://.../

http://www.appsfilesbundles.com/c?x=tp5R ztAd0vF72W7RVKZeAzn6SIJo4O4e uYZYWPU1s=&c=BmVZ4AhHJUuq077Y4tqn52KOl6KqW7aMgWAn0Le44R/16iDjqV44q00y/Mql1n1jEv4E7C7gEk94dZ9Ak5ecdATF3TJnKcDOsqF7T4udMiEJtCB9SpImF207/DMGA02g&downloadAs=pobierz_Winrar_32-bit_wersja_stabilna_V5.31.exe&fallback_url=http://.../

http://www.appsfilesbundles.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

http://www.bundlefactorycycle.com/c?x=sehqco53neUb6tak7V1U/daH4i40Yu2kSzK3E/z6PJg=&c=WbOC6NCWHoconI8WgA0oMBJ0d6TazMSTjh/yJeFPoYsbMOvq gPjt9V/qDKxbYtkVbDH92HrZOjJw1zZKQYzCz0OxR3LVFBKXUo 5H0THt WcfRMs66ydbdPX8jg57HO&downloadAs=pobierz_Winrar_32-bit_wersja_stabilna_V5.31.exe&fallback_url=http://.../

http://www.bundlefactorycycle.com/c?x=sszSo2OVmQAeWDfzWfbFbgiGvK/LtfjKGZjmdZyqdus=&c=4sQYvVK5oxQLJyRZA/ WLiWJGKHw/owfK0dnwK6TI3q9ZVIXMu8gasMiwlHAkY4hnxdHw2QAt6380oL2DUBvhyhEjCnTXGBg3bVz4QQ4GqS4bzicHFsXgmvQAc9ZZmnx&downloadAs=pobierz_Winrar_32-bit_wersja_stabilna_V5.31.exe&fallback_url=http://.../

http://www.appsfilesbundles.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

http://www.appsfilesbundles.com/c?x=QvJuZN78ZzvDqQET18yNnfL9JKv2g7TyCH1j9dPgWzE=&c=Jei4klevlGFT8Twj7t/ OWBkLBY KgF5BOD3X9g0NowUenaE9QQLG03R op1zaszZ2 9KGFbb2bF6atl6UprBOc3hOOC6vxfEqP2NDRVAOp6S6IOXQjjrY62jTNqxyf/Ydifn5dmsfhCkJXLMzgXvxNEmmASFwoi6p9t8ba4oYU=&downloadAs=pobierz_Winrar_32-bit_wersja_stabilna_V5.31.exe&fallback_url=http://.../

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.