home

setupimgburn_2_5_8_0.exe

Rasumogu

Sumemokat

The application setupimgburn_2_5_8_0.exe, “Rasumogu Setup ” has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the Inno Setup installer, however the file is not signed with an authenticode signature from a trusted source. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions.
Publisher:
Sumemokat

Product:
Rasumogu

Description:
Rasumogu Setup

MD5:
2094c5b331a54e0a9e454b13bf7b3589

SHA-1:
6ca1894b310ce9e4eab8c51d749b940098e8982e

SHA-256:
75298fac1751e4f5a6efc32d3b17ba01788530c7be8b4b7e10e3c58a90428c6c

Scanner detections:
1 / 68

Status:
Potentially unwanted

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Analysis date:
12/27/2024 5:14:36 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCore.RE11 (M)
16.4.19.20

File size:
959 KB (982,051 bytes)

Product version:
3.7.4

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\setupimgburn_2_5_8_0.exe

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:hzOkrjWE+2XPSL5mAnXDqZQo9KKZM3Xrv8RPD5:hq+w2KNmAOOo9ZoXo5

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, BF, A9, FF, FF, E8, 5E, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, 24, CE, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, 24, CE...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file setupimgburn_2_5_8_0.exe has been seen being distributed by the following 19 URLs.

http://www.worldrepositoryclear.com/c?x=MY6k2pNh/eIx9KfOQYvTaeVqrpA6UsimcjZc/7tJ7EA=&c=1vP B0ChWWtUDCkvEZYZCcTS/qLvJugcVllYjcGkapixxm1lnJhLjD21KM3TPUiZFa V1EpB2E6IfhOjaNsc0viQhqtJ7eSzsZzIy0fkRGaomgq8W73eKRLDiPH52/p9&downloadAs=SetupImgBurn_2_5_8_0.exe&fallback_url=http://.../download.php?file=imgburn

http://www.worldrepositoryclear.com/c?x=ga10Onfas Fm8l1S167KM4m0PfX5E8k0Kw99TrUEArE=&c= FYK2h7nhjponFKPg0eHmGzn Zu1lPPAkNDHBa326bVibGbhC OqFynBYmFU6iYAFhIXW7QRAbtSgwNLIDsUZVenw6Az87f66GLhtSUKoO4dAwoKzX WgDZeIvMFFlgo&downloadAs=SetupImgBurn_2_5_8_0.exe&fallback_url=http://.../download.php?file=imgburn

http://www.worldrepositoryclear.com/c?x=GwFoqHIShZz9PfLXlffHgzeSjt6tsI0Ld6IaJ/500oA=&c=In3s9iy680Lp74qJ9pgZP3bhGsMorItp5LK6pZ6S2XmU1XP1 WK5e2oWonihxj3UAtWp9kSwXxCrAE 0bkovUpQleBL3Cc5rZl5eUU7Fzi0oEOLVHiTeqGu96Om/B4sx&downloadAs=SetupImgBurn_2_5_8_0.exe&fallback_url=http://.../download.php?file=imgburn

http://www.worldrepositoryclear.com/c?x=a2szEOyWwzBs364AKtscIsILXxyjyA19TVphwm0rzTg=&c=8UphHB2ZL7aNHtYwNXFbRCzjt0qKEi/pLJLw8/rbsx9jsFmcgyzhn3OpJ31Uhc1NDsZTQNTsmX9Q/Jrbvi4SsPDbpt2LUOeOC7GuRrh y2NEFcXNwOSzy6h7zmUQon1B&downloadAs=SetupImgBurn_2_5_8_0.exe&fallback_url=http://.../download.php?file=imgburn

http://www.worldrepositoryclear.com/c?x=n5J89SeLrRkAOzrqUhJ5dWvnDTjyu3aduZDI3 UME3w=&c=oZkezcoZfV6iP19tdJtQRmH/1Jgdo25BRTdj hu3S0iaXzk5SIfZF1RJhU7MyGx7erS0D4mjPKKskcWya6vxC61cO07/HBeqgPpPBHTMMFeX6QJ1cVMo03kn8A/VdQtA&downloadAs=SetupImgBurn_2_5_8_0.exe&fallback_url=http://.../download.php?file=imgburn

http://www.worldrepositoryclear.com/c?x=cwSsOxg GVtQ20Kzv6F4tCyl1F08iaEb4T14XP XfAU=&c=UYjhl/rPPg7dl6ncc6fCUTouP9aaY8BrZgPxTQg2okuVU4QapFIlL4tJbBy2FXhtgPeNVm4uE465MlsKPmHq1DmuLer QtaLzctewXsS78ispwJFnwsENSPaQow0kEbu&downloadAs=SetupImgBurn_2_5_8_0.exe&fallback_url=http://.../download.php?file=imgburn

http://www.worldrepositoryclear.com/c?x=Jk8Sgf17SPsAv2zGGK1 Bk25MJGyUQg0c1shjIGJHEg=&c=Vz2xqE7q0/NSafPOtqUdPPdo69yn0iOnhP3AUppUqDAC6RPtUt7oCDBiC UqPQ0u1HS/b9sugyoUkIZcci6kMZqN M0sc9/BL197p308nmNypMstvCUevDlZljZLXdbF&downloadAs=SetupImgBurn_2_5_8_0.exe&fallback_url=http://.../download.php?file=imgburn

http://www.worldrepositoryclear.com/c?x=k2Hgggd7QaWwn0fdeoHWcmMtqCWkhIVlzTgCgRH1t7Q=&c=4a2zj6bV0Eqqoe4IBa1Bg82owp6P4SRFRK03ZajsmdkqBgzhR2APCFrXBtylDdsOw70KYH5xWZuRFMXW1EMj/QXV7J vWh8EHZnHnVJiV9uQ1cq7rzPyYQ0e1VEPUFjJ&downloadAs=SetupImgBurn_2_5_8_0.exe&fallback_url=http://.../download.php?file=imgburn

http://www.worldrepositoryclear.com/c?x=JqcnPXv6C8vWFYS1pwx9RrmtNfHIq5sfQRQKQFqfTq4=&c=AXgdVHBjp1sWV4CrlRP4mvAqavM4SQlQ6xeubHax7xeaxKKEAvKxpDGtWbi mYZjAIvDD687w5UELNnlbiuZd hIkJo8XBQ2GRFM3GxJuQHA9uDycsqfPZQCUKvbsHIp&downloadAs=SetupImgBurn_2_5_8_0.exe&fallback_url=http://.../download.php?file=imgburn

http://www.worldrepositoryclear.com/c?x=Z2Teby1X85CM2Ll87rm8VxZbvH7MzN3R9b eHwsUNDs=&c=NAt7u63CJVtaMoVCKCnhbhAr2XcQKcTmximujLqv3Afds4LANQwNpGloDt7ZVWmNRPUcMGFyObm gdtd4fQmpasHCiSa1xA9ubibBxPWA4o159TmGeVyL0LFXsWS0wb7&downloadAs=SetupImgBurn_2_5_8_0.exe&fallback_url=http://.../download.php?file=imgburn

http://www.worldrepositoryclear.com/c?x=231YIlCE9qEzt5NM33ZzQkIGtPHhZ2HFPGtbUySC4EI=&c=oITtbYgGVwnPbm2EOiuevv k8ath4gKyMg0BpPWxJIzrOqYOxfxqTV3/Dlrd4ukn 5ShxsYIVSIE0Z09O6jG2On1R/zBR8JesQLX2fr0N46gPaCVtlIs9rzQlkqvDtD/&downloadAs=SetupImgBurn_2_5_8_0.exe&fallback_url=http://.../download.php?file=imgburn

http://www.worldrepositoryclear.com/c?x=yJehKSfnlw2wOlYvPnI2ZzZ6KyEnHIII3Wiufy/MW84=&c=nt4Plzq6YvEdFAlN96V1triIpIotx118fUs6FJdfbdfjyzk2Y u3B0VG/CMeG9hMhtCQu1qIBzvs03ut5o3UFLpN4LbahPEGLpavACZ/FHN16o4x8Mnjywdz6xem/zXo&downloadAs=SetupImgBurn_2_5_8_0.exe&fallback_url=http://.../download.php?file=imgburn

http://www.worldrepositoryclear.com/c?x=ItnxywUKvhROh j7lw3S /7eTTTYueI9AfNJQFm5lrg=&c=GdlwPtFJVWYwite5vc2kyTLZeQA1ju3TpX/QS2otLl8/UNtDObUTjjfpANFmCF0/zhCW068eXOuzg79rLe8Vgi1vIFEiCRnOkLCQvjeoi1EtJ2OOSqlQ vypDkRN3S1l&downloadAs=SetupImgBurn_2_5_8_0.exe&fallback_url=http://.../download.php?file=imgburn

http://www.worldrepositoryclear.com/c?x=5zceS1ctGx5tRDurpmfEZk/d1DdXiNvSuAeazOvybiY=&c=rngnwdqhFJi5D95DGBqeWzFRD/6H3LTeL2m4KL8bxfMT0GfRIUGU4816zknqCAwfMApxJb8SxfVN5h2HKzyVN/Xijo09RZlXEg CRI JiXJdnKyc3MPTrhlGFgq5KLZt&downloadAs=SetupImgBurn_2_5_8_0.exe&fallback_url=http://.../download.php?file=imgburn

http://www.worldrepositoryclear.com/c?x=2vYRAFdGyVhb2fg3hJ ohXyiiFCtdAIsJEsscncruX4=&c=fdw1TRJwns6GwYV3pc8s1sBo4HeV3EKz1R9k74gjRQ1OKW bi4oYEKWcVpAVhFDFIFjK70XiwG4APeJZMONPms 68MlLdyk VAnnuQWLFbsecO3 HDk4dcpjTw9zT0LW&downloadAs=SetupImgBurn_2_5_8_0.exe&fallback_url=http://.../download.php?file=imgburn

http://www.worldrepositoryclear.com/c?x= wxzRavZOCevPAqUDH44DmgMOHsnZJbGAwg/2KPsTxc=&c=KBr0T wPVbl8xtoyet2bVgAjff fDupPwfYetdAQXKyfgsXVavridxmen/B E2bQyTYdUU8lpLGXNNWELp1ha3IZoL63yahKZ/qJkgmr3Xyc/jqOnzEhK1K2y7QY9Rib&downloadAs=SetupImgBurn_2_5_8_0.exe&fallback_url=http://.../download.php?file=imgburn

http://www.worldrepositoryclear.com/c?x=0EU68USu/rXbHf66CnmjLKu6yiEeIe 97t6bKab d6Y=&c=h2nCXqzcWvVGXkKtZYDDMSAMf3hpLf 9iVEnur 2X8s/ tZFYEvuk56R7LV2rje0t06zrkE8Pn7WuExUVZ9BXYfxUWPTR68Rs4tGDjh5h5INwwaXjLCW8ifMHJom Ny7&downloadAs=SetupImgBurn_2_5_8_0.exe&fallback_url=http://.../download.php?file=imgburn

http://www.worldrepositoryclear.com/c?x=EUPgYHQA2d3alTiSf9N0F7/Ln8zdPO7XypkiQUkSAJI=&c=FwRncpkiLGUTht LEIWldK9bkz3rsB5cPc91Nu73qqZp4fMXb6nWKBI Scymn6BQtmZL6a ABy dxi5eHRS0w3jB3VBF2JNrGScuorwJnI2PnHK1KqvUS4S66rIwRf4R&downloadAs=SetupImgBurn_2_5_8_0.exe&fallback_url=http://.../download.php?file=imgburn

http://www.worldrepositoryclear.com/c?x=eVJ00Aj11oRZ Y1sTXyV8Q 3y5cXj70dqLMCDy0lQ6s=&c=ItnN69tlWldvmg09q84wk/pK6TxkN2mriYw aJcu5onEUzXa13jlNJqYPLgZfLoXWcb9CXSJ7ZuK47ExdQM78Eicxt2G3PGpBaduA79iip/RrXQsprMJlJPW5RHiek5N&downloadAs=SetupImgBurn_2_5_8_0.exe&fallback_url=http://.../download.php?file=imgburn

Remove setupimgburn_2_5_8_0.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.