home

setupimgburn_2_5_8_0.exe

Lorap

Bisocat

The application setupimgburn_2_5_8_0.exe, “Lorap Setup ” has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the Inno Setup installer, however the file is not signed with an authenticode signature from a trusted source. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions.
Publisher:
Bisocat

Product:
Lorap

Description:
Lorap Setup

MD5:
9090353e00cafd8b198aacbfee52db79

SHA-1:
70f8727e0ab003fc3e115d8813ec9f8fcb9ce742

SHA-256:
6bd66047c8600201e65d034c1816544e374b37839fdc6780f6caeed83311722e

Scanner detections:
1 / 68

Status:
Potentially unwanted

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Analysis date:
12/27/2024 5:44:00 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCore.RE11 (M)
16.4.14.5

File size:
953.7 KB (976,571 bytes)

Product version:
1.2.9

Copyright:
File Software

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\setupimgburn_2_5_8_0.exe

File PE Metadata
Compilation timestamp:
6/19/1992 7:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:z5gVSUQ1xKFnikqS9813t0BLlK3PaNA+GDjJl3ALj2G:zeDQ10qnNmBLlK3iNA+GDjJlw32G

Entry address:
0xA5F8

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, CE, 8A, FF, FF, E8, D5, 9C, FF, FF, E8, 64, 9F, FF, FF, E8, 07, A0, FF, FF, E8, A6, BF, FF, FF, E8, 11, E9, FF, FF, E8, 78, EA, FF, FF, 33, C0, 55, 68, C9, AC, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 92, AC, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 26, F5, FF, FF, E8, 11, F1, FF, FF, 80, 3D, 34, B2, 40, 00, 00, 74, 0C, E8, 23, F6, FF, FF, 33, C0, E8, C4, 97, FF, FF, 8D, 55, F0, 33, C0, E8, B6, C5, FF, FF, 8B, 55...
 
[+]

Entropy:
7.9311

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
39.5 KB (40,448 bytes)

The file setupimgburn_2_5_8_0.exe has been seen being distributed by the following 19 URLs.

http://www.worldrepositoryclear.com/c?x=FCe2PqNLoEvsSaBa9bI7CMupINWF4TvQVybii3UWgQQ=&c=33qLWCiWSqKU4pXYoGrD6CWiM7EEXzNSmzL1ZpNzWRTfj cvSNNLlwf1c0P5htZyfppoZD6bW6yjGdS1upaxaFfF9htF7Kg2VrRQozTB/B6YYQjaDc4/1jBwyNrvD5f &downloadAs=SetupImgBurn_2_5_8_0.exe&fallback_url=http://.../download.php?file=imgburn

http://www.worldrepositoryclear.com/c?x=tZ5fVjC4rSG3fz5ecXsdXJ5gFq1gE0nt8evObeE9kAw=&c=JzdqT2tUlHaRK0tHGJYZS5qEKPqtYpxpAIkGnAjtFmWINQ1fn7sKt2HNGHrrsqKoGZeYeCudTWVGAlLEaecktprMMNeJuGduemnbr PEg4o1ZtBXTZsNKP3Jt7e4PEfB&downloadAs=SetupImgBurn_2_5_8_0.exe&fallback_url=http://.../download.php?file=imgburn

http://www.worldrepositoryclear.com/c?x=A3Bb18 OpOKHrGITC3a/ tLwvrIu0pYUDBZOJnwi3yQ=&c=RO/BnOV6GulfLGelXBfRF4gM/3Sh 168/dVW2tQWFfVkxQrczizzt6YPf98REkW1CeFbqkZ QTjlpEVwLm/scVBa7Rho4CRnGEWa0ETSVDMdUbzuZclr4jt2X6rfRaEM&downloadAs=SetupImgBurn_2_5_8_0.exe&fallback_url=http://.../download.php?file=imgburn

http://www.worldrepositoryclear.com/c?x=bBOm1K1LpgP3iTY1vRpglCUBROLuDjHQ8GncmJ/3Ggc=&c=j68ndDv1SSeyLNRNyhCIHhT5SigNQ/iVYAF6F5o1S8IXjXY1QEjCzlfhkssdqtWXZ9blt0nfMKJTyRhjXU 4hXxbX CyOhgVo0S2LuUc5v8gPIe7uNip/fdAvdd4CDYU&downloadAs=SetupImgBurn_2_5_8_0.exe&fallback_url=http://.../download.php?file=imgburn

http://www.worldrepositoryclear.com/c?x=0Au1XJRH/IHGXTzCzbGUnT4cEyZRyOBapoFFVrHLC/s=&c=caZQt4Bzc19mAsoNB6/Fl5iPYRbmH6fQS3kt82m07Nyg5FFr1MfRgkv5a/fysiIEHSQubQTyWD94 Kubz3cFcNEoyDfT4I7wtbvAk4xw8yfttW8TvkEOwYGu7Pt rl3d&downloadAs=SetupImgBurn_2_5_8_0.exe&fallback_url=http://.../download.php?file=imgburn

http://www.worldrepositoryclear.com/c?x=WEZ4TUkJ5Itd7Z MxkawVlgBMFRCzfHZuqApZKkD4RI=&c=iNtG4MjAWk5sGFicDTWmemVEG8gwjDXDCA4Ko/OL0aqNRes4Ut 31E DwZkXQVrKPwfKVCWT4WeIjrsur9OrIktC2vy1m1GlRprsu7O098X2dp5m8pDL2wLsj85imkoQ&downloadAs=SetupImgBurn_2_5_8_0.exe&fallback_url=http://.../download.php?file=imgburn

http://www.worldrepositoryclear.com/c?x=UulQQMW6TH8LZ8SVhFLWBznkryDsEZ9WtDaYl7kkE6k=&c=5OG6yj1LkPxyhyu7hxUTSvbv2ysmuH53/nc7qC6gBFlEf41sYewxhXedg6E3UF SzFe2UOM5CVxOlwYQoVKmypH0OYnhcEyyjUD3cQ02HD3n6JaVfO KaDp036cQZrb3&downloadAs=SetupImgBurn_2_5_8_0.exe&fallback_url=http://.../download.php?file=imgburn

http://www.worldrepositoryclear.com/c?x=tFzha6Cb5kXFfq7EjXQz/3acv7OlNdzqhGuLhBYHzLM=&c=eXn2EYW/v1TrsRuNhGiEu25SXTnTr/aPgbwMeaf1Z1JsbN8gHe9wL0SzBq49k5dFrTSgyQnBZ62wTHiDW9kPA vkW5YtQBOTwi9L6WSzS/qMtvzhHR5cEu5TmD028VAr&downloadAs=SetupImgBurn_2_5_8_0.exe&fallback_url=http://.../download.php?file=imgburn

http://www.worldrepositoryclear.com/c?x=RPuo1rV5K2yq0mtFz0fWHxpnLJ/50YFredNcU slt/Q=&c=kG2LUbuC73URAWEKFWIl2ntOiVhFIxm 9PvqtQOG0iUk mJk0ij7bfdWj3x6pSVb5ly3MY5NCnDj5YNS2Mxmdsx/P8rlY67LZw2RkKFcB uyqLF5OOwKCuMC/k/2ac7z&downloadAs=SetupImgBurn_2_5_8_0.exe&fallback_url=http://.../download.php?file=imgburn

http://www.worldrepositoryclear.com/c?x=Cm0wH/ldbyrgKhN9kfiuNScn7bVApRTwBqq3RZMhqY4=&c=pDt2pKRrIe3xHH /ypSxbnZN44XNEVcUrRhw3CalJ7AEgDY9VvbSFqcjo2NEVEIu8BEI5aSmIcyrvaurq5/3H1wOUA0iYiUwj53G0zvaFK5/Gt4QwvzuExmE3eyjCRnd&downloadAs=SetupImgBurn_2_5_8_0.exe&fallback_url=http://.../download.php?file=imgburn

http://www.worldrepositoryclear.com/c?x=FTnIzuOKIbXwPvaPJNu3tOPzicfjUwLqVvQ3YVCq5d4=&c=makOLzQKLFt4pXDRQV/npUx9UEVnWy2gyFXwyRo5lri11HHdiMPcRIM984VPCE0taNgVWdQmKIviBtlMlxP1TrSqYhXqZMVXoqdEG nUmSTuGdDvdi1GvTvSnXfh9yMY&downloadAs=SetupImgBurn_2_5_8_0.exe&fallback_url=http://.../download.php?file=imgburn

http://www.worldrepositoryclear.com/c?x=ec6p YaYmBcoSEL5T2rHoHLOPtTKrKvfyD4LzHQhwqA=&c=N9zwWF1NCl3oB0tbH9tZaElyG8PoRkZSRMbw1NfqYnyHjvgxiR5YJm/cYt2ZG OVDw4sydxiWJ3VmOlLueiv1mkYnNl9JXZt7NQ9IefC39ffaAY/kdYOwQ V1zm6stIh&downloadAs=SetupImgBurn_2_5_8_0.exe&fallback_url=http://.../download.php?file=imgburn

http://www.worldrepositoryclear.com/c?x=NAFCRIkQs03hLXHgmU9jZB6RYGsab8GzbNUFKq2J3/Q=&c=MMXEBIVv08V4qnxQd5DktNLBb/rBw3eNFBdbFqTi0o4E/1XRECxnADMs2Rb5JL5N6gHnTyEdDMeGZiUYalvtUJRnUlLf15Ot6 UBbZvaZOqjqaKl6wX Fpq9p6mGY72X&downloadAs=SetupImgBurn_2_5_8_0.exe&fallback_url=http://.../download.php?file=imgburn

http://www.worldrepositoryclear.com/c?x=tc9hhCf6w3NGiviIo0prJzNgJcw6xuYJFvoEwG1RzYg=&c=xZUc8GNksvXmFx/Evbey1OsH9hXsJwHfoLhDweC0jUnlT bcxT4Es aOtrGeJ3Fi0b Hzmk9Jsx1ZKOt/d8ZoLeKh0/phDKX26WaMdoDMYvZErNRnVV6jKsrjgXQtO2w&downloadAs=SetupImgBurn_2_5_8_0.exe&fallback_url=http://.../download.php?file=imgburn

http://www.worldrepositoryclear.com/c?x=qfUAA3LBiuv0xM3UHyQTS0X5CwzoMNUwl0Qc7eb0B48=&c=WPIA2hCo6YbND6AfpTMMVeg/JIvyTa1QpzTXxKICHzmqB8SE/0VpJ 9ST VBwMdAbu7f/ILPi5xz7dpXTgpthJuU00oU/xlJ5yeQMMyEkA21yDJ/HyLkVx5uHYDnK9Od&downloadAs=SetupImgBurn_2_5_8_0.exe&fallback_url=http://.../download.php?file=imgburn

http://www.worldrepositoryclear.com/c?x=22VluPfjkuu5kvGOY0cy58qK9wtEo7K2Wygc/FiFmiU=&c=sFXEBeOtbO3xqJpBXb3zjXe0yBYREs7SJJmrdOJcDHHRv5ejmwAeme9DrUr4j7/8 yZg6dbIAgV6s6hX30v5lbI6FzZ979hhwt 6Xoj0ylmk2tnt0fqeB4tXDdgyxieY&downloadAs=SetupImgBurn_2_5_8_0.exe&fallback_url=http://.../download.php?file=imgburn

http://www.worldrepositoryclear.com/c?x=cPl0fxNRvBR5pc4IJa8C/ /fbQspKNx CvegJMXnM5w=&c=BpkB6bBLZOb7aNaIhtdgxQEQi9rHYn7gN15p105LEe3NuBcdaEoe8rHJnBt1Uv06kcjClrVzo/TupxGk7ig RniZgOjQ0C5R9yF84mfPhpS1S809X6m4q6ZQzTtLZ2b&downloadAs=SetupImgBurn_2_5_8_0.exe&fallback_url=http://.../download.php?file=imgburn

http://www.worldrepositoryclear.com/c?x=qRvEF9pGeOHCIhTqlIjMSYfgViCXE8pa48D9U9etgO0=&c=UCI4I9BNndR o7ddWan7VKUNLM5KBzZ3C4/7d9W4jlh7hu2S0fPzW/MZd5DdtRi HyUOjGjp2M/8nSsL9k 3AkDt/dz9cs/YKCA9oOJKPNS29FVlHtrGTO85gI dEsdu&downloadAs=SetupImgBurn_2_5_8_0.exe&fallback_url=http://.../download.php?file=imgburn

http://www.worldrepositoryclear.com/c?x=wEisoUa97rKYF74diIB6rMTuZEBw60s 1JHKs7oysOY=&c=EafzAzM7C21OwdIpgXWeoAc 2xxwc/ZxwSu1tVHLyzdCLAi3MLSLEM/2EJNSRdNgOUH7DeHrbEVkIE KzMQmuVAUQSZiD2A8AuKr0Z cLdyTIb4r51frgmMGJZbxyEOZ&downloadAs=SetupImgBurn_2_5_8_0.exe&fallback_url=http://.../download.php?file=imgburn

Remove setupimgburn_2_5_8_0.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.