home

tugzip35.exe

Christian Kindahl

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from us3cdn.ausgamers.com and multiple other hosts.
Publisher:
Christian Kindahl

Description:
TUGZip Setup

Version:
3.5.0.0

MD5:
8a3f5e51af3f021a59797d4a36d806d7

SHA-1:
3f2efb76f1c35b746be5328579ea02f62885b258

SHA-256:
38287977c89d179dade5e875cbb601753128ebacd56279e9529697c70080a32c

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
11/27/2024 3:40:47 AM UTC  (today)

Scan engine
Detection
Engine version

Rising Antivirus
PE:Trojan.Win32.Generic.133E35E9!322844137
23.00.65.14317

File size:
3.9 MB (4,101,552 bytes)

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
English (United States)

File PE Metadata
Compilation timestamp:
6/20/1992 3:52:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
98304:MbILtGP2uPdNAgYvWVknNrJ+9WQCZeWFUFPfmYYkn9c/bIOa7Iya59us8:5Lw2yfY+qNeWHklu3ec/GXa59p8

Entry address:
0x991C

Entry point:
55, 8B, EC, 83, C4, CC, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, AA, 97, FF, FF, E8, B1, A9, FF, FF, E8, DC, CB, FF, FF, E8, 63, CC, FF, FF, E8, 0A, F3, FF, FF, E8, 71, F4, FF, FF, 33, C0, 55, 68, C6, 9F, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 7C, 9F, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 9B, FE, FF, FF, E8, 26, FA, FF, FF, 8D, 55, F0, 33, C0, E8, E0, D0, FF, FF, 8B, 55, F0, B8, D4, CD, 40, 00, E8, 5B, 98, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, D4, CD, 40, 00, B2, 01, B8...
 
[+]

Entropy:
7.9984

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
36.5 KB (37,376 bytes)

The file tugzip35.exe has been seen being distributed by the following 33 URLs.

http://us3cdn.ausgamers.com/downloads/.../tugzip35.exe

http://ec.ccm2.net/ccm.net/download/.../tugzip_3-5.exe

http://us3cdn.ausgamers.com/downloads/.../tugzip35.exe

http://gsf-cf.softonic.com/3f2/efb/.../file?SD_used=0&channel=WEB&fdh=no&id_file=44195&instance=softonic_br&type=PROGRAM&Expires=1478082616&Signature=QSzuSTTqU49cua8KmU6PDuunsCZWnKDhh~GmS8fPxuMU7zs5dEHdqgnUHWYf0R9aSuqCptgaY8CACWSGhA5Iuf6-CVvZtxWBqgNVexjXdNDDwUXmlyR2aUutFNY~PFccQObW2tgpnrb-vjEYTJeoz7LIQNF3QuOK3ovF8OGj4Hw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=tugzip35.exe

http://gsf-cf.softonic.com/3f2/efb/.../file?SD_used=0&channel=WEB&fdh=no&id_file=44195&instance=softonic_br&type=PROGRAM&Expires=1466854944&Signature=SSSMdUIMiq7L9f5na5aDgHZoNqjrTtvthC-KvFVAsBeQNiMNbQ9ReGIiV5qGpRPCNOwWO0VzCFonW2kRjU5BObEdpY-7izSDz3~3Ny6DNQcgyWCsSjSAm5QjsmLGoWN1IzaH6RYNMsh7YnWuUpZRHEUEGT-iRmoEV8tHu247z3o_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=tugzip35.exe

http://tugzip.software.informer.com/.../

http://gsf-cf.softonic.com/3f2/efb/.../file?SD_used=0&channel=WEB&fdh=no&id_file=44195&instance=softonic_br&type=PROGRAM&Expires=1476822692&Signature=etbVL9ljq6WKeYRps~S8d8n756ddq9Wjf6BxkJqPheHCRKa6CkwG7iqWw3ZChRs2~hoOU4IATDeFgBNvkUlnzNS3DXffkIw~962rUC82W~2VglW~d6yTV-tOqY7UWgkc-AiZ8iznM-qPn~C-5Xl~xN9hK9euatDiIAVcwBoeprg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=tugzip35.exe

http://dl.cdn.chip.de/downloads/.../tugzip35.exe

http://gsf-cf.softonic.com/3f2/efb/.../file?SD_used=0&channel=WEB&fdh=no&id_file=44195&instance=softonic_br&type=PROGRAM&Expires=1470381064&Signature=AI5y8F9SMbac6GN62PTsC3I~gyPUTcaVyQaTNrqPpBU7BuECjDIty8Z2eCLT9vCm9s2F7ElAQobXFABeOo1ePLj6-mrEfQYB3sG6xUVj1oG7IMjOhAnuB6QKuob-uLRjpQ2a2hwHvCFv~2BALhAlgAxfMdTbUEVUCsFvFUact5g_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=tugzip35.exe

http://software-files-a.cnet.com/s/software/10/99/83/.../tugzip35.exe

http://download1135.mediafire.com/zxav27796iog/.../tugzip35.exe

http://gsf-cf.softonic.com/3f2/efb/.../file?SD_used=0&channel=WEB&fdh=no&id_file=29146&instance=softonic_it&type=PROGRAM&Expires=1465587682&Signature=ACw03LX9mlGYFrND7z2mgT2Co3hZi67LDdgOHtdC2yBv8~2n9C6kNAi5lB26MhTu8g9CGEDRFWKP~5LT9vTckDdom~-S3eXncsBratzRZip50IWEjrCk54ptgF7vB84bBew7-h9sQAIm6Z2w~QLpCr6-BEZdzdYHziNQz0bHhJs_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=tugzip35.exe

http://ec.ccm2.net/en.kioskea.net/download/.../tugzip_3-5.exe

http://www.lo4d.com/get-file/tugzip/.../

http://download970.mediafire.com/tvk5glp7t9qg/.../tugzip35.exe

http://gsf-cf.softonic.com/3f2/efb/.../file?SD_used=0&channel=WEB&fdh=no&id_file=29146&instance=softonic_fr&type=PROGRAM&Expires=1459658060&Signature=cMDZGV6KoyEWTZPgK5HKrvHakGnDkNy-NQnKvS35UEREXQWeJm0VDmmDRW3wWqh0vxg8u01FQL1a97rI7km3~L3gIKN20EnEhYdqq8TRtmpWGq9q9kY2nZ2CQsTGA9UQtIeLulxU48BygCmJHdLFCSt-nH8FJTY8rIo~xHnmzHI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=tugzip35.exe

http://files2.majorgeeks.com/41caf35ddce1e1f80415f7e5a1dc815f/.../tugzip35.exe

http://www.24uploads.com/files/3/.../Download TUGZip 3.5.0.0.exe

http://gsf-cf.softonic.com/3f2/efb/.../file?SD_used=0&channel=WEB&fdh=no&id_file=29146&instance=softonic_fr&type=PROGRAM&Expires=1457159626&Signature=hmuCXu2b6BUYVEsPTix6iAH92wzhapL-DYMg3jwlEhfYz0gftwLl0umdVUec0ZEq8MlJqf6YAqHvNtMAKe~3ZfBrtvUkGSXNvXvh8DScQ2jyS~gqPskKi1K0-167WUTqSmPzxOcWAAHbfU7y8tDthAdrTwfDOA91qsUW5fib1qk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=tugzip35.exe

http://lb.cdn.m6web.fr/d/c/a/0ca10976db2e429afea81223cdfd2423/56ae635c/soft/.../tugzip_tugzip_3.5_francais_30703.exe

http://www.download.fi/.../download.cfm?version_id=10437&software_id=996&mirror_id=0&installer=0&perion=0&air_installer=0

http://gsf-cf.softonic.com/3f2/efb/.../file?SD_used=0&channel=WEB&fdh=no&id_file=29146&instance=softonic_fr&type=PROGRAM&Expires=1454617670&Signature=R0DHzr2aa~T6q6tmhr892QNdTUGrYV7lYd1Zk6E0xDe0UIYJ0k9Wi6dGOYx6Cu7neStlsSj2J6VIvJ420jTyexh7ui81iNqoNIQ--VgkM3f3xSyvzfOvAn71OSqLxrUDDaY0a-QJDrHGDLBL~2fB1CftA74OL5SR0zXgW2k9Hic_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=tugzip35.exe

http://ec.ccm2.net/br.ccm.net/download/.../tugzip35.exe

http://us3cdn.ausgamers.com/downloads/.../tugzip35.exe

http://www.majorgeeks.com/index.php?ct=files&action=download&

http://download.softpedia.com/dl/ecf90394e23f27a1aaa31f49e54b12fc/557a6591/100004217/software/.../tugzip35.exe

http://download.softpedia.com/dl/414fcadf8446cdf1c47b275bc0972ad6/54ef44f4/100004217/software/.../tugzip35.exe

http://dl.commentcamarche.net/en.kioskea.net/download/.../tugzip_3-5.exe

http://en.kioskea.net/download/.../download-214-tugzip

http://d.computerbild.de/downloads/.../tugzip35.exe

Latest 30 of 33 download URLs

Scan tugzip35.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.