home

installer_microsoft_excel_sciagnij.exe

Debegarune

AGORA S.A.

The application installer_microsoft_excel_sciagnij.exe, “Debegarune Setup ” by AGORA S.A has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the Inno Setup installer. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions. The file has been seen being downloaded from www.vaultsharestock.com and multiple other hosts.
Publisher:
Beseg   (signed by AGORA S.A.)

Product:
Debegarune

Description:
Debegarune Setup

MD5:
c3d6f702c2f725d389ad11030cac50d6

SHA-1:
00bb760f494364d4ed9ec3d170a4f9e37abac6f5

SHA-256:
637ae7fbbb4ecd6bea138ee8c2a998f851ddd8232d0f7a0c2dcd5834b4f62e0d

Scanner detections:
1 / 68

Status:
Potentially unwanted

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Analysis date:
5/20/2024 10:53:24 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCore.AGORASA.Installer (M)
16.4.14.5

File size:
923.3 KB (945,416 bytes)

Product version:
1.0.3

Copyright:
Fast

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Common path:
C:\users\{user}\downloads\installer_microsoft_excel_sciagnij.exe

Digital Signature
Signed by:
AGORA S.A.

Authority:
Symantec Corporation

Valid from:
9/9/2015 2:00:00 AM

Valid to:
9/9/2016 1:59:59 AM

Subject:
CN=AGORA S.A., O=AGORA S.A., L=WARSZAWA, S=MAZOWIECKIE, C=PL

Issuer:
CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
615B57E3504C929E3B64ED936D1CE68B

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:8wcSeGbEsZPjsFsNgE0NqxzJVd74pgZnO0G0I0STS89EirLZfk:8PwPwiNOAzJ0GZnOAbSu8WirLNk

Entry address:
0xA5F8

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, CE, 8A, FF, FF, E8, D5, 9C, FF, FF, E8, 64, 9F, FF, FF, E8, 07, A0, FF, FF, E8, A6, BF, FF, FF, E8, 11, E9, FF, FF, E8, 78, EA, FF, FF, 33, C0, 55, 68, C9, AC, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 92, AC, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 26, F5, FF, FF, E8, 11, F1, FF, FF, 80, 3D, 34, B2, 40, 00, 00, 74, 0C, E8, 23, F6, FF, FF, 33, C0, E8, C4, 97, FF, FF, 8D, 55, F0, 33, C0, E8, B6, C5, FF, FF, 8B, 55...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
39.5 KB (40,448 bytes)

The file installer_microsoft_excel_sciagnij.exe has been seen being distributed by the following 25 URLs.

http://www.vaultsharestock.com/c?x=7fkqDmQEoRyrjFkRs55bjvMsU3I36rFOyx3olD/ZsdA=&c=ekGgVb79p lO8eHMiGQpRK5ITl98gpSevG 9IqeiNk1TaRbnQ1n8SDUyiyp Nw ZbTSHE9jPww5qlvoBFKNBmk0F6n/K7yp4VaekUozTIbmLgvbrCvLDAiXEwdBlRz8&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_Excel_sciagnij.exe

http://www.bestcapitalclean.com/c?x=KWAIaMzBGBm3ft0RSbRfNAmmRCG6Fb4jW2iuB0dLrdw=&c=FnkVXF4i3uGBy6SIHCvW21FOJvgLPeI/vLnN4XjaMLxUTUnj77oCo8bRHPex2N62grun6cAzSIK/Fp fmHU/9CB4N7kG6KcTtHocIEqWGZDYPnFJ3FQV0nBi3gGrYKcD&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_Excel_sciagnij.exe

http://www.vaultsharestock.com/c?x=9J0YchG20LM85r/34ubw1PO sCSEtorSOm/VSE8rSno=&c=NoWGVXpmvYIOPoYCsqTHamIVS75HkLKAHUriU 8KSISlQ478bcrKWNKYqafD2aXY5Kdool9fKR22XrPLWZp/nsJMhI8zIMD/M3iBIlXT0kHjkoR2daMb 13uKibaa 7E&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_Excel_sciagnij.exe

http://www.packagenewcontent.com/c?x=qfxutBI4bu5t/bhqHzDlB1TbrpUECYnaBlBEpSTNchY=&c=BOxNYbHj5kYQfqB3gVb2lfBKta9MBogbFPwkV0l99hsT/6KoXM6xdfZpAq7M8eKib3XPO93Od2aRgExNtH93 XAo13kZ LuRrvpXVjIAy2Rcg4v4eA2WLDhmK cJKcUT&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_Excel_sciagnij.exe

http://www.citybesttour.com/c?x=Y0fNOZtJ88BysnBvzcHWRez3PDvwCE3VaIFXnDLi48A=&c=ZgzntFGAbKaIQGqv0MyCjBZEvJrhZO0/OEBqsutt4oSpRCq3x8hY9CfMwHOk3nEcWVH5lZBfWGO7B/Qrwe/v 1sO48ZZvkctKrE4QkFjPmUBzOi5hT/dPbOFKn9FEUyiaM/RJ4WHxwMYefBfGoamtQ==&e=0&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_Excel_sciagnij.exe

http://www.stockfuncontent.com/c?x=9KCTSSAwB nFfg/0jCcTTio0FSSPYFzQc96O2LdazZI=&c=o3OeGfebXMU0FIhs91nwgAfogtg/xEsKvk/gmWRWuxm1VjCR3CGmXMY2ZfLOzcWTwcHaMwMmGR3MCd2rNEtPfu8EGtg1L BZ1rwKmrmDi2S3xytjJ/0Eu84vsGNis7HF&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_Excel_sciagnij.exe

http://www.sharemegacycle.com/c?x=N5e XQMO3Y8gMHsmeofEIEjq4zU6ovFApGselqEoxUQ=&c=iRxY2/GQ03Q2lGKhbY687E64 dAP8YJwy/rQ2AvM3xkhnTetVlhTqOoU0 QNZtKMGlDfkn22OIRVFiv8 FSdLytNvuAqieyPQd6TaZsTeOZFIyJVBvjfr0Yf8RiPzXXbhr60cES3TvW/Eo2rQX3Y4g==&e=0&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_Excel_sciagnij.exe

http://www.bodyquickfiles.com/c?x=oOb t9WfQQELTbxV39vLAwFmLLEqC6wS4JF Q7BNBjc=&c= gU1DLHwysO9vQg4TaYc4/R0eI8ABpcmGmrSyju193LpizRscAVLHDtJxzBxgkIC7MbvVLYqLdlJwtcov1XvixUPXqxnJqnxJ7LN6ShawK IS3CDasTIloDLvJ9nHxOKMGtcjRxyyRpG5n95Bmedw==&e=0&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_Excel_sciagnij.exe

http://www.tagapplicationrepository.com/c?x=Ia6x8I/IFiZzx9sQq0VrvjXsNxc/3g5cOuTXyD4FP5c=&c=Pqd/0nwh/7XQq n/9Dick2bkib4gS7f94sUmU2/jzgYLJC0ep/k8WzMcBwd35YdqkEztG8vVSGEA5 McOJbLxqAN0bY0 rOIAbNQzKYYbbEZkHuurSekBmqTUsFXNKny&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_Excel_sciagnij.exe

http://www.guardconceptsbundle.com/c?x=HLqA34u9F7aisKuiHyFsdPsIc4q80ePFPCk23q4iK7Y=&c=OZAE5C8ebm3ETe7ethxIjxexGMrFS0jJW1 dqV9mnUQCVxpVML t3VNwdMv7GU6Xzm8gW4er23Bso2w abN40DiNNT3EuRAfZ4sZImhurttOGJl/Np4tD0tteKwPGHS22ucEKiIqjSbI6CbBQu33Q==&e=0&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_Excel_sciagnij.exe

http://www.stockfuncontent.com/c?x=VcIWKMc3kps 1w94Z9vT/loXb7a/tWOvjCTTLAnxpJE=&c=ZOBKWTDRvrTbtPF5qnp015oZfLqwnmnw1Xe3PHfVdjdUhUfzFf6mIvKcN0AieCe/JdsfUAdQ3498xP9MiZurVD0c7OIlUdGEw38R5k90PG3PTxmPc/Qih1pBcy8GIhpT&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_Excel_sciagnij.exe

http://www.vaultsharestock.com/c?x=0FtEVxKok77Ux0vFHPbFNbvrmJXCK3ljoJxoYcbQdZI=&c=lQNo3H2eNg1q4v31gTX1z2nxyaYCwc/iWwRKuyKLIO6VF0twKR7MEaY03otnZQvmcSJ1ka4O B2IRZrmO NygHKk7y4Qhsq/EWkjio8SLrYaMjY7kQdOYGX3XI4U1HTX&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_Excel_sciagnij.exe

http://www.filenewconecpt.com/c?x=VeRyraa9eyvAWSWF2xSeStEhmvzc0V6eI9apRjrE2eQ=&c=CKaDstxPMrve9btltqxuFMqadpRbuU34GvlQ34qM8N20TiiZaSF2xYKdolSvzDobgCaykQi1scDXP0vcDdd29pTkCE2HmpvLl2fdFtTw2l1uyrWhmj8jr5Y4gMLyV2lUPi0IDwBnDpT9owfkresbLQ==&e=0&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_Excel_sciagnij.exe

http://www.hosttowersapp.com/c?x=v3UBRDQug1A9dXfwsUDG8YrE4cByZDhZKxG82AWwkZI=&c=CQ5wASoczCPWpRpCe8MQdKf9qBV5y7UW12zniUZnJ/jzbSTT3fOCYD1Cox7dTf1PUwNVzolseZZfp8asPBV8BkElzH52oiXFtb87ZcoDoUmhurUVGMkq6eCfC5uDhH8S&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_Excel_sciagnij.exe

http://www.gifthostingdownload.com/c?x=BcwHmq8Z9dGHqr013jCCsQuZHSMoGf7rGpIwJzkf9Qc=&c=jQYV/urSLafLG7UEJgvnumhquGL36dDvbLjU6cIEkM3xk6E5LbyBTU0CbTFFQk9ktxz88kMzlJ2Dd6bagMq7iH0oZxSTyJsEvJLhSqfMNdiR2sjO/16eeY DDIbM8fpCetAKO9f6WHdZcaMoNiQjvg==&e=0&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_Excel_sciagnij.exe

http://www.bestcapitalclean.com/c?x=Aur1mEZXMmvvPOmMUU3HXPqPpZUT5jU p5Np2HvU C8=&c=wE8sYqGVloymr4tRoJy5Iltbe2xRW4DmkIGPJswufSKDuwcV/0x2UC4dfRyUxnP0DlovIztrmUrqpzp3sBIvv/vETPCrdlOAtCJtNb jMvL3ojJwYWBXBn2PvKPgertv&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_Excel_sciagnij.exe

http://www.appstoursbulk.com/c?x=aH3l0KidlcabbHzP0MWJMbm4NKc2t7JUrM7CtTY3stU=&c=9MYRn9Qs0UdMTIPcoS0CsXUzWkdK7gkT9WH9 JaWgWjvXcRajDIBspEjikMxgmDtDK8yAmwPOdEiEwXA58fPVS20sV16EyE1N7xet8G73in8ipQESZ70M4H6FYrKhiAg&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_Excel_sciagnij.exe

http://www.applicationsbulkbundle.com/c?x=/ty56QHG isJdHBndgYT1XyNq/ZdGe2Efs0zkdKo5oI=&c=j9cWs4P8QpZNy8Wy6TtldLQOlV7/V9t10dXObLVAbrnSt6N3j40r1BZJLBAFYnoHw7aj5DLLQBNNubrxqYs6VYNQeX 6f2FPVmC4ZOERnlPv5YzDswn8dbd1Z7C27cjt&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_Excel_sciagnij.exe

http://www.newbodylaboratory.com/c?x=nIzrYVlPtDnysBlVGMleiuh9TZRcH6/ZSrlkj3Y1sAk=&c=IyO 192HMk3evd/gkYy9402Z0qxxyVqM7X4ylCoKtJr2wKjCprMSOxk2z0/R21bXJmZYdfar3Q8ppJAve6oVDY8/uJahfGUxWBTcEMMU/9Mjmtr0SSNT1jVLNOxQ6Z4u0c52kNQxgZfYxETN9gYSFg==&e=0&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_Excel_sciagnij.exe

http://www.vaultsharestock.com/c?x=RBXP/MT2pTN/cI UO6iYY39Nvp6X/hPIBhhqO8UD0dY=&c=79tHMx5BPqJMo0lelofDXxhc88vCaFDoKWvatTi5Nb0lFotNVyuo9eSdg9R0lkq/RAKVsnVW99KqhhwUtxbr4ibz4qwJusAKq5M0CuJrIw1XV5p/Cb5f3xI3OWGAjN3G&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_Excel_sciagnij.exe

http://www.stockfuncontent.com/c?x=Zb1teq6YDSzjPItydmFJaqqGB PjgCEkK3l8w/y2i8M=&c=j Vr DlDV5puER/YbanmYHb2OO dkTy5dryFfjzsDekEjThkmi52zhXOnkvSKV7tSzx4 yG9ZBcvf8tuCRwFWhBkIhyE7W/LpHAKzA7HIA1ie/nERz27kRNV pm 7oFu&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_Excel_sciagnij.exe

http://www.applicationsbulkbundle.com/c?x=jzexh637rebmb7RSGxW1p0F/gzhu46AJCgrsjKIqlcE=&c=n4O09TePmkpUTi5JEMQyL3uYemG/5bX9MaO6myjsDXHjTB5 A593JECjPojUAX5CFD1PZ3a3U38jaD5Op7/mklb6H16Gl7dlMnWTK0hd1yq7IqdSMWD8SkDVP9ezXSv9&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_Excel_sciagnij.exe

http://www.tourcentralbundle.com/c?x=MoZRnx3rOQtF7wsLdeGe57gOQl4FRjsjZpmNx7fYhIc=&c=oNeDVJrJR8Y4dgJtjL/rXA8IAfYnStRX7iK2ww7eWt2efDkAA4ICdrZ5nudi60TqrCk7QYXtYDEt9Ib1kxbEmY39yk2MiqTmoZrKikaZRpGqtziU7bZ4gNuViXB3X5F6&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_Excel_sciagnij.exe

http://www.townbesttour.com/c?x=eKR6JpBpY1lcKWX6JMT0N/L3 s9gsxCvwewufk7 UL8=&c=gu9mHIJqZXKb7shgzFBtttU3QFM84wOocGmAdf1TA7MkUax2j9PscVyuMaxmdyMOprVAjMYhL4YqCh0TLuTob5oRlqcwarnDcgRX2Ejbd/trIAKrsZtYp2AQiotahH00&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_Excel_sciagnij.exe

http://www.flashbesttowers.com/c?x=QlZ3c1Qp4qSEoyo5Zwef/MTT9zZj9GleXSeTBFOlnJc=&c=MI4l9xtEkAQ bO7h/BeSWdYCglGF7LyjZUTQjfhRaHkAvVj502vRpowPARod8YRwATRdG3zP3UEGNGMbV4Pi1Lpj9zkph0Om4wDXBJTTc8r1wffsFCRJcjRdBZlCxhg5&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_Excel_sciagnij.exe

Remove installer_microsoft_excel_sciagnij.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.