home

LIMBOInstaller.exe

LIMBO

Playdead

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from download.informer.com and multiple other hosts.
Publisher:
Playdead

Product:
LIMBO

Version:
1.0.0.1

MD5:
8c2b586b4c502c664f3896bb8bef5416

SHA-1:
2000ac46c58a486bd89131df46617334e1582310

SHA-256:
99879302799b5d6d05034705c679abf1d2dd823f25bf317078462beadace2812

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/28/2024 11:40:41 PM UTC  (a few moments ago)

File size:
77.9 MB (81,720,728 bytes)

Product version:
1.0.0.1

Copyright:
Copyright © 2010

Original file name:
LIMBOInstaller.exe

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\limboinstaller.exe

File PE Metadata
Compilation timestamp:
9/26/2011 3:21:33 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
1572864:aGvlHJ/BPyws0rOhGYDCCelHinYutY5sOBAJXcokjxBXPsnj85OT03:aGv5jqmrSECnDstpjbPsj85OQ

Entry address:
0x39E3

Entry point:
81, EC, D4, 02, 00, 00, 53, 55, 56, 57, 6A, 20, 33, ED, 5E, 89, 6C, 24, 18, C7, 44, 24, 10, D8, 91, 40, 00, 89, 6C, 24, 14, FF, 15, 30, 80, 40, 00, 68, 01, 80, 00, 00, FF, 15, B8, 80, 40, 00, 55, FF, 15, C0, 82, 40, 00, 6A, 08, A3, B8, 2E, 47, 00, E8, 37, 2A, 00, 00, 55, 68, B4, 02, 00, 00, A3, D0, 2D, 47, 00, 8D, 44, 24, 38, 50, 55, 68, 1C, 93, 40, 00, FF, 15, 84, 81, 40, 00, 68, 04, 93, 40, 00, 68, C0, AD, 46, 00, E8, 19, 27, 00, 00, FF, 15, B4, 80, 40, 00, 50, BF, A0, 30, 4C, 00, 57, E8, 07, 27, 00, 00...
 
[+]

Packer / compiler:
Nullsoft install system v2.x

Code size:
28 KB (28,672 bytes)

The file LIMBOInstaller.exe has been seen being distributed by the following 10 URLs.

http://download.informer.com/.../limboinstaller.exe

temp:LIMBOInstaller [1].exe

http://www.currentupdateconcepts.com/AbzgqvFm_JS7I1iIeCTe11eXOxTekRp8W 8TCTSRXjvQQm6fwKyMMkdF f0MuG2p0WP0AElP8h_QEnMR2oSsrjM_wC_tMfVVoQ15D9PzjFI9I_VZHm6pJc 2RTZ97ciXvpzDssWYLzy72Ea9OIeIspGULHIe9j3pFikeDkRV_KtsBuBH4mR Y_ODh9ulRhtD38AOkLkk-GzwAAEQ3F5sL3SYohi4sCJ7_TweHHDh8B20eeBpsjIFnCY16uca5R0Ua7i2L6VUbDXo uIWmUeEn

http://limbo.software.informer.com/.../

http://qpdownload.com/download.php?name=limbo

http://www.megadlcenter.com/t0mOKNyT8Kvt KS7BKM8Y7JaF5NjrIgJNuMxnXtxnftpzWZP8HwprA3PtIOEk7Yczv5TnDfJG8mGBAzIdm_jrG083xlpopZ8kUVkh_VWgB7nTQgMNezr0BO8BN_4sh0u_cAqsO_KqOyU1B3nv7UZ9 qAXRm7qQv2fUQeAqfEZlorPejmCIJbgMGdk3hU_1cUODv3BmvapmRQGm_YzpUfgsptG7a2IQ==-GzwAAEQ3F5sL3SYohi4sCJ7_TweHHDh8B20eeBpsjIFnCY16uca5R0Ua7i2L6VUbDXo uIWmUeEn

http://www.indirveoyna.com/indir.php?id=370

http://www.megadlcenter.com/jdBhmlqatb 0HM LRfNZrEh5SOp64SHzS6NEl5ji6bTA7_watUzxOrwdHR5clG2qS2SveL_7Vn4vAKHZGXk1ivx_WM595Z5rRZ_D_Zb5BVp_E5gEbS4btTT4NaCmmKiubxuTGENf00k3AX9y_aHW9ysK6pXsNX_epgbOyMF74ATyGFTcqnO9wcS62Ve_gpLwBI89yPzZkMPrvMMNxLRAMnRX_HALkxQHDCGjC59 1rToj5NAqpTib5C_xxClKSqdQrsFdlufVLVT60UalujJIpxTIvTY2w7ITS9aHkFAMlPAehQpZzcX38AHljpRXrASsEFyOo6az0UXAX8Xw_xIdqvkIUsiDVua73X8RJ0xyKvlRlU wtoojM5kie97AlDqxyZJrmNglWyXS3ySLaC45IJWTwFMJC0qQxICkIEvCV7LFEA10dIt9AMsRiVjxvLJfXrv6TtiArVHrDRFs8lEAqEVk7wLsbYug7m SAWHO83XnXP7Ac5kZrMt5KtzNE3uZjFQEiof-GzwAAEQ3F5sL3SYohi4sCJ7_TweHHDh8B20eeBpsjIFnCY16uca5R0Ua7i2L6VUbDXo uIWmUeEn-e

http://www.megadlcenter.com/c?x= G7akcTC2jS6NzJzAlXBGjx w2yTD/roD3t4wJkq7hI=&c=5toe1LA3r4nmIKMP0WnncjQCMQdcPYpvje mcPhkUlPnTF7KGrXs6zHwhAMiwzTZsF0vyUTmlgrv3mfy9TumaOpbkHcQK4xNskv3yYgf9nUcRph9/n/CzkWdzXaefFtBYgz5a6SNAFEi68J098zhPqmgh1K 3RxSjUUY9uBUuDU=&e=0&downloadAs=LIMBOInstaller.exe&fallback_url=http://qpdownload.com/data/limbo/.../LIMBOInstaller.exe

http://c732102.r2.cf2.rackcdn.com/LIMBOInstaller.exe

Scan LIMBOInstaller.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.