home

skill special force 2 hack downloader__3687_i1915810714_il43397.exe

Smart Inst

Pepcy

The application skill special force 2 hack downloader__3687_i1915810714_il43397.exe has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. This is a self-extracting archive and installer, however the file is not signed with an authenticode signature from a trusted source. The installer uses the InstallMonetizer platform which will donwload and install adware toolbars and other potentially unwanted software offers during setup.
Publisher:
Pepcy

Product:
Smart Inst

Description:
smart install

Version:
188.51.217.199

MD5:
0a13ec504af59fa75cfb3c5be8f938a5

SHA-1:
baf41e22fe452d61c4980e1a51db8fbb3a70f61a

SHA-256:
69f88e88ceb6b5bf85f528c2d0ad288e6beb6ada22a1d71c93f9cfb5373e67cc

Scanner detections:
1 / 68

Status:
Potentially unwanted

Explanation:
Uses the InstallMonetizer distribution platform to bundle adware.

Analysis date:
6/29/2025 12:01:30 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallMonetizer.Pepcy.Installer.Meta (M)
16.5.3.21

File size:
1007 KB (1,031,168 bytes)

Product version:
188.51.217.199

Copyright:
LC 2015

Trademarks:
Kocl

Original file name:
osetup.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\appdata\local\temp\skill special force 2 hack downloader__3687_i1915810714_il43397.exe

File PE Metadata
Compilation timestamp:
5/2/2016 1:59:49 PM

OS version:
6.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
24576:ffFrlgrB5cJRN+4i5HHdDorXdxAT37b2/FLjvplJvN7E:HDccTQ4anWj3ATrGFPvplVNQ

Entry address:
0x10DB7

Entry point:
E8, EF, 6F, 00, 00, E9, 39, FE, FF, FF, 55, 8B, EC, 83, 7D, 08, 00, 74, 2D, FF, 75, 08, 6A, 00, FF, 35, 14, 3C, 44, 00, FF, 15, 58, 50, 43, 00, 85, C0, 75, 18, 56, E8, E4, 21, 00, 00, 8B, F0, FF, 15, 54, 50, 43, 00, 50, E8, 2F, 22, 00, 00, 59, 89, 06, 5E, 5D, C3, 55, 8B, EC, 53, 56, 8B, 75, 0C, 57, 83, CF, FF, F6, 46, 0C, 40, 75, 6F, 56, E8, 60, 78, 00, 00, 59, 8B, C8, BB, C0, 2B, 44, 00, 3B, CF, 74, 19, 83, F9, FE, 74, 14, 8B, D1, 83, E2, 1F, C1, F8, 05, C1, E2, 06, 03, 14, 85, 48, 3F, 44, 00, EB, 02, 8B...
 
[+]

Code size:
206.5 KB (211,456 bytes)

The file skill special force 2 hack downloader__3687_i1915810714_il43397.exe has been seen being distributed by the following 2 URLs.

http://www.perisigmoiditisgashing.site/4_avast_launcher.exe

http://www.markersoffredefy.site/4_avast_launcher.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.