home

031a13d5-3f42-6c00-dc91-66cc1059b432_1d1cb18580ba928

Hof

Mode Beta (Fried Cookie Ltd)

The Fried Cookie installer utilizes the InstallCore download manager which may bundle additional offers for various ad-supported toolbars, extensions and utilities. The file 031a13d5-3f42-6c00-dc91-66cc1059b432_1d1cb18580ba928, “Hof Setup ” by Mode Beta (Fried Cookie) has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions.
Publisher:
Mode Beta (Fried Cookie Ltd)  (signed and verified)

Product:
Hof

Description:
Hof Setup

MD5:
4445a791558e41cfca7196627252a0bb

SHA-1:
f18dd5bf7ffb8fe809f65e7b30bd821c4fcabaa4

SHA-256:
a33a64a871634e52e0f2417f049046914fe78e8304e1adbc6e1af092c12deb6b

Scanner detections:
1 / 68

Status:
Adware

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Description:
This 'download manager' is also considered bundleware, a utility designed to download software (possibly legitimate or opensource) and bundle it with a number of optional offers including ad-supported utilities, toolbars, shopping comparison tools and browser extensions.

Analysis date:
11/2/2024 12:31:40 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCore.FC.Installer (M)
16.6.20.20

File size:
965.6 KB (988,752 bytes)

Product version:
2.7

Bundler/Installer:
installCore (using Inno Setup)

Language:
Language Neutral

Common path:
C:\ProgramData\microsoft\windows defender\scans\filesstash\031a13d5-3f42-6c00-dc91-66cc1059b432_1d1cb18580ba928

Digital Signature
Signed by:
Mode Beta (Fried Cookie Ltd)

Authority:
GlobalSign nv-sa

Valid from:
12/16/2015 2:37:06 PM

Valid to:
7/7/2016 6:06:18 PM

Subject:
CN=Mode Beta (Fried Cookie Ltd), O=Mode Beta (Fried Cookie Ltd), L=Tel Aviv, C=IL

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
112172B4C29D53526C8AFAEF1C4F6265E881

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:7Ji+t786bZa4IfLxWBrPIaPoOghcuplRS:7oM786boTqrHoj2urRS

Entry address:
0xA5F8

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, CE, 8A, FF, FF, E8, D5, 9C, FF, FF, E8, 64, 9F, FF, FF, E8, 07, A0, FF, FF, E8, A6, BF, FF, FF, E8, 11, E9, FF, FF, E8, 78, EA, FF, FF, 33, C0, 55, 68, C9, AC, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 92, AC, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 26, F5, FF, FF, E8, 11, F1, FF, FF, 80, 3D, 34, B2, 40, 00, 00, 74, 0C, E8, 23, F6, FF, FF, 33, C0, E8, C4, 97, FF, FF, 8D, 55, F0, 33, C0, E8, B6, C5, FF, FF, 8B, 55...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
39.5 KB (40,448 bytes)

The file 031a13d5-3f42-6c00-dc91-66cc1059b432_1d1cb18580ba928 has been seen being distributed by the following 11 URLs.

http://www.headbitsapps.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

http://www.signbodycycle.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

http://www.softwaresignconecpt.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

http://www.dlsendcentral.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

http://www.cycleapplicationshosting.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

http://www.softwaresignconecpt.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

http://www.signbodycycle.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

http://www.headbitsapps.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

http://www.signbodycycle.com/WVl6OTRQWEpUVkdOWFlUZFJUU1V5UWtJbE1rWm1jREZqVURKeVR6QldSelp0U2xCSWFHdDFjVVF4WmpWc05YbFJNVmxSSlRORUptTTlRMlY1VFZkR1UyVnpkMFVsTWtKeFJYaHRZV1ZKUVVORlpFeFZTVVZoU1cxd1NGTjVXbnBwYzBzNWEwaEdUV0pZTVdWU2VreHNNVWx2TkZaRlVsUm5lWFJpTlVFbE1rWXhhWGxoTlZSWVZsZEphekpIVWpRelJWQlBWRUpNWms0bE1rSmpVWGhqWlZCMlFVMXRWVzExYTBGUVEyVTBSSE5GWVc5cldsTllZU1V5UmpobWNHYzVXRXBsUkVsa2IwNW1KVEpHUTNvbE1rSlVVazFaWjBKaFdWQm5KVE5FSlRORUptVTlNQ1ptWVd4c1ltRmphMTkxY213OWFIUjBjSE1sTTJFbE1tWWxNbVprYjNkdWJHOWhaQzVtYjNOemFIVmlMbU52YlNVeVpsQnliM1JsWTNSbFpDVXlabVY0Y0dseVpYUnBiV1VsTTJReE5EVXpNekV3T0RreUpUTmlZbUZrZFhKc0pUTmtZVWhTTUdORWIzWk1NMlF6WkhrMWJXSXpUbnBoU0ZacFRHMU9kbUpUT1VKa1YxSm9XVEpzTUdWVE5XOWtSekZ6SlRKbU5qSTBORFl6WkRGaE16azVZbVE1WWpVeE5qRTBOVGN6TldWa05qWmtZamd5WkRKbE56ZzNaRGt5TWpoaE1XUXdZamMyTWpNNVpqWTBZMk0zTW1VNFlTVXlaa0YxWkdGamFYUjVKVEptWVhWa1lXTnBkSGt0ZDJsdUxUSXVNUzR5TG1WNFpTWmtiM2R1Ykc5aFpFRnpQVUYxWkdGamFYUjVMVEV4T0RJMkxXUndMbVY0WlE9PQ==

http://www.cycleapplicationshosting.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

http://www.signbodycycle.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

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.