home

3nity-cd-dvd-burner-39358-dp.exe

Hof

Mode Beta (Fried Cookie Ltd)

The Fried Cookie installer utilizes the InstallCore download manager which may bundle additional offers for various ad-supported toolbars, extensions and utilities. The application 3nity-cd-dvd-burner-39358-dp.exe, “Hof Setup ” by Mode Beta (Fried Cookie) has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions.
Publisher:
Mode Beta (Fried Cookie Ltd)  (signed and verified)

Product:
Hof

Description:
Hof Setup

MD5:
f7de5c52d9eec1f856bfcdc45388542b

SHA-1:
c4ba75dd6a187128b67bcbebc66b20e96f2a4b4c

SHA-256:
6a88cbc302a1dfd4f77247ee8c393368258a83d347c04f54121f964ad4d4d80c

Scanner detections:
1 / 68

Status:
Adware

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Description:
This 'download manager' is also considered bundleware, a utility designed to download software (possibly legitimate or opensource) and bundle it with a number of optional offers including ad-supported utilities, toolbars, shopping comparison tools and browser extensions.

Analysis date:
11/2/2024 12:17:57 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCore.FC.Installer (M)
16.6.20.9

File size:
965.6 KB (988,752 bytes)

Product version:
2.7

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Common path:
C:\users\{user}\downloads\3nity-cd-dvd-burner-39358-dp.exe

Digital Signature
Signed by:
Mode Beta (Fried Cookie Ltd)

Authority:
GlobalSign nv-sa

Valid from:
12/16/2015 2:37:06 PM

Valid to:
7/7/2016 6:06:18 PM

Subject:
CN=Mode Beta (Fried Cookie Ltd), O=Mode Beta (Fried Cookie Ltd), L=Tel Aviv, C=IL

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
112172B4C29D53526C8AFAEF1C4F6265E881

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:zJi+t786bZa4IfLxWBrPIaPoOghcuplRS:zoM786boTqrHoj2urRS

Entry address:
0xA5F8

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, CE, 8A, FF, FF, E8, D5, 9C, FF, FF, E8, 64, 9F, FF, FF, E8, 07, A0, FF, FF, E8, A6, BF, FF, FF, E8, 11, E9, FF, FF, E8, 78, EA, FF, FF, 33, C0, 55, 68, C9, AC, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 92, AC, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 26, F5, FF, FF, E8, 11, F1, FF, FF, 80, 3D, 34, B2, 40, 00, 00, 74, 0C, E8, 23, F6, FF, FF, 33, C0, E8, C4, 97, FF, FF, 8D, 55, F0, 33, C0, E8, B6, C5, FF, FF, 8B, 55...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
39.5 KB (40,448 bytes)

The file 3nity-cd-dvd-burner-39358-dp.exe has been seen being distributed by the following 14 URLs.

http://www.headbitsapps.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

http://www.headbitsapps.com/WVl6OTRQVzEzWTFkcFJYUlVZVzFHYUdjNVZWZFVPV1p3YUdzMk1GZDZiWGhuTTIxTmFYQndPRlJHU2xKa2RFa2xNMFFtWXoxNVpESlRXV2hyVm10ek9VZEJTM2hzVlU0elptcENSbVZNYzNSSlVtVkxaRk0zT0hGeVpXMXNXRms1YTNWNWFrWlBXa2RJYkV4UFQxUk1SbTFyZEZWMVUyaHJhVU01TmxoeVVWSmpWMVJLU2pSamIzTkpWbXhEUWtSUGVrRm1OSGR5WjJkeWMyVlhZbEZUY0hGUGRVRkZkR3RYYm5sR2RtSTJOV3hwV0U1T1JFTlZkRTF5Y2tOaGFtNXplR2gyVDFkUk1WUnhkM2NsTTBRbE0wUW1aVDB3Sm1aaGJHeGlZV05yWDNWeWJEMW9kSFJ3SlROaEpUSm1KVEptTTI1cGRIbHpiMlowZDJGeVpTNWpiMjBsTW1aa2IzZHVKVEptTTI1cGRIbEVWa1JDZFhKdVpYSXVaWGhsSm1SdmQyNXNiMkZrUVhNOU0yNXBkSGt0UTBRdFJGWkVMVUpWVWs1RlVpMHpPVE0xT0Mxa2NDNWxlR1U9

http://www.signbodycycle.com/WVl6OTRQVFZzZG1GemVuQk1jWFpFTUVGTGNEY3hkVk5CVUhSSVEzazNNMVpxTkZoQ05tNXNNRmhhVkdoV016QWxNMFFtWXowMVVHWjFKVEpHTUVwR2VrWjBRMHM0VDFrMGNIQnZaMVp4ZUcwNE1Fc3pOekZxUm5OTGJHUXdjRmRxZGpGb01FVmtTRE01T1c1MGN6UmtNREU1UjJFNU4zQm9ORU5vYzNOYWRISmhTakJRUVVsNU1HWjZWMGxOTms0MmFtZExNRlpPV0hoSk4zUTVSVmhNVVVnbE1rSnNSbkZoTTFWc2VISnpTbXcwWWpCU1IzZHlSRk40Y0VWR2IyRlFlVVZJU1hONU5GRk5OR3BwTlhKbkpUTkVKVE5FSm1VOU1DWm1ZV3hzWW1GamExOTFjbXc5YUhSMGNDVXpZU1V5WmlVeVpqTnVhWFI1YzI5bWRIZGhjbVV1WTI5dEpUSm1aRzkzYmlVeVpqTnVhWFI1UkZaRVFuVnlibVZ5TG1WNFpTWmtiM2R1Ykc5aFpFRnpQVE51YVhSNUxVTkVMVVJXUkMxQ1ZWSk9SVkl0TXprek5UZ3RaSEF1WlhobA==

http://www.signbodycycle.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

http://www.softwaresignconecpt.com/WVl6OTRQWGhXYjJRMlYyNVJZbmRvT1VwRFEwdHJWalZyYjIxQmFFNU5ZbUprYm5oU2MxaEpXVnB1T0dSVWFHOGxNMFFtWXoweWNWUlRKVEpHUW5aYWIwSnNWRGxFUjNoU1UzQTFZVU42WW14NmRHcGhNSGhGVlZSV1FYaHdSVlJGV0ZCclFsbEpaSGR2U3paSVZERlBKVEpDVFhVbE1rWlBZemcyYzBSWVRFSndTa2RYVFdNemFURmxSM0Z4VHpGa2JtMVRVMlZMUVZRMlpDVXlSa2wyWkROcVptdFJWVEpXUXpWaFdrRWxNa0pXVDJOTWNIWlRSbFpYSlRKQ1UyZzRhVEZYYXlVeVFuRnpSSE5GU1dOa2RYRjJUa3BXYmpnbE1rSkJKVE5FSlRORUptVTlNQ1ptWVd4c1ltRmphMTkxY213OWFIUjBjQ1V6WVNVeVppVXlaak51YVhSNWMyOW1kSGRoY21VdVkyOXRKVEptWkc5M2JpVXlaak51YVhSNVJGWkVRblZ5Ym1WeUxtVjRaU1prYjNkdWJHOWhaRUZ6UFROdWFYUjVMVU5FTFVSV1JDMUNWVkpPUlZJdE16a3pOVGd0WkhBdVpYaGw=

http://www.cycleapplicationshosting.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

http://www.currentdlhosting.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

http://www.dlsendcentral.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

http://www.currentdlhosting.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

http://www.signbodycycle.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

http://www.vaultschuckleapplication.com/c?x=UJjDN2z/Va0KRMXDEjcYeYj2TQ9 ygoC2gVHAn8zDkU=&c=zm8bOn5XW9/EezMQHJoZotWFvnTHHIkfkckMq38ep/T FXG6ShK21ClxnETK5APiqrWCbieafDbVbz0swkqIKtabafGATCnMUFx9X4GzDB0Z udC HppzabnbtlxdbPHbFrrwk87b3mVSBraXYkz57sXnI6/EiS58Ta2f rmyYs=&e=0&fallback_url=http://3nitysoftware.com/.../3nityDVDBurner.exe&downloadAs=3nity-CD-DVD-BURNER-39358-dp.exe

http://www.currentdlhosting.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

http://www.signbodycycle.com/WVl6OTRQVWR5WVVKRE0zb3djbk4xYmtSMFNUZHRXV3RSYVc1cVEyNDFWVkJMVlZKUmNsVjNObk54ZDFaNmJEUWxNMFFtWXowMGRqQmlNVTVhUjFsRlptNTBTelEzYjBNMlNWUldTWEJZVURKUWFHTklXV0pQZDJVNGVIUXhUblpzWkdRMFlVODRhVkozYkdsaUpUSkNUWFI1Y1ROTVpHTm5TMHBxV1hka1UwUnFaMDQ0YlVOVk1ESlJZMHdsTWtKelRtSlJNMkZWTTAxVFpqZzNRV1JpYW1wcGRFazNTR0owU2tOUWIxcExKVEpHV0VVME5XUkJSbUZCVjJOQlNqZHhaREJSVGlVeVJsaFFNM1ptTUhaM1pGQnlaeVV6UkNVelJDWmxQVEFtWm1Gc2JHSmhZMnRmZFhKc1BXaDBkSEFsTTJFbE1tWWxNbVl6Ym1sMGVYTnZablIzWVhKbExtTnZiU1V5Wm1SdmQyNGxNbVl6Ym1sMGVVUldSRUoxY201bGNpNWxlR1VtWkc5M2JteHZZV1JCY3owemJtbDBlUzFEUkMxRVZrUXRRbFZTVGtWU0xUTTVNelU0TFdSd0xtVjRaUT09

http://www.headbitsapps.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

Remove 3nity-cd-dvd-burner-39358-dp.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.