» 7zip-12559-dp.exe
Overview
Analysis
File Details
Downloads (18)

7zip-12559-dp.exe

Bab

Mode Beta (Fried Cookie Ltd)

The Fried Cookie installer utilizes the InstallCore download manager which may bundle additional offers for various ad-supported toolbars, extensions and utilities. The application 7zip-12559-dp.exe, “Bab Setup ” by Mode Beta (Fried Cookie) has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions.

File name:

7zip-12559-dp.exe

Publisher:

Mode Beta (Fried Cookie Ltd) (signed and verified)

Product:

Bab

Description:

Bab Setup

Version:

1.6.2.1

MD5:

7463d51b68dfe080a2375b4ef1baf598

SHA-1:

78901b9c1084ca876ee901d5f0be1c681fa5e2aa

SHA-256:

6d044588008438dbde9763988a585948a54a46c14bd53512201be9d34b2cd17f

Scanner detections:

1 / 68

Status:

Adware

Explanation:

Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Description:

This is also known as bundleware, or downloadware, which is an downloader designed to simply deliver ad-supported offers in the setup routine of an otherwise legitimate software.

Analysis date:

12/26/2024 2:11:41 PM UTC (today)

Scan engine

Detection

Engine version

Reason Heuristics

PUP.InstallCore.FC.Installer (M)

16.5.11.17

File size:

951.2 KB (974,072 bytes)

Product version:

1.5.2

File type:

Executable application (Win32 EXE)

Bundler/Installer:

installCore (using Inno Setup)

Common path:

C:\users\{user}\downloads\7zip-12559-dp.exe

Digital Signature

Signed by:

Mode Beta (Fried Cookie Ltd)

Authority:

GlobalSign nv-sa

Valid from:

12/16/2015 2:37:06 PM

Valid to:

7/7/2016 6:06:18 PM

Subject:

CN=Mode Beta (Fried Cookie Ltd), O=Mode Beta (Fried Cookie Ltd), L=Tel Aviv, C=IL

Issuer:

CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:

112172B4C29D53526C8AFAEF1C4F6265E881

File PE Metadata

Compilation timestamp:

6/20/1992 12:22:17 AM

OS version:

1.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

24576:Lvp7y5I5PpEla6JVWwIar2hfWz21GkqfQT7L7/bpoQOGZ/u:zx8culbVzIaKhc2gkqfQTz99Z/u

Entry address:

0x9C40

Entry point:

55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, 53, C9, FF, FF, E8, 9A, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, 24, CE, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, 24, CE... 
[+]

Packer / compiler:

Inno Setup v5.x - Installer Maker

Code size:

37 KB (37,888 bytes)

The file 7zip-12559-dp.exe has been seen being distributed by the following 18 URLs.

http://www.tournowsend.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

http://www.bundletourtown.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

http://www.tournowsend.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

http://www.dlchuckledl.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

http://www.tournowsend.com/WVl6OTRQVUozU1dkcFQwZHRaRVJEVEZRNVdFWTFRVU5zUkRSelZVWkJSV2RXTURFeGFIaDVaV3RxZUdGclZVVWxNMFFtWXoxellsQkxRMDl5VDJkckpUSkdabmM1VVVoR2VIRXpObVZzV1Zod1NIaFVZMnh3UmxsU1JrVlBNRTFuYTNreVVIRkZiSFpIYjJSSmMyTnlXazF3TVUwMWF5VXlRbVUwZEhsNlQxcFhKVEpHVjBaQ05VdFZXWFV5T1VaMlRUQnVXSGwwYVU1YWFrNTFOWGd6VWs1NEpUSkNkM1puUlUxd04yVnFOMnBtZG5sb2MxUk1VRmxEY0hWQlFURjVUMEVsTWtZeFJEZE5ZM1JHUXlVeVFtMXhUa1JXY0ZFbE0wUWxNMFFtWlQwd0ptWmhiR3hpWVdOclgzVnliRDFvZEhSd0pUTmhKVEptSlRKbWQzZDNMamN0ZW1sd0xtOXlaeVV5Wm1FbE1tWTNlakUyTURBdGVEWTBMbVY0WlNaa2IzZHViRzloWkVGelBUZGFhWEF0TVRJMU5Ua3RaSEF1WlhobA==

http://www.headheartvault.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

http://www.bundletourtown.com/c?x=ctmH TwFPeqUJqcwt7floeGwsdXPNbCCl62x6ucqd I=&c=w lgqOCFDSax9PbAhB3Jn5Gs lrgixLgaudvB0MhNfJSyvti4asRfkilXN3sd5bsPGSKFwDztdWwy4cWZ79FyH9jACsOW3sW71zPxeREFf3M/VmcPMnI6rQoq/W1vsgs8Dbqft17S0yK6qAgl0TKY1XujbY6oIgBhlODDW7ip9o=&e=0&fallback_url=http://www.7-zip.org/.../7z1600-x64.exe&downloadAs=7Zip-12559-dp.exe

http://www.dlchuckledl.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

http://www.dlchuckledl.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

http://www.tournowsend.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

http://www.tournowsend.com/WVl6OTRQVGQzU2xOblZrczVVamgxVVU5WFZHMTBObkp2VVhwcFZqRkJORWxhVDNFeFJGSTRUR0ZIUjJSWFlXY2xNMFFtWXoxUGQyWTVORWRqVVRGaGVrZG9kMFJQY0doclRVaEpUMWRGYmpGTGJYRmxkMFZWV0VFd1NUWmpaVmc1VVRWaFRtTkdSbTV4YTBsdVYzSkdjbThsTWtadlVEWmlWSFZRYmtoQ09WQllaelpUYUZkcldscFVibWh4UVV0blRXZzJjbm96YmtwYVZuZEdOek50WjNKRk1FRklPWFpNSlRKQ2JTVXlSakZRU20xRWIwbFdka2RCY1ZGUmIwMUphM05DZEVSV1NWVXhURmRqVEcxWlRFRWxNMFFsTTBRbVpUMHdKbVpoYkd4aVlXTnJYM1Z5YkQxb2RIUndKVE5oSlRKbUpUSm1kM2QzTGpjdGVtbHdMbTl5WnlVeVptRWxNbVkzZWpFMk1EQXRlRFkwTG1WNFpTWmtiM2R1Ykc5aFpFRnpQVGRhYVhBdE1USTFOVGt0WkhBdVpYaGw=

http://www.tournowsend.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

http://www.dlchuckledl.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

http://www.tournowsend.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

http://www.tournowsend.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

http://www.dlchuckledl.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

http://www.headheartvault.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

http://www.tournowsend.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

Remove 7zip-12559-dp.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.