home

ashampoo-burning-studio-12487-dp.exe

Hof

Mode Beta (Fried Cookie Ltd)

The Fried Cookie installer utilizes the InstallCore download manager which may bundle additional offers for various ad-supported toolbars, extensions and utilities. The application ashampoo-burning-studio-12487-dp.exe, “Hof Setup ” by Mode Beta (Fried Cookie) has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions.
Publisher:
Mode Beta (Fried Cookie Ltd)  (signed and verified)

Product:
Hof

Description:
Hof Setup

MD5:
7edf4044556994e33c0cd943549c7cb0

SHA-1:
62b867ab21eb3e0c4d5b69a09737266021440273

SHA-256:
f22daaaf6978e2f9623d00bbf6e832413cb4ddc0d9873f091232f9dfd60c4792

Scanner detections:
1 / 68

Status:
Adware

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Description:
This is also known as bundleware, or downloadware, which is an downloader designed to simply deliver ad-supported offers in the setup routine of an otherwise legitimate software.

Analysis date:
12/26/2024 3:04:48 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCore.FC.Installer (M)
16.6.19.18

File size:
965.6 KB (988,752 bytes)

Product version:
2.7

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Common path:
C:\users\{user}\downloads\ashampoo-burning-studio-12487-dp.exe

Digital Signature
Signed by:
Mode Beta (Fried Cookie Ltd)

Authority:
GlobalSign nv-sa

Valid from:
12/16/2015 2:37:06 PM

Valid to:
7/7/2016 6:06:18 PM

Subject:
CN=Mode Beta (Fried Cookie Ltd), O=Mode Beta (Fried Cookie Ltd), L=Tel Aviv, C=IL

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
112172B4C29D53526C8AFAEF1C4F6265E881

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:tJi+t786bZa4IfLxWBrPIaPoOghcuplRS:toM786boTqrHoj2urRS

Entry address:
0xA5F8

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, CE, 8A, FF, FF, E8, D5, 9C, FF, FF, E8, 64, 9F, FF, FF, E8, 07, A0, FF, FF, E8, A6, BF, FF, FF, E8, 11, E9, FF, FF, E8, 78, EA, FF, FF, 33, C0, 55, 68, C9, AC, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 92, AC, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 26, F5, FF, FF, E8, 11, F1, FF, FF, 80, 3D, 34, B2, 40, 00, 00, 74, 0C, E8, 23, F6, FF, FF, 33, C0, E8, C4, 97, FF, FF, 8D, 55, F0, 33, C0, E8, B6, C5, FF, FF, 8B, 55...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
39.5 KB (40,448 bytes)

The file ashampoo-burning-studio-12487-dp.exe has been seen being distributed by the following 16 URLs.

http://www.softwaresignconecpt.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

http://www.signbodycycle.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

http://www.headbitsapps.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

http://www.dlsendcentral.com/c?x=NR7mowLjB3fKd OK17xKp6d3EOK9hIuoiVXa3IdZTrc=&c=zAz9WhBripDNIqpuJw4QlRGv9sfkKwseh2aHKgZlypmYUh EI67cyTmvKEexvC3WQFvpIjB03NZ/4d1PI6xNlYvK44Fx1XE DiORjH0beQqn /ToP4l6soOP/XMoMi/9re/YpRPOdfk5tMFLcWa5WqsZLAu0PUI4HoQcWtSMhv0=&e=0&fallback_url=https://cdn1.ashampoo.net/public/xen/.../ashampoo_burning_studio_2016_22039.exe&downloadAs=Ashampoo-Burning-Studio-12487-dp.exe

http://www.cycleapplicationshosting.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

http://www.softwaresignconecpt.com/c?x=A5ZKYIUjpAiTQQMkhvCKQBcrb6C38s/8yRsvAZHS8cc=&c=2OdlKissypIsZsfPUdcW4N2x11Af80Uszqz6c/ e5YS9xyUXu K21K1y4rAJoC9jHd1kqk8983BZP54mQDLxAcgv6MEU6YIjLdXuimp2GsEwp2R6dwQj1MCpU58Hl3YYJRnX1xGRVgQesnC1wViKBmHF274Pp2EYzjGbKzBNcU4=&e=0&fallback_url=https://cdn1.ashampoo.net/public/xen/.../ashampoo_burning_studio_2016_22039.exe&downloadAs=Ashampoo-Burning-Studio-12487-dp.exe

http://www.signbodycycle.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

http://www.cycleapplicationshosting.com/WVl6OTRQWEZ1VFRGTFJIZE1TR1pWTmtaUWRqVkJVa2RtU0d4cWNFZHBPR3hDYURoc1JtMUxSRWxMWkZKRlVVMGxNMFFtWXoxUFNFSkZjMFI2VEd0UmEyUjRKVEpDY1ZjemVsTklha2w0YWlVeVJtYzJSVVZxVTJoTWVWaGlaalZvVmpGa1YyRWxNa0l4ZFdSalVHcG9SRVo2V0VkWlluZHRKVEpHWkRoNlptSktKVEpDUWs1WWEyWm9VVUUzT1VWMGNETXhNRGhpWVRnbE1rWlFkMWhoVUZkWWJVZFpaVGxXZURCMGJUUTRNV3RZVDBFMFkwTkhWVUp4Wkc1cVJrVlZObHB5VHpSbGVrMVpTMDVCVENVeVJtdDFjVWQ0Ukhsalp5VXpSQ1V6UkNabFBUQW1abUZzYkdKaFkydGZkWEpzUFdoMGRIQnpKVE5oSlRKbUpUSm1ZMlJ1TVM1aGMyaGhiWEJ2Ynk1dVpYUWxNbVp3ZFdKc2FXTWxNbVo0Wlc0bE1tWTBOakV3SlRKbVlYTm9ZVzF3YjI5ZlluVnlibWx1WjE5emRIVmthVzlmTWpBeE5sOHlNakF6T1M1bGVHVW1aRzkzYm14dllXUkJjejFCYzJoaGJYQnZieTFDZFhKdWFXNW5MVk4wZFdScGJ5MHhNalE0Tnkxa2NDNWxlR1U9

http://www.signbodycycle.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

http://www.signbodycycle.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

http://www.cycleapplicationshosting.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

http://www.cycleapplicationshosting.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

http://www.vaultschuckleapplication.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

http://www.signbodycycle.com/WVl6OTRQVTFVWVdKcVYyeElUV0UyYkZoSlJUSlFhbEJXT0VKamJ5VXlRalJHWkVoaVp6Wldjak5HU0dSTk4wTnpheVV6UkNaalBUaElUVEU1VURSWFZHcDJjMGh4VEhoTVdEY2xNa1pYT1hWNWRrcFZSalJqU1dwc1dXMU9SM1o1YjFOa1QwWk5RM2REVEZGNVVVa3lSemhtYlRkWlVrZEpkM1ZOYW5KQmFsbGhZMWgzYTBOaU5uQlBZMkpCUkhCeE9GVnZSMmhXVWpFME1taFdWa000Y0d4SVJXeEJha0ZtUnpGclQxQkZiMDRsTWtaQ05FbFVWMjVHVjBWS1ZqbG5jV0ppVFZOMlZHMUVkRFJSWldsbU5rRWxNMFFsTTBRbVpUMHdKbVpoYkd4aVlXTnJYM1Z5YkQxb2RIUndjeVV6WVNVeVppVXlabU5rYmpFdVlYTm9ZVzF3YjI4dWJtVjBKVEptY0hWaWJHbGpKVEptZUdWdUpUSm1ORFl4TUNVeVptRnphR0Z0Y0c5dlgySjFjbTVwYm1kZmMzUjFaR2x2WHpJd01UWmZNakl3TXprdVpYaGxKbVJ2ZDI1c2IyRmtRWE05UVhOb1lXMXdiMjh0UW5WeWJtbHVaeTFUZEhWa2FXOHRNVEkwT0RjdFpIQXVaWGhs

http://www.headbitsapps.com/WVl6OTRQVzVXUlVOR2VDVXlSakJZVjJFMk0wbFNhamxUUkhkUWQyMGxNa1ozVEU4eVlXSnhVVWRIZDBOQ2RVMUtja2hOSlRORUptTTlhVUZQZGxBMVJFSjRRWEk0VnpNeFIzaFJXakkwY1RoRloxWnZhWFJOUjBaclozQk1XbGxWZFdScWFVbDJORE5DTlZKalVscHJOa3RRVkdkdGNXbzBNMEpOVGlVeVFrVWxNa0l6V0V3NFJUQnZUbWhaVjNjM2JXMUdSM2xyYUVSMlNUVnBNM1JQV0U1VU1GRnNhM001WkVobVRGWldVWEZMVjJScmVqUlBZMnc1U0RBd1ZtTkhZelJDY2tNbE1rSnpOV00yYWtadkpUSkdURFk0WVVFbE0wUWxNMFFtWlQwd0ptWmhiR3hpWVdOclgzVnliRDFvZEhSd2N5VXpZU1V5WmlVeVptTmtiakV1WVhOb1lXMXdiMjh1Ym1WMEpUSm1jSFZpYkdsakpUSm1lR1Z1SlRKbU5EWXhNQ1V5Wm1GemFHRnRjRzl2WDJKMWNtNXBibWRmYzNSMVpHbHZYekl3TVRaZk1qSXdNemt1WlhobEptUnZkMjVzYjJGa1FYTTlRWE5vWVcxd2IyOHRRblZ5Ym1sdVp5MVRkSFZrYVc4dE1USTBPRGN0WkhBdVpYaGw=

http://www.vaultschuckleapplication.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

Remove ashampoo-burning-studio-12487-dp.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.