home

c

Cima

MaxSpeedy (Fried Cookie Ltd.)

The Fried Cookie installer utilizes the InstallCore download manager which may bundle additional offers for various ad-supported toolbars, extensions and utilities. The file c, “Cima Setup ” by MaxSpeedy (Fried Cookie) has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions.
Publisher:
MaxSpeedy (Fried Cookie Ltd.)  (signed and verified)

Product:
Cima

Description:
Cima Setup

MD5:
e34d12e715eccb64e386cf1518999d7e

SHA-1:
1ef4685d640f04b8929b220e6900a15523561c3b

SHA-256:
a5c88e50c0b1332211a427766a2c473a0f4e827d796bfebac884e5ef0357a554

Scanner detections:
1 / 68

Status:
Adware

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Description:
This is also known as bundleware, or downloadware, which is an downloader designed to simply deliver ad-supported offers in the setup routine of an otherwise legitimate software.

Analysis date:
11/15/2024 10:47:35 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCore.FC.Installer (M)
16.4.5.2

File size:
1 MB (1,094,904 bytes)

Product version:
3.2

Bundler/Installer:
installCore (using Inno Setup)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\low\content.ie5\{random}\c

Digital Signature
Signed by:
MaxSpeedy (Fried Cookie Ltd.)

Authority:
GlobalSign nv-sa

Valid from:
12/17/2015 2:11:09 PM

Valid to:
6/8/2016 5:06:58 PM

Subject:
CN=MaxSpeedy (Fried Cookie Ltd.), O=MaxSpeedy (Fried Cookie Ltd.), L=Tel Aviv, C=IL

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
112125C58A41E827F13C76AD2A1D648B8808

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:Xp1CHYeefisG65UfjqbPmdk681rpUQ6ZFXjwC0POr3s7Oy:X7vzfzh22rMk6xQOTwCLSO

Entry address:
0xA5F8

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, CE, 8A, FF, FF, E8, D5, 9C, FF, FF, E8, 64, 9F, FF, FF, E8, 07, A0, FF, FF, E8, A6, BF, FF, FF, E8, 11, E9, FF, FF, E8, 78, EA, FF, FF, 33, C0, 55, 68, C9, AC, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 92, AC, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 26, F5, FF, FF, E8, 11, F1, FF, FF, 80, 3D, 34, B2, 40, 00, 00, 74, 0C, E8, 23, F6, FF, FF, 33, C0, E8, C4, 97, FF, FF, 8D, 55, F0, 33, C0, E8, B6, C5, FF, FF, 8B, 55...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
39.5 KB (40,448 bytes)

The file c has been seen being distributed by the following 50 URLs.

http://www.universeranchupdate.com/c?x=m60waqje6YbB0OnYCkn9fbWLibXyKb3m8fIUYycps4o=&c=Q2takOL FiWRSVhmtn5bvME1NB4gfxgBd80t1D ZEKgnqzMmX/KYGMiDsTzCWktkbVTF SODpbc CcJb/8Snkix4fTAM 5MABy2i1UGCVuGY6ZRE9Ic6BjGAUtO 3sCC&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

http://www.downloadssendfactory.com/c?x=k9RkxBtGwgUsdO02vRTG KGxTaOyGT6Lvu/s69Phc58=&c=BQsmKcAnr1bEos4t6dj 0OjxBnxvq6Px5ofy94Y rzSi/8MbzhsCFvxHYkvRANvEL8CkquKK/Ygz/vXjkVFkSLWEZnoYkBU9TKxNH7 M4 Wf/BBwMb/tCB2VNGo3J/Ji&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

http://www.conceptssafebits.com/c?x=6jR9DeRkWpIRjtoEJVqfLHs/MnUdqkjhSF/lel4POS0=&c=cAp5uThFNLczTemmPNn12/J9tmriCrhW8vIKFnuywR1PUKisLoX9/Vo7Uo9XOoxanudtKQ4BGSubyYAgc27rbptuFrbYoTaG41i0HGZrsI zOSQHz5ZGiVXHcTY8FMil&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

http://www.worldappsfiles.com/c?x=M1HhIaykSFxEqVws3TencemcGHwRblfD0Nq3lq9nfq0=&c=jD2BZIUs0WIh5JmIMnVEPe89meP9Zks/kaTtwOyBGVy4ELggtbiIoA4ViGpYlY/SRmWSjNhgJM/UfcjzAiWxvSu3elFqF1YAAHWFT2zwfU bmEqBCUnqCUbarnUJnd8L&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

http://www.taggiftapps.com/c?x=Y/HQ ep l4NKR8wpQFLyk4XmtDptKcLKQldYK5Ep6Ko=&c=ZIBn7jfoTHau058IAT31kmEEG Ji5CuOm ACOMyUxYqYYM/yUYCim8IrgoTLFVBByPr89SxmYz2dJxxbg9 08h2l163NJYO9f762WFhglih8Xp9sbvFFyVAxWdo3wWSn&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

http://www.downloadsapptoday.com/c?x=BlhFSL9KA4oycCfMgmD6slbh ftDVpAEqHhAWVvCmIM=&c=fUBBWakY68CJWn5wwCGrb W s/K3LQ74rsuNVywe9DlE9q3spmIqhIdUeaK9T5cGryRRUylKNmsU7q5W1aCotU9uQBaaQ1AkFd2wvEWOMAoEkTzBxX/XZXL7XQFivYMe&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

http://www.conceptsdownloadscontent.com/c?x=Za LSwyLLXLwkLdrt3md1jM7ApD0G2GiIEC1IARmQ4E=&c=T6EVrDnmedyyu4kT9YH2C/Lb01hg9h3Pjyuyc10diyPupiHg3jttOdIP0YksUFj72pPm5xHOyeHkgxkjCLG8PL LIGwz dOjBQ8M0wof0i lGAq/edbi68VNvKvxJl/q&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

http://www.universeranchupdate.com/c?x=B/0dWzbOeZZGM8Y2TKij82T9uwPHRhTsgTgR0e/4v9E=&c=P6LR1NdOWF0gFve8OvXFdYFsMzG3eHY8ORQcEJjIwpVh1lLDiAlHk 810KRgUaDZXAw7a tdPNkxKAIfejZhF 18KYH3D3ccT4e0Kit3rHe0RU1tGlcGiJkLyqNnNl5f&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

http://www.worldnowrepository.com/c?x=GM0IVlnf04iQfhO/V1zIqF099SHmVsizrdfSaKo4eI0=&c=LOtouwwf6mBI4OxydOluKIoa65HcOemFy9oDeawHp9GSJcIFXPavHuI4BxwzXfD3DaoFUmWo6swvwOcVImYxwzJw 4vc/D6vSg4HjY3oqgSiEa7ulfyuZhJajSmgU4Ye&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

http://www.vaultsbodyvault.com/c?x=n F8kZ0YjRlKgB8LXLkAbu3FDZCeXxhPyKuToy9d93E=&c=9OvybWZPUtegwMOg4ZH4Z1EBakPngJ5mdwmSKzbhapDoStyZlPtT gx0y1qyGmh/RXnu2DhI8ac91/tFKf8nxKM2gbg2Lco8632Ri2OS e3RYN5IDfCpVz4VTVUoa433&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

http://www.tagpresentbody.com/c?x=K10DkpQxsx9D fRhPF0PM8WiAGemoNCEpUBtzvBssGo=&c=UU7l YSEeDb1z/UjCrJdgsuKzQwp1h3YVQq4IHd5O1gohF2lgA10KP0ilxi gn5FNRJAXtsc9Xh55LCP185sL9l9ah9FSVaibZPmVPmy9WyIfwskF9l3TBHmx2X7qIWk&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

http://www.tagpresentbody.com/c?x=GJ802BlOPxafh9arxk9sebThuBvs DLIAo7ifzm6FKo=&c=bGDQX4TK6qCeM/vMNjgTcGJ3 fo3uYmmknHk Cog9a9r6yww/H1XpD n9DnOXMx2/3tk85jKjk0Ny9WLbiklx7YWJtQibeY7T358XgQAmCuFOSb1opHfvaR /V3u0eAd&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

http://www.chucklevaultsdl.com/c?x=sOA9DZ5tvs499qOKYGLcOfA EwiFqddaNYBXLXiZxOY=&c=FWIQ0ey1bMCaR/Y0C4UdmeGBoOksrvFTTnrbMy3JeLh8/nQJJMuMOkuDb8quaFheJ/qKpNOAh 5saK0yIk1HKvUoyLKj9DE G9SbIX9wR6FjQIK/nBGc2D5qYQgZTfN4&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

http://www.safestockconcepts.com/c?x=Vp7MvuOnVplOQusmoeCX0acniRkZR75BS4fw6PVJxh0=&c=ijrIbBF46YpgtHSovmASquJEawoRRfaEtczRFFR7nvdmlCEpibsQvv0E1unnvygHqjhrFm46XHUwSWrQDUU6s5NywXKArUAwo4bN0kj6c7TbqHD2GyZEOcWSifxSLaRM&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

http://www.contentpresentbits.com/c?x=2WQzG5fhxiwwlXHJGV0XxNbMmW4eZ fgUFnkA0tQK/0=&c=T3xU 16qqyHgO8p5Hb qAvWu3i9cHWP4OxItHDivH0TXlGbTBquAAqKcm0QQ L6nW3XT/xjQj0S4B5O4bj30ikfBNVQ4wWB0j66MuDQ5kknKZmAfJkfxH6 VzzEtwk/1&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

http://www.cleanbestsoftware.com/c?x=WKVP6FMO2cfQWYpLInHTnyWMltrW4IsCvT/zMlZH yo=&c=gnhd4kifO4Uz474XWVu8FIUI0aDU 1Fp1CQm23QkjtnQFl/IFxMUdOzvoTNfzoQEG0M7crfbMyYkCgmt DgJBkV3TFc7gcxyUql6mLjQiXmee2fHTp2do4t4Gp3XMwsB&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

http://www.clearnewmega.com/c?x=jPt5UObWWiUNcDLbt1YLMGPrMclhmKbeCC4E/9l0WOE=&c=mRaU57 Jr69i lV8vGdIO6o4pM1bLOwnXlXgkg1s8AKFe5voZP8JiTU IfdGaAQcRCQ3zdbNjy7OaWTDwt3bFW6tmpmn3VGBy1g9S3560uPBwD673rL8krasDPcNDIKY&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

http://www.safestockconcepts.com/c?x=4o1ythFyctZ 6QRCU0r7bCDhoxKu0iowT8golS5ODiI=&c=Q3RPx6UhFBHqWX2QASas1/P1l4vf49aYVY9Tn/Y3tpuGy1XIW1QfrnTGaOR4gMQkCJ9yiNs9VSkRfftaSjYCNmLWMqi4kK slG7NOc7DWeQKYKKi3QgFmimB2AbQOHDn&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

http://www.townhostbyte.com/c?x=7hlT9oUu1qIQMKjkrYP0uvdA i6uGDaZ4Rk6hBbmmL8=&c=dJUC9dnm D6aihRkA/XuSdQXFguWQq nZXUQ7i1io7SNVkZngNRTTCppvpSgMYjL29ego9VSTZUlc2RZbjpinp42i47ZHXTRCAm5xDtqYX vn0HJxgOJBdD9PJ6a2s6Z&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

http://www.vaultsbodyvault.com/c?x=e dFkDbslwrglmhmhqRlwc9nQ4ygsLNmP6vOBwwRTDw=&c=2uFT9oNbk6CQSKaDhn8D6czrqgSUMs/JD3U OVVDGT/M/C6/aCRCvDtQ8 2KQp4typLZsxDrom90tyy4dloRtC nS0cISesehuKqzEIOUSC09JYVbmtobTfEzu/Vt2Br&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

http://www.farmstocksafe.com/c?x=NDoXZCKbSHd0CJoFxc0Nayr6TRga53bQ QEaDoIbwgI=&c=Ct98 OfNNzn72PUkeBPXF5U/Vdqzl/cGm5O/kdsMNBmqvyo2PCn6tI/K/VdjUZPI/Tj3d2jx3yT0CbjV6f9pihjDWA0OVWSIRJFWNoUIq6MS1n7kZv0GTRXJqH7nHxE/&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

http://www.applaboratoryhosting.com/c?x=IaQHAX8Cq/xy3LmqbC4eNyps/FNoNSiNKsnPHP3ZS0U=&c=c9fOlC0wgQ vY6L67OsFRcRFNsNcAGcGzX798Lbx9pWRzdMqqRrJwAFxeXVcueTsk02Zyz6Xi6aBInwlAseJsyr2C9gk6O VkWeDLTNGFEk620KMLKTEHrMfEjVJP2ia&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

http://www.funbundlebyte.com/c?x=TBcUbh51at ejQDrUffTFhBUwQAeHJCk6oFKOcyhDR0=&c=MP5N29bRTr38BJgbLg0GOaHC4VxHB7yCZ3SL33VCCVEnidjSQtO1rKd1rn2swzHBMZ4pN7Xumek5VTXAsII1TTmMQSsQOAwvl3qaikMh0VRlODDxNISRYO4sgdzKVvrf&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

http://www.megabitscity.com/c?x=ArFw7FJ9OI7dZnRqeKxsQ81QlEdKIkwJp8oPT8vbw8U=&c=MosOT3p6HUrbwYT4fetZOql/S2w K8UhQxrvuw9jjcalezqIMUmMeN2YQX0kg50nXoWqIDzeROkq5WxzDNofy7m5mZVSOfB1x0b01wGe0fqTzPwaR3aa1FY8QvcnweR1&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

http://www.contentpresentbits.com/c?x=oMvEX2YBbMqPnSl0MdvGFGTw6lIVcg0jbAfLvRbLNuE=&c=kPG5PtB41y3sLYwb554QMbq2JrgSkAZ0uz2UgDdRzLZlDamGgymc5xbZHiJuCmIbmS5jx67x7V3bPIDKAKtqcdqp0AS0cGFkH4j19czrw99WExJWx7dZh52KCErLP2uC&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

http://www.ranchlaboratorycenter.com/c?x=iYgO9PLeEFY7kNhJjFKqpBM1NQMWEFw7JyO9TpaZdEQ=&c=1KEI0aG8d015DE531 6hJrC1 zAQ2PrfvNaK XOthcUExVoy2Jhh3eaItgG5Y7abkTcO9qGMWu S8RVzKb9bof7lKprI544C794ueBWqk9jilhsSd6wjknuSEtNFC0Op&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

http://www.funtowersgift.com/c?x=J5WmCdKAZ3JlBFXcmhNW3Psjh1leGQ0ybxK7KGXwOaM=&c=R4lOmB7ipBNfAdXFCARHjGD0RWlQdDLe98ITKRzXPQx2DdAY1KAz42lwxPaqe9MANWWLAZJUS61MSRf8L jbwrIL4dZ9CFZLYqBI1JlbdXBx22DT9w2GoU2HWXx6rsVk&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

http://www.taggiftapps.com/c?x=w23m0mP8/xuvp/8wfxNoH25lcnnjWQd4y1ygjvofj g=&c=RM52gfApf/bLibhjIlnhCnr Hy3eVfR2stcDFvJzygUsqhPt/Biet4lpCfgGSHq90kpiZ1AlVh2JSF1tjl71EPWpn2R/V2hviT/ jvyvJoo3hyGW5EesQsBqmp1yGPrR&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

http://www.taggiftapps.com/c?x=r0MAPqeHbiC7c3jaxeFiSJ6iTdLHEnjeiZPpP2XMxpM=&c=Qfv8A3dQ4Ox3xiHqxuEJKrQMBPLbtwRE0Y720Ut08qS20tqNo1i chJ0X0GLou6boNmluNwd0t2OCBvHabb6LeHwQC1FgZc8R/BzBjWRFl7/Hi2r5JzqtFE5CSAGI/hc&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

http://www.funbundlebyte.com/c?x=Tu2jJ9eIcH Df3FKC2vOhoDks3Y9L7dZyQy8Hf7o7HU=&c=CHMwCMp 5MSKGeDFLqxCTuJ0ChLnmpbvAI0MaiQP0 P2CumyZYrjeKJ0lxYxHBI1p5Jff/Lx0pm4nrWL7AHGSYzM 1bd0fIZoTnFXhH8qfN5RMFEhtVEMJKeiT98nxCV&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

Latest 30 of 75 download URLs

Remove c - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.