» directx-12667-dp.exe
Overview
Analysis
File Details
Downloads (13)

directx-12667-dp.exe

Hof

Mode Beta (Fried Cookie Ltd)

The Fried Cookie installer utilizes the InstallCore download manager which may bundle additional offers for various ad-supported toolbars, extensions and utilities. The application directx-12667-dp.exe, “Hof Setup ” by Mode Beta (Fried Cookie) has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions.

File name:

Publisher:

Mode Beta (Fried Cookie Ltd) (signed and verified)

Product:

Hof

Description:

Hof Setup

MD5:

279e868d8c4113ecae371964b15b40c6

SHA-1:

e66d7b9f3a1dcba43efd1b5f5a63b3bc1729f0eb

SHA-256:

318375bec75bd1f5a45ecc44c66765cfd21b3b56de515fa25e86d4083add82c9

Scanner detections:

1 / 68

Status:

Adware

Explanation:

Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Description:

This is an installer which may bundle legitimate applications with offers for additional 3rd-party applications that may be unwanted by the user. While the installer contains an 'opt-out' feature this is not set be defult and is usually overlooked.

Analysis date:

12/26/2024 4:25:11 PM UTC (today)

Scan engine

Detection

Engine version

Reason Heuristics

PUP.InstallCore.FC.Installer (M)

16.6.20.11

File size:

965.6 KB (988,752 bytes)

Product version:

2.7

File type:

Executable application (Win32 EXE)

Bundler/Installer:

installCore (using Inno Setup)

Common path:

C:\users\{user}\downloads\directx-12667-dp.exe

Digital Signature

Signed by:

Mode Beta (Fried Cookie Ltd)

Authority:

GlobalSign nv-sa

Valid from:

12/16/2015 2:37:06 PM

Valid to:

7/7/2016 6:06:18 PM

Subject:

CN=Mode Beta (Fried Cookie Ltd), O=Mode Beta (Fried Cookie Ltd), L=Tel Aviv, C=IL

Issuer:

CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:

112172B4C29D53526C8AFAEF1C4F6265E881

File PE Metadata

Compilation timestamp:

6/20/1992 12:22:17 AM

OS version:

1.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

24576:XJi+t786bZa4IfLxWBrPIaPoOghcuplRS:XoM786boTqrHoj2urRS

Entry address:

0xA5F8

Entry point:

55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, CE, 8A, FF, FF, E8, D5, 9C, FF, FF, E8, 64, 9F, FF, FF, E8, 07, A0, FF, FF, E8, A6, BF, FF, FF, E8, 11, E9, FF, FF, E8, 78, EA, FF, FF, 33, C0, 55, 68, C9, AC, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 92, AC, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 26, F5, FF, FF, E8, 11, F1, FF, FF, 80, 3D, 34, B2, 40, 00, 00, 74, 0C, E8, 23, F6, FF, FF, 33, C0, E8, C4, 97, FF, FF, 8D, 55, F0, 33, C0, E8, B6, C5, FF, FF, 8B, 55... 
[+]

Packer / compiler:

Inno Setup v5.x - Installer Maker

Code size:

39.5 KB (40,448 bytes)

The file directx-12667-dp.exe has been seen being distributed by the following 13 URLs.

http://www.vaultschuckleapplication.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

http://www.dlsendcentral.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

http://www.vaultschuckleapplication.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

http://www.cycleapplicationshosting.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

http://www.currentdlhosting.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

http://www.headbitsapps.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

http://www.currentdlhosting.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

http://www.currentdlhosting.com/c?x=6zk8a4b dTes9xnxhUntMEzhD6JY2yEgQHB5bxLHImc=&c=QxFV8QeWhx5oHCFVPoBTKJemYwt/Mnt F/OMa042Ht1wtIWFHhvqliLIzvghLZt5EIF45pn4c MPgOg6z6BO9dI0 KQiSv64iRTcQGCMt0WUuJZgDw7kdw92pmHtrv8UJMb1 W/mzTcmbQ9p8aK/Qc/xf66jjZ6jn9U66qaO6uE=&e=0&fallback_url=http://download.microsoft.com/download/8/4/A/.../directx_Jun2010_redist.exe&downloadAs=DirectX-12667-dp.exe

http://www.vaultschuckleapplication.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

http://www.cycleapplicationshosting.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

http://www.currentdlhosting.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

http://www.signbodycycle.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

http://www.vaultschuckleapplication.com/WVl6OTRQU1V5UWpka2IzSXhWbGh5ZFhaTGNqSmpWSHB0ZG1aVlFuaENUWFF5WjJ0RFNGRlVVM1pZT0ROS01EQmhieVV6UkNaalBVeFFiemhxU1V3eVRHVkdhM0pMWVc1bGFHTm1iMHhxV2pSNWMzZzBPWGhKZGxKTk0wdzJVamcyVFVSR2JtaEhjazF2T1U5VlpuaHBTV0pyVTNwbk5ubEpkbGhDU1RaUVEyUWxNa0owYVVwb00wVXpWa2hLUjI1eFZtYzFXak15VTJGbWIzQTVUVmRPVjJGU1dsbHNaVmRRUlc5SWRFdEhjSFprZDJGWE9VMU5UbWhHYlV0blMxbGpWV3BFU0RKMlJFUnViU1V5UW1oTlNVRWxNMFFsTTBRbVpUMHdKbVpoYkd4aVlXTnJYM1Z5YkQxb2RIUndKVE5oSlRKbUpUSm1aRzkzYm14dllXUXViV2xqY205emIyWjBMbU52YlNVeVptUnZkMjVzYjJGa0pUSm1PQ1V5WmpRbE1tWkJKVEptT0RSQk16VkNSakV0UkVGR1JTMDBRVVU0TFRneVFVWXRRVVF5UVVVeU1FSTJRakUwSlRKbVpHbHlaV04wZUY5S2RXNHlNREV3WDNKbFpHbHpkQzVsZUdVbVpHOTNibXh2WVdSQmN6MUVhWEpsWTNSWUxURXlOalkzTFdSd0xtVjRaUT09

Remove directx-12667-dp.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.