home

ee6f2111-3c6d-73d7-a453-f5574dfd13d0_1d1cb3bc8440cc2

Hof

Mode Beta (Fried Cookie Ltd)

The Fried Cookie installer utilizes the InstallCore download manager which may bundle additional offers for various ad-supported toolbars, extensions and utilities. The file ee6f2111-3c6d-73d7-a453-f5574dfd13d0_1d1cb3bc8440cc2, “Hof Setup ” by Mode Beta (Fried Cookie) has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions.
Publisher:
Mode Beta (Fried Cookie Ltd)  (signed and verified)

Product:
Hof

Description:
Hof Setup

MD5:
aa78af0c7a8e8a053ed93df48984e270

SHA-1:
4bedc9018fed7bf521d9b1c1b35fd1a1957c5920

SHA-256:
c6498a759e89fef25fc00f932b8c52d5fa5fd2d3650cc4cf5fdc92d0e78956d4

Scanner detections:
1 / 68

Status:
Adware

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Description:
This is an installer which may bundle legitimate applications with offers for additional 3rd-party applications that may be unwanted by the user. While the installer contains an 'opt-out' feature this is not set be defult and is usually overlooked.

Analysis date:
11/2/2024 12:33:39 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCore.FC.Installer (M)
16.6.20.0

File size:
965.6 KB (988,752 bytes)

Product version:
2.7

Bundler/Installer:
installCore (using Inno Setup)

Common path:
C:\ProgramData\microsoft\windows defender\scans\filesstash\ee6f2111-3c6d-73d7-a453-f5574dfd13d0_1d1cb3bc8440cc2

Digital Signature
Signed by:
Mode Beta (Fried Cookie Ltd)

Authority:
GlobalSign nv-sa

Valid from:
12/16/2015 2:37:06 PM

Valid to:
7/7/2016 6:06:18 PM

Subject:
CN=Mode Beta (Fried Cookie Ltd), O=Mode Beta (Fried Cookie Ltd), L=Tel Aviv, C=IL

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
112172B4C29D53526C8AFAEF1C4F6265E881

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:cJi+t786bZa4IfLxWBrPIaPoOghcuplRS:coM786boTqrHoj2urRS

Entry address:
0xA5F8

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, CE, 8A, FF, FF, E8, D5, 9C, FF, FF, E8, 64, 9F, FF, FF, E8, 07, A0, FF, FF, E8, A6, BF, FF, FF, E8, 11, E9, FF, FF, E8, 78, EA, FF, FF, 33, C0, 55, 68, C9, AC, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 92, AC, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 26, F5, FF, FF, E8, 11, F1, FF, FF, 80, 3D, 34, B2, 40, 00, 00, 74, 0C, E8, 23, F6, FF, FF, 33, C0, E8, C4, 97, FF, FF, 8D, 55, F0, 33, C0, E8, B6, C5, FF, FF, 8B, 55...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
39.5 KB (40,448 bytes)

The file ee6f2111-3c6d-73d7-a453-f5574dfd13d0_1d1cb3bc8440cc2 has been seen being distributed by the following 17 URLs.

http://www.dlsendcentral.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

http://www.softwaresignconecpt.com/WVl6OTRQVGhTTW05Q1NIQnNUeVV5UWxKTVprbG5iR1pxWkdKd1FuUnFOVzlIYmtOS1VGVTJZelY2TUNVeVFqUlJRU1V5UWswbE0wUW1ZejBsTWtZMFNHMVNjME5uZHpJNVFsaEVNVWRyYkZkcVYxWk9NRTVTY2t3MWVHRm5WMHRWWjJkVU0zRmxSRzVrSlRKQ056aHNKVEpHTTNCQlNVcFRkRXRFUldkNVRUWWxNa1lsTWtaVlp6ZzFOM2hKV0VsTVoyaHNUa0ZZU21FeU5rUjJkVWxtVEUxTWRYZ2xNa0p2Y21SNWFpVXlSbkJOWm01Q1lVTjNXVzFFU2taeFVIUlJObEZaV2xKa1pYbGlKVEpDVnpsRlVYSjBha2hwWTA4NVdYbGlRaVV5Um1SMVVsRWxNMFFsTTBRbVpUMHdKbVpoYkd4aVlXTnJYM1Z5YkQxb2RIUndKVE5oSlRKbUpUSm1jM1J2Y21GblpTNWtiMkp5WlhCeWIyZHlZVzE1TG5Cc0pUSm1aM0poWm1scllTVXlabkJwWTJGellUTTVMWE5sZEhWd0xtVjRaU1prYjNkdWJHOWhaRUZ6UFZCcFkyRnpZUzB4TWpjek15MWtjQzVsZUdVPQ==

http://www.headbitsapps.com/WVl6OTRQVzlQSlRKQ1FVeHNiVXRtWmxsM01VUm1SREJFUzNwMmFHOWtia2xIYURKV05XZzVRbGRJVVdsTU4wMXdVU1V6UkNaalBUaDJiWEZDZUdGaFVGUkphRmwyUVZGUGNrNDRXRFZwUlVOME1UZDBVV3R1VDJOa1VtaE9Oa2N4U25sTlpqQWxNa0o0TVZWWFpHZHlNWEpsYWxrNWJXNHlOV3B6V1VOVlN6aDFVMjV3Y0RrMFdWbEZSRnA0TjJaV1ZYVWxNa0pWTjFkRFFsSm9RbTQxWkhjMVJGVlhRMkoxUW05UFJTVXlSblppVldWS1QxWTBTRGQ0TW1GNWFYaFVOMVZYVGtzMVdETTFWMnhYWVVWb1ptaHlaeVV6UkNVelJDWmxQVEFtWm1Gc2JHSmhZMnRmZFhKc1BXaDBkSEFsTTJFbE1tWWxNbVp6ZEc5eVlXZGxMbVJ2WW5KbGNISnZaM0poYlhrdWNHd2xNbVpuY21GbWFXdGhKVEptY0dsallYTmhNemt0YzJWMGRYQXVaWGhsSm1SdmQyNXNiMkZrUVhNOVVHbGpZWE5oTFRFeU56TXpMV1J3TG1WNFpRPT0=

http://www.signbodycycle.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

http://www.dlsendcentral.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

http://www.signbodycycle.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

http://www.vaultschuckleapplication.com/c?x=orcr0btcRWvahUNWwWILA/7pvzymrwggQDU 9wa2JvY=&c=3ZlS91oGtg3BUf6CZMvFMmijjgfLVYPzNelTwA66eU01B5d2kMan930rEplRn6oy Zb aUpz2pA8KAYPNjSuUDaad9SmwTOoNPFB0I34CdHquaGV5OATlGO0/9m4lxgacUBUfeKXmgxtexMMr8es7w==&e=0&fallback_url=http://storage.dobreprogramy.pl/.../picasa39-setup.exe&downloadAs=Picasa-12733-dp.exe

http://www.currentdlhosting.com/WVl6OTRQVFo2ZEhwc2RXZHFWMDlYZFdaWFpYQjJUMmQySlRKR01tWnpaU1V5UmpSdVQzbGtWMDU0VldoM1pURTRibFF3SlRORUptTTlTRFowWkZGNlJsWlFhWE5uYUNVeVFtRjVWbHBNYTNZNVMzbDRaMEZzUlc1bFRVOXpkR1Y2ZURGNE1rTnlRbTVDVTFreVFtVk1NRlE0Wm1WWGQxTTBSMHBYYzI5Sk1UUmtUVUpXWkZCdFprSkZPRk5CYzBZMWJGSnlkRGRQYUV0UlRIRmFUV3dsTWtacFVFeDJZaVV5UWxOTU1IaHdiMU41YVd4VGF6TTRkRVZrUmpWdmEzVktaVWd4WVdSMk15VXlRbk5sUlZVM09GQTVOMFZEVTNjbE0wUWxNMFFtWlQwd0ptWmhiR3hpWVdOclgzVnliRDFvZEhSd0pUTmhKVEptSlRKbWMzUnZjbUZuWlM1a2IySnlaWEJ5YjJkeVlXMTVMbkJzSlRKbVozSmhabWxyWVNVeVpuQnBZMkZ6WVRNNUxYTmxkSFZ3TG1WNFpTWmtiM2R1Ykc5aFpFRnpQVkJwWTJGellTMHhNamN6TXkxa2NDNWxlR1U9

http://www.cycleapplicationshosting.com/WVl6OTRQVmhJU1U5UlprOUtRV054UkVoVVRtVkZUa2RpUjNjeFUzSkJNekZCZUVnMU5IWldTaVV5UW5BNVMybFBNQ1V6UkNaalBXMXljRkJ0VFV0RmFHOUJjbm96WjBwR1lXdHhhWFZRYm1OMFJXRkVXRWRNVFVWWVVrcDNhWEJSUXpkdlZYTjRkVTlaTjA0elFWVldWa3B0YzJ4NVZWSnlTRUp4Tm1OalJuaFNTMmhGYkdWcVJuRkdNRWhVWkZVeVQxSm5XVFZHT0NVeVFsZGtUbWxWZDJ4Q01DVXlSbE0wTWxoR2QzcHBkQ1V5Um1OaE1XTkRUblF6VGpkUlFrMVBUV1YwVm1KRFMwcE9lVU5oYWtNeFNscFhVU1V6UkNVelJDWmxQVEFtWm1Gc2JHSmhZMnRmZFhKc1BXaDBkSEFsTTJFbE1tWWxNbVp6ZEc5eVlXZGxMbVJ2WW5KbGNISnZaM0poYlhrdWNHd2xNbVpuY21GbWFXdGhKVEptY0dsallYTmhNemt0YzJWMGRYQXVaWGhsSm1SdmQyNXNiMkZrUVhNOVVHbGpZWE5oTFRFeU56TXpMV1J3TG1WNFpRPT0=

http://www.cycleapplicationshosting.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

http://www.softwaresignconecpt.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

http://www.vaultschuckleapplication.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

http://www.headbitsapps.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

http://www.signbodycycle.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

http://www.headbitsapps.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

http://www.dlsendcentral.com/WVl6OTRQVkZoZHlVeVJtOWpjRTlhYzJGWlUweG9KVEpDZGt4YVRFRktNbE5sWmpnelJFeGFRbTlRWjJOdWRFeDRjM1kwSlRORUptTTlkVTlyT1hCb1drZEJTMDFJVDAxUGFXVk9UbTVaUVdaQ2IxQlVUMHAzYzJseU1GTnlSbmxTZDJwNmNpVXlSazlITUdwWVRrVjJORFJKYjB0TkpUSkdWR05NTXpSb1ozaHlWRU15YzJ4V1IxbHZRelpzUm05Tk5XaEROWGRNY1VaQ1dHdG1WMU5MYURjMU1YWklNSFZPYzJwSllVRWxNa1kwVVZaVmRrNUNhREZVVjJsVE9GUm9OWHBOY2tzemIwOTRWMU5xYjJ0WFduSnFObEZuSlRORUpUTkVKbVU5TUNabVlXeHNZbUZqYTE5MWNtdzlhSFIwY0NVellTVXlaaVV5Wm5OMGIzSmhaMlV1Wkc5aWNtVndjbTluY21GdGVTNXdiQ1V5Wm1keVlXWnBhMkVsTW1ad2FXTmhjMkV6T1MxelpYUjFjQzVsZUdVbVpHOTNibXh2WVdSQmN6MVFhV05oYzJFdE1USTNNek10WkhBdVpYaGw=

http://www.cycleapplicationshosting.com/WVl6OTRQV0ZzZDNOTk5rUjNkalU0ZFZSdmVuWjROVkJtTTBsMVMyUktkVkpRYldSSGFXMUxkRVZKYzFGRFdWa2xNMFFtWXoxQ09XZHpWamhrVVZaaU0wMVZlRGxCZW1ZMWQwWnJiM1J2ZFU5UmVUVjVOaVV5UmtwTGNuVmpiVmxSU3pkVU1rMHdWblVsTWtKRmJGaHdORXhTWjBsS01rRlBVSFJsT1dwU2EybENPRWRuWnpoaVJWQnpVVUZqVm5keFdWcEZOSEJLVFhkR2QwTnNSV04wZVU0NWFXaDJSRTFHUVVWVU9TVXlSbHBVZVNVeVJrNHpNbE5wYW14dWJGWktXbFY2ZUZSYWRGUnJVREZQVVdKbWNGbHFVU1V6UkNVelJDWmxQVEFtWm1Gc2JHSmhZMnRmZFhKc1BXaDBkSEFsTTJFbE1tWWxNbVp6ZEc5eVlXZGxMbVJ2WW5KbGNISnZaM0poYlhrdWNHd2xNbVpuY21GbWFXdGhKVEptY0dsallYTmhNemt0YzJWMGRYQXVaWGhsSm1SdmQyNXNiMkZrUVhNOVVHbGpZWE5oTFRFeU56TXpMV1J3TG1WNFpRPT0=

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.