home

icreinstall_installer_minecraft_launcher_by_zyczu_sciagnij.exe

Hapoc

Delivery Superb (Fried Cookie Ltd.)

The installer utilizes InstallCore which may bundle about 3-4 offers for various ad-supported toolbars, extensions and utilities. The application icreinstall_installer_minecraft_launcher_by_zyczu_sciagnij.exe, “Hapoc Setup ” by Delivery Superb (Fried Cookie) has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions. With this installer, users are expecting to download Minecraft but before that occurs they may be presented with additional offers, mostly potentially unwanted software or adware.
Publisher:
Delivery Superb (Fried Cookie Ltd.)  (signed and verified)

Product:
Hapoc

Description:
Hapoc Setup

Version:
1.1.2.3

MD5:
7db62b5ae49e7f087d9b3f170bbe1c5f

SHA-1:
12a9cd2f6ef09b5ccb542fc7d7effa64cc7aa249

Scanner detections:
1 / 68

Status:
Adware

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Description:
This is also known as bundleware, or downloadware, which is an downloader designed to simply deliver ad-supported offers in the setup routine of an otherwise legitimate software.

Analysis date:
11/16/2024 1:29:54 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCore.FC.Installer (M)
16.3.18.14

File size:
1 MB (1,076,448 bytes)

Product version:
3.1.0

Copyright:
program

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Common path:
C:\Documents and Settings\{user}\Local settings\temp\icreinstall_installer_minecraft_launcher_by_zyczu_sciagnij.exe

Digital Signature
Signed by:
Delivery Superb (Fried Cookie Ltd.)

Authority:
GlobalSign nv-sa

Valid from:
12/17/2015 12:59:53 PM

Valid to:
6/22/2016 4:54:14 PM

Subject:
CN=Delivery Superb (Fried Cookie Ltd.), O=Delivery Superb (Fried Cookie Ltd.), L=Tel Aviv, C=IL

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
11211DDE033C8F24FD358ED7B6271AD4DE2B

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:YrJ0sYhNlI+B8Q0j3SxuQVyQPGCBU8I3iSsc7tHv3o0bDMX:YNHyI+BKTQPnBUzV7hv3eX

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, BF, A9, FF, FF, E8, 5E, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, 24, CE, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, 24, CE...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file icreinstall_installer_minecraft_launcher_by_zyczu_sciagnij.exe has been seen being distributed by the following 50 URLs.

http://www.signbinariesfarm.com/c?x=ouHeEIOiWF4qjxoi7YotffbTy0MxXojp68L7tFrw/AU=&c=rz6Cik7X Q2VcaBMUTJN FJCBpQjEJU/YFC1kyg40MlwPaphQw5pXARnbO4pIJZA12Q5gFJVBHAvVlFnPkxvk61Bgi6VPA IeWJoMxfPk93TNrPeCfKclddyRUezWnfq&fallback_url=http://bi.sciagnij.pl/0/.../zyczu-mc.zip&downloadAs=installer_Minecraft_Launcher_by_Zyczu_sciagnij.exe

http://www.signbinariesfarm.com/c?x=cqjJS6LYSaZ19ngDs0qzzyIMNzL9kbIqbFeB71y6 /g=&c=fdHmEQU5prD071k0Ykil99hqpUAHXUnvx336QhKAluVV4MihWS3dWZv625zzO WsJepUZZP//ovxCTtv/J4oKLwqeCTTNyQFDQ94t8tJlSHfjpGv9U6xH1S8NGpR4HX9&fallback_url=http://bi.sciagnij.pl/0/.../zyczu-mc.zip&downloadAs=installer_Minecraft_Launcher_by_Zyczu_sciagnij.exe

http://www.signbinariesfarm.com/c?x=RKq50rAfk24WSTu7G1694E2lBWx5sjDAkspn7RFDQjg=&c=abmE9D00fCwIpoWoQtCx9kETnWSD4l5sykj6XYRvslXY4wl2qjWG22wDljtzkaLyOd6jcTjPrJa5zh/mbfyfQnLOR0SWQiFHVSMklJDT2ZASExs/R7 w99hjHMlH3wzn&fallback_url=http://bi.sciagnij.pl/0/.../zyczu-mc.zip&downloadAs=installer_Minecraft_Launcher_by_Zyczu_sciagnij.exe

http://www.signbinariesfarm.com/c?x=jM58KzxjK2ssGQjlzMSeubDoCANGMw2nmdn7cxIND6M=&c=b4P0FWpWELQgzIxiwdXPyMmtA9rxvtFdi aK0fpWnJG9U13y6D TYUoK5XUjnX3Ncu0PgCPSFkbp0AxdItWTLXJz0Diu1uPDOyPbo8c7CH0y77tywC/0 YXaOSDURzI1&fallback_url=http://bi.sciagnij.pl/0/.../zyczu-mc.zip&downloadAs=installer_Minecraft_Launcher_by_Zyczu_sciagnij.exe

http://www.signbinariesfarm.com/c?x=SaP7f6bw/2APX0qSvIotP47 vI6Juwbv4bazDhBpKZs=&c=KTg4Ffj Q/kJqGpcYPSIoy8EfgfdJo qdN1JwdYnINq0tKgR8C28/ydXZKqm5mgv24GwCH7cEuZGk3Sb2P1nujDHdqYugFCaRNyD2nw71Mxk5GJHkpxP4RkDWV 5QvOk&fallback_url=http://bi.sciagnij.pl/0/.../zyczu-mc.zip&downloadAs=installer_Minecraft_Launcher_by_Zyczu_sciagnij.exe

http://www.signbinariesfarm.com/c?x=2Bb i21lFB wDd7wsKUyBBrAKIvG22hfeNRA13zHYag=&c=M44x/Jk41DSapALtGWapyYHIMOt9zZS9vn9T5puABAogJymxKCb3RazTHPPsFmsOUP6gxx/k 8NiG PWhoPK8Ufn80jc/s1B3/MODOxCg1C22sgJiTzpbkHgKsht2lfF&fallback_url=http://bi.sciagnij.pl/0/.../zyczu-mc.zip&downloadAs=installer_Minecraft_Launcher_by_Zyczu_sciagnij.exe

http://www.signbinariesfarm.com/c?x=IV7fzRSlTili6OT1 CDNtbx6yST4cW7sVM1r1py3tV4=&c=HPKF91ggomQrO0osBrxk2EikVWSrYX87dTeSdBOo/pJoFkRmUsrxBmBj0z2jJaFqZ92TEDNnD5tjcaxYlxQ T2dpqRsHHmMDRgH2of3t57gxGVCPEE2O7fUFgOgci/c8&fallback_url=http://bi.sciagnij.pl/0/.../zyczu-mc.zip&downloadAs=installer_Minecraft_Launcher_by_Zyczu_sciagnij.exe

http://www.signbinariesfarm.com/c?x=QbokktgxlmM9TV5233ExtlJ2KPPt4 DKERl8Z2uQD8k=&c= Y1ISWUKtQNoCwlJBW6NP4Cn6OVCDnZ4Q5kMaAIVkoZs65JHm6UgyswLtBftfwk YKopcI2bIwHxadQ5bB/PkzyCxat8secmc8AqFM1BRdqvnKQSSXuoYU0iZBLC3AaK&fallback_url=http://bi.sciagnij.pl/0/.../zyczu-mc.zip&downloadAs=installer_Minecraft_Launcher_by_Zyczu_sciagnij.exe

http://www.signbinariesfarm.com/c?x=NDJce7Fe//IVDwIsi3msT1ohCKrLFlBqf3dDKAqbeVc=&c=gAgH85KdmMjzTzgSb6uDSs4y3xevdbDwb9JEbTDQLI9LNaeKMCED0qI/nRPvCWK9fju9ugSGGgbMIRtraur4cFThvEHYoDibacZDK0TckvBHCt9jjnenuah7/ETi5drD&fallback_url=http://bi.sciagnij.pl/0/.../zyczu-mc.zip&downloadAs=installer_Minecraft_Launcher_by_Zyczu_sciagnij.exe

http://www.signbinariesfarm.com/c?x=wH2alQi/KMpocpSoGfIiuBkix3OhanEY4Y9Vvfgwvec=&c=NV3NxCCox5o23KcNTRdeTvwHpQMARgv2ixEPs T1whQPE UKJRsv itdQjAsWYIY42v9e/VN3vPsJuj6Shf5bjkrh44O/9FlaWi 5iz3AqRH/UwBV/QcrZ5rcn8inS18&fallback_url=http://bi.sciagnij.pl/0/.../zyczu-mc.zip&downloadAs=installer_Minecraft_Launcher_by_Zyczu_sciagnij.exe

http://www.signbinariesfarm.com/c?x=eH8H0Op1m9 LqOTf/ 0Be5cZd8XR0zaZBM4SRE DO7M=&c=oV1YRELZnwPg8gcXA8RSFwdnuzqVRu77BNp3zKx0GKiqcCHyfKAuD1/DlJmX2R2QZqV9qn/x96op3PIKDN4Z UkDvp0eQFgk4fPXrd qXHfaCW1JYheolwpO6tPXtHWE&fallback_url=http://bi.sciagnij.pl/0/.../zyczu-mc.zip&downloadAs=installer_Minecraft_Launcher_by_Zyczu_sciagnij.exe

http://www.signbinariesfarm.com/c?x=yqppiPz8HxN4lTur2AldFmbjnVJyx/2SsHDtNXT73Fo=&c=1YMMD rOWuYSBBd1nhQ7FAkTxeeySYO0eUuvx ZI/GWp44Mh2nJshUZWg48hgaDmZVpJsK38lcitXhr3LJcXMjL7jetQqyzXppxue9473dpN7Wy8ayHPL6UKEEESpiEs&fallback_url=http://bi.sciagnij.pl/0/.../zyczu-mc.zip&downloadAs=installer_Minecraft_Launcher_by_Zyczu_sciagnij.exe

http://www.signbinariesfarm.com/c?x=Nt2j0iV3hee17wxjdv2bLZwQp/1Yb4H4KuiE5mkLQoI=&c=uInolarwWbS0DjG7B4LwwIwpF54vhEpQ/LtPpYTIq6i4sWpXsRrhTT5WNFkA0iItsUE2nZ0EdaPeiNVE4WBmwSTV7KhURSrJiJLdxJlBL2/ezbC1qeTC54Ufo2cKEqyV&fallback_url=http://bi.sciagnij.pl/0/.../zyczu-mc.zip&downloadAs=installer_Minecraft_Launcher_by_Zyczu_sciagnij.exe

http://www.signbinariesfarm.com/c?x=m8e50fTWm8T1k3BdPieMqgH1iUJd9M8qysKRgPQhNWk=&c=xB7eI6xhXHc2jUj3bmiVwRqF2OmDwUdx4aPk/g4v9J8SIU5NTTEG zffYB4S/XDfm/XmWe PnsmyVjdC IvzuFNaBaNcYUdaQr/f8mIM5bAb1gXilfi9w QoSnC50GsH&fallback_url=http://bi.sciagnij.pl/0/.../zyczu-mc.zip&downloadAs=installer_Minecraft_Launcher_by_Zyczu_sciagnij.exe

http://www.signbinariesfarm.com/c?x=NJenc7XsMdEuqHrSDQF84u/In1xJN6tJe LuccFPwHY=&c=3j7VvWBVsRCm9MqY4PHHKdXfc5PK/oFBYQf1ZrIN7lBz4rYRR6t3p59cjh0qBnZmqMFf3Lw7R0dGYAjRzVq7RtSslYVIUdXVNOSLksGp/ejHiQZVrmyKOa30X BqLINl&fallback_url=http://bi.sciagnij.pl/0/.../zyczu-mc.zip&downloadAs=installer_Minecraft_Launcher_by_Zyczu_sciagnij.exe

http://www.signbinariesfarm.com/c?x=W 1WVuVX5uOmagsWWim7yRIgOdc/m07xf5wCT/dpe9g=&c=uL Nlj5abAZOXGctP apWM2Qp09KqQzjeLjIpHWvTor8tK/LyfCn3CX0EaD7OENlZOMaexM8lPT1o4buHPPx/7c0vrpdbkTMoV7gY5nNX1yhY3Isx4Px04Bz/N0jtLqS&fallback_url=http://bi.sciagnij.pl/0/.../zyczu-mc.zip&downloadAs=installer_Minecraft_Launcher_by_Zyczu_sciagnij.exe

http://www.signbinariesfarm.com/c?x=DYGUDvspIYjwjAQqpHtX3Z3LsCBgvAFtYC1GE5lprQk=&c=YHohtoLe84eHopzz EqMRuVp1XfdhKLeEsSoCEzvwjRsrXlPeeVM1C9X 5VE7MJrZfuagImYzpfQDgFiYKbr8HvynsiQz3kekvJkXeB3LT1UEEcH9tGymswfFcqZeYPG&fallback_url=http://bi.sciagnij.pl/0/.../zyczu-mc.zip&downloadAs=installer_Minecraft_Launcher_by_Zyczu_sciagnij.exe

http://www.signbinariesfarm.com/c?x=ylb2AphRd1H2gjo2E4GKwklPvML3VCwgu L4YUMYaUg=&c=tTrrz1h65DiicPNUvTv2SLES2I7 ScULPrEo723t6IZiWSYNmNxqWbgx7Dm3TFYYyVUKud6Xn5kvXkfSRwVILRzdbm Jrzuuh0ev/E1YOwNO4P6xU3Pu 7O0YFdtOSSg&fallback_url=http://bi.sciagnij.pl/0/.../zyczu-mc.zip&downloadAs=installer_Minecraft_Launcher_by_Zyczu_sciagnij.exe

http://www.signbinariesfarm.com/c?x=s6vjzOQbsJxojgozcLMtaW/PwdAvKtfo 7oECWWSqU8=&c=WcpQ6HNexHYegJpCmv7ncdYpFHnxbfJbsKolcAtwi ly6f6bGJI1RFgb7GJe6GjOLF9AcAvDB9IWQb7XyR0AYUOcpBcVG2OFj3EJCH5t/JCyL7xWxfNFpZzeaYrLN 9B&fallback_url=http://bi.sciagnij.pl/0/.../zyczu-mc.zip&downloadAs=installer_Minecraft_Launcher_by_Zyczu_sciagnij.exe

http://www.signbinariesfarm.com/c?x=9QjXA2em6ylZNtnr9xAHaZRR/e193N2T8YHdBgxQuFU=&c= 2z0ORt1xH4lxpwwSNrAqHRSA2tbTT2wDys2ojGrUAd2zD/gFK7zn3qLBCsa4aqy7H2g9CNxAl2a/FNSqTixhbrzAF5cOVwddg7nxhCWzyQW6JuYviCJ5qNo67nBL ni&fallback_url=http://bi.sciagnij.pl/0/.../zyczu-mc.zip&downloadAs=installer_Minecraft_Launcher_by_Zyczu_sciagnij.exe

http://www.signbinariesfarm.com/c?x=tQ9VFub OOsIPAD7VN12cFHCV553Q 91dDU0Zn8 JTc=&c=O003Q7Qz9cQUftV7eKBKvzO Xl0PRhl3yggEIkVRNcHAY27N4JoHN00kvYEKNNHrHTpMUGO/Hs4tEgyXSgxE2TQbPmG/7mNfU7AikFvbyHth17QwZo7XunPAtunJTB n&fallback_url=http://bi.sciagnij.pl/0/.../zyczu-mc.zip&downloadAs=installer_Minecraft_Launcher_by_Zyczu_sciagnij.exe

http://www.signbinariesfarm.com/c?x=CvAzPsf9dFmfWQUX04YrPQPHFpwGFrFD23Ckq/SRihY=&c=x3c5WMQABGcHw3VegOkY5y5G44X Rw6btDBync5d Gr0Ydmtgo/w37vf1zGbjtHFLpkLgOPqjShxelAOU0rbRvHBVph9vI9uOFzh3wx4QBShROxwv5IsbUDTaaTOXTpX&fallback_url=http://bi.sciagnij.pl/0/.../zyczu-mc.zip&downloadAs=installer_Minecraft_Launcher_by_Zyczu_sciagnij.exe

http://www.signbinariesfarm.com/c?x=9xeuKGaEPuIioTPm7UmMDQpX1TptL5MX4glMu/B7cI8=&c=Sh0VqMVk5F0bc7dKqTKtJs/sPcC9by39HwMNz8e0aYudxpWOBfAK BRthui6vS8XbsbmEg5E3NYWhDjSadZeimvzgdkl12EHVRkIWk8wb2eA4Fj8XlNlAj53okZebBGJ&fallback_url=http://bi.sciagnij.pl/0/.../zyczu-mc.zip&downloadAs=installer_Minecraft_Launcher_by_Zyczu_sciagnij.exe

http://www.signbinariesfarm.com/c?x=RIBwSpein MxL2cOUXzAYVfGLvmWw4xP366LY6n0xyw=&c=LFYQLrd0eW7neSnup67mqQtRg5B ktSQujFin3KgMqMZVpqrfNWad1FZbqG6At/bFYVV4cdB7PzGSJOQv9zPH/y0soen0 BKU9Qpwe1oxeDc kbnPDVNL0MNA5CYncvQ&fallback_url=http://bi.sciagnij.pl/0/.../zyczu-mc.zip&downloadAs=installer_Minecraft_Launcher_by_Zyczu_sciagnij.exe

http://www.signbinariesfarm.com/c?x=UixiMQr7jZFR30j4kW4QrgSS0YTppBj2oBH/0VUswY4=&c=N2PasvUvS/hisdnMa0cq2uCeddqsT4AjHgKERppQvQ5dY/iRcnBYel2UcXIkXQrQsZXzxtFgs/wHr3nWvumUmGbebl3XQCyeSq4aoRWlaOuFawZWF5HdCBw3nt VBhGd&fallback_url=http://bi.sciagnij.pl/0/.../zyczu-mc.zip&downloadAs=installer_Minecraft_Launcher_by_Zyczu_sciagnij.exe

http://www.signbinariesfarm.com/c?x=S0IvmoWsXs/OCpOJTfPGLRFNJjGwgt50jAGepmRthFw=&c=osn VBzs62GkrfWa3r9XpGe2Hfsth Hrs8GkEr3s0jL1dMeOeSOauF2NhWYpruwfs5qsVKIDRUAXv/W6V2tjxayvR//M2 2P1WKLz6GhvDdy8Rew35R 5bi9hbqgVeMD&fallback_url=http://bi.sciagnij.pl/0/.../zyczu-mc.zip&downloadAs=installer_Minecraft_Launcher_by_Zyczu_sciagnij.exe

http://www.signbinariesfarm.com/c?x=eNTILuBDgpXlaasaVbpxCKEW3JkMpJsLkYAAyIohTV4=&c=o2DcqzbkORaDegZBC7KfonSxwxK9 rY1/1yR8NDKbB0cOm ATZlI9aftgz8TQseJqxIwmOj3HNvhA6MMMM0zCfdeB4Mr35FS9Bdb IsSiIDxoZSOOw/0PrPTzzHzCNQc&fallback_url=http://bi.sciagnij.pl/0/.../zyczu-mc.zip&downloadAs=installer_Minecraft_Launcher_by_Zyczu_sciagnij.exe

http://www.signbinariesfarm.com/c?x=fHYvfZvtwI3j7YA9VpBaP86Qk/4GN5MQKjppzVp2I9k=&c=3UFHxW4HivuKzWOA1tHxi6QybVHVAZ2rb/ioln1GvQCb6Es0KOP9AeAQVtHDQv3LVbirNBekCC3yJDTxiZm3TjPQG0h7WdLSubhMLV4RxcGCoxCw l8ZxgpTeUmjz7Fy&fallback_url=http://bi.sciagnij.pl/0/.../zyczu-mc.zip&downloadAs=installer_Minecraft_Launcher_by_Zyczu_sciagnij.exe

http://www.signbinariesfarm.com/c?x=Rc5mOv28MMnDnOpmR0aabJHLbPd6Bz KtJ2t5BeHU Q=&c=TXb7ck3E9GQhJXP30Cq43JvuPU97Z5eMrVuV1MFSkhteoor8teNFVqg1WpfGobWJDJ 3ph1p5nzydsk3CAGWKFMSTSyohjolB2goT6JHes23LOIwPbMH/qtbBy/Faa8y&fallback_url=http://bi.sciagnij.pl/0/.../zyczu-mc.zip&downloadAs=installer_Minecraft_Launcher_by_Zyczu_sciagnij.exe

http://www.signbinariesfarm.com/c?x=4QOWhNio2/FzYIyMCQBSYPNRy yPTIPMwTM 9bbXmH4=&c=9za6z7kI/Ju2rr7sGJroB R8hTsU2r6Hbt8ctIxOv091x/piguhkwy9HFGs2G3hhHYL1kfChqNYr Sw38moRM9egaI5VCTH9A0Kwbu6WFGjiPoNLacfZXG5NBSixhdGm&fallback_url=http://bi.sciagnij.pl/0/.../zyczu-mc.zip&downloadAs=installer_Minecraft_Launcher_by_Zyczu_sciagnij.exe

Latest 30 of 168 download URLs

The executing file has been seen to make the following network communications in live environments.

TCP (HTTP):
Connects to os.solvefile.com  (207.189.109.121:80)

TCP (HTTP):
Connects to cdnus.solvefile.com  (207.189.109.121:80)

TCP (HTTP):
Connects to cdneu.webfilescdn.com  (65.254.40.36:80)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.