» installer_minecraft_launcher_by_zyczu_sciagnij.exe
Overview
Analysis
File Details
Downloads (21)

installer_minecraft_launcher_by_zyczu_sciagnij.exe

Hapoc

Delivery Superb (Fried Cookie Ltd.)

The Fried Cookie installer utilizes the InstallCore download manager which may bundle additional offers for various ad-supported toolbars, extensions and utilities. The application installer_minecraft_launcher_by_zyczu_sciagnij.exe, “Hapoc Setup ” by Delivery Superb (Fried Cookie) has been detected as adware by 4 anti-malware scanners. The program is a setup application that uses the installCore installer. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions. The installer is marketed through download protals and search ads as Minecraft but will also install additional software offers which include adware, PUPs and browser toolbars.

File name:

Publisher:

Delivery Superb (Fried Cookie Ltd.) (signed and verified)

Product:

Hapoc

Description:

Hapoc Setup

Version:

1.1.2.3

MD5:

5249c79f7e2b6f767d222b3ad30203a2

SHA-1:

87141156397c3e3ea61192a3d908a9c977aefe86

SHA-256:

7db112b83abddd384eb7a8c3c95bd1fa848a170b81fa8e584dd9c3823c67e431

Scanner detections:

4 / 68

Status:

Adware

Explanation:

Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Description:

This is an installer which may bundle legitimate applications with offers for additional 3rd-party applications that may be unwanted by the user. While the installer contains an 'opt-out' feature this is not set be defult and is usually overlooked.

Analysis date:

12/29/2024 5:45:29 AM UTC (today)

Scan engine

Detection

Engine version

Dr.Web

Trojan.InstallCore.1616

9.0.1.05190

ESET NOD32

Win32/InstallCore.AFY potentially unwanted application

8.0.319.0

Reason Heuristics

PUP.InstallCore.FC.Installer (M)

16.3.6.18

Sophos

PUA 'Install Core Click run software'

5.23

File size:

1 MB (1,076,448 bytes)

Product version:

3.1.0

program

File type:

Executable application (Win32 EXE)

Bundler/Installer:

installCore (using Inno Setup)

Common path:

C:\users\{user}\downloads\installer_minecraft_launcher_by_zyczu_sciagnij.exe

Digital Signature

Signed by:

Delivery Superb (Fried Cookie Ltd.)

Authority:

GlobalSign nv-sa

Valid from:

12/17/2015 12:59:53 PM

Valid to:

6/22/2016 4:54:14 PM

Subject:

CN=Delivery Superb (Fried Cookie Ltd.), O=Delivery Superb (Fried Cookie Ltd.), L=Tel Aviv, C=IL

Issuer:

CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:

11211DDE033C8F24FD358ED7B6271AD4DE2B

File PE Metadata

Compilation timestamp:

6/20/1992 12:22:17 AM

OS version:

1.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

24576:OrJ0sYhNlI+B8Q0j3SxuQVyQPGCBU8I3iSsc7tHv3o0bDMX:ONHyI+BKTQPnBUzV7hv3eX

Entry address:

0x9C40

Entry point:

55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, BF, A9, FF, FF, E8, 5E, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, 24, CE, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, 24, CE... 
[+]

Packer / compiler:

Inno Setup v5.x - Installer Maker

Code size:

37 KB (37,888 bytes)

The file installer_minecraft_launcher_by_zyczu_sciagnij.exe has been seen being distributed by the following 21 URLs.

http://www.signbinariesfarm.com/c?x=jXl22xUnKBegrVs/WP02OFiiURJl27yMmf7SFoxxlSo=&c=3eQRDrF2gddpgQ9zZVM1RBLwVLMRjqIGpV85vaJCj72gscaUwc7S5EfLdsRkj9NV54ZRXfwvubSoyE7c8XrbVtrtwrqfCiqzbW8A7nZPEupGjy1NVvUpZEbAHd e7dr7&fallback_url=http://bi.sciagnij.pl/0/.../zyczu-mc.zip&downloadAs=installer_Minecraft_Launcher_by_Zyczu_sciagnij.exe

http://www.stockheadapplication.com/c?x=CKVWgnEYIiXddpANE805fkT6PagYdPyLqSjRZunaf1g=&c=qTkl19GdA a84pToQz9Pl2mjbotMI/RxFJD5AAdpxx64BUIpSApAVDZmI9M7CWBaEtY9ZNBnlSYPYZvZezrDKbJT/ZJktvwp0tDkkOPSpOrKTu4Zn1q0mtYEOuZBhy8fRtNssQ4loQf9hiQYnai5JVGjkH6sBKr8oeyKqSVgmoh9/y07jg8mOH4ttY7iZmSz&fallback_url=http://bi.sciagnij.pl/0/.../zyczu-mc.zip&downloadAs=installer_Minecraft_Launcher_by_Zyczu_sciagnij.exe

http://www.signbinariesfarm.com/c?x=tOoxDWGjfqfjNb4D5BzBGeCZyzh1fnqWzA5HabR/J/E=&c=f5gFS49eYNMSmwhxlz1AaGiQJJP6jXTM5Ygk37164vxK9RbUCYs9jO0/wAsNvh8e0u9yYxGKDgiKx1O68qlw0jsfYGQF0BN66lJSAjgK9sprWv7aq/6HTdPvKZxYCrLY&fallback_url=http://bi.sciagnij.pl/0/.../zyczu-mc.zip&downloadAs=installer_Minecraft_Launcher_by_Zyczu_sciagnij.exe

http://www.signbinariesfarm.com/c?x=Nswhqx2lWbnpGddimIBoLwWSiYUsIGs2Gc5IaMzbrRE=&c=S4z 6fDBIfxb50/WH963Ou3xJhlVIo4LFGuWJrdqxJK h4fBtwxl0vAK/Q8RYIeo7kbo4MAqp CC3jflSdIM6Oi/8jMzJGQyFHDcCQaCP1ZuIi1Xz6k1c3 Ngm28N8f1&fallback_url=http://bi.sciagnij.pl/0/.../zyczu-mc.zip&downloadAs=installer_Minecraft_Launcher_by_Zyczu_sciagnij.exe

http://www.stockheadapplication.com/c?x=/Pnw5hEQup2OpqZOp6VDy2KtmhXQWy1PKZj7VD/UMMM=&c=9wIuyjCnRUx9oUB9GpS5axQbgBPealJV3zrGxRr8EdR3 /r/6M55AGHHGsoNRdvskQGTxgA2VTggG5VsOAgBzwF5KIqBE5LKCVLC8QoJitgyIFTdCisrx6vjM9II811xMYaL4Zdq7jiqUckdhH5TECCGfbQu79lUQzIFxFlimgnG61urBw0s8J1vF2VJ7lcj&fallback_url=http://bi.sciagnij.pl/0/.../zyczu-mc.zip&downloadAs=installer_Minecraft_Launcher_by_Zyczu_sciagnij.exe

http://www.signbinariesfarm.com/c?x=bEPQYLRq7lqorCWhHBF7RF9tScwZdHFbjo/IR2LFFgk=&c=XGqGGPjqXJULvzxWMUwgpjD98sDLAVJmM1oanwD/Z5kUCBFsSiYSglkApXQhWm3Qk3NwCLmYT2rmc4r1LshSfWhXjYGu/4uKEuR0kOSQwJUllB7WKjJ4zADxHhTRk6Ib&fallback_url=http://bi.sciagnij.pl/0/.../zyczu-mc.zip&downloadAs=installer_Minecraft_Launcher_by_Zyczu_sciagnij.exe

http://www.stockheadapplication.com/c?x=xaezkGgCtKPV6zG x41IQU8/iEIe0w4z7NpG1zeAUX0=&c= dWSrsooUAdq3AVDlA0M2yBZl7RBpjq5SRdNlkutRMY8kZs/ofJiW9limShwflFV95SN3XRbWHzlaWko qTbz9yOkzpZsBXd4rWKLAZZjCXEUk5nIB8A3bNBajEG4VQ2&fallback_url=http://bi.sciagnij.pl/0/.../zyczu-mc.zip&downloadAs=installer_Minecraft_Launcher_by_Zyczu_sciagnij.exe

http://www.signbinariesfarm.com/c?x=V6v/4/y96uP6Cav4kDuni20YYBsxxkYHr2o2VwJR5Go=&c=aKzSqFsHN0AmKNT9d1i1q3qm9cMAgAsXbZgsSNMmzahP4hVo4WoTSf/CPSgrQnPiro1vnopCoBm7INDGjrY3I1aqcJyybaPyXG7JeHnCJPqAFgBkxUAwN3ypzCBI39KI&fallback_url=http://bi.sciagnij.pl/0/.../zyczu-mc.zip&downloadAs=installer_Minecraft_Launcher_by_Zyczu_sciagnij.exe

http://www.signbinariesfarm.com/c?x= kjKV5BcSmYXmplOtapY2o1tw5daopW8BlqddRwOv5M=&c=qoXSd SxSFOjjZIXNWeVpv/m58lwhrgeME1ktU974y0msxcVj6pNF65MR0YO05AGr4 u2CBLWeIFIoS2S6REsi9MMhoPUlhKLI2O65HF1mZF2tWjJd81DWuO4qzGjNhW&fallback_url=http://bi.sciagnij.pl/0/.../zyczu-mc.zip&downloadAs=installer_Minecraft_Launcher_by_Zyczu_sciagnij.exe

http://www.stockheadapplication.com/c?x=cOF9Nfc6UBtMG3lBxuzIPoHk7iETDcYfyGmlEqkAo/I=&c=A1zf64U/k0eszM JG AIyKlV7jgo9qFlE8faUWzbbzdCt0AxzPGjYBMuL9rG yXWPfr B5lhlDSuQlBuookgU4SsObQAuqD5t /OFB2T5O1lT7tSRspAeX aqE5lW2ESvEAUIgoFGWGP7tgcsUFdpM/1pCgG6CkiiyEjtLG5qcRvbMQ5K89OPYdoRqWnWmta&fallback_url=http://bi.sciagnij.pl/0/.../zyczu-mc.zip&downloadAs=installer_Minecraft_Launcher_by_Zyczu_sciagnij.exe

http://www.signbinariesfarm.com/c?x=om1jC/Ym8vnLATI4u141o2AzDdcNNOE6p Qnw0XNBhg=&c=p1X3luqp5bgKezX6tHzY7Jl2e95WN5WKUtAdqmio3seTuIs3LCXzf fvUyaMSCcfGPyE8krv9BL5Ql5vDkaxE2zVCKcpmfGDkT05GRFgIp0x/nzRdcOsQ GQNj0eHxerdqgkjD0nfMxBqyERI5vF11JmRHvuMPFWdFtXDPEX0My UKX1ztyMzbWQKYg lqLU&fallback_url=http://bi.sciagnij.pl/0/.../zyczu-mc.zip&downloadAs=installer_Minecraft_Launcher_by_Zyczu_sciagnij.exe

http://www.signbinariesfarm.com/c?x= DmEigjZLzVhVBxA 52PrybRGXAlFL6M4qPZSDtIsw4=&c=4TzB4KUL0GiJY2DKNBjts3pwZyTHgPibeLzKsvyXjvEdt1MEe3hxY4IKJ6VzccmJWFQzgewPF9Z0qwbnAQLE/4Mw2BaktY7JzOw4vEN7N xsFu5xoQSCA3QQiwdl4EoV&fallback_url=http://bi.sciagnij.pl/0/.../zyczu-mc.zip&downloadAs=installer_Minecraft_Launcher_by_Zyczu_sciagnij.exe

http://www.signbinariesfarm.com/c?x=a4UHr0E9/I6vg8nRIYOesmCP6GpY13739brnsxQm bM=&c=38yyXyFTjNGP/DpwREPOFcCbOBWEhzqRyhGHq4EjlQLTMGBCNjQxlZZ01cbWtm9kBgbuhFuNzb2XohDCTkoGBR1X9HDo2/3aRvQNjb/ frydgeSS8N3KU21QzNLkGr6K&fallback_url=http://bi.sciagnij.pl/0/.../zyczu-mc.zip&downloadAs=installer_Minecraft_Launcher_by_Zyczu_sciagnij.exe

http://www.stockheadapplication.com/c?x=qQv/1lQZLpQeRqDL5a8dGMRDIUieUE8sS5CJqoyn6Cw=&c=hsASIf9Fv54XD2wNP/Qwy/de/Ar/ G8 tvdYstYB13N4jjODtgCjDjf2fTEnneuyR16mUFLyP4nF nBDl0Cr5UhHNOoNbBa7wHLYq26m eCYpezc4RM1Y0qS6WExxM1Y9r vamjVEuRs9HO60dkys8h3afHzi8xZz4N6iyL81wjAPvkg/P178JAw2Ulk82dg&fallback_url=http://bi.sciagnij.pl/0/.../zyczu-mc.zip&downloadAs=installer_Minecraft_Launcher_by_Zyczu_sciagnij.exe

http://www.stockheadapplication.com/c?x=u/pqhDF w/uVAMovxC9kQG6dQHJRKe09L06zzUZg9OA=&c=DX8lchcrhoKrl uEC0lf s99SKL1jikrwx9tjjmD9fU2n7VucvuU4tN5XqIQ4/5mC EuKMMM2yM8HFs/QtKcIS PHMP9yVuCVjvm2v 9YDsQBhPlwTar2ZpCc8gKTW0GhrA68bj32L7BOFB2hAQ0Ii3O3THzuL0pG7zYwclyiUruPEEyU7onl0HmBkXqfVix&fallback_url=http://bi.sciagnij.pl/0/.../zyczu-mc.zip&downloadAs=installer_Minecraft_Launcher_by_Zyczu_sciagnij.exe

http://www.stockheadapplication.com/c?x=Wr8wly2OukD/wrlabyYuEVOu6 IU qNCpnfnTQJamU8=&c=VK6VZLLy4XAEhyJcrW/o5QyHWCuJRqM1Z0AxeEeMjal9ZWuFVHBCGPYuRorz0NvaoOQAd qR5rIZYlWRqHZFlP9437gHR1hENZfBoGh065BvT9RivELRibxRgCRHjf06&fallback_url=http://bi.sciagnij.pl/0/.../zyczu-mc.zip&downloadAs=installer_Minecraft_Launcher_by_Zyczu_sciagnij.exe

http://www.signbinariesfarm.com/c?x=LwcqQqRGuHFh4qQl49Ilpj jewQfxEO 8Knw7Zeew1A=&c=0NaYJORczwBjWfqHRweG4IAG63Om8ou8lf0kYiPRxH9qQo9ea0LLHCxWyd0s sLDUcxYHwjmrghCxqEuX4VwoTIjZEB2HEdt89vqeLt0Bq0CHrozX6 DGPR2YycWHaUH&fallback_url=http://bi.sciagnij.pl/0/.../zyczu-mc.zip&downloadAs=installer_Minecraft_Launcher_by_Zyczu_sciagnij.exe

http://www.stockheadapplication.com/c?x=Y25ZhhiRIOeQmf 58tbFEF3cWd6U1v4erpXuzwIMU5A=&c=9cP9dhANrrKOFsLoxpE4V2W3ADpGkCjZPdVRSvc1GEGbGK77kifrZDsiCbA3tVBi ttd9kdpihGcVQQhd k9Chi Yjxnf88 Nh91lk13r35WkZvO3yytUTMRP0nOwTXJ/sH3vZ7Y8vDh/U cZW2/8Z5UNBdlW1SHUD6u70sh8Fm5/2Ky2boRFChkidt5qc9V&fallback_url=http://bi.sciagnij.pl/0/.../zyczu-mc.zip&downloadAs=installer_Minecraft_Launcher_by_Zyczu_sciagnij.exe

http://www.stockheadapplication.com/c?x=g9QVBWFhNyJmmRm0N/tgrbpCmvt8gcuHpM1REp0hSLY=&c=8sKMOUSbcpBFQOZIkmqECnve4aKT5dmWG6g88JkjSdK8QEJylJAH vC2Dtzq9bV2icBkA5hHZ1RP/X6qbtnZWdr9XnD9WVCGqNGWo6lB25B/VP8/KFuOUvCmhffuCnDU&fallback_url=http://bi.sciagnij.pl/0/.../zyczu-mc.zip&downloadAs=installer_Minecraft_Launcher_by_Zyczu_sciagnij.exe

http://www.signbinariesfarm.com/c?x=RX5YPPvelJohFbNmsd3 j42Y9zSFPMQqSUoFajST9nU=&c=7k9XTE9t8FujkpLlurvmodtPyisRhHokuWSYF6dan/HjFdi7LIc6I5jH5qa 3iHFG8wWIy56V/zZQQFKHIVk3TxuYeTrGwsMKuUd27nq qxqujQFd2nEb qY Un2XW7B5Grz4iVs0YDjja3Zqboy5cMYGFKK0 5wN57gJU4zv3Px9Q4uPiJWug5aQjYzbjTm&fallback_url=http://bi.sciagnij.pl/0/.../zyczu-mc.zip&downloadAs=installer_Minecraft_Launcher_by_Zyczu_sciagnij.exe

http://www.signbinariesfarm.com/c?x=I/LmEEE4tzFe31ZoG4SiybgrAoBbv1f3DXanFIz/bZ8=&c=/gwXsurgFFFqB/I7MX8uPoJoySzDgGHkdVO9Z3ypccO2QzoHem5QFBT1EhoU2D8XyliJOOHYcGY 2YLbV2zPQ0Rdq8qPvQqTT97R3yoqB702ZnNzgqhCkGhpLJewFguZ3wQK4BMiVD/ep9qB3KZNpPtTQKyrLams4GLzf7ih50VBKsS6MDK/EFf5QIVY/9Nz&fallback_url=http://bi.sciagnij.pl/0/.../zyczu-mc.zip&downloadAs=installer_Minecraft_Launcher_by_Zyczu_sciagnij.exe

Remove installer_minecraft_launcher_by_zyczu_sciagnij.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.