home

installer_need_for_speed-_most_wanted_sciagnij.exe

Hapoc

Delivery Superb (Fried Cookie Ltd.)

The Fried Cookie installer utilizes the InstallCore download manager which may bundle additional offers for various ad-supported toolbars, extensions and utilities. The application installer_need_for_speed-_most_wanted_sciagnij.exe, “Hapoc Setup ” by Delivery Superb (Fried Cookie) has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions.
Publisher:
Delivery Superb (Fried Cookie Ltd.)  (signed and verified)

Product:
Hapoc

Description:
Hapoc Setup

Version:
1.1.2.3

MD5:
e2a55c91ecf8743c7a1ca8a29a121d26

SHA-1:
cc8d0fdc327f1f3a59ec48a9316273dd257d7c38

SHA-256:
4d73c982b06eed854bdb4e09f46d54192a2e422ad9dad6b004dbcb529a8cc42c

Scanner detections:
1 / 68

Status:
Adware

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Description:
This is an installer which may bundle legitimate applications with offers for additional 3rd-party applications that may be unwanted by the user. While the installer contains an 'opt-out' feature this is not set be defult and is usually overlooked.

Analysis date:
11/16/2024 1:22:55 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCore.FC.Installer (M)
16.3.18.15

File size:
1 MB (1,076,448 bytes)

Product version:
3.1.0

Copyright:
program

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Common path:
C:\users\{user}\downloads\installer_need_for_speed-_most_wanted_sciagnij.exe

Digital Signature
Signed by:
Delivery Superb (Fried Cookie Ltd.)

Authority:
GlobalSign nv-sa

Valid from:
12/17/2015 12:59:53 PM

Valid to:
6/22/2016 4:54:14 PM

Subject:
CN=Delivery Superb (Fried Cookie Ltd.), O=Delivery Superb (Fried Cookie Ltd.), L=Tel Aviv, C=IL

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
11211DDE033C8F24FD358ED7B6271AD4DE2B

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:GrJ0sYhNlI+B8Q0j3SxuQVyQPGCBU8I3iSsc7tHv3o0bDMX:GNHyI+BKTQPnBUzV7hv3eX

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, BF, A9, FF, FF, E8, 5E, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, 24, CE, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, 24, CE...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file installer_need_for_speed-_most_wanted_sciagnij.exe has been seen being distributed by the following 23 URLs.

http://www.signbinariesfarm.com/c?x=G7T5vrHjardiO/GiD30B4BleDlC/K7ohbMfc/gtLggw=&c=d9CITzmJAvMf3gxwYLDGMNIQ2GSpM3U5c144FXGe1o3vJKYk HJOq7T0UKseANbb2XRzCcq1sdEFAcL BiKprPYQOLig1iI0RfloB2s82dvGVnadQmh4k0f4nSJ0vyuu&fallback_url=http://bi.sciagnij.pl/0/gry/n/.../nfsmwdemo.zip&downloadAs=installer_Need_for_Speed:_Most_Wanted_sciagnij.exe

http://www.signbinariesfarm.com/c?x=9GJ8zCKPe7vGDiMgFKUWyL8LJOyEliLCrk6PejA0PMk=&c=jXxLaMK6sD45ccgHUSE f7B430vdBIWp6GdI2eeMc7jEhYrJSxjUcQmKnYwy0mXVH0jv9bumdO8gIE4yco7HGvrz7LirvC 0uTi5cOw3XMEJ7A4tmlz 7u0/bV 42s1N&fallback_url=http://bi.sciagnij.pl/0/gry/n/.../nfsmwdemo.zip&downloadAs=installer_Need_for_Speed:_Most_Wanted_sciagnij.exe

http://www.signbinariesfarm.com/c?x=ri9/8V/yadWwWeL 8pVS0zQwZd0g/7ML9oTy8TCACKM=&c=MouguSWb8Bng 9ZQjU9QTQD7xfX0L9OlEJvPkLTjis0PVnX565lZVQpHRpgnYYWQ24cRXuleR4XapugwsgJMTYwAJjno2W0qasy2odAv6bqqAGiUgIsTiTwvKSmWBYNI&fallback_url=http://bi.sciagnij.pl/0/gry/n/.../nfsmwdemo.zip&downloadAs=installer_Need_for_Speed:_Most_Wanted_sciagnij.exe

http://www.signbinariesfarm.com/c?x=8HtmHaQcuVfEXf3NdFaodKTrKrT8QN1BBo4imXEMzfs=&c=DANTpd36D4yxhEDkvS2d/3fWbpCrWT42nbZ82hIqx1ebWkCMgUZ14elMICEEKHlnyORoKzA/b6kGPIKkLXI4EmdLB2c WemhkDfEQpc6a7pMC9KrpWrRXgPHCUNTCE1w&fallback_url=http://bi.sciagnij.pl/0/gry/n/.../nfsmwdemo.zip&downloadAs=installer_Need_for_Speed:_Most_Wanted_sciagnij.exe

http://www.signbinariesfarm.com/c?x=o1nNTP0cfHZtEm 7502VWVz0wexgSq4pIjaJmurOExo=&c=sjmq39sGtSXWx4PbSkYA1L3BG6gXTwx/vItqbvbHQWmGqDnZ wR8KuPTh1o7IbII9PHB7mh6ErxaUxtYB1s1dWx6cpGhGMj1Nf6V7j0C9jD1H9u9otrR4k10Iu8EA z4&fallback_url=http://bi.sciagnij.pl/0/gry/n/.../nfsmwdemo.zip&downloadAs=installer_Need_for_Speed:_Most_Wanted_sciagnij.exe

http://www.signbinariesfarm.com/c?x=aNY APM NxgSMwiqP01sJ6ZAvMNEOCwCw9qV2pGxlok=&c=Fiw7nYQEIieqxG8kKU2Nxf lxPb6FfpM5xkMh845Kn4jqVwQDWR59RP2u1DKJarNCIH WoaCAgY8OlURB9r 5a39OGOL2ofsQOeQlFksNCWTNlvA5KpX/kLy7YGUE3Lu&fallback_url=http://bi.sciagnij.pl/0/gry/n/.../nfsmwdemo.zip&downloadAs=installer_Need_for_Speed:_Most_Wanted_sciagnij.exe

http://www.signbinariesfarm.com/c?x=4UetGHtaRl3uaXU4QRUF7Rzh8R43QSO6Y2CImCuWz/c=&c=1raDhSiACc 5HQP1EJVXlnqVTp9Lyc q5P0d/Bdktt83mf/RqNDTFhGDSDDCH2 j TKPSH1vJEKXAgA58veNcVhOyGn7d7emn61WEcpMSxU4GCKt5QyWtQL5 /gVAZR6&fallback_url=http://bi.sciagnij.pl/0/gry/n/.../nfsmwdemo.zip&downloadAs=installer_Need_for_Speed:_Most_Wanted_sciagnij.exe

http://www.signbinariesfarm.com/c?x=AvYMYc5df7aYyxOVm10tqv/DjsMdswqt6FIWzSJO5wE=&c=YXhzCeS39Drv5YISHCoXSgbgI/GKhIeJhESD2OzYNIqnT1hcxW0dmfjEh pAyelgQ03n9VbTuYUOWKAIJkxc ujD9KHjr78IFPg /R wgTRgW55xCJiDhMRTwvLz0NZH&fallback_url=http://bi.sciagnij.pl/0/gry/n/.../nfsmwdemo.zip&downloadAs=installer_Need_for_Speed:_Most_Wanted_sciagnij.exe

http://www.signbinariesfarm.com/c?x=dMuiEaybC37OLOXoidtOtyVnl7 IfDPXPYh0x5MjQ=&c=UphClkzw7N7lLe0VNr2xWKFv5Cx8whYGBS1Uh66DCwuYi4RZyvYrZ4uuNzlFeXWfhhbGvi6ABe6weMU0CdxKZH0XaP9sOsRmebTXUWa QQvxUKfLQstuBjQW5GrHopGt&fallback_url=http://bi.sciagnij.pl/0/gry/n/.../nfsmwdemo.zip&downloadAs=installer_Need_for_Speed:_Most_Wanted_sciagnij.exe

http://www.signbinariesfarm.com/c?x=xcwaNLGlgEokzlrVT3Tbj2CitcNuQCtFsRUsvoaHIm0=&c=kfHI4hCpfWREBK6do0 /aMGQHCT4idqepfT7W02LWL93JacMTQABaAKuS2TO0H/Nucw9Jx8xAKpGmTxNYqEzqD6Z06EnfSKmQU9/qsUfMsRzr kSaKrn1dKyZbWc5pLI&fallback_url=http://bi.sciagnij.pl/0/gry/n/.../nfsmwdemo.zip&downloadAs=installer_Need_for_Speed:_Most_Wanted_sciagnij.exe

http://www.signbinariesfarm.com/c?x=R7SWLYMmKV3m4uncs6PlhVnGfxsV57isg5DtgkboFDk=&c=Q OAnYtj29ai9LhVIkAoozgsnFHG8ImCkicdj6e4P0oxK7ibujfQd dAi7TSM600fJj71Djf1UHlkObD Z7MGAXaj5kFA23XuMiSMMTMW3StXgVrjLbj4zUvbBIMKEO9&fallback_url=http://bi.sciagnij.pl/0/gry/n/.../nfsmwdemo.zip&downloadAs=installer_Need_for_Speed:_Most_Wanted_sciagnij.exe

http://www.signbinariesfarm.com/c?x=6iNm mVzZ u7UvnB4128/LkoNWH7 n0Q6o6RbeXsRc=&c=W5BMP XryVxuez Ulel3cRT4RJc 76uhSE4uu9gB4BLjd0eg1TSssEKBCFad5lYzXc1gDxI1AtAyYFZ5TyVTftj2JT3XglCc hBMHRQD1dKPwHUTiy11rqMKKS3JzCwT&fallback_url=http://bi.sciagnij.pl/0/gry/n/.../nfsmwdemo.zip&downloadAs=installer_Need_for_Speed:_Most_Wanted_sciagnij.exe

http://www.signbinariesfarm.com/c?x=pGLXf4MHxSc0JTkLzrSnJJIyYtE48eyrfR6/KOCt3ag=&c=3x1OnOhYQx8niu2fIVUXCoYaZCTwZx7iehie2bb0QWmkjt5/td9TgdJjoCkc2Hqyhsq4HYXkB18F0lSSBft/UMqZMBFpXcgG3oe3zb1iIOwAQnRrgigA18rf7jmfzrsK&fallback_url=http://bi.sciagnij.pl/0/gry/n/.../nfsmwdemo.zip&downloadAs=installer_Need_for_Speed:_Most_Wanted_sciagnij.exe

http://www.signbinariesfarm.com/c?x=cgwKGuJXGmfWsWt7qtfPA3KvD9FQRPeH9F2178v1yQc=&c=g qQCJv53VPvHve7DHxZgkMxoM8Nz4JYfJ6f3RtCnXHVOxt3aNWIHB65vKU uUOcFu8p3JVjZYumFg3kv71qHAqKOtyeMnMSNVSzilTErsGpBxjiwYXb0N9RWf fHNaD&fallback_url=http://bi.sciagnij.pl/0/gry/n/.../nfsmwdemo.zip&downloadAs=installer_Need_for_Speed:_Most_Wanted_sciagnij.exe

http://www.signbinariesfarm.com/c?x=uXJt/UjMVqgFWx5f2sLzrb1h32OdoxF7l3LkIbsq3gs=&c=6dDwmh7oHtdZc20HH7MhQpbkJp7GZoZ0RllI7ePpif/xcAsJ0TmbbSU1ABBMoFM/Ol 9pKtWG irmz3rjfJWRihNbaBjsapkHGaTwE2VSBPKzz8puKPdjrig3iTibyKh&fallback_url=http://bi.sciagnij.pl/0/gry/n/.../nfsmwdemo.zip&downloadAs=installer_Need_for_Speed:_Most_Wanted_sciagnij.exe

http://www.signbinariesfarm.com/c?x=zc0A0xO3cR2UtTux utz 5 xW/HFJff9AL9fBPPTP50=&c=V5DWa8F xTLYe8pcpq4T6M7G5dWooEog0earANqKjRYpqkcuBRhcR3aXDLa02TQSyRQoyTuPRZFGMQeLKZlY OJtRRsQPrpTUFrXxuIcvZIMpVRoPz6OV4TDEsirpAs4&fallback_url=http://bi.sciagnij.pl/0/gry/n/.../nfsmwdemo.zip&downloadAs=installer_Need_for_Speed:_Most_Wanted_sciagnij.exe

http://www.signbinariesfarm.com/c?x=JgK18raUX7p8bExjd6wEvaGUxXenaAZBwYSywG8VnG0=&c=H5CsEm5 RtRO0TuPqHt7 6OWfybxwyyN/3g1YInDa2FrmK39GtzZplpYCd uXUfcrpYtDnpceuobZSHYyeF2SRuY1wShN81IgvmgVT7kRsJLPPO3n3opoLYdkuC6phxg&fallback_url=http://bi.sciagnij.pl/0/gry/n/.../nfsmwdemo.zip&downloadAs=installer_Need_for_Speed:_Most_Wanted_sciagnij.exe

http://www.signbinariesfarm.com/c?x=KRSUPiqcaGpsYMEZlBzSbc0DaKIzvOhTKbmJWkmd8Yg=&c=uflg6JJjt3acldYsKWg/98dUnmFkzzngJLGTlu02fgV2Iy iuJeShzV09UHEYkIepdPWppVlaUHs453HyqmHEdQCKQIPj61WvgP05Q5ZkhKzEr/MrLwZxRjt T WLYNb&fallback_url=http://bi.sciagnij.pl/0/gry/n/.../nfsmwdemo.zip&downloadAs=installer_Need_for_Speed:_Most_Wanted_sciagnij.exe

http://www.signbinariesfarm.com/c?x=wYiuwJMK5tRFk/vYH2gsNYYDUwPXm5pf6ADhDKvddTY=&c=mjNA2TPnMF3I/2q8VpJrnDpFUTUjnk4KitwxRWV7ODHXZ1KPBQuHZm73dhuR6mBHGmSQqZhyS78GNOO2D7zSkyCOYu5KcPchYII4L4G2i c7FNSrwBq /WQAyJ08434P&fallback_url=http://bi.sciagnij.pl/0/gry/n/.../nfsmwdemo.zip&downloadAs=installer_Need_for_Speed:_Most_Wanted_sciagnij.exe

http://www.signbinariesfarm.com/c?x=w5v6TU5bej6AbG fkRuFhfn3fD0RJYR90g DR5jLJck=&c=6yXrsNl5gWwoJckxqyI8MKsOZTFTyHE1vWCHL3/T e8RiIz8A 71uIMgpVlRggQnK90fiYE8qcbS/Ye9T0HwKQiQbu gVoonvwcSbIHnDNaSt sIRQwsVZ5ZoebVhjtr&fallback_url=http://bi.sciagnij.pl/0/gry/n/.../nfsmwdemo.zip&downloadAs=installer_Need_for_Speed:_Most_Wanted_sciagnij.exe

http://www.signbinariesfarm.com/c?x=bEqloECH5jPWfb63 mQh/icz9/nCwv6FBGfJCxNUzBk=&c=ZfetntQltcTjOFz07Cdh5roVCRfIjqvXNGOnESdTvvwubR/4idXMHaJccTJaJpg107/XkuVBlpgaONDfNyjNGwB4hrWuds6sitr3ykjNkTdx5thpnIWdOBYbihxx9JaJ&fallback_url=http://bi.sciagnij.pl/0/gry/n/.../nfsmwdemo.zip&downloadAs=installer_Need_for_Speed:_Most_Wanted_sciagnij.exe

http://www.signbinariesfarm.com/c?x=oo6GMsL8pASC4B0lg7/74qOGxfc6URUkbLrWPrUGJ48=&c=RMqM/jEuziKI2Sa/Jw/FuKrpGlQCnn4S1HVzq0Dn23Dq6A0vmMVHq9PJ93wipWWmvEj8TTzGvcoWgwn4EwGJYtQfPeNOBMq2xmz4WyBHHnvcN0c2OKFpryd4z0WFHQZq&fallback_url=http://bi.sciagnij.pl/0/gry/n/.../nfsmwdemo.zip&downloadAs=installer_Need_for_Speed:_Most_Wanted_sciagnij.exe

http://www.signbinariesfarm.com/c?x=62L9CCeCeshyvCz pp68 RB37I68nDTnAvKA5U1F4eQ=&c=oQfDaopjet6dXZOu9xZ V1QN 98I175002gU2pBzoy nZOfpVVJko/Zm7/jUHfg5ZLI hjwBD0w7hEFIC5Hvmd3ZL3aobTkTbHpj8PaE3YiPKl9ul0eAttcRo10QEcu7&fallback_url=http://bi.sciagnij.pl/0/gry/n/.../nfsmwdemo.zip&downloadAs=installer_Need_for_Speed:_Most_Wanted_sciagnij.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.