home

microsoft-powerpoint-2010.exe

Hogepohoco

SetupSpeedy (Fried Cookie Ltd)

The Fried Cookie installer utilizes the InstallCore download manager which may bundle additional offers for various ad-supported toolbars, extensions and utilities. The application microsoft-powerpoint-2010.exe, “Hogepohoco Setup ” by SetupSpeedy (Fried Cookie) has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions.
Publisher:
Muguko   (signed by SetupSpeedy (Fried Cookie Ltd))

Product:
Hogepohoco

Description:
Hogepohoco Setup

Version:
1.5.5.7

MD5:
c2ea042086ed65fef1d6e5648ea18a00

SHA-1:
54b8825d9ed9bc54e2ac0fe3e1cee9be846308d3

SHA-256:
0375df4a76a8265130479d6f355b9aaef4f755e34e21cc9e48c7fe617be7e786

Scanner detections:
1 / 68

Status:
Adware

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Description:
This is an installer which may bundle legitimate applications with offers for additional 3rd-party applications that may be unwanted by the user. While the installer contains an 'opt-out' feature this is not set be defult and is usually overlooked.

Analysis date:
12/26/2024 12:08:00 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCore.FC.Installer (M)
16.4.13.14

File size:
1005.6 KB (1,029,736 bytes)

Product version:
3.1

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Common path:
C:\users\{user}\downloads\microsoft-powerpoint-2010.exe

Digital Signature
Signed by:
SetupSpeedy (Fried Cookie Ltd)

Authority:
GlobalSign nv-sa

Valid from:
12/17/2015 2:09:36 PM

Valid to:
6/8/2016 5:12:50 PM

Subject:
CN=SetupSpeedy (Fried Cookie Ltd), O=SetupSpeedy (Fried Cookie Ltd), L=Tel Aviv, C=IL

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121EF8B655959B1CFE34F05FAFC8D598305

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:YbrfIM9q1wG2po456/bxjaOTZDdrmdSbD9E:YvBq1RGoTxj11D0dYi

Entry address:
0xA5F8

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, CE, 8A, FF, FF, E8, D5, 9C, FF, FF, E8, 64, 9F, FF, FF, E8, 07, A0, FF, FF, E8, A6, BF, FF, FF, E8, 11, E9, FF, FF, E8, 78, EA, FF, FF, 33, C0, 55, 68, C9, AC, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 92, AC, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 26, F5, FF, FF, E8, 11, F1, FF, FF, 80, 3D, 34, B2, 40, 00, 00, 74, 0C, E8, 23, F6, FF, FF, 33, C0, E8, C4, 97, FF, FF, 8D, 55, F0, 33, C0, E8, B6, C5, FF, FF, 8B, 55...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
39.5 KB (40,448 bytes)

The file microsoft-powerpoint-2010.exe has been seen being distributed by the following 50 URLs.

http://www.applicationcycletag.com/c?x=9f/ZWeY/rUq2dlJqJ3VuUhdIN7PyhRAmxZ18nH4OteM=&c=sqOQgue4h16pENTfETHYo4teoDRNHWrIlPadL2fRnj4n3rcy83VMlvpINtDkSv09pVkfhco4 Klx9SXNNVVGKI5HTz3sGTd4xxLOOb6gQaT10whfndc4W/Rit0ZnLEKeUFyaUVfigYkR2nhtCBK2/75D15Ag1pgW8ZCuXQaftnRy7rgKVWE1b9RSSMU0GlaW&e=0&fallback_url=https://secure.inndl.com/.../microsoft-powerpoint-2010.exe

http://www.applicationcycletag.com/c?x=B0JoROF2wQ9zRR6SxyLxXnYw5P8hGHBI QxrJhipJvo=&c=yzbE/stPJ hxTyCHR52MnoTjpfrM4kOhHRVkamyphnmeBMjfHHWTySn/12962ypY6O8fAsduHY4ntNDQAXrdi0g8C53/pKfRMQ uNxve7CUZfShPmDQHL OZVdNWuhXKlHpm2c41M0OZqJAg7Qv8dXycb6FA5dtmO9NSA8l2xIPvWhGBVwfb2qQCZ3X4KRDa&e=0&fallback_url=https://secure.inndl.com/.../microsoft-powerpoint-2010.exe

http://www.applicationcycletag.com/c?x=Vr70oSi7suKHZj0E8yvfs7eAITqBD8P5AWMa6wp oZ0=&c=949cM68 t71s67Z5GfSKg5KLeTMaK6kSG3qYpt5pN1iMi45WqNbB Cln5mMFV85314Lz9WDTD3NfTaQ7Oenpy0VSXhW3iG2zS4X9k47jgELVx1y NYheKerVL/HpoXctQL4TtUzgz trfGwNqBUoqhrnp3WML0eDTdW3IlxT4t9h3 LmZOVloekuIdBfFuZi&e=0&fallback_url=https://secure.inndl.com/.../microsoft-powerpoint-2010.exe

http://www.applicationcycletag.com/c?x=ZpJrHB/1n5mnCm3c5iaHHOJf5GOmJGzNXNHxdFyixlw=&c=NZz4ByDRONji6ubeOYE4ylk6TBy06KjTPgeNSXUq3vC9JT4aYCPeRSTQr6xydgfLwRkIUAqphVnZ/ljUtqpFAvFZcp5h5Vry9J8R83LtQzCDqtQnMB0N9PtwQUXQ87pj7iZ2KlmR4qVb0Yu8I3ZoSzBd7W2yap76K7z yWmHtePSgsJiDRGA2ey0RfXIjedn&e=0&fallback_url=https://secure.inndl.com/.../microsoft-powerpoint-2010.exe

http://www.nowapplicationgift.com/c?x=fBnnLsi9t4Qm vF4hec3SGD1f8pVcKk0IUSUtZ/50js=&c=GSQIznV4dM8BmcI14kU8 7jQoXFKnoJyZULdhw4IAxIMtDSywtOUnh3bXQGIkXAEp7w3ZAni7csbR9VT1nkupKhHVs/5ZSKoMtFWepX2WO9WRfuU7ZTz4yP4eNHd21TmZf2beUfAP9qIrgZ1 rmjwxb2b3jm1eelpCA2Qsm3PNU=&e=0&fallback_url=https://secure.inndl.com/.../microsoft-powerpoint-2010.exe

http://www.nowapplicationgift.com/c?x=V3A292XoHmHBzPZMp3DRTgtq xV6syLTBQRvLC2Pjr8=&c=8k2bjBwggcFbzJiFzS/Tdl6s6weFGdZV8iEYVoFARTIdZGSB8XhxjmRSNzSVLkQuEqm8VguiOcjNGMyIl93yoKhAH9Pw80TGS 8FmtPSqHdt7slsoh4nGI37xvdTL4vDrAIstJERIUr8G2Bu/FnkY0/omm4iqzhvbRu SWW4wig=&e=0&fallback_url=https://secure.inndl.com/.../microsoft-powerpoint-2010.exe

http://www.nowapplicationgift.com/c?x=ZTRuY17jHF78s6WQ9fQKAxBhHa4mzFIIZJrxV5PB5hs=&c=q9gZX/3qXwZP/Rzc1d55aCLxuMtpaPb/5JZWqcNUtrpuFGlkFhF17LfdGe0EnGmi35fMi0m5aHKHU14O RUdyFW7NC UJQEdMt327itwwSNwWzqspEVxRRQuMOaTzaSlu77zB9hVDPqFnr5alEirIfv4MTtkeNrMtpLlOxcHpA8=&e=0&fallback_url=https://secure.inndl.com/.../microsoft-powerpoint-2010.exe

http://www.vaultsfarmapplications.com/c?x=IyDbZBVk7x0VK7o5ubyJ7Uc0OS/o28nAHRHkEd3IVsA=&c=Ma6H gDqNO5IoDgA9x0hMotPR/a4L9p04okzFQ7Z3CfJIQsCXB3ExukltG2T SPIWgJxkWX7BZFIbIpBSNyRkdYTBYfYqC zzmiQdDBliE1xdkxXiGALRkzxWpK1iEWAVSeFfj7iTUqPUT1HiS5IdHuQAHeIP0 IyI748p1XRhI=&e=0&fallback_url=https://secure.inndl.com/.../microsoft-powerpoint-2010.exe

http://www.applicationcycletag.com/c?x= bR3aZ vwRuYhGu/7VyQ7VqAbDxpcR3Crjam6S9/hkY=&c=l5KBkN8X Urnz6VLFnqpKJeAgUFZnKR8OLWP84bRTj aCYAEj1nrORnXVq/8UgoMfG6gAJUhetKQzjeN2zoFADidH9Sz6bOrNk0967l40eAXWmFrD6Eq0Pfd/Bh9sbWCe y5jTM5NQcfwABYlKYrEhmM6Xg KMt4vCVPcNFOmGp kUMWo5unkaLwr7VOd BD&e=0&fallback_url=https://secure.inndl.com/.../microsoft-powerpoint-2010.exe

http://www.nowapplicationgift.com/c?x=sj8pMraXj9vAntsTJbkhH/tG9W2/gQ3shSJXqaFMaho=&c= jb7SWVN9naDNZR2blqzRhoD6z8xp1nY/lgFTwrK/QaukhDhyqgk AN/heZi8dMtwLjI5MNOZtOoQw Fc0AFfhRSmuDgeeqahHBi/MtOROjcZGPeEgI3pcBZDa3PNvy5FhSSZF7UvN3tWpH9jMa3AK G1/KbmyZwcYGeJhm5cLU=&e=0&fallback_url=https://secure.inndl.com/.../microsoft-powerpoint-2010.exe

http://www.vaultsfarmapplications.com/c?x=Kh5D7kQU9E9aUPTyxXwQ8N98TZ0PoFEwACFbDaEm7MA=&c=HFuD9ba1PHmgmh4pdfFJ5aSK eKzSdbc6lrZkXkDJZMBSQsCSsKsTk0BFFqjCp81gDCSpYfSGfOuduzrFzaVpe9sjelO2jsHXjVQPrDyOr1dYglFHs6BgZ5tCZTfQVDsIpWkJoyZjAmAwYs3iCuWDHiQ2D84lVym8UtkXBJu80=&e=0&fallback_url=https://secure.inndl.com/.../microsoft-powerpoint-2010.exe

http://www.nowapplicationgift.com/c?x=MUT7hF4fGWm1ItfYQC5wO/qg5j3eWR nvtztJZRmNUQ=&c=wHKbKJzaIYfvdu/ZlDCqr1gPwfBebR9s0M/RYiQVOOqI1lxaGnIS6PYJTp1am9pgbIrdQqhrF7Tfn1GrmWakac2flDvU2UJoFmZ8ReeGKUbaE0WZOEsYOdj1QoPT7XwcbaYDPZytJuZ0emE8qyJ07mb1fnDRV WKqXdhg7vk9Q4=&e=0&fallback_url=https://secure.inndl.com/.../microsoft-powerpoint-2010.exe

http://www.applicationcycletag.com/c?x=BUSoPb/zGcFTkCA5f0vEYqXW9K5tjhrrm1tn88erlv0=&c=4RbiZoWHKSzfwcTXRzDjeR2McfnDxewzUf2446IjJarWHdYlCIMtKj3tsPZ jgemUQS/G9B5omC9aqZg9RHsE6IRhV6spCdmJn59XCj1r CIFnV4JFmu0aonQ 4jY0RovqPydsABglerYsQgYjiTlqTi4I9h5BBMFp Y3 NflOk=&e=0&fallback_url=https://secure.inndl.com/.../microsoft-powerpoint-2010.exe

http://www.nowapplicationgift.com/c?x=hOM2d3Hc ZYoWT39uuyubrOxIxrog oaMZ3/Gbqp3hc=&c=p hYD1mCNHuZO/79MlrWXVYpimGw09KBTPll4XmuB8JBpAkMaHqyYsLwJ4utnmFs1TXIdcgPKkazDTM5LnRAirDeocEQrQPaM1m6qmSSyAUCndYttAjbHjGxMuNR7MlWrEIltQWbpbKVqwe Ul77tTrJJg0Nyq6pwicp1m1P01U=&e=0&fallback_url=https://secure.inndl.com/.../microsoft-powerpoint-2010.exe

http://www.applicationcycletag.com/c?x= yMxc5dUZwe NP6mZwyNE97JMzXjM4yLnaeBVE/HMbg=&c=2o4t3tprxdaxRlT/QsjokOBuEVOTyQi7enTKrlaZZtm1EschVHLCpJALtZ3PyFqpFW3DrwciqZ7e4hW0J6d0cshtUJLskLfJ0O3ydmE60neH5TcK63HmeZFaAVIG BDXB BT qzYoexgNjNh9 yMyNV3pmzXrvTO/cTwIo7LrZ4=&e=0&fallback_url=https://secure.inndl.com/.../microsoft-powerpoint-2010.exe

http://www.nowapplicationgift.com/c?x=beNF39bvYjnBOjKk4dwhjImZpJknVW8Vlvoh6eR9HNY=&c=z3uGiE8e7dZX1CvVPYCWMvkgMI5XqIV HD0Hx9V3b/4NlWwwY3ovZ3xe8KtVgThHBIZfUF3ZnYqqAOE7rd8WN0vABz6EOZ MpEg301egKvlnbLUONOzBr9YNKGDQcsloHF7TB euyrlwFod2LIcpYPlJnJIJqVwrWe42EWv1tSw=&e=0&fallback_url=https://secure.inndl.com/.../microsoft-powerpoint-2010.exe

http://www.nowapplicationgift.com/c?x= BEyCuUouUabVzoPbtifYzawgCpyAr5u0pSFI/Rhybg=&c=SH9 Hx6KnieWaAoDNZhH0gL4Di1Od7fBKCPTUdun0B/MCYfUCvwepqRHAUNIBympxm4q7iZ/nm8XvbSQUKyeIEj4Oh/FtZ7e6Rme9YgLYMY9fl8dOa5WZKzAgTG9s7H4fgZ42 Qo2oqpzSDg9dIiZiIoadGjWoW so1YzZtPFbI=&e=0&fallback_url=https://secure.inndl.com/.../microsoft-powerpoint-2010.exe

http://www.applicationcycletag.com/c?x=XDaM1UUOfX07h zqTsnBPLNMUczUStwvcPoKe1OrWJE=&c=xwrsvtTJJ2fBtk0Hlz251tGEEGz/uIdwyRx r3AO2BaReXjBnLqJyVJ4K81Jtqlxttk8ZYnasGX0wr1O4661Vnu6wuZPYnUZIgp0YgcEFQewBjInJ9HvIjV4jHdZ4x/CmN193q2c66zlbUWSkzYUPhkzoV/wElT20B8OezL3WlQ=&e=0&fallback_url=https://secure.inndl.com/.../microsoft-powerpoint-2010.exe

http://www.applicationcycletag.com/c?x=5l68JZMHvmpkY7VU2 HPbYD3r8gpk8Q71SWgkmWih/Q=&c=bvvpgOvZ15KTEP5ATtYNbSnzcx3OXwh iUNTS4TiFJ262dOzJNaPYXRPdAgpJJlSz3sEZINchQwRvw9HMCMMqcbYrCZiVC5r8X8h2KpIH9 R9Y67RLqFaDiCg2ArlWzH6yIc2Xr2jsLdAktBQNOFdssJLLyX1650bv2I5vUsCqM=&e=0&fallback_url=https://secure.inndl.com/.../microsoft-powerpoint-2010.exe

http://www.applicationcycletag.com/c?x=9n9WNumWvBY53UHZM/PBaTzzTJZx6UcMzdfJ5McCQRM=&c=njT7VKw2ho xyd4W ULg09j4U1eiKEIJr27u//TmIYF1qc0y9/cdGXU fXpnChHmTDyKzNfSHlMQ5wkOgdQM7OeZ0FLt y0Cr2pVM6c1jyYvtJXjwMo9BGNM/yM1AqS2eEI Q S6X1RPnmE3n7/HMAqMAGbHkzTkl/8mNsoVBKk=&e=0&fallback_url=https://secure.inndl.com/.../microsoft-powerpoint-2010.exe

http://www.nowapplicationgift.com/c?x=ULrMZmMsZoEnco9nYfxAlVgmUpLgFtIdPjcZGaxrqSg=&c=qdvnuurdDP5rzbqvE/W0vdJ6kh1yG3TKRVXasuqBaqyRdQ97GOtvnZFRSwdrgzrImA0pIzv/H2KmAQ0asXVXljxU04C5EadEKta0o2PlL/bsKwCs3jcgR0EURVo3CyjwfB4VWhKHctU0yZhcOrrI0u9a2drj8EMXj oXk0wlH 0=&e=0&fallback_url=https://secure.inndl.com/.../microsoft-powerpoint-2010.exe

http://www.vaultsfarmapplications.com/c?x=/Epeak I0Hdzv/T78SDcD JFcSRjVZpabctSrHdm5do=&c=4tJ6CzlsL0pR/ajgLUj52EqroRxQIURkW787R9CoFLJwcjHuaQkAqny8QTvSHbo6XNZdNGZb0IDqb9R v1 JkOGh6ql/AS10MG3GO2oLduxqBVGr5zs70lrJFbwNpX7wpSfK1102673 3W7V5fq5OZWnA7LCgNcH7wnkppsG0 w=&e=0&fallback_url=https://secure.inndl.com/.../microsoft-powerpoint-2010.exe

http://www.nowapplicationgift.com/c?x=coS83QzVryfE/VQwBS8HzSjf0l9fiT/sxSLloqv2B6o=&c=8lkHXACpPNB4dOw3/bUBX8fiG05szbTlT28TH6pcy0kn3hu0vVfrfXiO3SgDVpjFbYOqwqOaS2OESIaLTpg4sd5thXrm2O7JL/ACfle0clVZYOlko9rJhbVuQTQzipnRWO07ZqxFHGPnqCJBzQsua7ZePNUCarN 3lvuo5SYBIw=&e=0&fallback_url=https://secure.inndl.com/.../microsoft-powerpoint-2010.exe

http://www.nowapplicationgift.com/c?x=GDoiQ85VohZE/5m9SyHPLCOObfOoBP1FyiU55yc3loA=&c=Hnhf/B9J5WX4a W4F J9Glj60JFo96mjJ/oH42X7/8LwCS7C152Qi9 6NOESTocGwGnUpZNRczhU4hn 4aeLLybgCB0FYe8KmFJinRNci2Srx2WW0Ers99POFJQqikcsKdbl01UX4dPpitJwyyItWoreLWn40ArorziIUwoRxFo=&e=0&fallback_url=https://secure.inndl.com/.../microsoft-powerpoint-2010.exe

http://www.nowapplicationgift.com/c?x=wSuw2ZADDRvzSKpZ8LpYOx0oD9/Gra8k exG5KP83Us=&c=gcY60CbUBBmFStp0iv1wCv/0Sie8kzR6IIgDYENif2t7Qi4vjfMFHQlJ3Jsr 9vzM5k/Wh1LPZfHS3kfIi1O0Zi/hRvKtzr6aKpiLt9SflHIQLdvg/IPxZ4J1cBRCX/8Z3fC6aog1FU1luY2KLXAZx7tcBfp7sgIxm7cMOZGdww=&e=0&fallback_url=https://secure.inndl.com/.../microsoft-powerpoint-2010.exe

http://www.applicationcycletag.com/c?x=QAqb49ZiyYDB7CTfDcK8T39BpZBagaTnY8nIyMNJMFs=&c=WKBaYKFnFPlpB7C7YKBJqtmNhokazbabh4oKAI6YT4x2V1ydkjRrUFPsVrGHyXaG2taRrXTsYIrHcWkUXQAw1/GxNGVM3a5/q3iHrp31N3Mudy1XiAdH9XhKSwnHZawfU8xr4DV1FSMnauPIKlMvl6J2ztde3QdzEyHWElBRAwPTEln7wWtUbBlbueHxIZor&e=0&fallback_url=https://secure.inndl.com/.../microsoft-powerpoint-2010.exe

http://www.applicationcycletag.com/c?x=ge72f6EhuWFK7jVcGQ77LiL3qK /rfrtpQj45uO/cVs=&c=F8FmGppG0gDm02rrnQOeWcNBKdXkM2aH25yD/FDjuEMax9ssr0k9UdimfynST3v/by32SXwwXg/99hu86fs/5zVtrkCxXpISrCMoY K8Yzw0GR1ieRrot8WkC4ortaeebWpO/ath2mM8cjJLV06JxrePhW4GOTImc52aup3blyQ=&e=0&fallback_url=https://secure.inndl.com/.../microsoft-powerpoint-2010.exe

http://www.nowapplicationgift.com/c?x=mr4RYtxxtXOCWDn2cq8FGQ HM3eZRAqLspvBzed452w=&c=0N8jbKtwrOkJzxIYfhY8msna8rM9qOh60ksO8xW8ziNaXVSlr0iIQxevLx7mEsmwhdduBjn X JpLcdCqHSpqsfN9JJqhSM3mL7ZeoTeidnyJZw0naUiJR/DX7MjzAZ8ZiTR9r3IkgWUU5mWHA4WBREBJJtFh Us4tWIbhTuMjE=&e=0&fallback_url=https://secure.inndl.com/.../microsoft-powerpoint-2010.exe

http://www.nowapplicationgift.com/c?x=5iAyKfPOE0hQhrGdVZqhCGnuBXhI4aWUuGABsRstJqk=&c=HWptyO0y9B0vYmZhD1 5NgIwOLgjLYr1bmtaVGxL d 9Dhu14CrcgP/ggSoEW3sdI/vAjULf1tyH1cnLLAWVxZQ4IspI5s3vMreAL0Z728j6yiA3vRsWKOIK3nv6glLouV77FqYBGo fGpoXz5saQh8YPt6EQfeKHY lDsjuOVY=&e=0&fallback_url=https://secure.inndl.com/.../microsoft-powerpoint-2010.exe

http://www.applicationcycletag.com/c?x=laYHMLlOf7jKcN/PI/K7sm94Oijz47agosep79PfdcA=&c=U2JHNQ9hLyOfL8AXrsNyT1AQF5BvLe8qX4uRrRHsJJgIBJVuUnlgnwbCkRjcAXLGIKgqOHUB87T9rZQ8WIM4eEmMaUwJ7RA4fqW2yaF QWxrWfXZLH0Cm3a9dqegb/2M5fUtpoEdD21kM69Ys0GpyX6J85KCWx6gSqiGfaVSHSR1BO8NHq7lAaH/m3LQpijk&e=0&fallback_url=https://secure.inndl.com/.../microsoft-powerpoint-2010.exe

Latest 30 of 61 download URLs

Remove microsoft-powerpoint-2010.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.