home

minecraft by zyczu 3.3.3.exe

App

Platform Beta (Fried Cookie Ltd)

The Fried Cookie installer utilizes the InstallCore download manager which may bundle additional offers for various ad-supported toolbars, extensions and utilities. The application minecraft by zyczu 3.3.3.exe, “App Setup ” by Platform Beta (Fried Cookie) has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions. The installer is marketed through download protals and search ads as Minecraft but will also install additional software offers which include adware, PUPs and browser toolbars.
Publisher:
Software Lite   (signed by Platform Beta (Fried Cookie Ltd))

Product:
App

Description:
App Setup

Version:
4.8.2.3

MD5:
3c7ce05aa7f48a9e54c7769709045f1e

SHA-1:
438facfd7906ec6c70d47f3b136437afca1949a8

SHA-256:
307ee8c1e3ac56b8a165f6a744fed638c2c807ee09b5fbe5eefa847abe6e30dc

Scanner detections:
1 / 68

Status:
Adware

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Description:
This 'download manager' is also considered bundleware, a utility designed to download software (possibly legitimate or opensource) and bundle it with a number of optional offers including ad-supported utilities, toolbars, shopping comparison tools and browser extensions.

Analysis date:
12/27/2024 11:08:09 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCore.Installer.Installer (M)
16.2.1.6

File size:
980.6 KB (1,004,160 bytes)

Product version:
2.6

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Common path:
C:\users\{user}\downloads\minecraft by zyczu 3.3.3.exe

Digital Signature
Signed by:
Platform Beta (Fried Cookie Ltd)

Authority:
GlobalSign nv-sa

Valid from:
12/16/2015 2:41:12 PM

Valid to:
7/7/2016 5:55:56 PM

Subject:
CN=Platform Beta (Fried Cookie Ltd), O=Platform Beta (Fried Cookie Ltd), L=Tel Aviv, C=IL

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121C446C50C8915C47DFD619121C2806B7E

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:xbQCQ5wyt+G3zJpYxe2k2SorL5Bw72HhwX2qIZE4A9:xcr5wyDYx2POM7zIeD9

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, BF, A9, FF, FF, E8, 5E, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, 24, CE, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, 24, CE...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file minecraft by zyczu 3.3.3.exe has been seen being distributed by the following 13 URLs.

http://www.centerpresentgift.com/c?x=Np4 pMhNgO5 kGIj nsQAhSB6MoWCvU34qhQliLvdqw=&c=Jf4BakdTFbDvjhtcceqeXhb0RHk2/PkFjxmQATi8yJbEMWErZ4vYcKLrvm 3Ed/p2N0N7YqsJ1LB7xrA8PSq4FR4k7K9XatHZyqefjXN qCi6 FM4lVByGYIwUBLKBB1&fallback_url=http://download.komputerswiat.pl/gry-i-rozrywka/.../minecraft-by-zyczu?altTemplate=dlUrlWithKsPlusGiftHtmlFile

http://www.centerpresentgift.com/c?x=HFKbWUsrTFNnj9yxsLMsxcOark8fMIlQOktu5XIwkpA=&c=0bKyhZnCz6r/szvIsAL5z6i3nb2cCvWKyqJrKJYhr76dLmnVmAqZYC18yrwxq4csQ/Jw5YH6fDgLZIYWidJjTZatXYFo xPKJbw0Rv0h04n5s0jdhfoqzFUrLbxhaIcJrNIlzLFgzXj4YAQt8VucXQJslHTo50C4K05uZ041VwA=&fallback_url=http://download.komputerswiat.pl/gry-i-rozrywka/.../minecraft-by-zyczu?altTemplate=dlUrlWithKsPlusGiftHtmlFile

http://www.cleartowersgift.com/c?x=inf7Ks8O6RBUYrkKI52CVOnSR6RhcJOKq1pQyb12Zf8=&c=fsHl7R/gyoZQvv2bARq4zDEYP7ml2UlKCQlEmVy/JsOowbcjkQYorOEDM8F 7i jQUUFrv8bLiTWARa0wOOW8KFE868xeoc1LbKpfD/WERSnI3WcEEEb7un7AxFC8QkR&fallback_url=http://download.komputerswiat.pl/gry-i-rozrywka/.../minecraft-by-zyczu?altTemplate=dlUrlWithKsPlusGiftHtmlFile

http://www.megasharetowers.com/c?x=mxZbaKxNViAQHmbIsyM2cmjLRnfqVLxf6VzP9aYAl50=&c=1gkr4sJi/6CNt35uUA3iyoF6wIb9e2CwnaO8nHSNzkpRLiaAE/PVUr8ODsfufCNirvl xolDMF1SksZQqTgL4NYzlnf47QsqXPe5BZNEJ5gIqP289mGovvzEh1AQaULN&fallback_url=http://download.komputerswiat.pl/gry-i-rozrywka/.../minecraft-by-zyczu?altTemplate=dlUrlWithKsPlusGiftHtmlFile

http://www.signingidomain.com/c?x=NQbupZ65jlTIq E2l2R7F4fer26bz4FLwI5 H0IOkVw=&c=//7r69NxBQ9kwLeOFQZjLk3sdHdK2QXIxxNpbYJB9qVxI4h1aFDLbJfX7sbTCL1bC fz8aD1LCRd3ceQP/lrBptPEndvdBfDT4V7V0aYWexLeSFWmvNu/PwnT8v3SR/T&fallback_url=http://download.komputerswiat.pl/gry-i-rozrywka/.../minecraft-by-zyczu?altTemplate=dlUrlWithKsPlusGiftHtmlFile

http://www.megasharetowers.com/c?x=KmHSMBvEKXzob0J2gGtAoVMfhyujjatxNeJKTww9tl8=&c=qVRBip3eDmiqPTo1E3xhJa8TJAq9dTf4fnd8gts4RkQ1A1SJgPlfsYeGuW/MpAsbGps1dVt GbXITf5yBUfFPAT4oI4zEYaB14VSdojV31f3LqyKOzPoSEit5nnMo5jR&fallback_url=http://download.komputerswiat.pl/gry-i-rozrywka/.../minecraft-by-zyczu?altTemplate=dlUrlWithKsPlusGiftHtmlFile

http://www.quickquickhosthostonctnent.com/c?x=ZVBJN3kKx2kR6YnAEQX36ij5 zVLJsGbMBDG5 /BnG8=&c=oHg/zdJM6yOREZxvqfNcz8cO0q1I6Iq3 L2AmOSpgOzXfsx8ZYALTm8qb5yPSNwIK/JOqoj1s8zKjMs0WQQREsbY/bpiCMxdt4jPE8A7nRxZZXXQh5nAwdjXvpskZRIV&fallback_url=http://download.komputerswiat.pl/gry-i-rozrywka/.../minecraft-by-zyczu?altTemplate=dlUrlWithKsPlusGiftHtmlFile

http://www.bestappshead.com/c?x=FVjMI410M8eXOF/ DevvHySRH5IWLIkwiW9h /6CzOQ=&c=8MENAXPneac d 6x5LrXG oCA2XsVkzjRfXFXULhtESCV6inOBl9CbnnwltUlrk27nnhzMxORZIxfe39c7anbTDmzxo/jWPZILuNo7HOy/hBu Iy4yyVukroJN0Of0V2&fallback_url=http://download.komputerswiat.pl/gry-i-rozrywka/.../minecraft-by-zyczu?altTemplate=dlUrlWithKsPlusGiftHtmlFile

http://www.quickquickhosthostonctnent.com/c?x=JqbXbDV VAdGrCusHqVs3C zopqjG0vK22Ahv0KVKg=&c=544M 5agjk4aAM4zQfgew2wYLlIOTp CGPH 6tPCeGYU Vy4mgzrJQNVAaHLNJTqL7ddItoA08inBcpWYXxo1iFP/O8eI7fg6byehLJWfb3NKVWDjlhs8kw2K3UBDNUn&fallback_url=http://download.komputerswiat.pl/gry-i-rozrywka/.../minecraft-by-zyczu?altTemplate=dlUrlWithKsPlusGiftHtmlFile

http://www.megasharetowers.com/c?x=4YoyrTfwR0l0IjhC4rFUENxV5dzgSsd3TG8iSyKa1p0=&c=V6eUdAE3chEP1Uk8yJzeRPQDAetKnXlPP7P W/gi16FbmTxEeAVskXavOoIMmIt9fOfsnzf3HG1CG8OXqxQoGg1Nr0Q5xhcfpwuHTAEWLta0VfsAzkuSZAjlAfKzkb5G&fallback_url=http://download.komputerswiat.pl/gry-i-rozrywka/.../minecraft-by-zyczu?altTemplate=dlUrlWithKsPlusGiftHtmlFile

http://www.bestappshead.com/c?x=vBpLEcFF0Wpyqfns/fwYPptCXNUy/e5Jh1bOtO92ql8=&c=Ba6sA2aNLQyCS/3ca9jIr FTtnRmJgYpB623xu GTYJD7a/hQyOMKkQph8iIn9y4S0yinqYLIeYUPikZADZq4K0VnLDe1addeLkGJ/Eha5Z/ zug5u8tmbQkpIhb6Tqx&fallback_url=http://download.komputerswiat.pl/gry-i-rozrywka/.../minecraft-by-zyczu?altTemplate=dlUrlWithKsPlusGiftHtmlFile

http://www.sendcurrentapp.com/c?x=MF0R7 ATgDFdiufsiEpxnMMw86Z ZRvrz cC6M93ovU=&c=ljVK7FRidcAZ IHxcWyPPG9SUhtHPwQnfGOQxeUKlyT7CN9sJO5G/VZ5wW CI9xZFA/7I62WVM MY75abhPLYPrJvr8AqRqEsCew4JxE7i3D7VoCdavqHY84mnY13JPf&fallback_url=http://download.komputerswiat.pl/gry-i-rozrywka/.../minecraft-by-zyczu?altTemplate=dlUrlWithKsPlusGiftHtmlFile

http://www.fungrabshare.com/c?x=vW7fTaGiiJl52K3BvXMJDWlUYnWTqX8vOaSHa7S8rIM=&c=LYm3p1RneVxHHttTWi0bwqWkGNz5qP8cVGz/LdVrCoKr7IWywTaQxuLrQBmIA3pYI24tbUfyDoU25 59VO6/wKr2cR4BLkRJnggL3f4ch53EwOhQ2orAo2TwjlmHwCFX&fallback_url=http://download.komputerswiat.pl/gry-i-rozrywka/.../minecraft-by-zyczu?altTemplate=dlUrlWithKsPlusGiftHtmlFile

Remove minecraft by zyczu 3.3.3.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.