home

opera-12614-dp.exe

Lite

Mode Beta (Fried Cookie Ltd)

The Fried Cookie installer utilizes the InstallCore download manager which may bundle additional offers for various ad-supported toolbars, extensions and utilities. The application opera-12614-dp.exe, “Lite Setup ” by Mode Beta (Fried Cookie) has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions.
Publisher:
Mode Beta (Fried Cookie Ltd)  (signed and verified)

Product:
Lite

Description:
Lite Setup

MD5:
54900010fdf2432cd85fd9427d35a338

SHA-1:
6a4c0ca4857bcd25e233f3cf327fc0847d33f2c7

SHA-256:
2e40c6470577063e067a07637ef10be353195ba4f062072efb19986fbc21279e

Scanner detections:
1 / 68

Status:
Adware

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Description:
This is an installer which may bundle legitimate applications with offers for additional 3rd-party applications that may be unwanted by the user. While the installer contains an 'opt-out' feature this is not set be defult and is usually overlooked.

Analysis date:
11/25/2024 6:26:43 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCore.Installer.Installer (M)
16.2.16.14

File size:
944.3 KB (966,936 bytes)

Product version:
4.2.2

Copyright:
Application

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\inetcache\ie\{random}\opera-12614-dp.exe

Digital Signature
Signed by:
Mode Beta (Fried Cookie Ltd)

Authority:
GlobalSign nv-sa

Valid from:
12/16/2015 2:37:06 PM

Valid to:
7/7/2016 6:06:18 PM

Subject:
CN=Mode Beta (Fried Cookie Ltd), O=Mode Beta (Fried Cookie Ltd), L=Tel Aviv, C=IL

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
112172B4C29D53526C8AFAEF1C4F6265E881

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:FTtBYvtCO6iNum4dvHgNoW+iN6jEvZJCblnxIGX:FBWvL2HgJ+iNFRJwIGX

Entry address:
0xA5F8

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, CE, 8A, FF, FF, E8, D5, 9C, FF, FF, E8, 64, 9F, FF, FF, E8, 07, A0, FF, FF, E8, A6, BF, FF, FF, E8, 11, E9, FF, FF, E8, 78, EA, FF, FF, 33, C0, 55, 68, C9, AC, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 92, AC, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 26, F5, FF, FF, E8, 11, F1, FF, FF, 80, 3D, 34, B2, 40, 00, 00, 74, 0C, E8, 23, F6, FF, FF, 33, C0, E8, C4, 97, FF, FF, 8D, 55, F0, 33, C0, E8, B6, C5, FF, FF, 8B, 55...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
39.5 KB (40,448 bytes)

The file opera-12614-dp.exe has been seen being distributed by the following 42 URLs.

http://www.funchucklecycle.com/c?x=EFImc5fWoD8J8GT2scok/sY5F1H69QqLp0Yx911Wn5c=&c=SYZP3diLeDwt7vZncTclT ucnOAmDPlGPyI ab29CBDebupkSGdeTdkca8OeS022bUfJUBorCOnN0HTRdp1SdFNM5 llHATAQdQ6Nf8RZgySh2BgNP72/4hPc8dYeiH0&fallback_url=http://get.geo.opera.com/pub/opera/desktop/35.0.2066.68/.../Opera_35.0.2066.68_Setup.exe&downloadAs=Opera-12614-dp.exe

http://www.laboratorygiftvaults.com/c?x=GsS8rrwrD0Sxnidxe3mq bePy8REsv b3laN1tPyoUI=&c=wjj3c7Nr9HgKnNIHcWpDKmr1uUI S3C0tSZb/L7C1CTk4BimANmRgnHsxQl18aFPUqb dwEHxdkth79uyzGVPV9BqC5VFRpI1NV9K46SZT5mV3LNKdFfv8Hrh0ucofx6&fallback_url=http://get.geo.opera.com/pub/opera/desktop/35.0.2066.68/.../Opera_35.0.2066.68_Setup.exe&downloadAs=Opera-12614-dp.exe

http://www.funchucklecycle.com/c?x=eTw3wwfRGup4oRNJZGuVu8Ne/k5Ot2GaeHV yK j2Qg=&c=yTEH3ai81ZnYm44 IVAJOFezMuY 5B9mlTG0fE1iVMLnpiy1iv4R BW9tCcf/SdQFwhT1ZFiuMFQ8S0M6BoAIgU9PrTrL0aJmvCAGi3z0L OEuHuGUZI1r/1Es Vqzw8&fallback_url=http://get.geo.opera.com/pub/opera/desktop/35.0.2066.68/.../Opera_35.0.2066.68_Setup.exe&downloadAs=Opera-12614-dp.exe

http://www.appranchsoftware.com/c?x=fARFhjObrGuqtjHC9Jcowabkh/IVTNtx83IiRWrU3/Y=&c=aWEWK2qGZRrh/LqF8r4ln165IhNt7MLqukDn2lH29u1VYtcUCZQ11QvP8XjAoR1m0kydB54SSdHpIHJDMhNUxWDF0lT3lDRG0rRSrmxa2eO 8aBQIPcwmGg8n1fP8dq8&fallback_url=http://get.geo.opera.com/pub/opera/desktop/35.0.2066.68/.../Opera_35.0.2066.68_Setup.exe&downloadAs=Opera-12614-dp.exe

http://www.contentheadtowers.com/c?x=XfGMMf7 0b53GkQ/gGq53GIzHijAI1KHJh86VC38dNQ=&c=RwMT310QjThKz9ToMBNFUU6EH2Xw0RmP1KIMeeivvm0QipRC/KRiGuUvrp/0FS0iSoS6WDUEJqGK1lNCbOe3w1kMPxoe8y1WPhd/FPTqWOqaliUXsSOkSKK psHu208Y&fallback_url=http://get.geo.opera.com/pub/opera/desktop/35.0.2066.68/.../Opera_35.0.2066.68_Setup.exe&downloadAs=Opera-12614-dp.exe

http://www.laboratorysenddl.com/c?x=cod9S6qkNeqfRV3gqHM3YJtzHMljfmBb9YQ8E4kJS4c=&c=yoluEQOOAR9o0O4SAjmVpw/Xywpbu34ZuHUalNRVIAVfG MM784PEm/aPRkW0VfkCFGN/X1HLeKxLGZqr cuucOjKeERGAkzuBd8L A6kDASi/RBIFXhxMCr2LFSRxzF&fallback_url=http://get.geo.opera.com/pub/opera/desktop/35.0.2066.68/.../Opera_35.0.2066.68_Setup.exe&downloadAs=Opera-12614-dp.exe

http://www.laboratorygiftvaults.com/c?x=T6OhniPGSIDlPF RdlwGdhyW99pPbaNy7mXuT88Jw g=&c=XhMsnSmgnarqRoC2bUVL8q42qCt2 wIFf1CW44ecMt2hTH 0RCz5D4OhwTKJ0a4Ese0wR4UNe79hDlY5W2urFQYV/WOSbpCTBp966JHa/Q9OrdOkUijZR6 CnELJb94v&fallback_url=http://get.geo.opera.com/pub/opera/desktop/35.0.2066.68/.../Opera_35.0.2066.68_Setup.exe&downloadAs=Opera-12614-dp.exe

http://www.contentheadtowers.com/c?x=tuZonjLYTSIHPJOcCHcXdd1N95WLz/H1V5OYpsiURKo=&c=Z0IZCBWe/uzPAnIXvRouirJxwYxlR7yucRqZhOVKuaGNNnu4RYM1LHrm7fmQ6NUvZ2YZ9UowvsMLUmnqq6ceHJKvjF2UtQqwP3tCPZfrTvI2Y12/mrLkADAUFfqPExtc&fallback_url=http://get.geo.opera.com/pub/opera/desktop/35.0.2066.68/.../Opera_35.0.2066.68_Setup.exe&downloadAs=Opera-12614-dp.exe

http://www.laboratorysenddl.com/c?x=ndviFub5HzDQMoy9rIjbs9N05xHfgT4YhPUN yJFVK8=&c=TIzjml6orbVmbLEzpf2YBD/XT8hXzymWqaUlreMt9bbs5BW9eB1vIQVikTY8E3oCFBcAYZr9WKqrgV/S rsbF5VGPEuQsnv957h2KfVitJWCFqgwKvhd3faxNSVqN3yh&fallback_url=http://get.geo.opera.com/pub/opera/desktop/35.0.2066.68/.../Opera_35.0.2066.68_Setup.exe&downloadAs=Opera-12614-dp.exe

http://www.laboratorygiftvaults.com/c?x=VarVDyGxIT28xbGY1VxLjMi4UTidGh7hnFu0Hh7Ruwo=&c=eYVlPWMs qg N9JMP5qielZvvrRwhcnPB4JfpmHpd 1mUQ92JTmL/7s1v7I2NgtahUFIRN5cuen qQxYV2IooPlUeqA2Y7ayjmrmkbr/t94Sj5fBerIN/PaJBsCmwuKf&fallback_url=http://get.geo.opera.com/pub/opera/desktop/35.0.2066.68/.../Opera_35.0.2066.68_Setup.exe&downloadAs=Opera-12614-dp.exe

http://www.appranchsoftware.com/c?x=g/JdzV7E4cIMElYlGKXM8KeZ06Nbw8AMyJ/xqNIT55U=&c=/3Lh4738f9/vlz3vZp4VVvLXcvnjf4e8uH/8WnRoY7fD6x6Sf6lOn5LwlMz1b/IyIT1VmeGn96DS5pRXB/6JLB88CkRmAYFPhVcGy9V WCLNp3iFV 8dUhzPk3WCGqu1&fallback_url=http://get.geo.opera.com/pub/opera/desktop/35.0.2066.68/.../Opera_35.0.2066.68_Setup.exe&downloadAs=Opera-12614-dp.exe

http://www.bodytowerfun.com/c?x=bTGkn2HIB4iTzR7sSoCSM5S85e/ZajtPcalXvOjNSsM=&c=LXZ2aY hROlm5hBhddYsRw768p1EXML3nB8HWViyx53mXl/UIi5R5QKna6gpTemHDk5vEXpNZAmREmClEjrK6nTwAnIoULEpMHKH krlRJWpkM6Uc7sizux7ZS1syGrd&fallback_url=http://get.geo.opera.com/pub/opera/desktop/35.0.2066.68/.../Opera_35.0.2066.68_Setup.exe&downloadAs=Opera-12614-dp.exe

http://www.contentheadtowers.com/c?x=dJV52RrFixWNvyi7FT0NNtyCd7Ieru9bXLoxoymks7w=&c=1XQKhd1wRlVm8dk/kHvC9zY1Z3jVaKagcP7r1MYqAahfH2YhQQsMrfvcRorGvAYAI7D/hKIbszRNDqVp1BS49fInk/28Llsjg7 SU WszNc2flBEahdtyuTyZ64emyq&fallback_url=http://get.geo.opera.com/pub/opera/desktop/35.0.2066.68/.../Opera_35.0.2066.68_Setup.exe&downloadAs=Opera-12614-dp.exe

http://www.stockcentralcycle.com/c?x=rAIql8u85DaUPaFFUEFdoSTOj3A0iX/1pSCo3IyoyxQ=&c=FG3M7ypIvbe21aHzlLrXRl3WCWMC7Pzo/WwmpMR2hYjvg5FFb2WwbFtDIKdvUfrI4awqqIWWS/GNbMtMiwcI1Voile/feY2znEwvpER9YYiC qcpeh4YeJnDqf9DlGnH&fallback_url=http://get.geo.opera.com/pub/opera/desktop/35.0.2066.68/.../Opera_35.0.2066.68_Setup.exe&downloadAs=Opera-12614-dp.exe

http://www.laboratorysenddl.com/c?x=XHUKDqGVk0z4yJKTjaudZlixzEe9RR4ubyQXVt4YH24=&c=Bg74FpI51LR/t9S9S0cJcpQemBX9f7pEfb7X4r0t6NGOXdj 07Xhy4lwUhcKy1jWj0P BfFLtMW4S0uTiWnKfSxkR1HDa/wtSTLp45s8m 7oaqT34hpHYPYAb6zsWeb9&fallback_url=http://get.geo.opera.com/pub/opera/desktop/35.0.2066.68/.../Opera_35.0.2066.68_Setup.exe&downloadAs=Opera-12614-dp.exe

http://www.stockcentralcycle.com/c?x=0pTgnv7IhhNTx2JYp6Zyv59setddgiX0PHGna7skb s=&c=aq8Ytg3D4HybCQGPv97aI9RWk4CpE V7tYerwKw6iQAmGvRolnmAACa5EiI2Uf4OxBZlKFrBAJGcL40A9boSlS2ETUTcxEByl4CYWwgABVAm1QYFdkYv1FypnAV4MJ3s&fallback_url=http://get.geo.opera.com/pub/opera/desktop/35.0.2066.68/.../Opera_35.0.2066.68_Setup.exe&downloadAs=Opera-12614-dp.exe

http://www.contentheadtowers.com/c?x=7Vv2NNaLUBcmjFNBUKlnBun/R/fA43QpEQjvRS7pPhU=&c=NNnJdVdnH04Lf/6rMga6QHTZN5de6xUp91y46xbM/KX1iOoLpugL6kYrL05HYN6pawrVTsz6GQMwicrt8bOPCFm4olbI81fV6nOZ4EZ3Mzl/sJGK8jtttflvT01SUpCE&fallback_url=http://get.geo.opera.com/pub/opera/desktop/35.0.2066.68/.../Opera_35.0.2066.68_Setup.exe&downloadAs=Opera-12614-dp.exe

http://www.laboratorysenddl.com/c?x=wpPdKELr2tFh0m8J3kHyN/A2oA6jRPmNABBoEegv6iM=&c=z5hdpUCaiVqAffGHIC1WRSb/GGdPnFxKsRrwK102DL02f5GdY/FKrjSUuzlh4JQtSaBrGPVryvqbSwueJHDyxRnkOPUBoCLSG2vGeFp5R7Yoy0xLHW8e/35ZqdTwD4U &fallback_url=http://get.geo.opera.com/pub/opera/desktop/35.0.2066.68/.../Opera_35.0.2066.68_Setup.exe&downloadAs=Opera-12614-dp.exe

http://www.laboratorysenddl.com/c?x=B/o/uVgIQtbBrmEfUkCJESqb15VE2Tk1YP1EI91AHiA=&c=zM6XTZdDhQcqtjLIGpM6XXyV1lPthrDaGjUJWp4l1HpVGEVGfy 6aUhId84pn5EX7ymmsUD5XGX5cKuvPwtujYkgmECpk/sGVfcsUlz//19GMGMecIVVk5Xx07ywq17I&fallback_url=http://get.geo.opera.com/pub/opera/desktop/35.0.2066.68/.../Opera_35.0.2066.68_Setup.exe&downloadAs=Opera-12614-dp.exe

http://www.laboratorysenddl.com/c?x=sYr7f5dJg3zEmMaMZlz2O 8gU128biFBySL/3Qp4w6E=&c=b2vkK9tbVOpUu2abTICPXMZS4pHkA5a5EVmfZleSjA5YFmrokwZ5GYVPJrWq9fthKQij3EonuHDNbPYpmVOw2BaKFKd F3pvUF/f5tCuIJwxQBfYf7LM/DoPcIpJzu8f&fallback_url=http://get.geo.opera.com/pub/opera/desktop/35.0.2066.68/.../Opera_35.0.2066.68_Setup.exe&downloadAs=Opera-12614-dp.exe

http://www.bodytowerfun.com/c?x=NiedhugGU89 kL5v /dwebVYP2MEHPi6Q5OZj5 Le/Y=&c=8zbFuOCtKCddCz5Ip8OeO7 2SWqEWWrfN5xMM2T0F0ulbUndnl5iqJMMG9XNOp/z1c2beNZ9pcBFR5BqkmfqLxp/ROIQiGQFiMQL2q3CFqezkMYqD5u1bEy0ca2aYEv&fallback_url=http://get.geo.opera.com/pub/opera/desktop/35.0.2066.68/.../Opera_35.0.2066.68_Setup.exe&downloadAs=Opera-12614-dp.exe

http://www.funchucklecycle.com/c?x=xIXMIm4TXzbsvD0QgykVQT2S7CSggEGZ1JD xRIYzcg=&c= Nf5rFxw SWBLA3g5i8uMv38fmeK2P4Afbazi 2hbVMG3yV0r0SipV7nXNmG0Eev5CBiWNwPh2yuphY3ufEEI bLNMkdMZCdnyeHMDNx9PlkxRbdp/5KkufOshn7qdma&fallback_url=http://get.geo.opera.com/pub/opera/desktop/35.0.2066.68/.../Opera_35.0.2066.68_Setup.exe&downloadAs=Opera-12614-dp.exe

http://www.bodytowerfun.com/c?x=gWoMeh3/A1vXEwwbngxQ/qF4NqcP nuG HGQpA2TB9A=&c=3N07H6OtvJBaYKN22AONUGvMDrLDQc885fVCT k5vobDrqVoKzV15VxDEhyEy5N0I2cyqJ gLOlYomn/mr2fzgyzfc9sf2QfFO6QcuiavmV8W/4X8FzUQbOG ALyTBJM&fallback_url=http://get.geo.opera.com/pub/opera/desktop/35.0.2066.68/.../Opera_35.0.2066.68_Setup.exe&downloadAs=Opera-12614-dp.exe

http://www.laboratorysenddl.com/c?x=4xhluz1IqbMMEr1xqx6ySIuR4YgNJ/LSEXeiyQjLR1M=&c=XhW2dAR4tnFiCPLTB4CwxzHqcFg2hKzlgGyDTrYicAx MQZ7Vaq4jsG7kbDNdxA2hDtLTIK580tIVQ2qi8mJk7kFn30PBiLzgoKSYduMuTVKzo1jWfmZ4ksZI7UCY0bD&fallback_url=http://get.geo.opera.com/pub/opera/desktop/35.0.2066.68/.../Opera_35.0.2066.68_Setup.exe&downloadAs=Opera-12614-dp.exe

http://www.laboratorysenddl.com/c?x=FHbGMjQohCFMfTxaMwyRxyYGS0huKkGfpm0B/cahOPg=&c=RJPchEO1CKDkXtyA5cPQeE1iYyRr jl/bNQMs7uySI2v9XdbPSckZlJgpvF8kTgxfe7hMwqGTVwh2RMCEktBahVXIzJF i5d9RdMjtyuUHcc67PgTSKPgm7JFQ elkPv&fallback_url=http://get.geo.opera.com/pub/opera/desktop/35.0.2066.68/.../Opera_35.0.2066.68_Setup.exe&downloadAs=Opera-12614-dp.exe

http://www.contentheadtowers.com/c?x=smxfXUr bc4tfdpAhSxQk91hvSRz8j7btKb2xp2 VHw=&c=yeILYK8yrsG3vxAjIe4SVEziDHl1O3Kzx/VvdraT7o// tZAQ0whik72Z8/r 8j7hOmbfO5Iw3cZ0uHhlL6G 8D9WulUkc1V0Z9fNvaDCjNF1oiJoMBSDoNeyO9SR Ca&fallback_url=http://get.geo.opera.com/pub/opera/desktop/35.0.2066.68/.../Opera_35.0.2066.68_Setup.exe&downloadAs=Opera-12614-dp.exe

http://www.appranchsoftware.com/c?x=1AIrRu5DCovuyLYtLjI/1YAeqE42ynZ5KdgZc2b1TJk=&c=xXImrYcG7Gu3CPVPPzsGQ1 3TpbNqInCAqnsTj2wvHWKAW4Qm Dh/RQYK9 Q7 qxH83RRKCBnOg2 NXHboEsSQkKlA SCCZ6V6f20RJQVnPOdODK6dz2LweGN U9E00H&fallback_url=http://get.geo.opera.com/pub/opera/desktop/35.0.2066.68/.../Opera_35.0.2066.68_Setup.exe&downloadAs=Opera-12614-dp.exe

http://www.bodytowerfun.com/c?x=WOKrBqARQElwxpF0wwQIVSZ21/gOgg/bpK XU9uR13Q=&c=YWP5EzqnSDQ NQwX/nfxED9d7zEEWiebabU8Ph2vIf46OB/JXKLfiJN8omk9LE0FQGN 6blUzi67lqLP XgfdPq3DyTpMdYvXBfwyIxXvm8R QDdroQY9z9oH8cHNqNj&fallback_url=http://get.geo.opera.com/pub/opera/desktop/35.0.2066.68/.../Opera_35.0.2066.68_Setup.exe&downloadAs=Opera-12614-dp.exe

http://www.laboratorysenddl.com/c?x=DVOMkWsynaTxoa9u EXReLShpyZaMiHAYBgGnEKbf4A=&c=u1ckPYxXnQyQzTiTgE89ddwLNXMAQ2fG/wYKwoC DApzZF9eW99yMl8x4OVL4qd0ahASCHKjFzpiN9ZigOzFj1cG1BC97iGWA8lTlqk7KMBOgwlVR3nm5u9hKc0JwjN/&fallback_url=http://get.geo.opera.com/pub/opera/desktop/35.0.2066.68/.../Opera_35.0.2066.68_Setup.exe&downloadAs=Opera-12614-dp.exe

http://www.laboratorysenddl.com/c?x= l6bmAAEZDgJVagYT4o6OlPXQxAT gG56uWnrTGjt8s=&c=uxPv6l6W4dsIFX6jjFH/7tdFErabQCyroNY3B8GFGwkr80LCxmDljAVVxJZAjl ZRBQKvCa2XUE0Y71H/mt1T9spZe0C3zczMmyK LPRl/ezSuzgtvkorujHaI3B8L2t&fallback_url=http://get.geo.opera.com/pub/opera/desktop/35.0.2066.68/.../Opera_35.0.2066.68_Setup.exe&downloadAs=Opera-12614-dp.exe

Latest 30 of 42 download URLs

Remove opera-12614-dp.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.