home

opera-12614-dp.exe

Lite

Mode Beta (Fried Cookie Ltd)

The Fried Cookie installer utilizes the InstallCore download manager which may bundle additional offers for various ad-supported toolbars, extensions and utilities. The application opera-12614-dp.exe, “Lite Setup ” by Mode Beta (Fried Cookie) has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions.
Publisher:
Mode Beta (Fried Cookie Ltd)  (signed and verified)

Product:
Lite

Description:
Lite Setup

Version:
5.3.5.2

MD5:
fc049f0155f28f26223de1123c070ff0

SHA-1:
c218d3111386c4058e504f66122e7c412f843df4

SHA-256:
88572990c961c365e642e8f35dc5c6985cf9eb1bdfca57187229f4d1affd0204

Scanner detections:
1 / 68

Status:
Adware

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Description:
This 'download manager' is also considered bundleware, a utility designed to download software (possibly legitimate or opensource) and bundle it with a number of optional offers including ad-supported utilities, toolbars, shopping comparison tools and browser extensions.

Analysis date:
11/25/2024 5:56:42 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCore.Installer.Installer (M)
16.2.3.19

File size:
941.7 KB (964,344 bytes)

Product version:
2.8

Copyright:
program

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\inetcache\ie\{random}\opera-12614-dp.exe

Digital Signature
Signed by:
Mode Beta (Fried Cookie Ltd)

Authority:
GlobalSign nv-sa

Valid from:
12/16/2015 2:37:06 PM

Valid to:
7/7/2016 6:06:18 PM

Subject:
CN=Mode Beta (Fried Cookie Ltd), O=Mode Beta (Fried Cookie Ltd), L=Tel Aviv, C=IL

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
112172B4C29D53526C8AFAEF1C4F6265E881

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:e7wo69LPa5MW6cJuZdBNxZw6MU9n9xPaVgySsDizQO:eMpLPgGM6MU9zCVjREQO

Entry address:
0xA5F8

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, CE, 8A, FF, FF, E8, D5, 9C, FF, FF, E8, 64, 9F, FF, FF, E8, 07, A0, FF, FF, E8, A6, BF, FF, FF, E8, 11, E9, FF, FF, E8, 78, EA, FF, FF, 33, C0, 55, 68, C9, AC, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 92, AC, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 26, F5, FF, FF, E8, 11, F1, FF, FF, 80, 3D, 34, B2, 40, 00, 00, 74, 0C, E8, 23, F6, FF, FF, 33, C0, E8, C4, 97, FF, FF, 8D, 55, F0, 33, C0, E8, B6, C5, FF, FF, 8B, 55...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
39.5 KB (40,448 bytes)

The file opera-12614-dp.exe has been seen being distributed by the following 40 URLs.

http://www.downloadstowersupdate.com/c?x=kjK7NHcN1vPhOOq6EJEkG6ZrWVQYAAcSyQ5UNuLuDko=&c=gtv3xI6lP6SP5gQZxw2jwiIVSyDRo4XBXF5ozfyL7 7lqFwPxBTM5fTwuweEAPnW3OMABqWq8u GfmPtMqs7Sx4 w50GDMLECC1 akaY8sOwZSpi2s OYZgejf3Qfim/&fallback_url=http://get.geo.opera.com/pub/opera/desktop/35.0.2066.37/.../Opera_35.0.2066.37_Setup.exe&downloadAs=Opera-12614-dp.exe

http://www.giftchuckletour.com/c?x=hj8s5ykXrndoyS6GyirHF85W0GLUbD8aERaWU2aKYn8=&c=G3qQyQpIjhkj9i6kbVOsF5qk22JQfaAzCpwdRMf2XqaaxW4BFZgtkoqHFemPjMMfudycBJAKcUZbtQ6KgWwmiH6xgFo3qVJpy9Z5u6QT8BS 1XjdQkFlApCZbtYGJX Q&fallback_url=http://get.geo.opera.com/pub/opera/desktop/35.0.2066.37/.../Opera_35.0.2066.37_Setup.exe&downloadAs=Opera-12614-dp.exe

http://www.downloadstowersupdate.com/c?x=nUgnWw5Cyr8Ruxhe/G2yMCV2Xb8KOpnNnNcR6gLC1/w=&c=AB9tGaD6syxhajYEPzumWlsFfuWre6Svf94d3eu1B/RwzJsURpezswLqNEttkAD mnEJW10u3kjZ4/pUjVqAJqW4MRTmuI60cETntg/Yakc4Nhy97RzilWed7wKa14uZ&fallback_url=http://get.geo.opera.com/pub/opera/desktop/35.0.2066.37/.../Opera_35.0.2066.37_Setup.exe&downloadAs=Opera-12614-dp.exe

http://www.contentsendclean.com/c?x=mCglYcZPPdQmCKn85IPRgY0xapFh6OcqX1e1Yp71czI=&c=T6rE6rYbC5jMZFh/objzll/XX/AgzkldyeFHnWXb3ghnZAFc4f8IpSCRIypURtbJfT0uPZZ8OH8VlAHCaX7IwEtdedO/E5R1bWDk7fiUxlofoEypmadwO UlI95MRM6k&fallback_url=http://get.geo.opera.com/pub/opera/desktop/35.0.2066.37/.../Opera_35.0.2066.37_Setup.exe&downloadAs=Opera-12614-dp.exe

http://www.giftchuckletour.com/c?x=65eyTVMVZS8loxucpYqqYOheu7zmkAtRT3gs6Oc0v c=&c=ESox2/7MGmIB4d1WsaZGzpGcjqAFSCDc5mDClO7UXSp8w6zdNNRUgmFfoFOJ5QGx b2UVFRRMdEof9P4qU6fnzEuJ9o2SEt3KYyDsYK6Ypvno0udsiTIZOKU0J/r vxS&fallback_url=http://get.geo.opera.com/pub/opera/desktop/35.0.2066.37/.../Opera_35.0.2066.37_Setup.exe&downloadAs=Opera-12614-dp.exe

http://www.stockbundlevaults.com/c?x=w/W EoiQXiAtrlE2x7Il KEmN5TQyPMqzXhvhNU4Q1M=&c=dALpD5sk z92cqNTiuiO6c6TR0Q1UMNfl9TT2IKaaHiVuxe yAfqNvdPsuabx86uTCytwKQiO7O47qpRxyquoxT3nI7sJPyvZMKsmqyJpIOqUs5Zcq7ARzXoCwaKlj3w&fallback_url=http://get.geo.opera.com/pub/opera/desktop/35.0.2066.37/.../Opera_35.0.2066.37_Setup.exe&downloadAs=Opera-12614-dp.exe

http://www.repositoryvaultsclear.com/c?x=TMz01znX4yUOm7BpwFHroAgNbQF1fsPbWZYNenxyWpU=&c=v0bvqRiN78yx3X4BfBUbYKKRlK9MqpB9khgnOyFXBt9mClqSjhSmt C/PCPzWbll8gJs/hPMMxhPW8pxuiIAtmyjNKBbLEoswjWmu0k97YA/W1ya84 ZvFohNxQcL2q&fallback_url=http://get.geo.opera.com/pub/opera/desktop/35.0.2066.37/.../Opera_35.0.2066.37_Setup.exe&downloadAs=Opera-12614-dp.exe

http://www.giftchuckletour.com/c?x=VbA5QNdkIxJUpK9dy8AIjs64/SqEmKL6ZzxqqFmXWi4=&c=3aRjZEhZSD6LrPRSj0b gb3d9XdtBe3 Gl CLMPDo6RPcahNuA57bzPgzmIJAe7qAe/8U44bHaemDm8wLkXnfRYk81PK6GSph4gKpW7bg7CG2JbwMfMbOPlQEiH9H8NK&fallback_url=http://get.geo.opera.com/pub/opera/desktop/35.0.2066.37/.../Opera_35.0.2066.37_Setup.exe&downloadAs=Opera-12614-dp.exe

http://www.bitsranchtag.com/c?x=sW6rtsbQ3EuNjd/JYFojR1loVJgsz8FujZx/vT8ddAg=&c=9i59Nkptln61d1g3t/yLKVWMrpG8Lz F68GiIx9wzqjIXhiZZ5NxD0LWfcHWxXnRU6a0 19XMpBUSpzADqHkOXDXyVC2b8ugYcKtcdzKPjYwk9vecJA6UA2pb6e0YBFX&fallback_url=http://get.geo.opera.com/pub/opera/desktop/35.0.2066.37/.../Opera_35.0.2066.37_Setup.exe&downloadAs=Opera-12614-dp.exe

http://www.grabbundlesapplication.com/c?x=tcC06xLgwEyTLx4FvWAFgZYc4NSXpENRYxeSzkmBLb4=&c=E1ZfrLiuJirFTmSLnzMbzufRT3ZFPn5OFtKGtgPKLRfPBCStZ5yhpw9j8R35BL6EscnaIi5tRmmuqyxwM9FMRqf/VwFDwX5jpk5PYH6FixMJRftMsbBI s0ej2tM/QUS&fallback_url=http://get.geo.opera.com/pub/opera/desktop/35.0.2066.37/.../Opera_35.0.2066.37_Setup.exe&downloadAs=Opera-12614-dp.exe

http://www.giftchuckletour.com/c?x=r7qdDTpzixs3Y3yoPYTCjRFFKh7q/RJTYIVKZFfeWFw=&c= SnzB9wH293a1y8jPWaBzYwworlKjI177yv8zbS/QQ2fGrA0D7AYbA3Gh3ZMv gq212rQ0Yk1UBo7h/XZ335cCdKJet6nton68374xmuCHKDSk1dKKJFzWopjdWML/1m&fallback_url=http://get.geo.opera.com/pub/opera/desktop/35.0.2066.37/.../Opera_35.0.2066.37_Setup.exe&downloadAs=Opera-12614-dp.exe

http://www.giftchuckletour.com/c?x=F4NJo2gY9JdAA6D0PC4gS/oxG7RkPTSijfKRE CVf Y=&c=x8ezpUQrY5EGy Nlmwg0EyOSZXE6fGevadR3Y2g5p92b4btYX9hZJt48oywv3CfMHK5MgP0EKgj7prtXT5A1 l5/YRkUklOiebEWXAvnLenFUHUIIuXpMdL7hZeAkK X&fallback_url=http://get.geo.opera.com/pub/opera/desktop/35.0.2066.37/.../Opera_35.0.2066.37_Setup.exe&downloadAs=Opera-12614-dp.exe

http://www.giftchuckletour.com/c?x=Hz96TqWzt10neabXOK2VludVizDqQNf4L011pljUuu0=&c=sPbspkSr4pEwu36M7Csq9xRQ9rJxvhroNMYk5Jtf27qqLs3qBJPrEeH 6EMfCJhI2Ya6aMlDJHX8DXslSDD3HfP7CK/bd mVk33QBMwsvFzOG/6lundK3Vl/faMXRRtt&fallback_url=http://get.geo.opera.com/pub/opera/desktop/35.0.2066.37/.../Opera_35.0.2066.37_Setup.exe&downloadAs=Opera-12614-dp.exe

http://www.giftchuckletour.com/c?x=h5jmDvQ74UWDe5PtEY 6P55CHtzN3Os4BmP39yk8YEU=&c=v dD17xFPaEdLLMJ3s1AYj7yRrOes 9plTSTIl6pHeQr1TURa4lbrBZlCgDIf9ZNQ1xHMuE88eCW3eD2iDwMG/25giUCF7aXpEhpfJjtM71WCWzZlWIytE V0yGY2LFC&fallback_url=http://get.geo.opera.com/pub/opera/desktop/35.0.2066.37/.../Opera_35.0.2066.37_Setup.exe&downloadAs=Opera-12614-dp.exe

http://www.bitsranchtag.com/c?x=fJAgiZHtguGz91m8ousov2pFjKYefdTnVx8L3ehM760=&c=ble DTuj3uCD658yqRG28zz3HCt3bCmoZ3JowS3c/b/492Z9vQCzyn2nDP/av3OgLS3YX6h4eGMx5zkusszrJN4SH9gU6pBKV8Q5R8x3yk8Sv0OWA7mkTBe Z1Zb7j7a&fallback_url=http://get.geo.opera.com/pub/opera/desktop/35.0.2066.37/.../Opera_35.0.2066.37_Setup.exe&downloadAs=Opera-12614-dp.exe

http://www.stockbundlevaults.com/c?x=l44K5lUJrsLYncQ18mFG4V9GNmG96iShWyz2KcZWC1w=&c=ba72nMVuZ2UQcbQ0YyqCZyIZW10LzTd1 ctavdbZ3iHhqgcU0SCAmHZJT9FlXf5omwwRwpDa5PzkifNAi2P2pnpcDs3VTQuRgPm60xipu/hyAv6OIk1e KIQ ANFCFsg&fallback_url=http://get.geo.opera.com/pub/opera/desktop/35.0.2066.37/.../Opera_35.0.2066.37_Setup.exe&downloadAs=Opera-12614-dp.exe

http://www.contentsendclean.com/c?x=I8lcU3yXmNfc3CHAttoVLQzM0sG2WAQkEFkCjh4ba7Y=&c=NFw J5yusAVM7cNTRXOs7BIcdeF8NSw5HjhHJ6t2tPrGCkwpNtdcKwNn3Pu76Xs9E6NLBVOwTG7mgG3f0aZRA5a8lu8KAr008rvSq9GyTEB/5Gu3qJOWUCKTTwWuzhJv&fallback_url=http://get.geo.opera.com/pub/opera/desktop/35.0.2066.37/.../Opera_35.0.2066.37_Setup.exe&downloadAs=Opera-12614-dp.exe

http://www.stockbundlevaults.com/c?x=JQTwZbpjNvaRzB5rgENCcMB/0ZUtANO4fipjx1sMTdM=&c=23g1VUo0wEdU71S2gbaNQEyOjXLhtfsa4RjPlEO2LV43zU5LXhuU Gy86 lWUZ1Buib3ni9qcSBmm89n1uYJjfiS0hqrnkvyJHM4 EkQaxXFD5VGXuhlIZTTw6MvTgE1&fallback_url=http://get.geo.opera.com/pub/opera/desktop/35.0.2066.37/.../Opera_35.0.2066.37_Setup.exe&downloadAs=Opera-12614-dp.exe

http://www.giftchuckletour.com/c?x=OKm1ryjHoBZ986Oeq7MqaR8SiWcSoqjYGxiukrIEwQI=&c=kSOndwThill VqE7o/PSajqYY3MPQrzXQc4HT84hMBZgilWY177Mx2AM8fOJsRgKXkNA6o1THGJwapUy8G3PRec2uA/d9mdpC0kGR3G4q2Udfs212n6NIa2OLRz BbLX&fallback_url=http://get.geo.opera.com/pub/opera/desktop/35.0.2066.37/.../Opera_35.0.2066.37_Setup.exe&downloadAs=Opera-12614-dp.exe

http://www.repositoryvaultsclear.com/c?x=ykNsJW79XdUjByPE78BRXJ67yCjNn/yh3qNsQiozdgI=&c=qLXNMtg91yQ/Jx9Q6BSs3WRv3gbgJZssP22cua wlN/9gHdhjhEHHbEbMRBiqsg9UHpCbYkZHEMCV6CPyRk0T5VQYDWOzf TED841ip jMKOAt nqB8rarRhIVm2tTYh&fallback_url=http://get.geo.opera.com/pub/opera/desktop/35.0.2066.37/.../Opera_35.0.2066.37_Setup.exe&downloadAs=Opera-12614-dp.exe

http://www.giftchuckletour.com/c?x=hLpNZdZS3Gg4U3J16kHr8q3Kjpfl5zg2lK5iK9QaxZw=&c=fKctPqfXS48bKYvH/uR7YmhbxF9FkP4qnkL0AA3ky1df9SxSSuMuajRU O1Mg/v/OI/YqI4W0ODSz/ oOTL6TKEmgZTMgTFBEC/9ZARUGAVmQe97BDc0wpztV0iSJ0YY&fallback_url=http://get.geo.opera.com/pub/opera/desktop/35.0.2066.37/.../Opera_35.0.2066.37_Setup.exe&downloadAs=Opera-12614-dp.exe

http://www.grabbundlesapplication.com/c?x=Vpr34BexmtyCAuFCPJJ/QcgtLEdIcL4nEmNBDhb0kCM=&c=CivRFWWZPehXt5jwKDTLPPohYQEq2UtPmFRYjqlzDizpQnWWMn98Yh5rbxhOK1qMa1HiGeZboNP8dHIsUzolbz2uPILqGuTERD2WkZpfhLLLiH09PS0TeDqjEtc01DCv&fallback_url=http://get.geo.opera.com/pub/opera/desktop/35.0.2066.37/.../Opera_35.0.2066.37_Setup.exe&downloadAs=Opera-12614-dp.exe

http://www.stockbundlevaults.com/c?x=OiZdzRWR37tO6x1auGRGzjNQhjwbXXva/u1klwg5Itc=&c=1MkN6jHaC3znz PFtBsyigZI9NnlClT1JFBKXYMeOv9cMFcZSKcqWZM8nRZiiN 3PJIIC2NODy SriyNlUv4hi0hZ1pmCCYNBE6YGvkBhlMcUC01/UlkSylxGi8lw0/W&fallback_url=http://get.geo.opera.com/pub/opera/desktop/35.0.2066.37/.../Opera_35.0.2066.37_Setup.exe&downloadAs=Opera-12614-dp.exe

http://www.repositoryvaultsclear.com/c?x=507FgfhITPri 3Thd6Od1GGMjrO1IYqqRBPxXGkCbjU=&c=qhWCsuZijItptVBfpTkYcstoPGhGh8wr0IaUZUe/exohAI vGejx50zb1NajudUM/9C0B7g YGOWy3bVLnzlU6KgSC33yxzCuLYM9iOHgiHGGwku62qTkKA/ypIOqzan&fallback_url=http://get.geo.opera.com/pub/opera/desktop/35.0.2066.37/.../Opera_35.0.2066.37_Setup.exe&downloadAs=Opera-12614-dp.exe

http://www.repositoryvaultsclear.com/c?x=THUKnIFhH S24mzy eqNXDcDBK3y6o0baDkigHyPH4o=&c=C7AUu1N3pqUqUbUcqvVitvgDxZ6fh4Rs8C0PQ0Ru6JuDYHi2sUMQerXRu1fboSMA9zh6APb42y5uFquS94dQzcZu92GEOSCZMsLaWb6Z9BBAfJFrPv6S927/GrArJ4RH&fallback_url=http://get.geo.opera.com/pub/opera/desktop/35.0.2066.37/.../Opera_35.0.2066.37_Setup.exe&downloadAs=Opera-12614-dp.exe

http://www.bitsranchtag.com/c?x=JZRmXVnR6l1Of9Epb/sGtN0uIPbTk7I AFcW0VA8eoE=&c= 4c19l6hitl5r4BMr/g7UPFRaqh7CFarRBZYzs/rczeV sc1AL1It4R17kzicaURht4dJ9UcPQv4hN3iZO9RNawEoCHQ6dr1PDXdc04MgYIRV/riETG8yIYPbe8Sq9Lw&fallback_url=http://get.geo.opera.com/pub/opera/desktop/35.0.2066.37/.../Opera_35.0.2066.37_Setup.exe&downloadAs=Opera-12614-dp.exe

http://www.giftchuckletour.com/c?x=HM6SCrDmFaaPHUuAy0l5KhAapKdd5TIoJzfBr9s3OrM=&c=LJ 5gtuQ8FuouXAcSNpVEn/I2Nlk97x5x1/9nRymJ/MJF11x0h0mGvsULB6RfzOZGuHQV/53RW6ynozNyJiwTy6XqQzETGbQZaZzVli4JIOhGbNlaEV0TNdJywoHGWOK&fallback_url=http://get.geo.opera.com/pub/opera/desktop/35.0.2066.37/.../Opera_35.0.2066.37_Setup.exe&downloadAs=Opera-12614-dp.exe

http://www.giftchuckletour.com/c?x=I5YuGNEGbYAn66qy18b2HVfBQcxhotcb81bN0GViDdY=&c=D0PypUtywdZxr790labrJklfGGnlp3Ewjs79056wNhgKdldL/wSESLOHnReCwOFz6CFlwDm6wJWJ1ToCedpVpgpJWOob7YU 7CUIOzpklMW/TcG5aTO1AMWEnpkBzQ8K&fallback_url=http://get.geo.opera.com/pub/opera/desktop/35.0.2066.37/.../Opera_35.0.2066.37_Setup.exe&downloadAs=Opera-12614-dp.exe

http://www.contentsendclean.com/c?x=3R/R7IuQQ5SD5Qp6b1FC66gw2CIXhh0aIx2vyt2WNZU=&c=31Br/5P3ZcqTOc5X2rG8A2sQuzu0l6oXdsLz09uKQSP/4/sh jr85j8ClkTk6JW/gUxNcYthomM1jrhp4gzdRYVIMzBicHuW5YIqzBoIYjXlgdYzK9aK6iQ3kw5oZO3M&fallback_url=http://get.geo.opera.com/pub/opera/desktop/35.0.2066.37/.../Opera_35.0.2066.37_Setup.exe&downloadAs=Opera-12614-dp.exe

http://www.contentsendclean.com/c?x=UyIn/RmxG2Ym6W2M1lzNQmDXd2oi/ixF0/3vUbz9reI=&c=3Mtwhc6s pt98hwTc4xJu6zgua0gb5lX2UkZ00JRHBqX9fJ2YGlo9ennHfbHQTpE/h0wb6QhP5zYoFC8/gCFdhpYWz/sVJzujcv8GWAKF6lvYNjVEZqSDgYWqlvbIPmA&fallback_url=http://get.geo.opera.com/pub/opera/desktop/35.0.2066.37/.../Opera_35.0.2066.37_Setup.exe&downloadAs=Opera-12614-dp.exe

Latest 30 of 40 download URLs

Remove opera-12614-dp.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.