» picasa-12733-dp.exe
Overview
Analysis
File Details
Downloads (16)

picasa-12733-dp.exe

Ran

Mode Beta (Fried Cookie Ltd)

The Fried Cookie installer utilizes the InstallCore download manager which may bundle additional offers for various ad-supported toolbars, extensions and utilities. The application picasa-12733-dp.exe, “Ran Setup ” by Mode Beta (Fried Cookie) has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions.

File name:

picasa-12733-dp.exe

Publisher:

Hesudemo (signed by Mode Beta (Fried Cookie Ltd))

Product:

Ran

Description:

Ran Setup

MD5:

2adebb9b4b716eff8e1a7b7ce62039db

SHA-1:

c426eb7cd77c413b3b9d8674289d63054f93c19e

SHA-256:

2a8456310326585572089e0541d971430d55808f5f4abadcab52c7112a94a611

Scanner detections:

1 / 68

Status:

Adware

Explanation:

Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Description:

This 'download manager' is also considered bundleware, a utility designed to download software (possibly legitimate or opensource) and bundle it with a number of optional offers including ad-supported utilities, toolbars, shopping comparison tools and browser extensions.

Analysis date:

11/24/2024 5:51:08 AM UTC (today)

Scan engine

Detection

Engine version

Reason Heuristics

PUP.InstallCore.FC.Installer (M)

16.4.1.15

File size:

999.3 KB (1,023,280 bytes)

Product version:

5.0.8

File type:

Executable application (Win32 EXE)

Bundler/Installer:

installCore (using Inno Setup)

Digital Signature

Signed by:

Mode Beta (Fried Cookie Ltd)

Authority:

GlobalSign nv-sa

Valid from:

12/16/2015 2:37:06 PM

Valid to:

7/7/2016 6:06:18 PM

Subject:

CN=Mode Beta (Fried Cookie Ltd), O=Mode Beta (Fried Cookie Ltd), L=Tel Aviv, C=IL

Issuer:

CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:

112172B4C29D53526C8AFAEF1C4F6265E881

File PE Metadata

Compilation timestamp:

6/20/1992 12:22:17 AM

OS version:

1.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

24576:JUmJNiRxEp+j5H6f0g46+TLjqH96oicoKhukD7Yn:JdJM6fUbHj66o1hJMn

Entry address:

0x9C40

Entry point:

55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, 53, C9, FF, FF, E8, 9A, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, 24, CE, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, 24, CE... 
[+]

Packer / compiler:

Inno Setup v5.x - Installer Maker

Code size:

37 KB (37,888 bytes)

The file picasa-12733-dp.exe has been seen being distributed by the following 16 URLs.

http://www.giftbundletoday.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

http://www.tagbodycontent.com/WVl6OTRQVk5zUVZCMlprRWxNa1pYUzJVNGIzZGtWMmxPWVVKWE1VZDFTRkpuSlRKQ2JYWldaSE50Vm5sblltNXFZWFl3SlRORUptTTlPWHBYUjI1T1luaHlaWGhYVWtjMFNYcHlKVEpDTkU5NVJGTnZRWFJRVGtwWmNHdDVOelJ0YlRaUlVITjBWeklsTWtaNE1XdG1UMEk0VmxOek15VXlRbVp2TWpGYWRUTnZNWGxvTXpkQ2QwZHZhV2h6YnpkcmMyOUlObTUyVTI5S0pUSkNTR2d4VEROcVNGSnVSMVp2YUdKU2RFVlVNVE0xV2pGMmR6UnlVMUJMT0U5S1REUnliMFJPT1UxNGExQkJlblJZVkdadFVGbFZiMHh3ZVhjbE0wUWxNMFFtWlQwd0ptWmhiR3hpWVdOclgzVnliRDFvZEhSd0pUTmhKVEptSlRKbWMzUnZjbUZuWlM1a2IySnlaWEJ5YjJkeVlXMTVMbkJzSlRKbVozSmhabWxyWVNVeVpuQnBZMkZ6WVRNNUxYTmxkSFZ3TG1WNFpTWmtiM2R1Ykc5aFpFRnpQVkJwWTJGellTMHhNamN6TXkxa2NDNWxlR1U9

http://www.dltowersbody.com/WVl6OTRQVWswYTBkTU5VZG5OMDgyWjNBME5HdEJObkV4ZUhjM1NGbDNPVlp6V0RSeFpHbHZkRTVPUm01WEpUSkNieVV6UkNaalBVOXlkVlV6V1hBbE1rSTVkME5uVVVObVZETnJNRmx3UzJwV2NsVjNVR1pzVGxJNFJGRlBSMWRhU0ZGcE5sZERla1o0Tm5wUFMzVk5jMDVYTm5KRE1VUk9iMDFTTUVsWlZFTndWeVV5UmpOWFJYRnBTbHBhTkVSQ2VuWnlNVVJGZGs1NWFraDVZMmxPZGtOdE5tVlVUbWRvUzA1U2FXZFpSelJoYjJkd1pITmtORVpHZGs5dFZsQmxWbkJXY0doQ1VTVXlSa2w0U1VGSmF6QnlRU1V6UkNVelJDWmxQVEFtWm1Gc2JHSmhZMnRmZFhKc1BXaDBkSEFsTTJFbE1tWWxNbVp6ZEc5eVlXZGxMbVJ2WW5KbGNISnZaM0poYlhrdWNHd2xNbVpuY21GbWFXdGhKVEptY0dsallYTmhNemt0YzJWMGRYQXVaWGhsSm1SdmQyNXNiMkZrUVhNOVVHbGpZWE5oTFRFeU56TXpMV1J3TG1WNFpRPT0=

http://www.currentdeliverysign.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

http://www.dltowersbody.com/WVl6OTRQVGR5TUd4RE9GbDBlVkJGWVdsaFlsQktaVzFtYVRJMGVUSndNekJ4ZEVoUlNraElRME1sTWtacVYwOHhieVV6UkNaalBWUnNOa1pUYTNwTFNUSmpjVFIzVG5GUVptWmxNeVV5UWpKVE9WUllkM0V4VVRaSWVtVldhMnhsVTI5RVQxaFNWekJ4VmpWMFJ6TlJaVkpCV2tsWmRtUTVWV2hUTkhONk1uWk9jVk50UjBvbE1rSmtWMHB6WlRobllWSjZkVFpoV1V4a2FGRjRlVTlVWkRGdFFWUlJUMnBFV0VkNkpUSkNUSHBaT1VKaFRHaHZkaVV5UmxoWFdVbHpRbVZFVDI5dlYycEtaVU5XTjFrelRGWm5iVFYzSlRORUpUTkVKbVU5TUNabVlXeHNZbUZqYTE5MWNtdzlhSFIwY0NVellTVXlaaVV5Wm5OMGIzSmhaMlV1Wkc5aWNtVndjbTluY21GdGVTNXdiQ1V5Wm1keVlXWnBhMkVsTW1ad2FXTmhjMkV6T1MxelpYUjFjQzVsZUdVbVpHOTNibXh2WVdSQmN6MVFhV05oYzJFdE1USTNNek10WkhBdVpYaGw=

http://www.dltowersbody.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

http://www.dltowersbody.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

http://www.currentdeliverysign.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

http://www.currentdeliverysign.com/WVl6OTRQVElsTWtKMGVVRnlXRWc0UjJoUE1HaFFlWGt4U1VKTmIyZzNaMGg1TVRSa05ISnJRbnBZVjNWelVXeE5ZeVV6UkNaalBVTmlieVV5Um1Gd2RHdHdWRXREVm5BMEpUSkdNR2d5TUZoNWJqSnROa042UVV3NVp6SmxiM3B5VFVoYVFsWjNRVXg2YmxaQ0pUSkNOak56VVdKNmRFMDVjR1pMY2tOMlRIbHZUM1ZMZUVNd01tMVhUVkpqTkhkS1UyVm5kazF0YWxsS04yd2xNa1l4WXpoRmVsTnRUVEpKTWxoWFNYazNTV2xLWkhCaVMycHBaak5oYmpoMWRrNDNUWGhyVTNWcU5tMUtaRTVwYVhveEpUSkNja281ZGxFbE0wUWxNMFFtWlQwd0ptWmhiR3hpWVdOclgzVnliRDFvZEhSd0pUTmhKVEptSlRKbWMzUnZjbUZuWlM1a2IySnlaWEJ5YjJkeVlXMTVMbkJzSlRKbVozSmhabWxyWVNVeVpuQnBZMkZ6WVRNNUxYTmxkSFZ3TG1WNFpTWmtiM2R1Ykc5aFpFRnpQVkJwWTJGellTMHhNamN6TXkxa2NDNWxlR1U9

http://www.dltowersbody.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

http://www.giftbundletoday.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

http://www.currentdeliverysign.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

http://www.tagbodycontent.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

http://www.currentdeliverysign.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

http://www.dltowersbody.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

http://www.dltowersbody.com/WVl6OTRQV2hSZFdGMmNrZEZURUZZVUVSc1RUSTJNU1V5UmpKRWVERkRURWcxSlRKR1dFSkVkMEpxUWswNU56SnFRMnRuSlRORUptTTlOSGMxUzNCVFdGZEljMFpLYm5veGMxRjZaRWRFV210cFJHMUxOMWQ1TTFwVFdXWXdVMVpVTWs1NGEwVndaU1V5UmpGc1MzUllkV3hRTnpoemVXeFFaa1ZuYzNSd1MwdDVhRGxWWW1zNVZYTnFKVEpHV0VoaFZGQm9aRXQzZEZJbE1rSk1Sa1l4WWxkWVR6aFJTeVV5UWpWaU0weDVXbXQ0Y2xRemRVTkdaRE01UmpOU0pUSkNXazV2YWxRd1pFWnhjMFkwWTJkcGNXcFFRbEZ2ZUhkcVp5VXpSQ1V6UkNabFBUQW1abUZzYkdKaFkydGZkWEpzUFdoMGRIQWxNMkVsTW1ZbE1tWnpkRzl5WVdkbExtUnZZbkpsY0hKdlozSmhiWGt1Y0d3bE1tWm5jbUZtYVd0aEpUSm1jR2xqWVhOaE16a3RjMlYwZFhBdVpYaGxKbVJ2ZDI1c2IyRmtRWE05VUdsallYTmhMVEV5TnpNekxXUndMbVY0WlE9PQ==

Remove picasa-12733-dp.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.