pobierz_nero_free_v9.4.12.3d.exe

Matuha

Platform Beta (Fried Cookie Ltd)

The Fried Cookie installer utilizes the InstallCore download manager which may bundle additional offers for various ad-supported toolbars, extensions and utilities. The application pobierz_nero_free_v9.4.12.3d.exe, “Matuha Setup ” by Platform Beta (Fried Cookie) has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions.
Publisher:
Puko   (signed by Platform Beta (Fried Cookie Ltd))

Product:
Matuha

Description:
Matuha Setup

MD5:
d2366b9c6446d87072b635b9c5f7d9d6

SHA-1:
6d9fff26d87565eb8652ab3689aa5df2330810a9

SHA-256:
3cb8ef921833f22ae11638c70b15b143679b4d8f63d17a7b98c5d0f08f58f51f

Scanner detections:
1 / 68

Status:
Adware

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Description:
This is also known as bundleware, or downloadware, which is an downloader designed to simply deliver ad-supported offers in the setup routine of an otherwise legitimate software.

Analysis date:
11/27/2024 6:39:36 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCore.FC.Installer (M)
16.3.9.19

File size:
1 MB (1,073,536 bytes)

Product version:
3.8.7

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Common path:
C:\users\{user}\downloads\pobierz_nero_free_v9.4.12.3d.exe

Digital Signature
Authority:
GlobalSign nv-sa

Valid from:
12/16/2015 2:41:12 PM

Valid to:
7/7/2016 5:55:56 PM

Subject:
CN=Platform Beta (Fried Cookie Ltd), O=Platform Beta (Fried Cookie Ltd), L=Tel Aviv, C=IL

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121C446C50C8915C47DFD619121C2806B7E

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:jXF8ZOrRizYk5v63kJct1XcRoObikB2eTGhSK1r6D6GWfrE7:jV8UtxWv63qJtr9TSSw62Gz7

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, 53, C9, FF, FF, E8, 9A, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, 24, CE, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, 24, CE...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file pobierz_nero_free_v9.4.12.3d.exe has been seen being distributed by the following 30 URLs.

http://www.bulkbundlebest.com/c?x=18NEL9U0LBPiGkC89P6CrW8hRe1yVcX8CdoAuM37yEY=&c=6ysRSEzA3Yg6gmXhFInQUwV4ENf 5i Em75mNPljlrlWNItzJbTjXmqZWcCdhKElLpIHCywKDpMNy/EKWGrbN0JOLEHaPLb6Gb42Sq/tmKyYzjf23 lzSYJlnOGBv0n4&downloadAs=pobierz_Nero_free_V9.4.12.3d.exe&fallback_url=http://.../

http://www.bulkbundlebest.com/c?x=X682a8Ct04NZBPxt2gMobIqKUeMJQAGY4Vj9prQ4HWk=&c=ptslv0xewWbASPzORMpzYeQiuO9jKQ00jACHfNRdkGzxnS0oEIq4sEqZqx4qvyAAJ3tULcNnKLWNV0J0CIv3hkgNNdGgZGiaHx1uK34andxkd3Ua0JLEeRw52NG9PeFV&downloadAs=pobierz_Nero_free_V9.4.12.3d.exe&fallback_url=http://.../

http://www.bulkbundlebest.com/WVl6OTRQVkZUYUZoelQwSnhRV3BsU1habFoyMW1kVVEyUjAxMFNHdHJWSE5HYW5ONllYSTViakZxVVVOWFVFVWxNMFFtWXowMU1rRjNXVnBWV2pCaldVeFJaa3cxYmpoSmFHOWtaSEl3WjBsWVVsTkhNa1oyT1ZablJscERUMUJOZDJJd1lWZERWeVV5Umt0dGNVMDBXRU13VVdWNlNtWjVNR2swVm01VVZucEdUR0pJVDNkVU1IaHFZa0pUUTFJMmJGVkdjemQxVmtSbVptRnhSemRTU0Rsdk9GbDNOM0JyYWlVeVFsVmhTRGxpZVZvNVF6VTRiRFFtWkc5M2JteHZZV1JCY3oxd2IySnBaWEo2WDA1bGNtOWZabkpsWlY5V09TNDBMakV5TGpOa0xtVjRaU1ptWVd4c1ltRmphMTkxY213OWFIUjBjQ1V6UVNVeVJpVXlSbmQzZHk1cGJuTjBZV3hyYVM1d2JDVXlSZz09

http://www.bulkbundlebest.com/c?x=A0/k/A3t0qsMUveBZZWl2aFyxJWDnnGG1W7OL2Xsjws=&c=CUFzZGRYbnvinV j4gEU2puVvIzPLwuglj27s6eMJhJ08774rwl0VlS6QE44dlXcPsr BMsJZiB1u5f8Om3QT D3ALjUO0ciYpVPFr VraUaie2rYxAPhEDZB9EnfTqZ&downloadAs=pobierz_Nero_free_V9.4.12.3d.exe&fallback_url=http://.../

http://www.bulkbundlebest.com/c?x=Rh/EZSLFtWyFKusmRNQ2ycBEphrRQqb8re xJcubu3o=&c=coSpypSKdQyYy/rt/l2piHkREXFKDeOpDuPS6BzevvhnloN4mlO2TTXrvKkGWQTZrr1wEBWw1PS/FAzQcKcZNirycLs0hQBi11SqwwbzazjjttRpOGkheqfEKsu9TsHD&downloadAs=pobierz_Nero_free_V9.4.12.3d.exe&fallback_url=http://.../

Latest 30 of 30 download URLs

Remove pobierz_nero_free_v9.4.12.3d.exe - Powered by Reason Core Security