home

the-sims-3.exe

Leho

SetupSpeedy (Fried Cookie Ltd)

The Fried Cookie installer utilizes the InstallCore download manager which may bundle additional offers for various ad-supported toolbars, extensions and utilities. The application the-sims-3.exe, “Leho Setup ” by SetupSpeedy (Fried Cookie) has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions.
Publisher:
Sobodako   (signed by SetupSpeedy (Fried Cookie Ltd))

Product:
Leho

Description:
Leho Setup

MD5:
28ec2f1f9c1f069f8e5c2a7117befb67

SHA-1:
d6729f25898224612e837e824c75c0f27e110114

SHA-256:
b095d3336e13bf3d56afd667107b42f1efb142b5ff9dd280d97f757bf38bdfd7

Scanner detections:
1 / 68

Status:
Adware

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Description:
This is also known as bundleware, or downloadware, which is an downloader designed to simply deliver ad-supported offers in the setup routine of an otherwise legitimate software.

Analysis date:
12/26/2024 5:43:11 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCore.FC.Installer (M)
16.3.9.13

File size:
1011.4 KB (1,035,712 bytes)

Product version:
2.2.6

Copyright:
Web Lite

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\the-sims-3.exe

Digital Signature
Signed by:
SetupSpeedy (Fried Cookie Ltd)

Authority:
GlobalSign nv-sa

Valid from:
12/17/2015 2:09:36 PM

Valid to:
6/8/2016 5:12:50 PM

Subject:
CN=SetupSpeedy (Fried Cookie Ltd), O=SetupSpeedy (Fried Cookie Ltd), L=Tel Aviv, C=IL

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121EF8B655959B1CFE34F05FAFC8D598305

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:exSG+tVxyzWedCCktHLrAaVTdbuvePvmU1BgPBU2B+AM0sLJ:eMfTcpk1wauePvmMBgP1BViJ

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, 53, C9, FF, FF, E8, 9A, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, 24, CE, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, 24, CE...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file the-sims-3.exe has been seen being distributed by the following 16 URLs.

http://www.bitssigncurrent.com/c?x=WV8tgrv2EdT71pNet8LCHEtz51dsXgnqtqvJIF36s84=&c=6zSEggQV/xG1yfTYuybsnRoXaw47zSxbz2yZyLQod/ZotAhj5LKZrHWpGUOFG2/DwDjq5axusMosNbqBaMBlJXyimdznKc29YlCttdWS3zmm2dvp2bHklGOBx3akwMQ hvCwmzUZPSlz6uCoGka4DMXabXy5f7euzkzYQJ2nLi4=&e=0&fallback_url=https://secure.inndl.com/.../the-sims-3.zip?st=MtBUZ9CqXrLj74cxRHOtig&e=1459760134&downloadAs=the-sims-3.exe

http://www.citypackagetown.com/c?x=NCRSzLF8pRV 1NaWV20P7AklovWhrWJXWFELSkzEbaw=&c=4isauwPHEAFHQvmBkDoLBWmlpeu4z/5qWA4ZXDAE1C00G1tdsAZVg8GBXwNK/DSKdCZFNPDMNCX2/it0ohHG6GQX8zMWMnF8WozVD418E NafD2GysFH bRsLdIssVl8L9m pvyKWgPN/VHmtF1hXT/EtxkHXh pbEtkidRt8hw=&e=0&fallback_url=https://secure.inndl.com/.../the-sims-3.zip?st=VFZfqOWbqXZDnivHdmyF-g&e=1458588500&downloadAs=the-sims-3.exe

http://www.hostsendcycle.com/c?x=LIZS5r5CtDXNZbkBM3ugavOKVyw1t8KzuQVjeqahH7g=&c=W60vAIqgJrOe9FxfDobpOUsbFWbTN/si51grjXrCQVeUtQI 2whp6YYBPDNOSwpd5jVP85yW9TWBiU8DLZPmqUqjMq0tQ8Ewmf0KArYtsY 9MZoX5bOXzXw2y9G4/psT g/9YLsf9nKGVD2uRDApiujY7mtV6eWjbS0BylLhPu4=&e=0&fallback_url=https://secure.inndl.com/.../the-sims-3.zip?st=Ygqcp1dKU5bOcDvvFMK64A&e=1458487175&downloadAs=the-sims-3.exe

http://www.bitssigncurrent.com/c?x=4HKp31IW8c14z FGPyZabVJ/UOco 7w5ouhGz3Ly8DA=&c=GORaR7N0t/OwEzDykOqTjnXYy2UJoATGaUTzMzUIlkowdyhMI JyhCb7EBG85av tY5h8khoijwc o69Ccd4ex3U766KV1NbYACawUIkjZ30fnZfSmHL6n2Dd6i2dRFt8l9dhGquRCvi5HsaJC97CTqdmWilmcQhrd33jIJ5AFg=&e=0&fallback_url=https://secure.inndl.com/.../the-sims-3.zip?st=1jWb7pGZ0V7gbOYme01i3w&e=1459636995&downloadAs=the-sims-3.exe

http://www.bitssigncurrent.com/c?x=OKhlDp3z0ZBOcRRQrapsqF5wN8eUkBoLFS6So5gQ0Yc=&c=0AuGSi826WbpnUp4iszZ/Bu2Z58uLRmIbcKGY1qEB2HBnZZehqPyeONpNgDlqowyXG122d3expcv7jW/YJcyeTVjDwm918xwVUBX50r 7P2qlFhngLqvaXVu4R7KiuwAA8N/KxQNJyjpGoz/1Ve5SVby8gTX1LR6PVh2Z3/4gEc=&e=0&fallback_url=https://secure.inndl.com/.../the-sims-3.zip?st=GdzHLwY6THG4OfyuNxVdDQ&e=1459653706&downloadAs=the-sims-3.exe

http://www.bitssigncurrent.com/c?x=qMWUaEcjdfM6FBFB4W2sX6iN0OiswcaxYeZOqaTODmY=&c=wRhHKeXqJpFlLRAtGVV0yFYXaJwPZe8o6792HWn/kX6f kQULVSPvOCz81KygDp0nlJqGThekz1wQMaL/GbMqCt4AIXAzTZj8ZqUeYWQldcPMmMxXZENjed3sbaW8/6bUlMI e32sv7Vb3KkNmBCSJ0YASd9FOxijlJWY2zoG8I=&e=0&fallback_url=https://secure.inndl.com/.../the-sims-3.zip?st=0k3jCQyUGbD2f50tT2dH2g&e=1459462846&downloadAs=the-sims-3.exe

http://www.bitssigncurrent.com/c?x=5pzprg83OS4kh1Y2s17hs0GHMVJXGRyWo1gkiztohbk=&c=nDj0aRKqWXLRhijwRVodKXEM0D5GzCcmTopZ28P0QIRC1iv9UgAW09G0cFNiE3/3GELScSWGArE0CnSJnPxvViHXogZvPv5hRiM8J4HFdSiYSVOnjgrg6dw3zgHMwjcQyJs6BoErto88MDf1hq tyL1C6h0wjEgxL2bzruK7RiE=&e=0&fallback_url=https://secure.inndl.com/.../the-sims-3.zip?st=XdFnHXnEXnArcCw5SCZMsQ&e=1459787776&downloadAs=the-sims-3.exe

http://www.bitssigncurrent.com/c?x= En6x7kWQWy8Q/CpIr0gyGsHVU 7ray8KOz8nztrMtE=&c=GHZLz/Ap9Gfl0p2CCxn7h2rGv5w3TZn32taxsM2 HkZjC2B1Nm2dVITKutHdz7t7ptzBzvfuMGt qHLejvvT5O/dgf9jBpzB8b5Ei9QFa6CIJTN8WJp8WN3ZYMvc7CHsLb0LUCF8lo9mM4iIRpfo1ijI/TxKAf2Yp5rRfyHu2ls=&e=0&fallback_url=https://secure.inndl.com/.../the-sims-3.zip?st=eFHvLe-LLvS0mfDD-ukEmQ&e=1459544380&downloadAs=the-sims-3.exe

http://www.bitssigncurrent.com/c?x=LjSwtfctzfQn3YC18HNBOUIxPxk/yZYadr9bzT88UKc=&c=X75Km1w7BHYFqrjK53jocHsJUBpDS/dMSVOvXl4BVp/Ncy43aWwBbPrxoWGfKQKSNMswXsxjTAlmpxrKIl6zM0pY6wRrgtRnjgV H3fbCvR7VXRRLbaVNo UM0vIioc/Vy0vVucXzDLYJdimpdP4yQ2c7fpZYiLv3MaAi VEHGU=&e=0&fallback_url=https://secure.inndl.com/.../the-sims-3.zip?st=l10qRIMJCV8IWHHVL1fWYg&e=1459078514&downloadAs=the-sims-3.exe

http://www.bitssigncurrent.com/c?x=Z2D0p2uOcuIyFKCZWPNakGb pliMVctMzsyKN8Xqsno=&c=VT26yS9B 6yRel/AjDlME9Tc7HGGSOumlMjBOkbjEXgmoaewV2fOoWG8LpYfiEtUt3b2b9UwYBXrD uyHhx4IhAW5grU9uJNVoxzjCtAaD01RpvUprk/U6yTpYpt0yuGyfB4IN22MGQXyuOAH51O9j72Oi148GYk/OfDiogYJVk=&e=0&fallback_url=https://secure.inndl.com/.../the-sims-3.zip?st=M2SqrXGoP5_SbBM-Il3Zkw&e=1459711792&downloadAs=the-sims-3.exe

http://www.bitssigncurrent.com/c?x=ZudD59byBi/CSIBCoevJ0diD29NUp 0H74x7dMP 0M=&c=0WsccuKFLoa/rYQ9/u1W9g Zzz0sWU7a8rlmHIU0Nj Bwa4CiWoGLvDc9uadJ5RkHSL QR0rgP7cN2hvv9jAcDca0UsZrC09cCJ1/zYiIx5cGLou9XJUP6F7hDgl11KxrZje7bx/dL0uEx6utAyG3WFLc3dbQ7nLvTlpQexBcS0=&e=0&fallback_url=https://secure.inndl.com/.../the-sims-3.zip?st=SHK1l7m120f3NuUPCiB2ew&e=1459541810&downloadAs=the-sims-3.exe

http://www.bitssigncurrent.com/c?x=TcokKgTIiE3l/0RI5rFoGzowiTmCNN2JUo3xulzCzu8=&c=gge7g1lvyDQWQOgj/TAulRetPz6pd/TxH9mqmaixbv GHF39sGz9T4kdCtNK/k9EJtXRwl/0vwhxLy2x83nNbY boEIBjB rZeHrnWFHi 65Q0bEtLpyI9g dF20vbmPh/nS85eTTatsapCJWBRPGy6ODk6wZrLDJzunXyfS3yY=&e=0&fallback_url=https://secure.inndl.com/.../the-sims-3.zip?st=WUpBVCXduH5WgZW0kjDfnA&e=1459276968&downloadAs=the-sims-3.exe

http://www.bitssigncurrent.com/c?x=j31pJ6j3tSVnQNy3gsI/9OdYDfmgBVAIH9mE11ooI38=&c=rRwuHSQDIJacOaNOhtPz 0Wlg/fFihujpiAu7AWBec1MJYubN4Zeh5/ibh4Xl9cI 5uMdvtGHMyzMNytFqZnB6j7GDPxMntAT7YCNwTjxgcclQ FkM8e/Y0x6FCPi/PpJwbj k/wqaDkKPlQf GEcQ3hBOoztqAvlrZ/TtVdZOw=&e=0&fallback_url=https://secure.inndl.com/.../the-sims-3.zip?st=6_sB34AR8rTfJuP11JoqXA&e=1459126563&downloadAs=the-sims-3.exe

http://www.bitssigncurrent.com/c?x=ZFBNfxLcyLjWyHdHvv7m9U1yX9CMdekP4GGC lIljCw=&c=MfjfY9Fw7vw0DZcMIAcJZbaQ 3G1jVXN4uBxptzp3Mnh/XEpYoSnejzk0uQJ LvL8WuCk/3iVqUztJ9uzrGEEf7rd2YBdYb4qdsHDXEoHBfmeS11r3iYmn7lqKHBewbgKnE/8r/178438JM5L7lNQKV28UL1ctZwAnBS6lwCJSA=&e=0&fallback_url=https://secure.inndl.com/.../the-sims-3.zip?st=0tA0ZLOrx5oXlsftKaB_kw&e=1458848393&downloadAs=the-sims-3.exe

http://www.bitssigncurrent.com/c?x=HFHt1boHJi8791XBayEQY9CmkboODCGQEcLOXVJ E1s=&c=mE9Tlrvno0bYH98JRFY4AmQ9WDwo86fa3paRNzE7B7gNRLlDFKYwYa/zdR4r8S6p/3hNXQUTnPXGE 8TbNkzelTI2eW3o ZQmWyBZ3xhMpzg0HXfBoa vM2iHbqpwGG4 eudB8OUfVF9mwSo0USaVUqZ4Z0NyfF7iW2iGDrY8RI=&e=0&fallback_url=https://secure.inndl.com/.../the-sims-3.zip?st=UV03ebeqJ4MnF_2ApFevVw&e=1458708010&downloadAs=the-sims-3.exe

http://www.bitssigncurrent.com/c?x=2ojmRhA2kD623fY4k9TTDlGL2eZVbayJgIYcVRK1uco=&c=uKnRf5Pql aFcp MgXz4gGM7A5lJ935wKq5E4x4OJQctY4jNLuKlAXQ3f6aKIYOG6BeEZAzu7kSHFRU JYAsZUDqgp3Q7prhLp4/PJ5 oEx2pQlan1NVJwxpvmWVqWACTu2776p/9BSmQWWEq4QXgQoPXGQnG6sak5BGr/TOdNk=&e=0&fallback_url=https://secure.inndl.com/.../the-sims-3.zip?st=XwXfjYJypsOrjbGCETQJKw&e=1458853285&downloadAs=the-sims-3.exe

Remove the-sims-3.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.