home

patience-2-51-32-bits.exe

Software Installer App

Deliver.com (Fried Cookie Ltd.)

The Fried Cookie installer utilizes the InstallCore download manager which may bundle additional offers for various ad-supported toolbars, extensions and utilities. The application patience-2-51-32-bits.exe, “Software Installer App Setup ” by Deliver.com (Fried Cookie) has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions.
Publisher:
Deliver.com (Fried Cookie Ltd.)  (signed and verified)

Product:
Software Installer App

Description:
Software Installer App Setup

MD5:
2537fff23e5e756b236d11bb25c24f13

SHA-1:
9c4607174dfb463d62be786a9222b15337714d23

SHA-256:
3333105e7e186756d5c0427d2bd700b154e49f460a5cb9f123d6d797510939e2

Scanner detections:
1 / 68

Status:
Adware

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Description:
This is also known as bundleware, or downloadware, which is an downloader designed to simply deliver ad-supported offers in the setup routine of an otherwise legitimate software.

Analysis date:
8/10/2025 2:16:17 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCore.Installer.Installer (M)
16.1.14.1

File size:
732.1 KB (749,672 bytes)

Product version:
4.5

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\patience-2-51-32-bits.exe

Digital Signature
Signed by:
Deliver.com (Fried Cookie Ltd.)

Authority:
GlobalSign nv-sa

Valid from:
11/14/2014 10:12:20 AM

Valid to:
11/15/2015 10:12:20 AM

Subject:
CN=Deliver.com (Fried Cookie Ltd.), O=Deliver.com (Fried Cookie Ltd.), L=Tel Aviv, C=IL

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
112157EDEEF1A59AB086421EA4B8BBEC42ED

File PE Metadata
Compilation timestamp:
6/19/1992 7:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
12288:pRuFahp4J/93LqU4ICjEeQD1T23xvwn79hFuBW4tLVJer31SaVxE4cz:pRuF4p4JRgIFeQD1TGeTFx4Dc5Sak4cz

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, BF, A9, FF, FF, E8, 5E, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, 24, CE, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, 24, CE...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file patience-2-51-32-bits.exe has been seen being distributed by the following 2 URLs.

http://cdn.clickjogoscontent.com/?ic_user_id=495&data=UPFZeloVBxdgm5JKhWkjB0WUKvJgNAgNQf9gW z/7Zg xJYLA4QMvPlaDY2soRmaNvR/PVTq76xND2Yj6PjSOXkwRKvCHIIfE32YpJbMLNKNgx23lnLrwIYui7hgPwX3lodET5 tZLX65N4NrvBYLmf9lh8jPmWrwPnJ8U VREnvReNXeVX11fMdNZEVXfFjPJACeUS/iuZaC7jD4x5egDv6rCdomEGtH6XfkDEA46j 38n/sakzeAmRxnEp/M5aXOVeaEUpawjZTWqW4BlMf5ppHfs/31woJKOPLSHWy8 dlbtf2Ic7kcYiiKTcMYGPjAOOclG8WrkAXNYPPEV4kDwF4vdkcCpVyYE fUZBecagNl4V0WUTgB2JMoiM5LMw31 3hE0KqHI 6fm9ShBOWb3OuMnT8HuPR4lp9NjBnnqyAfncS3M0i1cpKOFeBgDXdgR65ZrhkEDAXbKTvIL4kuvtYyTV9sbPzg5f GmE/4cqYDfqLJbJpnTnKZ56K1W/lg7989jsthRAV4L4WOTQ0WilOScQIoJjyj0yrmyuEAM4iypSLkYOMaW/scbwMYT5OUdQ0VydXC74KUX9d5Rr8YDpXzYPWnCB/EbvGFfVEjhbO5WgOrLYlP8vlZQNAhbNssawxbp7juETo9o1eIg0x7vqgy8xd/NHxst/AFWNBftsT6zzKtPERGWWOUZZZ9IxHI2bui8zzVWt5Qgn6q8s4gW0nHvrd9XlFYxUB8BmDAzywjWKnsEDV66B6QdPmdOhDyUCTb8qVnMCZH092w==&key=nKckuJo660r4GEzwcYB/bF/nkXhM9r7yQxaqS4tkUhncm61V2axqlBdtMDRy0LBrnXRe/lu3w0A3ZjqV00 ZdBRpUev9IrKlG2dZ1oJpZnAEQkO6e/.../WKflUCmWyU6lrF

http://cdn.clickjogoscontent.com/?ic_user_id=495&data=Qu75mOfl4/Qw8MS6BXKWQd16uKZbqmeVANj3FbUK0TkWhT n DaVU/tpZOUvUjpsUG5h6OEfinenEV563X1DOTqAye1Hq1YK vWT5WKxP Just2krof3v tw79uXytgcV1Oz3YenUrm2MSbAsN7tnOf7oB075FOitpWrjHdRr/Tn wdzQ43Ozr1p8J 32ecTHW4VAkyOfQZJfmgTMUNb/IZwZpgDT5U2nY8PyZv3FGn7J3s9BptV uKoKP9sNDiiCDbhWbEX0iGGhaYDae4U3fQx3uSOu1GngYWs80OeZrJjNIYsYiRau0eKC82H0phjty54IxUMCoH/iTLs0KZVMaQ5Isj3xqfF2TU6Yrlk d 3pmOLxSSNfqpwthx4EG2/9ecN0wo4Mo6j6zcKAyNb0fPetJke2Ys fPUV211D5GVE6uT7yMQbIV5AxLmicEuL9rW0EvgRrtvqOUrHINgQwAqi6FvZK0Y5G4cCM3I/NQRD NM8Q DmSRxCVya4QkkQhdm0V5EVeYEs775Lx8NkfuNtxxl4Acr4W twGutEfQEPH HBmIWFMAlzk6dQOIidLR543XTuVKR/ysf3akAnERX XVJMnuuF206XO/7Low7JOzJOjwjFDetaQGdBUvE3NBEqqEDDy/iMKvJvN2KE4tzMKq40 Tib3ZG0 bpkhY69PDUwH4Yk2dz8wNteKyDqoABk4LiR0 TQcs eoK0650 lD6EsUPdJMT/mbP9qq3Ah4tGoVJ/wtJD/vQsw7Ww H1uuQRsjmeTXM4Cz w==&key=MyXbTeH/1lEWjcUzFpxWNWe1capLHWhHaGisU5cVJizeutzDOeyqq/.../QUjRAgCsxuv5A2 NqJAZnSCSshR3plyiJ I6V2qzQiCjj3zqGifBoI8Qb

Remove patience-2-51-32-bits.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.