» picasa-12733-dp.exe
Overview
Analysis
File Details
Downloads (22)

picasa-12733-dp.exe

Bab

Mode Beta (Fried Cookie Ltd)

The Fried Cookie installer utilizes the InstallCore download manager which may bundle additional offers for various ad-supported toolbars, extensions and utilities. The application picasa-12733-dp.exe, “Bab Setup ” by Mode Beta (Fried Cookie) has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions.

File name:

picasa-12733-dp.exe

Publisher:

Mode Beta (Fried Cookie Ltd) (signed and verified)

Product:

Bab

Description:

Bab Setup

Version:

1.6.2.1

MD5:

3ca52f1f8c6d3300bfb75b09e101df3f

SHA-1:

bc739a9e52dd36259c128c5cb4bd6d28ee5faece

SHA-256:

f61411e286b1817c51af9077ea03eb461877a86ac14bf060b8621924ab9c18a4

Scanner detections:

1 / 68

Status:

Adware

Explanation:

Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Description:

This is an installer which may bundle legitimate applications with offers for additional 3rd-party applications that may be unwanted by the user. While the installer contains an 'opt-out' feature this is not set be defult and is usually overlooked.

Analysis date:

5/21/2024 12:57:15 PM UTC (today)

Scan engine

Detection

Engine version

Reason Heuristics

PUP.InstallCore.FC.Installer (M)

16.5.4.20

File size:

951.2 KB (974,072 bytes)

Product version:

1.5.2

File type:

Executable application (Win32 EXE)

Bundler/Installer:

installCore (using Inno Setup)

Common path:

C:\users\{user}\downloads\picasa-12733-dp.exe

Digital Signature

Signed by:

Mode Beta (Fried Cookie Ltd)

Authority:

GlobalSign nv-sa

Valid from:

12/16/2015 2:37:06 PM

Valid to:

7/7/2016 6:06:18 PM

Subject:

CN=Mode Beta (Fried Cookie Ltd), O=Mode Beta (Fried Cookie Ltd), L=Tel Aviv, C=IL

Issuer:

CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:

112172B4C29D53526C8AFAEF1C4F6265E881

File PE Metadata

Compilation timestamp:

6/20/1992 12:22:17 AM

OS version:

1.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

24576:Jvp7y5I5PpEla6JVWwIar2hfWz21GkqfQT7L7/bpoQOGZ/u:dx8culbVzIaKhc2gkqfQTz99Z/u

Entry address:

0x9C40

Entry point:

55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, 53, C9, FF, FF, E8, 9A, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, 24, CE, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, 24, CE... 
[+]

Packer / compiler:

Inno Setup v5.x - Installer Maker

Code size:

37 KB (37,888 bytes)

The file picasa-12733-dp.exe has been seen being distributed by the following 22 URLs.

http://www.vaultsgrabstock.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

http://www.headheartvault.com/WVl6OTRQVkEyUnpkU1pERTBSRFJEZG5sck1XOVdha2RGWTI1T0pUSkdZVTFYZDNabUpUSkNRME5PV2tkR1dFUkdNV1kwSlRORUptTTlXRFpoVUZSWVduTlVObGxTVlUxc1dUZFlUbUk0Um14clEwRldXbWw2V0ZOc05UbExVbkV5V0ZnbE1rWlFORWwxTlhRMlJFdDJabTV0YjNsTVMxQjRNRFo2Y1d4UlVHUmhjbVJPT1RWM1NXNVhjMXB4TVV4a05ERkpkVkpITUdwM2JrODJOMDlTZVU1bllVNW1RME1sTWtKWVRVeHRZa00yTXpWYVkzSjFkMmhRVVRWWFNEZDJUVkZPVURsemRuVllRbXBsU1hvM1NrOUJaeVV6UkNVelJDWmxQVEFtWm1Gc2JHSmhZMnRmZFhKc1BXaDBkSEFsTTJFbE1tWWxNbVp6ZEc5eVlXZGxMbVJ2WW5KbGNISnZaM0poYlhrdWNHd2xNbVpuY21GbWFXdGhKVEptY0dsallYTmhNemt0YzJWMGRYQXVaWGhsSm1SdmQyNXNiMkZrUVhNOVVHbGpZWE5oTFRFeU56TXpMV1J3TG1WNFpRPT0=

http://www.headheartvault.com/WVl6OTRQVE5xZFRaTVRsRnFaVkp3WlhWSGNHSjRUMGhxVTJsbloyOXhOVzVKVTBobGJXdDBWMHRrVVZCSFkxa2xNMFFtWXoxRloyZDNSbGhFU3pWU2FFWjNXSEJRU21oa1ZXSkljME50UTFjNE5qaDNTV1paTVRoak5Gb3lPRzVXVDNGeFowTmhhWEZrVEUxUVZrWjZheVV5UmtOUFJtRTVhVWhqYWpkVFRqYzJhbUVsTWtZbE1rSjJZVWRFVkZCMVowTkVNbkpOWlhsWk9HeE5VRVJFTVd3bE1rWkxhRlZXY0VZeE1XaHFNRzl2UWtOdVJ6ZHFjbkoxSlRKR09YYzRWSEJOWmxWb2NWZDVaRms0VDFwaFYwaEVUbGQzSlRORUpUTkVKbVU5TUNabVlXeHNZbUZqYTE5MWNtdzlhSFIwY0NVellTVXlaaVV5Wm5OMGIzSmhaMlV1Wkc5aWNtVndjbTluY21GdGVTNXdiQ1V5Wm1keVlXWnBhMkVsTW1ad2FXTmhjMkV6T1MxelpYUjFjQzVsZUdVbVpHOTNibXh2WVdSQmN6MVFhV05oYzJFdE1USTNNek10WkhBdVpYaGw=

http://www.packagesoftwaretowers.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

http://www.packagesoftwaretowers.com/WVl6OTRQWEpRU0c1eVZEUjNTRVl6YWxnd2VYWldNRVJaV1ZseVdVNTJObVpFV0V0cE5Wa2xNa0p2UlVKcGVHVnNPQ1V6UkNaalBUSmFjbk52YkVjek4wbzVja1oyYlRCdWRVZ3laVlprYlhSUFMzb3pVMDFzYzBOb1NEWXhabTQyT0c1NWNUTlNObXBXY25Sd2NIZExNWGR5YlRJbE1rSjBNRUZQWTIxWlpGaFlZbmxUUkhoWU9VSTRPRXRLVW01dlJWRTBUbk5aY0hWb2RtcFJkMkV5YW5GV2J6ZHBSVTFhVVdoNVFTVXlRbUpqZFV4YU1FZ3diVGhYYkZsVVZGYzBSbll5YmtwNWNGYzJZMnQ2YTFaUWJVRWxNMFFsTTBRbVpUMHdKbVpoYkd4aVlXTnJYM1Z5YkQxb2RIUndKVE5oSlRKbUpUSm1jM1J2Y21GblpTNWtiMkp5WlhCeWIyZHlZVzE1TG5Cc0pUSm1aM0poWm1scllTVXlabkJwWTJGellUTTVMWE5sZEhWd0xtVjRaU1prYjNkdWJHOWhaRUZ6UFZCcFkyRnpZUzB4TWpjek15MWtjQzVsZUdVPQ==

http://www.tourcontentdownloads.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

http://www.sendtodaychuckle.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

http://www.townbitsquick.com/WVl6OTRQVW8wZVRGeVdHbEZUR1pyVWsxellVOURNbUpUT1VKUFdXVkdRakZTYlVac01XMXRXQ1V5UmxveU15VXlRbkUwSlRORUptTTlTa0V6ZUZBMFozVk9iSFJETm5aUGJUTnFOR1JpUzNSSEpUSkdVbEpaTlRsYVZrUXhkMkZhZDNsWWRuRk1XbGxTU0hObVVWRkdjbE5vUTFadVRHSjRkM2hrU0ZBeVJqWlVWSGh0VWtGVVdWVm1ZM1ZqVURKMVZVUkVPVVpEY0VReFRHdEZSalU1VVhjbE1rWk1UVXhOV2xGcVpXZHhjbkJrY0dWV1NXaDJXRzFEUnpVemNGZGFlRE5vU0hveWJrVlNWVk0yYUUxRVpHcFZRU1V6UkNVelJDWmxQVEFtWm1Gc2JHSmhZMnRmZFhKc1BXaDBkSEFsTTJFbE1tWWxNbVp6ZEc5eVlXZGxMbVJ2WW5KbGNISnZaM0poYlhrdWNHd2xNbVpuY21GbWFXdGhKVEptY0dsallYTmhNemt0YzJWMGRYQXVaWGhsSm1SdmQyNXNiMkZrUVhNOVVHbGpZWE5oTFRFeU56TXpMV1J3TG1WNFpRPT0=

http://www.dlchuckledl.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

http://www.townbitsquick.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

http://www.townbitsquick.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

http://www.tournowsend.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

http://www.dlchuckledl.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

http://www.dlchuckledl.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

http://www.packagesoftwaretowers.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

http://www.dlchuckledl.com/WVl6OTRQWE5CYzFWTFJWUTFaMVVsTWtKeFNHSlNSbGRNU1RCdVNXcHFOSEpqVkUxM2RXcExhekJLZVZSTU1rWlJjeVV6UkNaalBUbGljakZ0WmpFeU9XeHZaVzlVTUd4UlF5VXlSbGREYjA5eGVVNVRlVXBRTUZSWVFtbzVjMlJuVlZOUFFXcHNhVEV4TUhObk9XcHNhRkJGTW1SUWJTVXlRalF4Vm5SYVZ6ZzRNV2xLZVV0dlp6TnNjVGhJWlVSbWQxRlNWSFEzSlRKQ1UxcHllbk5QY1RaVE4xbEhaMVIwVVc1MlNVdE9WRW93YVc4MEpUSkdUV1J3YVhWNWRrZzRVRzBsTWtJMmNWZ3hRVTVIWWtKU1JDVXlRbkJPTmxKQ1FTVXpSQ1V6UkNabFBUQW1abUZzYkdKaFkydGZkWEpzUFdoMGRIQWxNMkVsTW1ZbE1tWnpkRzl5WVdkbExtUnZZbkpsY0hKdlozSmhiWGt1Y0d3bE1tWm5jbUZtYVd0aEpUSm1jR2xqWVhOaE16a3RjMlYwZFhBdVpYaGxKbVJ2ZDI1c2IyRmtRWE05VUdsallYTmhMVEV5TnpNekxXUndMbVY0WlE9PQ==

http://www.packagesoftwaretowers.com/c?x=GLMvy1RVEl/8WbszR5DOiNTmOeHPWyhqc7Q6m6RjXmQ=&c=87J2WliwpNkj0xN612rnmq6J9m3kiNIBUeVm6sDOJamyAswK8s7nIZgdsbm0pJGOiS12FG0KyMY11PD3UkRRBt73LP2lxGhmBVbQCrA2cKgPFFGqNZhSoeibeFYuz/Fi3bcK1wqnu/Yp5V1/h/wgiw==&e=0&fallback_url=http://storage.dobreprogramy.pl/.../picasa39-setup.exe&downloadAs=Picasa-12733-dp.exe

http://www.tourcontentdownloads.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

http://www.tournowsend.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

http://www.dlchuckledl.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

http://www.packagesoftwaretowers.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

http://www.chucklebestapp.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

Remove picasa-12733-dp.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.