home

resident-evil-2-reborn-alpha-1-50-32-bits.exe

Software Installer App

Deliver.com (Fried Cookie Ltd.)

The Fried Cookie installer utilizes the InstallCore download manager which may bundle additional offers for various ad-supported toolbars, extensions and utilities. The application resident-evil-2-reborn-alpha-1-50-32-bits.exe, “Software Installer App Setup ” by Deliver.com (Fried Cookie) has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions.
Publisher:
Deliver.com (Fried Cookie Ltd.)  (signed and verified)

Product:
Software Installer App

Description:
Software Installer App Setup

MD5:
f200fa7b58963500948a720f9bbb2a42

SHA-1:
e0fb5a4864dbae82eb99c7fbde9d7141cc2afe15

SHA-256:
228d73c5d8f0d4de6c6cf34a6ef82b3c8ec0f61e3061cb94e52c34621abaa730

Scanner detections:
1 / 68

Status:
Adware

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Description:
This is also known as bundleware, or downloadware, which is an downloader designed to simply deliver ad-supported offers in the setup routine of an otherwise legitimate software.

Analysis date:
6/22/2025 5:33:38 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCore.Installer.Installer (M)
16.1.11.19

File size:
732.1 KB (749,672 bytes)

Product version:
4.5

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\resident-evil-2-reborn-alpha-1-50-32-bits.exe

Digital Signature
Signed by:
Deliver.com (Fried Cookie Ltd.)

Authority:
GlobalSign nv-sa

Valid from:
11/14/2014 10:12:20 AM

Valid to:
11/15/2015 10:12:20 AM

Subject:
CN=Deliver.com (Fried Cookie Ltd.), O=Deliver.com (Fried Cookie Ltd.), L=Tel Aviv, C=IL

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
112157EDEEF1A59AB086421EA4B8BBEC42ED

File PE Metadata
Compilation timestamp:
6/19/1992 7:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
12288:vRuFahp4J/93LqU4ICjEeQD1T23xvwn79hFuBW4tLVJer31SaVxE4cz:vRuF4p4JRgIFeQD1TGeTFx4Dc5Sak4cz

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, BF, A9, FF, FF, E8, 5E, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, 24, CE, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, 24, CE...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file resident-evil-2-reborn-alpha-1-50-32-bits.exe has been seen being distributed by the following 7 URLs.

http://cdn.clickjogoscontent.com/?ic_user_id=495&data=6XifLiEBPF3V2ranQqkhGVpTtblshL4DtaHCN242Hh5BWAZLsCLvN4Unyl/1MYThIq8eBdI9iHJvpzeJWsE1u 4fUgcy0bFgXjYXOBdc5NzJZ3b3CvSDuwaNJGCCxQCwFCaRrCNCUm9Tqr3b7fD5WP9gULuONzqdJwud4x vYCjRkbHOMOJoH7MzNs0lH 5ojkzw8FYLNLnYpcuEcJWY84jR2QTDUwFvhftB2FwbxzER0IWpfKIrt/SK/5A06jznQLDjFa6NvJpLEeq6e Tw2R KP9vox5ukJTVg5EGdzIZ2IJQI4BnyTVswAxGmHTpkcu3nyh56h1WkmAFjS qiMtE5EO2V2p7mmy7oyBHSfGsK9vsbPdhKBeT9RrH8nSIpTcYO/gMftFH4dr2i4hkyXnzenNctn8cvfNvRhiFkOPJ85wq /VJC4EeXFqv7igHaenzDll4NLHzxe4y3qyQbjl58T2EJ90b6pDNRLjRVhyJuwOyIjBBSNXE8ANVbsd3tDq Hme/VluKJ4/CG3TsZgBeO1F1RSyMe1bLu3PdYuLdddjFokM4zkyfLvha1OVaAgFgVi3U6i Bwsn/PjdpZYPVkJ4xRkPZQWSJYkh5MSWpHi3DlKubb0TXka/J6SVPDKrSvK5WW2qPy0yzXOE1VfOBNLBzIigYhYBwvZqGvrA1Z5 bN 0cYT70mH8oYxMcltavAvbtFRmEo15bzk/e2la1nwfmwFym8yF/F6BONXKu1UJ6Xcby17PNksht/VlzT 8KBbvnvbM9vg/7 BvMgEnHT/P6iD2k/dMTuKeXh8/VP2sOJAEJTZmzBtgYDm8n7wJhWcslzD0vz2gI=&key=pqvHyaj/g7/.../OAytCWVX

http://cdn.clickjogoscontent.com/?ic_user_id=495&data=yWz4kVfq8BSIlTQ4l6ygQ5arxBb8S/1rmBFwj2mixcS/CAt0iVWsE3B7mV1fL0TrB90Rsf2uuPWyk4dgDUYRiV2nvqp81AilM0KK2GkWCaLqTtOSeNAWoH7kOj1JN4CZtyntIrEYql yakzRfvgErBA95paqedZAEQExHO/JYW70JXGPjMl018/rqgKNJFqUrqy7E/AopcQVWu93GH/Tlp5tvuM8zzS6h5OyFwoGBkX0JgCDPHnfWipY1nu1prBLhnNJ87UF4ZdCpM3N4472xCirGqlgDr 0z b IJw8OJNSK7YgurXB7cnTU2Ao9tESPe53GOCMAa37Ek Vbqa2LMev28UejjT6A90tcOC3nddrgL25HAtYG/6HeCqj0jTjn6ZHhL61IiGsAhlOjBs2IP O ctmFqs9DQKxEQLZEqskPhbEPcLgUDhvxYy31NAE8sA1NRGTnUr/s1nuPxDP5YS6CcSYxtb4WgoeqwIVG9ecsNwEvRxtMCMYHb/fP2lPv9SgL6WDjPVEJnvG/asKOdm/dGGPQkwGuHA2yR/31NOlFGGO1zFD NHQ8yAkKPqx6mJ7AhB3wVFMMaoks7nQa9pEy4GL7Cn/d7Cfn eviwVaBbio auN4Do6kUZ33nF2gEswbrkYfXekfPIrLlJlAqfyum8aFS8MPBEZ/.../pxBru3 pagMzsWtP8Uk0SGGunaRjmQq5uuSmVxmkctF77M=&key=CX42IJnJYAcUjYFg72SVYtc7Z43vutNTVxRjuI2jDIUaxAotdvT5UjILATtAisAaRhjouIJ0E61WS6dN5MR jod0QztrV

http://cdn.clickjogoscontent.com/?ic_user_id=495&data=FTGbUnGjlEp hhbGPd6O1RbwA0g9GXh74Nt54YiIP2//Tzg78iVmlR1WRXGK5iXQbnlU7Glv60CUBukKqqpfsLGyNB7g/vWDH6IATYSPLBMRuDJRCY3VzpBsZzWfJRVyslUOUs a5TuT94j1pIfF0exGfUmP1TZC6LVedG8hmsBCtrLvQBkg4noOorBSYiReXPHNxkbjSEw38tTIGtlxPxehVv1HjI3/eNvfsrdxdHr6FZMmKcxRNVv4ZVpDFsC5n1MxzRBWIuyuBLm7fXu3j9SMRo4VEQEfrp/K/femMxFequKxwUMUY2435 089toKnTZEu47ZcuPv ykSAHYBlYWoi4rGV/kwiHrmfIpnl9FeOVwdQOZPHTFdFn2WdaULGAfclW9sbsPVQqjNO3AoRDNenmXFnwWMG7 umhsUCgs7YA7xQVtXpodx zEmmm1Sa5IPu47vtInSsoF5iGCIc9XQl2WzEnodUBIT6lE9SR4XwswMmXFfyRtodIJHctgTKov5LbqNiU9C6k0b/lTJmqt1or1f4QXiWfwbhvdQ4X/l7xQ9vLsuMJNahcqrne VdF5tQ3wiKrx3HmE26psYQ 9tZ69jZsgaYir79EXf6hdiKI46lDASzm8hZLAGpackFokE8uhPNSz2t/uiIPT6l/u0GRZUIEOwA52ADjB/rnx plV7BPeq0mMInJ6yiYQgIfyZ3qMWm4Mc f3KvdBJ0TGD7oyRH4E3/PcgKK8ONOJxwGrFiu7StSSNAkuAMeigB4HS33YeJSYBIts Jw5pMM6YcMEBJ3/4pEJoyktsfJitBWARQUE47/bDc7iUC/m7Xez lMC1gPhW6TE=&key=iGPrYSgHj3MjEeuRErS8ctn6vbxfBb/.../IPpZnvZY87t5R gdLwcED0Gii6r7 fb58kNu

http://cdn.clickjogoscontent.com/?ic_user_id=495&data=I MKhl/GGqAeY P2jEdVJ7uWZNK hzSw3ZThvE2FoLn4ZRgPd 8GjlZ4Q06fyexqVJUY/ZDueHeMNq6e26XnpY6nX5ANLuQClELBLzrM73kGPxc7/TUVUfYdF RZQS3jL166964NXb8EYUjoYaXg9eXdRTuczvkEpzikop20uET5NTj4mp093/beXh0mW1mQzdoZfajTTrwCRauUAVb0FBt6UYl1WjK qrxoiG4nFTMkd/SJ/JthwK d5Rq70Pdz6xa O1GzqpUBXFQIq4gxXoXetwNi2W/U4ZTrUwc3b3u6tltH40JMh7jWVJKDSKKAFW4nu3RKQcLctA 1ulCzOo4 dBQovnhhW9bu1Djxx5A KA6Lw1ffDPYjT/reSkna83CqeZFp8RRinIrCUePzHOQbNeEPh6ntzy FNsc5KaeOTRRzCX/DI7Iz0pVWitSfqMZutgqhQgEsH5/7XDw8MQ0wKUquCP2syANr6p4xh7i53iKCR/Djm2mnGLLt680ymnoJP8K/mL39y2LHvnhHKi6RCRHRcLGSShBjt3f1/Ci6qqgF16ceRMDUECLBuZSiWdGc6XQTadXLW0gSxC9KVYo8cxjg7qh2SsjbOSxNOeS8t2m5UO8G1B1ooUHaRecuukD43Jn8i2GG0WZ xoeBuEH3wXTDWSBC1SdRJ0liSv1iaUde 0g7hMaVZf8q3GVmWK/.../tgsQcYvE8ODoIJksLIeaYeajtIMBJvXQpfehqwWi74VSypT8k03Q7cDP2SfvPQcnNSsHkrGD OSLt4JhbesU1A

http://cdn.clickjogoscontent.com/?ic_user_id=495&data=Ck/ Wp63BEbC7SVMd4bzG9RJvpS9CTPRjaV36CDTf5hy34/Ejh/U9o3yedz69f/GEBrzKXUV91vY88cbzQuYfQh5tOnCDW12WDA0hAZyIuMCIJVItFhBypmBU3Lw15S64cQNLfpggXSa6wkF0zBOUIKViJyIV6Vikq0XuHPAU1YlrOTY1LhnwwKiHB5ekxzkCLYgQL3N7Kn1qLLDjiclQ1ivgu4kuOGj coih5c6YLA/YbOe qTyVNjwhTNeYq9XcXCSpIBQnba6 VaEbF7KB58evhX3dr/gM/6w/eYU0bIuUzvD4o7hG4ECcktGkjhOG7lvQ2aHWFoq0nh7GrPYsOeEhTppNlK4shMbb4erugJqv7OylefMFRpBvGEKeAvcYVw9emsbBZag82YfHkwnONMzmbDf1rHnWdY94IRoZUTmbmLffa6fUSbOY77erwpoVY6XPLvKKaEZVulLrf3oJiHdt8lrHfWhG1oufOd4ri1qaMHfjt39RaOhiWO4CVJKbACWZRTWHS9 fZfX91qUQnFPPgSbdwrBbCN4d4DFhEWWYBBK70lPBe4ZCEWpHL6q0TxBKv6/j3mO1L7UESuL6zM0xH01o4 l0zMUFprNpJ3NBTXU/ZEKctiNMrPeuy6bDGyC2AkFizgr5KVaGVJcLjbhDgqvCKPT1NUk/tjHetfyh iELGQCgaey1r8umZ2pEF9rXCxHl1brfIyGL8gqcw9oYqoFTn72AzTVZLcW8fozQXbECAe9vOgvSuwbwEjQacXIII7u5CtNMt3aaM2NySUUEalLRErpMYeI9pohXX9X483WhQP2Sg8Y/szWzUx3OOnyCQdTCahW0uQ=&key=NIbPPHRKZRnGVUcTGZJK9dy/.../yP jGErrcNMU5NdQdqjTSsIbbdw7V6Bpk1M0MlGtyVhU

http://cdn.clickjogoscontent.com/?ic_user_id=495&data=DYikRc1S84iAYDHx5vfh3iWRSIB5WBa1bovnVkEdIkOStaK7F6YnVjATZSZsOMb1hnx5t3CI QIPxBzleNFyuSv1XFjTbW 9dv6CREJaWl6gUZPfHDjGdJtTDsnWFLSUabuAZt4Ve3pwBo 16BFKfm7ApOctudENzU7uo09Xn4/miCtVvjQlX7vXXNSxpQyDfkWYjdtIbfXg9jHF7P/yVHJ9OLPVufTej1TgbdR1JCS5Uw9RJwwDGgnCm57YOfvz1n16LzpoVjhR 7SPoLtRCeMoSiC9SIx7w8bgd2C4t7gTSKTrqcAywe0MOpJW0PNSsNG5lInmipD12dUt8s9sr8S3eJlvZPi2 OCTPLlitTvvRTpfVucbXbd2pa2yU0mIQ77TP1uk1oexGeLi4IlknvhFvP4TzcU0UFyQ/UM KiFtCkwFURuYB6/4SfbmGmwP2Vgghm r2FaB8Sc6YZShK1aAMJljZF3KiRUCtVx3vR4SDanzyNMp48 B/rlxYuh573GRGbP4HAjHXO GuaRhURTgHFfUvEIF1jQqZXJalHFuCjdq6DBGPnUZnvXtOBe0CwqfM1x9OmWQEGenlcERBlgqeGJdHe5RpEogmP3JfoMOinZ7C9KXw1JNVnlcU6Oet2eY9mZsSNIKLmnDsdFUcI9bTQR GR1uVtptSbXeXjhk4Kpz/if129WT4EeOCEwd/.../UQwIvwPQ2iA0QmacnnbMTYTTOkP JsVXaq53k5m2O0GjiB7gjmTBsU8Y5VbQ9kJK8 tLtnmhFpicO6lO2auq0TS75WTYGAHTs7GLTklWC0A=&key=pHeu WTTHxXfjSIDScjK18ZyE8dcZfRVT5Ne9pghF3buVlJXZnLRWBF2v0BuZKJl9gkt4U6CocYU8fhTVOCEAEwqMrkQA

http://cdn.clickjogoscontent.com/?ic_user_id=495&data=yrLY8nBICFOl1vn6gN6zNfnXGBcX2twzHuQqekwoUwsZ PLmuJwOO8NPHqwedfqdmbieQQeSN5IrQAjCC rEpqAmg1b306wnLrFbuum25vnDfYK633pQEzlW3OAHnJzLR/ccGgigHwVnLgtG78kOaSzyKII3uwGQ4jG1JqWi9HEMWJ7Ql/X7/HDmEYOBe4C5UuqmBacEopdVA2mp4Df4tsuZupyRUP9tC9ywB64ut5EM PTNd11yZ/yukJYI2byox76fuxHDCcg/JBNSAty7AUhO7S2VNvWojAOOHHv6uY9yckXREjg0Y jG2JYf9/k y/w/yoc1YL/deGhCHPY8xfIkCoWxVlj4zbVoSY3OACOgTP9SanLMeAhHq7PRMYPhr9cU8EpGQ StONZFjK3Rh3C48YtGZFPhKCFGPo6y/PFuM31BCN7Wn5vOrCBCrP0UEG2k9yAPiCfU4xmm23wctXcyDMyak5DZFjXZJk6dSvuFU7cpjrwR4i7XHmm2XZv7bg0EGCozYER1kvmfR7DZ/.../n s6MmcO8IsEadBWkFUQv7ZATYiyW4 eks

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.