home

adobe-flash-player-13091-dp.exe

Software

Mode Beta (Fried Cookie Ltd)

The Fried Cookie installer utilizes the InstallCore download manager which may bundle additional offers for various ad-supported toolbars, extensions and utilities. The application adobe-flash-player-13091-dp.exe, “Software Setup ” by Mode Beta (Fried Cookie) has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions.
Publisher:
Mode Beta (Fried Cookie Ltd)  (signed and verified)

Product:
Software

Description:
Software Setup

Version:
2.0.3.8

MD5:
0eafb70921d1e6c81a498166fc09c91d

SHA-1:
a49e574739a658fd52f433751ab42203cdf8ffc3

SHA-256:
c93ba96994bc93bdb15b90455a70ba3775a334452c6c474a14ad2283b49fcd10

Scanner detections:
1 / 68

Status:
Adware

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Description:
This is also known as bundleware, or downloadware, which is an downloader designed to simply deliver ad-supported offers in the setup routine of an otherwise legitimate software.

Analysis date:
12/29/2024 6:19:42 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCore.Installer.Installer (M)
16.2.9.18

File size:
937 KB (959,496 bytes)

Product version:
3.3

Copyright:
Web application

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\inetcache\ie\{random}\adobe-flash-player-13091-dp.exe

Digital Signature
Signed by:
Mode Beta (Fried Cookie Ltd)

Authority:
GlobalSign nv-sa

Valid from:
12/16/2015 2:37:06 PM

Valid to:
7/7/2016 6:06:18 PM

Subject:
CN=Mode Beta (Fried Cookie Ltd), O=Mode Beta (Fried Cookie Ltd), L=Tel Aviv, C=IL

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
112172B4C29D53526C8AFAEF1C4F6265E881

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:4WUQ/n11wfgcrmT73yaNxj9Xuf1pHhok5xyJAQtv2RTwN:4NMUrmT7vX8uknWA42RTg

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, BF, A9, FF, FF, E8, 5E, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, 24, CE, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, 24, CE...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file adobe-flash-player-13091-dp.exe has been seen being distributed by the following 22 URLs.

http://www.bundlestockbits.com/c?x=jEhHzr9Kd8pthQ76sbt4GzsXRMEFhWA1ADLNZiGLKQo=&c=jVb9AP0c56Ti2yxN3zaH8M0kPr2Hhy2kcrBkg/20FbyzGhdKLolbFEU8MS aIhdhp5XJDWtDoDIKF8231VWhXI7PeyjMJ04Vmt1Lwqc/6/IUiMw5hWG7XdWw9N53DHOM&fallback_url=http://fpdownload.adobe.com/get/flashplayer/pdc/.../install_flash_player.exe&downloadAs=Adobe-Flash-Player-13091-dp.exe

http://www.megaquickdownloads.com/c?x=J7y7K0JoPaSKTBiSXTJf4g/W1YBxMtn9F25dEUAsoNI=&c=jdicVv19o7yvxOG6v8dnjPPs2tdy3TCeS5rCKKB8X4Bq8HjeLfxAQXAn24Q8LVeIXDEjFBTv/q0R87KZIq8qDaNLmjHWbyWAngwiEIeKLrmt2x eO6DzQTBy B56d7JF&fallback_url=http://fpdownload.adobe.com/get/flashplayer/pdc/.../install_flash_player.exe&downloadAs=Adobe-Flash-Player-13091-dp.exe

http://www.bundleconecptapplications.com/c?x=hPtQtqwjr0TVhZX31sEwt5bfvo C1DuVkUOzo2eNYHA=&c=HyYA FHoRhweA/Bt2/ew5Y vXYk jODCfyT12KnAD4sgv2ToGQ90ETgljedubpfLEoUY2OCqnN5RxzPkTbCvfZiIy6T3IQxobkwOeq9xpjgmEnc6YJ7P 7kDVIeYlh8p&fallback_url=http://fpdownload.adobe.com/get/flashplayer/pdc/.../install_flash_player.exe&downloadAs=Adobe-Flash-Player-13091-dp.exe

http://www.contentcleanpackage.com/c?x=56AINNgwO8UKLLCM QnGndI2fsWIyqHjat V7a7Df4o=&c=oQRsSWMf2S AvLl/bzSsL7NdevYmEp2kn5wF202EFOCLf4dylM4cNF6vMkt2d75riIfrCVNhtD56g0Ydela0bFzbr8t NFTUR01mTKI4LO5Piq d qPep/SeZR n8RvV&fallback_url=http://fpdownload.adobe.com/get/flashplayer/pdc/.../install_flash_player.exe&downloadAs=Adobe-Flash-Player-13091-dp.exe

http://www.bundlestockbits.com/c?x=dFUf0pCHNQQ8KmWBoNDsZ8EEirGAKtf9ZdNrtq5 vLI=&c=o5k7PZHgYz7OqYLB2P5AGpWZZjbNzoEINaPkxX akuuTAMZZtkR4PMweLKlS6vmZvV1Hcg8zHDzuHS7OZwCQRZD kvUpXRsl ZgJAotGAQJmrc1AKQ3Vttp3erxIAF1p&fallback_url=http://fpdownload.adobe.com/get/flashplayer/pdc/.../install_flash_player.exe&downloadAs=Adobe-Flash-Player-13091-dp.exe

http://www.contentcleanpackage.com/c?x=UwwPTj5fa1MUazanA5/HDL21Kf80bdIwwyLZS8ErRTQ=&c=gBtGpirJOrS8JuCmBFNQ4SrzR82QLGdyjG9k7TrixGQ 8uTIa r xA6gVMPMFQWhKe2zhEBsKDxiqwpTb/Rig0WbwF3Ubwjeow5yTlUIdaPLrk5N0 DqiIIfAvumH5j&fallback_url=http://fpdownload.adobe.com/get/flashplayer/pdc/.../install_flash_player.exe&downloadAs=Adobe-Flash-Player-13091-dp.exe

http://www.contentworldcurrent.com/c?x=4MABZUfJoiCkp7nsuhc6TPjhpy18kggMse6zaw2hSAw=&c=a0NcmXfSxzy88p4s8jAhb0t7k8KO7WWYoKEHoP2gJ 3M0ykIDNdTz13ZD nMGopxjNyulpionjueRRAS087vdlpliSkAFp6ZF ZfSVvZ6YEkMtRd3 7tvyVYoiferSI8&fallback_url=http://fpdownload.adobe.com/get/flashplayer/pdc/.../install_flash_player.exe&downloadAs=Adobe-Flash-Player-13091-dp.exe

http://www.bundlestockbits.com/c?x=rM0pnjjeZj1ZT/LwwVN8Nnz9ODcYhxL1fiR8sgbHASo=&c=ToT5in7w2WtToUxsIB/m5bitMjRvm8QB4FaX52vMRj28KELkGs0PEivO8OvOe0WsQVsPfjyqJbk7Az0TstOOjobShnu71JSXTnaywjbThjgZfakdUW02bWdwF2xxn1 V&fallback_url=http://fpdownload.adobe.com/get/flashplayer/pdc/.../install_flash_player.exe&downloadAs=Adobe-Flash-Player-13091-dp.exe

http://www.contentcleanpackage.com/c?x=AxN13xw7hb5X6PWs2LGqToYMxAmvus84y9WZLeh6wWc=&c=wbyL8DUOfyon055j685zA2PzmtOZXYCcFex7lsQ5uxab6nK6CnoOjY8j7nJaIySxO wcdfxMhUsVjLpD/Af0rm/a/oAGF8RWK12kAWr4kj3Xhaymd24A8PRo4IauSLcv&fallback_url=http://fpdownload.adobe.com/get/flashplayer/pdc/.../install_flash_player.exe&downloadAs=Adobe-Flash-Player-13091-dp.exe

http://www.vaultconceptsgift.com/c?x=h33bXy4xIaVMRTaVxCW4q96Jtpc42PGdEfFaW8/eP5M=&c=9vuKn8V446svX0DXUpdd69NvJjvjJCsql7yBeZBy8eMNZrvka2H1ExM0kZ1Zglw/ySSdxtMPi3IAUkiZdFqJSdi0zaPqyh2ifEI/MKE0vE7o6QaP5KPePIVqqByMV o&fallback_url=http://fpdownload.adobe.com/get/flashplayer/pdc/.../install_flash_player.exe&downloadAs=Adobe-Flash-Player-13091-dp.exe

http://www.contentcleanpackage.com/c?x=5pQlszFPBxyoO8EnbrgQdv9G5nzTpEVN0uTbpSr qeY=&c=uRuaM0tS4e1zxE raBbH/dRnUkLGOy4jJ20NFh4/19v0z8NyfFzLQIsGOcXdc6PzVo2W6PA tChX7vvOSOw5udmkeYymmmWMCWu2rFZcE88lY/THusiCPRHNDsHRB5TA&fallback_url=http://fpdownload.adobe.com/get/flashplayer/pdc/.../install_flash_player.exe&downloadAs=Adobe-Flash-Player-13091-dp.exe

http://www.universeappsheart.com/c?x=hSNQ0kwtf0EEPK0eN Rr9BybJBUZ6M5MUTJ1bBrMcY0=&c=IhHN1JnROOOUClwbry4YRH6sDQkkwKMApUi11Z3947Z7Qb8ww4lTySK0u FgBUEJeW6WQ/lXXAK/BLEqr1tsDjsyiJH96i3RdVXBShpGihNpxC2/Mo54Ler6ynQHZN0L&fallback_url=http://fpdownload.adobe.com/get/flashplayer/pdc/.../install_flash_player.exe&downloadAs=Adobe-Flash-Player-13091-dp.exe

http://www.filestownpresent.com/c?x=09aJEvCdJhjRRMS258aYlngWU1XvErqjEXcAyyJV4b8=&c=66zib/fnzByW90tuv9SZEKmsxaVXkVA3BLrjvGh1oRLlFkAX8eMNwZ5YYeNxEojh 7sWCPRLR4Ei5Jl3e/ed5N4bnXxCh1cbE98kR/TUBQjqM cffKcPoe8EPh3fDufW&fallback_url=http://fpdownload.adobe.com/get/flashplayer/pdc/.../install_flash_player.exe&downloadAs=Adobe-Flash-Player-13091-dp.exe

http://www.updatecyclevault.com/c?x=a6A4JUhXBC6OLFSdF 6 YG0N/LICK7Epbdei8YfnVOg=&c=GDU8ipyBLwrGX0qYO4fXIQlrROj/6obW/cPTTa3DjlLv9y79iJ4lpgpkntm 4Rv5KsRJE/bhJHBsaDJNNSJ4UUkRd5CLvG3xA2eQ55rUMkxQseYp4jkqudmm4Wqk03XT&fallback_url=http://fpdownload.adobe.com/get/flashplayer/pdc/.../install_flash_player.exe&downloadAs=Adobe-Flash-Player-13091-dp.exe

http://www.appsoftwarepackage.com/c?x=66FoEddEQ63a72K0FwL8GydahK216EDwTybn0/VEiPg=&c=3aFASYVVuu2sQZ6GnFaeoQZua/s/zvrpK8z1NpEZ8JeptQVipH7LtknQpheAAIangSEgN/UKTZUfXbk6uJrAlNzyHDLbOawN/Lv7w6YIWNWfCTcb1L7hH42 d/WaGuz3&fallback_url=http://fpdownload.adobe.com/get/flashplayer/pdc/.../install_flash_player.exe&downloadAs=Adobe-Flash-Player-13091-dp.exe

http://www.contentworldcurrent.com/c?x=E1CLx/fC7 BQrpRghrTSo1kJlLDKvkhkopooXV/dYo4=&c=iDuTnAQq3JlZQJjbXhwgdn2qDtPJgVFe/yWvWE5MJ7DCvUDH fD0vK4PG 9MJN4CGHBkvsHbOsJFJMuit4U8aDhhDyDxuvQ8kMKEMffbxE5hh8avgC83Lm OnlX1fbHE&fallback_url=http://fpdownload.adobe.com/get/flashplayer/pdc/.../install_flash_player.exe&downloadAs=Adobe-Flash-Player-13091-dp.exe

http://www.vaultconceptsgift.com/c?x=DF8ByrUuNtDvXH1LRtiA2uDFaNhiQzFk45Xqzjwh0es=&c=a6zQrjNNVSE6ipzMtSPJDAfCsGSBBYBiXOYj6nAdyCJs3ooVeUkrX1fkZDs QHRtGvzFQLUZFR6LV37efVtazZ4xKM1MJkiOHZKRjuwgYbzwA5XmCb3hMXKrHSZilNsP&fallback_url=http://fpdownload.adobe.com/get/flashplayer/pdc/.../install_flash_player.exe&downloadAs=Adobe-Flash-Player-13091-dp.exe

http://www.contentcleanpackage.com/c?x=KtnYXiATEL4blnOKfGzeJNpFzdtVg9JSzB25Jp82JiQ=&c=KbnTgHVS0Rrn9HwBlYcaOgZWUU0pes MU0N2Vr31l/WuxeIWd6gedpqBq11zolXzR4Z55pwMjfMwxC uRSPsaRdW1rvsJiLEyE ZNt7ZPByyXnHOpZHVK35Wi9g6Lr N&fallback_url=http://fpdownload.adobe.com/get/flashplayer/pdc/.../install_flash_player.exe&downloadAs=Adobe-Flash-Player-13091-dp.exe

http://www.presentdeliveryapp.com/c?x=WIDXvSaHDHsBjv88i8esfz5KDfYqwlx1fwL1u6lBCJ4=&c=7Ko2gQsQQqB5CbE 1smTe07OK0Sx oBpbKbtcmM8nwEAl13Ih7HsGvNqFkm0r8PFdvOjQP61Zjc/dZxTbbGvH200xZ1u1PJjFamX0A/HmfCqjSRzUn/EgvWYzjycaFNV&fallback_url=http://fpdownload.adobe.com/get/flashplayer/pdc/.../install_flash_player.exe&downloadAs=Adobe-Flash-Player-13091-dp.exe

http://www.contentcleanpackage.com/c?x=7WDO9q4ZwaR0wVdx6qY4NfVDJMMtzfP6vj7dD1DSugI=&c=KVYgfuz99gyfmoMP9XJdI6xGjcjFieI0D0HjOVlmtrbgGkG 59j6E3W70tCS5LfDwWvWT0lEQ1/dXikSlFqHe2eZvvx7lMBTXYRyi0gHHVFiFWU7MWXFo3UuQdn2GDvY&fallback_url=http://fpdownload.adobe.com/get/flashplayer/pdc/.../install_flash_player.exe&downloadAs=Adobe-Flash-Player-13091-dp.exe

http://www.contentcleanpackage.com/c?x=wRh5J5ZFj7mLRdKakDZKwONxP3gyNorWJqdKsCQOLFo=&c= rkSVxcx00Ty DyeSYLaxK0gve1wWPAbZkFCBfbNN1IViNcu8DeRsY8fsT0N5OHWcKEJPbAnMMkio6UzERpDtg5jeGmPBLea/u7oXK TbvFW3LsHWTXnkiTrqWRrY02x&fallback_url=http://fpdownload.adobe.com/get/flashplayer/pdc/.../install_flash_player.exe&downloadAs=Adobe-Flash-Player-13091-dp.exe

http://www.towntodaynow.com/c?x=RTKNFJcQgIi7pEoZKU9hfNbrRMxyB LxFvUsUmRcibY=&c=rPwD2Ugp0dL9iqa/1zgoJRLmoQdQChyyU i0rxQtw cXTPU8tu8UFzOvo4FkJZs/ThSkRC/VCUh6mvZMp6HXw2TX7sVOkQRgQfdyB68OKnHCpcxXQaVaE9QQ5Yt7R0om&fallback_url=http://fpdownload.adobe.com/get/flashplayer/pdc/.../install_flash_player.exe&downloadAs=Adobe-Flash-Player-13091-dp.exe

Remove adobe-flash-player-13091-dp.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.