home

adobe-flash-player-13091-dp.exe

Lite

Mode Beta (Fried Cookie Ltd)

The Fried Cookie installer utilizes the InstallCore download manager which may bundle additional offers for various ad-supported toolbars, extensions and utilities. The application adobe-flash-player-13091-dp.exe, “Lite Setup ” by Mode Beta (Fried Cookie) has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions.
Publisher:
Mode Beta (Fried Cookie Ltd)  (signed and verified)

Product:
Lite

Description:
Lite Setup

MD5:
05970fc92680659c11ffd0d54a70efd0

SHA-1:
ebce730351124f081c06fc269e87fe7ffdd6ad9e

SHA-256:
622dca6382a384a7e7adccc67b3c10ce83bdb8c963736737eb9474eb3e690423

Scanner detections:
1 / 68

Status:
Adware

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Description:
This is also known as bundleware, or downloadware, which is an downloader designed to simply deliver ad-supported offers in the setup routine of an otherwise legitimate software.

Analysis date:
11/25/2024 2:31:14 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCore.Installer.Installer (M)
16.2.15.19

File size:
944.3 KB (966,936 bytes)

Product version:
4.2.2

Copyright:
Application

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Common path:
C:\users\{user}\downloads\adobe-flash-player-13091-dp.exe

Digital Signature
Signed by:
Mode Beta (Fried Cookie Ltd)

Authority:
GlobalSign nv-sa

Valid from:
12/16/2015 2:37:06 PM

Valid to:
7/7/2016 6:06:18 PM

Subject:
CN=Mode Beta (Fried Cookie Ltd), O=Mode Beta (Fried Cookie Ltd), L=Tel Aviv, C=IL

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
112172B4C29D53526C8AFAEF1C4F6265E881

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:HTtBYvtCO6iNum4dvHgNoW+iN6jEvZJCblnxIGX:HBWvL2HgJ+iNFRJwIGX

Entry address:
0xA5F8

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, CE, 8A, FF, FF, E8, D5, 9C, FF, FF, E8, 64, 9F, FF, FF, E8, 07, A0, FF, FF, E8, A6, BF, FF, FF, E8, 11, E9, FF, FF, E8, 78, EA, FF, FF, 33, C0, 55, 68, C9, AC, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 92, AC, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 26, F5, FF, FF, E8, 11, F1, FF, FF, 80, 3D, 34, B2, 40, 00, 00, 74, 0C, E8, 23, F6, FF, FF, 33, C0, E8, C4, 97, FF, FF, 8D, 55, F0, 33, C0, E8, B6, C5, FF, FF, 8B, 55...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
39.5 KB (40,448 bytes)

The file adobe-flash-player-13091-dp.exe has been seen being distributed by the following 21 URLs.

http://www.safedownloadfile.com/c?x=ae8npkkuHzCo0OVT3DYZMlPwZcnO6dJi2v3kfdgwsnk=&c=RvZyvbPmAXcBXseTkHFf8upe65vy5H0rDCoW3e41JDEwjoLDYE0tb44HrqtU2fQ6eXdox khCq66X1RZHZ9zT/0cnZ776yjWvti8dYaZmovKXmoBSLIva513Xmkn5zLO&fallback_url=http://fpdownload.adobe.com/get/flashplayer/pdc/.../install_flash_player.exe&downloadAs=Adobe-Flash-Player-13091-dp.exe

http://www.appranchsoftware.com/c?x=r1ZBjUg6lKPAnynwF4aYFyKF6Jfu9xWlcq6crSwm9yY=&c=1fW/GVuWfw5699c3wP10SgIKje7R0tnFshTaLIDbXzwXEpo9qQOn0f21r8JN6ka6SkhFccDZle9T4qYElYSrGuvx7l8npqtTslWNOViOraX4A8kbSgsnqxu7ubJJCFMO&fallback_url=http://fpdownload.adobe.com/get/flashplayer/pdc/.../install_flash_player.exe&downloadAs=Adobe-Flash-Player-13091-dp.exe

http://www.stockcentralcycle.com/c?x=oduWNMlmUo CaZQvWNfATMTAmssk44pIxdvBKl8zxLw=&c= 3JWLsSyBNKfbwvXnEmzLLaXviwaIVNIyls3gAuQ8EbpASkYbt9aYqahoj5R2yrufJFDUJWMzI/w/4 z3 mxuv3Q087Jbtj/tA9d3ymMX6Upzc4qbiOVjxPqBp19qfGr&fallback_url=http://fpdownload.adobe.com/get/flashplayer/pdc/.../install_flash_player.exe&downloadAs=Adobe-Flash-Player-13091-dp.exe

http://www.contentheadtowers.com/c?x=6X3F58nhPqcBdvdf1sGTe9WDogJT BXwggaCTLIc5GA=&c=6cWKA1wqN2PVvAGwhbqOOttICflNTWWZ52bsoPAgeEoQIpUmpyUsv2Uu1wPoF/slfSpchU1JllYg5rKt6V3NWsDx2 dxrM0g/r9RWWIkgcpdIj8cC a00dH7V7cp0wdS&fallback_url=http://fpdownload.adobe.com/get/flashplayer/pdc/.../install_flash_player.exe&downloadAs=Adobe-Flash-Player-13091-dp.exe

http://www.laboratorysenddl.com/c?x=U4zb//6VojUoq6p7TkaKVvK1stFYR/rMW hvyBYitSM=&c=JCKhWbG8fvG5UeHXb0t5hCIQ5ESETtF 7ZwfHu06qoJw0G/DROSqKShW3EG4H3uyGKLmWLcWJcvE0hJgGf82I/Q8ibgP61p5SnvZRvrf2VN1wVg39NsjO5G4DCgLaPKF&fallback_url=http://fpdownload.adobe.com/get/flashplayer/pdc/.../install_flash_player.exe&downloadAs=Adobe-Flash-Player-13091-dp.exe

http://www.stockcentralcycle.com/c?x=XI0oV6MOPapBlxKWbyFiSKiVEqmtoUcMchLKMiEQ9uo=&c=mW6m6TpTVvKELcAgYqmp8Cgh9g1shdPvxl2Q6an0o ZGDQCWHoRGDGgVguXCcfvaumCZxmTp1laogv9QBXcWRcTRAi8pK8IbHszF/c7cEDD9Cp75dTd7VxdDp7R07p/m&fallback_url=http://fpdownload.adobe.com/get/flashplayer/pdc/.../install_flash_player.exe&downloadAs=Adobe-Flash-Player-13091-dp.exe

http://www.bodytowerfun.com/c?x=xtvc0vd2GwHNOSHKR6N75CYSeJj58Nq Irnpx fcUxQ=&c=P2j6AYQmbHsd6w4hW0vKictO r73SrocOoA4lvz5qVYXS3vypn7BGnRpLmaZnfqKLhBRzx2onDn34Z3J9Cz6wD2bYJkU7HocGGLMzUuSQbg9fZPmvaoeutH0d7kEyi3D&fallback_url=http://fpdownload.adobe.com/get/flashplayer/pdc/.../install_flash_player.exe&downloadAs=Adobe-Flash-Player-13091-dp.exe

http://www.safedownloadfile.com/c?x=YyOlHZ0doqJ4E8VTbEhAm 50aIwZrDoSS1wXD2fuSLc=&c=O eQj4NdEPccuEazZQCUFlPFMocIj9uFr5Akv/aULjoAQqm/7llIaE1NhR3jO1ntLXPhnefM t6VifIiyK7yQKKZzVn/O aqev65wwvx L BrycmMXQuigYPlGgjhu5Y&fallback_url=http://fpdownload.adobe.com/get/flashplayer/pdc/.../install_flash_player.exe&downloadAs=Adobe-Flash-Player-13091-dp.exe

http://www.bodytowerfun.com/c?x=mjAimswpBkO5M7IqkiclFSb6j2NRmRpGYNbz54TgkLA=&c=iLTd2SGQg1RdNl1kpMQB4mj12L1HFZRntt8dAS/bzYZaqWfEVLc2M65LV6wmQbmW95RwLAsiNKrTzvjDm1pvDuWZNmavusLaZe8FllR8kXNZXEgAE0tZdqvH0irDXAVx&fallback_url=http://fpdownload.adobe.com/get/flashplayer/pdc/.../install_flash_player.exe&downloadAs=Adobe-Flash-Player-13091-dp.exe

http://www.laboratorygiftvaults.com/c?x=vOIgb0LxNZhi2Wjt9CEUDjFClZw33wkxgqqxSq2iFdU=&c= FCf3wsyxLdWX5kVtYa8lMUp o/8vcJGHNNQrMcbmzVuyBaqC8zKb4dNkguNm86njtMnqQQlY0Hb nUMUjnU2OFOzAzlnCoE8SNFyQOsbYzOfbDBgfjMKCrISLI9OSBW&fallback_url=http://fpdownload.adobe.com/get/flashplayer/pdc/.../install_flash_player.exe&downloadAs=Adobe-Flash-Player-13091-dp.exe

http://www.laboratorysenddl.com/c?x=aSdoZsqca mp0pFzkmK09L0FnHfPBh7KkG/u2p6DWSw=&c=0alvCDbB8jQvsJgCYXsSRYfSoD bQ7ZCYXsBSQDR3qPZNR1ESpJd cTx3nKicNwVltoXA7yJsY4m8JYWH6y/EQo3/v5OAa6mvU76FotUnSprdz4Qy13roSE7//diAvKX&fallback_url=http://fpdownload.adobe.com/get/flashplayer/pdc/.../install_flash_player.exe&downloadAs=Adobe-Flash-Player-13091-dp.exe

http://www.appranchsoftware.com/c?x=bPYs iiX6dHXpLa1op4lhOIfc7DiH eG RR4IhdyLdw=&c=Y1eH tdATlnm9/cb2zopEp3N/YnEDfR5S3tVhZqdh04 odX1THzmTzTdD9tl5Q5M/Ky3dkOD2uJYRBiCPglBWmEt6vx/Wz/L9DZVZMA28i MxnrJSYSWroEB47iB54m1&fallback_url=http://fpdownload.adobe.com/get/flashplayer/pdc/.../install_flash_player.exe&downloadAs=Adobe-Flash-Player-13091-dp.exe

http://www.bodytowerfun.com/c?x=r4yw/4pmCMqRXAmYZnLnAaOmEX2GCeG9haTCJR 8naY=&c=8MYyLbz0Z3GMVLuLInAYequNhjH/xT4v IqAD0PD1Cc12i7O9PMsho7ZMivpWwC0qZAavptTXJyDdamf EoLa8hmpHtbJjTuINU/Ai2hewwqtkdMWPaRFAIGLcpTUm0V&fallback_url=http://fpdownload.adobe.com/get/flashplayer/pdc/.../install_flash_player.exe&downloadAs=Adobe-Flash-Player-13091-dp.exe

http://www.laboratorysenddl.com/c?x=V6J7tG q3HFWN4S99n ARGYB6feIYvaRtF3UfQUy9dg=&c=KnufJavGzIo rPqkxNyWVf4BPbsQc c2VdKpNr0mClLLz6B62o Hs3NOhfaep8wluxCKR0/IrD8CmlAGnsAcbAh1lUVils pqXXBHnG65QeSVfRyhHIrqU9hceDiUJeH&fallback_url=http://fpdownload.adobe.com/get/flashplayer/pdc/.../install_flash_player.exe&downloadAs=Adobe-Flash-Player-13091-dp.exe

http://www.bulkcitycontent.com/c?x=8sZGuM7QbFSClcbX1oqCIaXco9kfH1hC1ILKXM00TeA=&c=KpxkIB92/ZHIEJpZ6ZkpQE2KuH 2pW7J3IkiRgCx0SgdgCggttMKo3HbhbrgS/Vr5ciQUL2LrzS0 6d9OS11HAtGQOdSOFCDss5lfvryZdkjMFw0pLex2XLGjH6EUccg&fallback_url=http://fpdownload.adobe.com/get/flashplayer/pdc/.../install_flash_player.exe&downloadAs=Adobe-Flash-Player-13091-dp.exe

http://www.appranchsoftware.com/c?x=nYC4AdDJNpTfzESg3JHrxRNNYO/xPDbu8wufk2EmOvk=&c=bk5KoF6BngRQgNgb29AFfSpWrF2QYk/sNwVhdwwF94kny6gPy7Rt19m6veQ5K235UJgv/osZJG0KmTWB6TRYTslXchosVo0CCzxJY1rSBU9f0qcaeyw2cNRRdQJXlLL/&fallback_url=http://fpdownload.adobe.com/get/flashplayer/pdc/.../install_flash_player.exe&downloadAs=Adobe-Flash-Player-13091-dp.exe

http://www.laboratorysenddl.com/c?x=Sn 5JmdGpWZudbxslds08lu/ZKoFPR6smCM7MTJtTj8=&c=TR0J4s5oq1pdCjo5axmJUQVAWi6QMcpYCwDPhENKFippySN1l2kBWzdyQc2TPtdnYV4ykOOx9bElZMyLjYldofZw7h3wxL5hWqAQV3cm35a35EcMnALi C3HgXs8O1CL&fallback_url=http://fpdownload.adobe.com/get/flashplayer/pdc/.../install_flash_player.exe&downloadAs=Adobe-Flash-Player-13091-dp.exe

http://www.contentheadtowers.com/c?x=dYjPrj5/kKIJf RJBZcvnbWD6RVTKDPVIG2FNpuvzo0=&c=wYrOgJeaZb7CUD9hZMbl/lbd0pZ9qdFHufWwHlH1cWIlaNfUo/gxgw3ds00adBeQRDGDHSnpd6a9kvOwcs3RnxrPG3sEVz5AdJdaAUQgFV/4falVKhzdzo3gwY5Lj4tJ&fallback_url=http://fpdownload.adobe.com/get/flashplayer/pdc/.../install_flash_player.exe&downloadAs=Adobe-Flash-Player-13091-dp.exe

http://www.contentheadtowers.com/c?x=yy4ZOY/CXOu23ccn1MJKyJwHVSazrvBmBMDOcQlNxAI=&c=/PXTNptLASrkhg MVIXJnyNw nzltMVjvPVBaPi SfFbBEMNzuZXIIKUEBLzq0KbV7eEVljyqlxg9u6aHqCWurskL5ISPOvZi9VATjC7gQ4OkTYTttAFJ0KHVp BpeQS&fallback_url=http://fpdownload.adobe.com/get/flashplayer/pdc/.../install_flash_player.exe&downloadAs=Adobe-Flash-Player-13091-dp.exe

http://www.tagbinariesconcepts.com/c?x=4KBGqEDU2Byag8CZ3C6rGpiVICtUBcNuuxRYKkc3B80=&c=Mfe9GbuQ0gbyx7y0w/RrCvj8IHisPebB0KK2HXN3i/J0VKDrN1YECWW0YOv5O7WQ9cBr2krPlI26yXTq95 Fsp4OhNhz8lADav jtoHN A0dbJwhLoSKYU2FTSn Ih66&fallback_url=http://fpdownload.adobe.com/get/flashplayer/pdc/.../install_flash_player.exe&downloadAs=Adobe-Flash-Player-13091-dp.exe

http://www.contentheadtowers.com/c?x=QGjwXYZ/K4f6BDTngERP9lC3vDY8Tgxw V7PjAEvcVc=&c=JxQZa6wb2EgebOZK5OjpzTMeIguyoyfFEifjwTf2u4orRFjLta/8OcnMORMadLFh7OQocFq5R/jK1/OOxmOPViIaBXSRlF5pMOMgblxKm9qnxvSkBmhaxmo6zQ B5MbW&fallback_url=http://fpdownload.adobe.com/get/flashplayer/pdc/.../install_flash_player.exe&downloadAs=Adobe-Flash-Player-13091-dp.exe

Remove adobe-flash-player-13091-dp.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.