home

bluestacks app player setup.exe

Application Installer

Criteria Quality (Fried Cookie Ltd.)

The Fried Cookie installer utilizes the InstallCore download manager which may bundle additional offers for various ad-supported toolbars, extensions and utilities. The application bluestacks app player setup.exe, “Application Installer Setup ” by Criteria Quality (Fried Cookie) has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions.
Publisher:
Installer   (signed by Criteria Quality (Fried Cookie Ltd.))

Product:
Application Installer

Description:
Application Installer Setup

MD5:
6891c4457693c535bff7bee0ffb1c398

SHA-1:
8aa8b8293a37d43a32c61cca63c3a517b6092797

SHA-256:
1447bd6cd5079030ba91a7f2b008a3d42880c6c06bac9822287a7b43ac9effa2

Scanner detections:
1 / 68

Status:
Adware

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Description:
This is an installer which may bundle legitimate applications with offers for additional 3rd-party applications that may be unwanted by the user. While the installer contains an 'opt-out' feature this is not set be defult and is usually overlooked.

Analysis date:
11/29/2024 3:42:05 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCore.Installer.Installer (M)
16.1.25.8

File size:
969.4 KB (992,656 bytes)

Product version:
1.2.7

Copyright:
Internet

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\microsoft\windows\inetcache\ie\{random}\bluestacks app player setup.exe

Digital Signature
Signed by:
Criteria Quality (Fried Cookie Ltd.)

Authority:
GlobalSign nv-sa

Valid from:
12/16/2015 8:21:34 AM

Valid to:
6/29/2016 9:39:55 AM

Subject:
CN=Criteria Quality (Fried Cookie Ltd.), O=Criteria Quality (Fried Cookie Ltd.), L=Tel Aviv, C=IL

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
11216ABCF20419312093F809F0E003C850D7

File PE Metadata
Compilation timestamp:
6/19/1992 5:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:AN7LKXirSl5g5MYuHz9GNh6zCaWM4UEIBtot+k2G:AR2XirSXXYuT9GrMDE6Rk2G

Entry address:
0xA5F8

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, CE, 8A, FF, FF, E8, D5, 9C, FF, FF, E8, 64, 9F, FF, FF, E8, 07, A0, FF, FF, E8, A6, BF, FF, FF, E8, 11, E9, FF, FF, E8, 78, EA, FF, FF, 33, C0, 55, 68, C9, AC, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 92, AC, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 26, F5, FF, FF, E8, 11, F1, FF, FF, 80, 3D, 34, B2, 40, 00, 00, 74, 0C, E8, 23, F6, FF, FF, 33, C0, E8, C4, 97, FF, FF, 8D, 55, F0, 33, C0, E8, B6, C5, FF, FF, 8B, 55...
 
[+]

Entropy:
7.9325

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
39.5 KB (40,448 bytes)

The file bluestacks app player setup.exe has been seen being distributed by the following 17 URLs.

http://www.filestomes.com/c?x=om7m/NCOide4/IyN3kBDBxbzn/JdVCcYMv4AQ4IyWSc=&c=63h7WiukbtDBR3tMVF8U4QiePwZhmkVHnekXgyDahXjzFYEH8coiJoJ E957P0FS7QbNkduNpdXmJMgr8E0uGFxK74DAYUGgujZMxzD2Btm33kCIVGqvwYYTdGjpCXaD&downloadAs=BlueStacks App Player Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.updatevaultsshare.com/c?x=cyYT9YhDwlw9fpIgQp8FzbgdYV803WoOrW/TUwe0I3M=&c=ZvNL0TG9WQyenki/KpTHvn5subIdUiYHqJHssAkqNqIF/nuF1FgFZQ2A7MKzaQDwA sAbEp1lAp1J1nOmxq31qv2qaHfif7B QEB hx0bgIrmvQF2F VA ChS5aqI6jf&downloadAs=BlueStacks App Player Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.nowappclear.com/c?x=L5Lpe4KB0BKOVs5VDhQXPa1gxW61aD0F5ntCM6I4 6U=&c=aO77xUiSzL8zoi21/rnVv6n vb/4YwZ7Htou5fA KPNWPT/i8/LyFOtKaVInk/TyFpj5S4hJoN/hRnHqG4lLKGLKr4V13ERQAqCgfB4aTUrXRLWjpOZm1V0ZTs35flQg&downloadAs=BlueStacks App Player Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.vaultranchbyte.com/c?x=Np2KIBQELK1kU1IQM2MeQP/9HwWCYBvf3SfcFMUKRH0=&c=gn3LX5ruFn0RlocLxlFF4psUyTwLvWLI0F7nswVfsKa27oH05dCBk63358hVGHAeS10mOf/CaKTJ5ENz5 vL5qhx iQtO5z3mNH48NI9X/lpRcZKQpgieKxi DsXl6uU&downloadAs=BlueStacks App Player Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.giftbestsafe.com/c?x=gsB7TD2zxujnaNPaX/EG/LlFdVwAVUJzUzU6S yw Os=&c=3sM8rfvFxIZIHkMsxpCephxSQ0T2vNEOi0oiKs2qvp9t4oR8iiYUBPjLkE2Giid7O9kNCc0a95Hptvy1VyJ6pWtXc9QD/xZFg3nAT6lHwoAw6/g4U4UooG4bshn/Fb1b&downloadAs=BlueStacks App Player Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.giftbestsafe.com/c?x=MW3aeQLOXjoyih/Sl52FqLFcfaHhCY6/w3FsWjOTBT8=&c=XoQfp6E4JJGPtOemNhqS tXzUTWpRxn3dkVbbTuqK16wX1nBZgVQ9t0Dzo6DGNUkgxL5tXDBdbsQLtP15caUPWbAEXyQbhXwzOt2g5NBrH1fKqllcVYxYgN6ytd7Y26f&downloadAs=BlueStacks App Player Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.tourworldmeta.com/c?x=gzIwmuku8Rw7V/e/7WosaiCJbMnRuLWL6c4y6UrFNHA=&c=TcREeOA04niA8r4qHShPcYK5bNCXz140J8UP5jLyyBlHaxBazQ6NDkhIi33/2J3kgnlZ pi3qPYBrhg5f vGh2ocGItTDBuwxOWWydMm9GhbvkOeRNrR2 JAr12b4ktW&downloadAs=BlueStacks App Player Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.giftbestsafe.com/c?x=U99pn/CfS2daPlgj9VK9RmnWcvvLXdf/DN A6Yt481I=&c=QZzbXmqnFW7REreALqB2Mpcevx00SNmlce UmCsEjWFnRM7frwx4sog2yCZrtLnc1cpAYS774EuMSwMPxmGDB3/Rnu89 kDdcL7QulbyGBVk9dUENFxd3oah/MEys8b7&downloadAs=BlueStacks App Player Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.filestomes.com/c?x=0LF8fi 8wx5XbPYJIaMTdYhGkKE0 wPLzi81HYODlfo=&c=NRQU9mZvHMU3jB/jTlNqXISBrjSLyAEYhbhO054qv4Znw841gzi0LzAZUxEZDNCRG6MXvVi7WHZMG9DhWG/0kKB cn IcoEu95i1a8mcsNGhflCfjfmchTXzCAlu/svh&downloadAs=BlueStacks App Player Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.filestomes.com/c?x=zEOiRJhz/ 0KKYAN04R95H0 E06KUSTLjHO0rNqaPXs=&c=cfDpx4RLdqXxCQ6fMV13Csn9rFEL5mCxl7JiBWM0fb9cuHMdg9PT6FwdZe3njm0zkz64FhCCFQLAGD6bgUny kDQFETIG09hw Um7CdM6Xc3T50Z4jdHJ9z4wZMzFz6P&downloadAs=BlueStacks App Player Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.tourworldmeta.com/c?x=2gHUL2rBTbhZZZzf9wJsV0WnZBuKPARCEsMjR52tTqA=&c=FNhKj85IdvR7AVkJYCSRTi YMS0nDwq/RMzbKALkejwffb9SO6yj1DQrXEi3g7AyT5BI/QWx/meVAdYdP23kCBhejnSTsmgyfrpvoTViHl2z6 o0j3C5V1yr rve1sNp&downloadAs=BlueStacks App Player Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.tourworldmeta.com/c?x=Ry2p5LRCTItl3jng8MXx2dpRaESiFfl4 cB78a 2c14=&c=uMUaxTCqaApe XORAGOenzXtLiy5KUBVhXTbhEqOkJ6v g4b0UT34g 5EvOvRaRnQOaSjAhXiMSwUnmFY1bGH3pKpYZs6EX lxtB0wMU2G0KOexg/52dTQkNwzQMpkIJ&downloadAs=BlueStacks App Player Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.vaultranchbyte.com/c?x=Bs4jAIaHfDegfasX6Eqnm1Pvt3gKCxaVqaOHFDZ9I0c=&c=OwJF/i430KiFNeZ9oAEuSpC8Q3rK7qeH2Dwp61IcHc2tFiqVNQDb6Qm7QLeeqTbLWPMAKThlpY AsAKhsXGyTYyj20CZxiRsn3ZVLQpeMoC 9iYIdDQL2BW9HcYAVxCI&downloadAs=BlueStacks App Player Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.filestomes.com/c?x=q41an/xY9A/JV7mcjMEHrDYrgvS4KrOTMXHh1Vaziq4=&c=Q7yj X0dcF7QW2l hJE23X2g8X66aJ/axkF24SxZt fErer88zlWP2L4FBtipDEyBfn1botR9hlyjPXxIum5db6c/nxg73CsQeV7ZSS9IeRMQO5HzPRHo9djvO6SSe5s&downloadAs=BlueStacks App Player Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.nowappclear.com/c?x= meqAWcUZYvCkwsrhjsBDTQBNOrbsnNc0THxu4KENMk=&c=5daPNmt12XkqeHpaLvjyxDH5MZEENGnTTHe2MtG2Yzg1vwASKTazNP9kkg/9z8IDviTFjwhD6vxh6TPWs0Hw8CH1BhLXLjR 9xXZLd/mcYzqjkyHXDgoSguLoHa3Os7w&downloadAs=BlueStacks App Player Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.vaultranchbyte.com/c?x=3PyqJxZnOGBJYg4SxYeIhCM6kf6BKxyJHu/BPu4cOzQ=&c=RS7BoK4/4gu9LVeeOAF//DQ1VOhsFk5AnG3HEHZb0UAuWkJ9GGbnSu/iiItZXmTexJ/oZi9eubBdTrqpXSSBlMwrM9nhfM8kbu4CnDOizReiVw8CAzx9RFmVSvcpGImH&downloadAs=BlueStacks App Player Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.nowappclear.com/c?x=MWkzqlE8p3MtLq2IvnsLjyYtuZ1ivLcYH2Vafni3 mY=&c=oqsAaFEZA4lxvzZQOqzPSNmjNPGzqq7 No2XwUxnUxBh4TrSF0NHpBX3ksBJnTDSvFgVDF2oVger DhPCnRKKyYLtRaZTd5ff/7zrQs2ZFHsdINlwAv/Vz3cVUrE WE &downloadAs=BlueStacks App Player Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

Remove bluestacks app player setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.