home

firefox-13108-dp.exe

Lite

Mode Beta (Fried Cookie Ltd)

The Fried Cookie installer utilizes the InstallCore download manager which may bundle additional offers for various ad-supported toolbars, extensions and utilities. The application firefox-13108-dp.exe, “Lite Setup ” by Mode Beta (Fried Cookie) has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions. With this installer, users are expecting to download the free Mozilla Firefox web browser but before that occurs they may be presented with additional offers, mostly potentially unwanted software or adware.
Publisher:
Mode Beta (Fried Cookie Ltd)  (signed and verified)

Product:
Lite

Description:
Lite Setup

Version:
5.3.5.2

MD5:
589334f3845a80e9c24eb24e40c77c90

SHA-1:
498b0a5a51f5c1869641a354a1de1f3f00dff430

SHA-256:
490151c9bcdba04220cb1a1c51c9e61c93ea20ec61e09f53591ef3d66b5170d4

Scanner detections:
1 / 68

Status:
Adware

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Description:
This is also known as bundleware, or downloadware, which is an downloader designed to simply deliver ad-supported offers in the setup routine of an otherwise legitimate software.

Analysis date:
11/25/2024 5:25:09 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCore.Installer.Installer (M)
16.2.3.19

File size:
941.7 KB (964,344 bytes)

Product version:
2.8

Copyright:
program

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\inetcache\ie\{random}\firefox-13108-dp.exe

Digital Signature
Signed by:
Mode Beta (Fried Cookie Ltd)

Authority:
GlobalSign nv-sa

Valid from:
12/16/2015 2:37:06 PM

Valid to:
7/7/2016 6:06:18 PM

Subject:
CN=Mode Beta (Fried Cookie Ltd), O=Mode Beta (Fried Cookie Ltd), L=Tel Aviv, C=IL

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
112172B4C29D53526C8AFAEF1C4F6265E881

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:I7wo69LPa5MW6cJuZdBNxZw6MU9n9xPaVgySsDizQO:IMpLPgGM6MU9zCVjREQO

Entry address:
0xA5F8

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, CE, 8A, FF, FF, E8, D5, 9C, FF, FF, E8, 64, 9F, FF, FF, E8, 07, A0, FF, FF, E8, A6, BF, FF, FF, E8, 11, E9, FF, FF, E8, 78, EA, FF, FF, 33, C0, 55, 68, C9, AC, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 92, AC, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 26, F5, FF, FF, E8, 11, F1, FF, FF, 80, 3D, 34, B2, 40, 00, 00, 74, 0C, E8, 23, F6, FF, FF, 33, C0, E8, C4, 97, FF, FF, 8D, 55, F0, 33, C0, E8, B6, C5, FF, FF, 8B, 55...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
39.5 KB (40,448 bytes)

The file firefox-13108-dp.exe has been seen being distributed by the following 50 URLs.

http://www.grabbundlesapplication.com/c?x=roESpyu38nZXWF/TpV17x9OMrUv45CpOcitnIIKe1BU=&c=uOtWMYYTE0iEjXFnUee7QZWyg9pcQVBusSP5ivqQGE91ki8QA3rwXzYgBxi/JXviKuUDW8KybUEWH Bwn0 zZ8cwcKdD90RziEIMG43SLWxBXsSQy/LSfSYCxN2Iemvh&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/44.0/win64/.../Firefox Setup 44.0.exe&downloadAs=Firefox-13108-dp.exe

http://www.giftchuckletour.com/c?x=Pd6yqtHzxkopFnb6upDpLkOpuBhU0lvEvogQzbBIrDw=&c=77Mcm1vjvY2ZlLfne0gmk0RlSRsKz/M6AdHh1PXsFzVHThu/AqNuKiDjG1cOxNw1AWwcZAcX94pKgqFrJPqdOQuo3PrZKqZDO4I4U3lw/ qFfNY/SFUxSuRMII3 Ol 6&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/44.0/win64/.../Firefox Setup 44.0.exe&downloadAs=Firefox-13108-dp.exe

http://www.grabbundlesapplication.com/c?x=FJB3kpXle35Eyo bU9LVFc3EUGCdN0mi4wEdEaDDWnQ=&c=K00qc8fjxZieJSpUYs9ragK/BOfWXHG9mdILC6W3m0FPNH BKpwE9taj08dOD1fuNl1ZcPOdJnuKAGfovyvFAnDDAh4qJKkw3O0U8d6S pgenV3BS7VmgI1qhojwd/jL&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/44.0/win64/.../Firefox Setup 44.0.exe&downloadAs=Firefox-13108-dp.exe

http://www.giftchuckletour.com/c?x=pJNXygArxEmgJuWyaHT8Bwey3se31wbxJ9zqHurN0rQ=&c=IF2/RcTF3Vwqx1AGtF0I08iKzMKEFaxcdfKkK1fsp/fAtLRm3IfK4iFhK5Y0PXP9oXbH0DETHmstswUxe3/vT6uU9wB9j7CpFQSVhMWrU2v 0XDb4iWqC03zUcH51l E&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/44.0/win64/.../Firefox Setup 44.0.exe&downloadAs=Firefox-13108-dp.exe

http://www.stockbundlevaults.com/c?x=YvrWgdy9er 0DSZvz0bJKsbHutpJut00q gy6p9zpnM=&c=EjOQoBcr1lJJMS84ieV2bjrIbrYid9NBjMaaOY15 nlA5MVSdIGE/4Jh5Gl6JtozawjMpvwfaMKe5C4QQXQBQ1uhgt6uG97 bzPO6Cidqdp4 d0rlX29SRtgDcLpntxu&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/44.0/win64/.../Firefox Setup 44.0.exe&downloadAs=Firefox-13108-dp.exe

http://www.stockbundlevaults.com/c?x=BiaOxS/zQXpalawgIfisqsnuTauFhxNkqktfEtGIfVM=&c=O/hwZeTe7ympvLzcmYU/heUNZW1MLB2QCm6Z2f4bTf6sV/2QUEFMI71P1IjLfFLpGmfhT9fDRcqIeqGmnEpinCcwRfBkySDzg4o1w/yv5C3lTF99rTP4WtHO6JxxFMGM&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/44.0/win64/.../Firefox Setup 44.0.exe&downloadAs=Firefox-13108-dp.exe

http://www.giftchuckletour.com/c?x=xxW3UzevHz7yAPdYnJYnyGcLqCNMde7dCGM1CtmT/0I=&c=uHcDOwy51xP6luA07y/zs8LaD4XLEMUuLqSj6YmrHsRVJtKg0rdDLrcXsZ5RL/7f4uyIbITZKB/5sjtGMOc07cnV1N94g16scB4sL1YMV8Jt A8S/A077 4dB3 DXUfk&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/44.0/win64/.../Firefox Setup 44.0.exe&downloadAs=Firefox-13108-dp.exe

http://www.giftchuckletour.com/c?x=nzRQAwyFUb3z7l2dgFu8to3v77Y93lPlu1buQiK19/8=&c=tLxCxYYd8Tu16mY4VZScZ/9koY aqx38FZoqK99WJFpw4JMGye7b2cJIOV8H3sYNnLvtU/Pk2j1MokLVak18ueq/vvf/xv57A9X bGIqGgtrKaUEQxgqnb1PSEJcNjv2&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/44.0/win64/.../Firefox Setup 44.0.exe&downloadAs=Firefox-13108-dp.exe

http://www.repositoryvaultsclear.com/c?x=I3/TobuwYbGdo1ZXsDaYQ5t88v2mudzw8zhF197lnbY=&c=3v9NjkP9LtqHw4q99kbKIBOBtRbC6Pripixx6QCLRkqY8vTfLRqwn8Lk3DDLVvHWvmIHxt3XMFX59H/e6Z4l1u8eGtdAibMnZDTDhso6Z10PzztdMgkFotSaeKOlOQm8&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/44.0/win64/.../Firefox Setup 44.0.exe&downloadAs=Firefox-13108-dp.exe

http://www.factorybitspresent.com/c?x=ZIVdz4ZBngUcPYhaReYk2R6u u13FcEPXQUQvk7bnzE=&c=mHDy/xvwEH9vFBsYPKBWVBCnrxzHKGpYvr0gN77pfAIPx4OosdeznfTPi748pKmVuOHSqW7W7Fb5ksEy1XnDSnC1lPaXxvgjDhDp7uOHSfG4j2a3YhqpbCcifB1TqziP&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/44.0/win64/.../Firefox Setup 44.0.exe&downloadAs=Firefox-13108-dp.exe

http://www.repositoryvaultsclear.com/c?x=VOsqKRjQ9DD53q/PXJe9Ja0OuQJcTuW/8YhfN0cX54E=&c=5Gcca7NE5TC3GQr6Gy LiFjG95MuUk85yNQ9S6gG52SVQCK1Y7P7BXv8FiPPFJztSHucuERGR6sHU6qGFvVBdQ70dBNRx4yffhz9h7Oou/6FQJk3DBHx5s2QFq3/8AKQ&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/44.0/win64/.../Firefox Setup 44.0.exe&downloadAs=Firefox-13108-dp.exe

http://www.repositoryvaultsclear.com/c?x= Pqy5cno8lovENXaGZ9kTd m5ZVKrqEAmIZvCtTV8J4=&c=qGpGoQ/uqiDhYg4Rsqv8Fa035YJPb pXAEFP8SrtfB71p89jCvi05j4zhxw2QEtwj/zl9kuKgBDQajwIcAR0E7I/U/gVE/tb5Rqvf2bW/GbCEZJg7d1PH4wgduog /L3&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/44.0/win64/.../Firefox Setup 44.0.exe&downloadAs=Firefox-13108-dp.exe

http://www.contentsendclean.com/c?x=sjFrEKyHC7B7YCoefmN3JSfl1clWOzW8R0Qmj1npeGc=&c=aKAWqzLW2OOwKAdGh/U W0eu73ayr6NhgJhENbzzgZrOVWzt0NwaSBCd5ejfs4PkquWOaepGYA2lTuZpg2v7OD/6cMLYNv6O2eNsB5QNQuUd0ZMx2PM6RSz96XfMyPS0&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/44.0/win64/.../Firefox Setup 44.0.exe&downloadAs=Firefox-13108-dp.exe

http://www.contentsendclean.com/c?x=bfawNTan0XyLS46ZDUXn6PPF7eCcaG4N8Wh717EZorg=&c=xWGo9bz08R6q1bPWMUOXoZrJVDTIPCuHduP2uj9pOIqoDWszDGWz9OKP6VLLDzguBCzOVBqN47J5Zac4ywHcgymtlMBHVG8ovXsoiVkH4Cxppc68hhHupYlZvf0Krghi&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/44.0/win64/.../Firefox Setup 44.0.exe&downloadAs=Firefox-13108-dp.exe

http://www.stockbundlevaults.com/c?x=lXy27uzFGP4s8TnAlhQoLs0Hr6aLG53f5FQqG27pRjM=&c=lypKX 2NYk0XKG220J6n6tMH9xWgSNzgmtSgjFOxwoXaeYVDfUTo621/pw4rsQW9 YSavzkK8 dziGQRi mI4Ur6miIp7YigsIQCO dNWXSsDN6p1gIBjWpP4rmfezbD&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/44.0/win64/.../Firefox Setup 44.0.exe&downloadAs=Firefox-13108-dp.exe

http://www.stockbundlevaults.com/c?x=FSKL7kuhYxRJExWDYcf5Y82RIYZet6K2VbKo/v7ZfKU=&c=F5XiSzkqT05qulSlTJ0ngfS68YUHCXRNCa1znIi 2MgMZrrhd8lRCPdO30ai0BopZh507dUwUs4egz1 tjT7qLs75TaCV/AnU CpBpzcC/9K7LBJwycG3JOL4MbhfkOe&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/44.0/win64/.../Firefox Setup 44.0.exe&downloadAs=Firefox-13108-dp.exe

http://www.stockbundlevaults.com/c?x=2bN0XeY91m5ytaEGpqCYGnu6UXuJ7vG5AEHYBIHSK8Q=&c=iExvYlw0yEH8Z83ZareBjb3Mdnv99QHnv26bjDjpcr0h2/brGghlhe05rqjMRsLZ54b6KX QZTuvsWejHxPWcJsaVdczJlBJOpyG2r0OBncGI/NeDbw/GdcqZ9SwZLfl&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/44.0/win64/.../Firefox Setup 44.0.exe&downloadAs=Firefox-13108-dp.exe

http://www.giftchuckletour.com/c?x=vHWJInXVQODX741xyTpYyUeE3YUFLGzesZYVWoq SKI=&c=gzAR8lb791B/QWvqGcOURNj1Fok 6G5uQunXqwii4oBww1TJcbwW8Ab3NOn5PUZ7Lr64Gc8ZVkfpRR6QF14I a696dxgaq5pEmplgPbmuDbEwHeO8clK1K6KwwJJPmgv&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/44.0/win64/.../Firefox Setup 44.0.exe&downloadAs=Firefox-13108-dp.exe

http://www.contentsendclean.com/c?x=gCqyXvJrRJOVF6v2PGb2ySaOXNIKRJyb86XWAZLwlmk=&c=OfFSFhRfkHb2BQIN3JdFSMfadY//dkVKPoolB InPiLyVCtoVkwkZp1TTs6gIu6EnP XvVE2mIxof8hX9VEeRhQuyiTROHGgVA4lG82uzCZu7Q8axMhZgtihynX8 gB5&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/44.0/win64/.../Firefox Setup 44.0.exe&downloadAs=Firefox-13108-dp.exe

http://www.downloadstowersupdate.com/c?x=clYWT1DJH4jY1kZbsNFmHpg/P2h1GT7l2WKfpyN1aWo=&c=KnTRK687JW 96eg32e8dPeW18BBd6w45X3uGURUmuzWC8RSlfO2fbx6luCZZYwNGUua235Klg/dmmIJJuB0DlHLghqWjCFCJ/oWzPVXffyGw9R4M8QeTyLWgZlbEB/mr&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/44.0/win64/.../Firefox Setup 44.0.exe&downloadAs=Firefox-13108-dp.exe

http://www.giftchuckletour.com/c?x=2lU/JvRuU1TsCWJmh2ELK6RZVnUoVIcd0Sq/y/otBWo=&c=rXDaWpHNmSQkZmVmGDfqRald6yyARm85Zl8c/iRtoRcVv0HI Stdh Df7J3NykUbA0YLZNr0sYE373cR/WvRquZOvaqls Fdx2lH7COzoKeC5Zp2nWubLHuFrPcZlY/A&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/44.0/win64/.../Firefox Setup 44.0.exe&downloadAs=Firefox-13108-dp.exe

http://www.repositoryvaultsclear.com/c?x=qEBWH4N8WsIVnJcbQOQSiPAZEEwGL/n/3eRvyH3U05E=&c=eTHYpW9RVDFGpeGHkvjRwl/Ufy6vvYTrcPnHb24x7MQhbP79aC2Lp6XtT0oLicSyoYSmUdBW kwRrN5JhkUfIIFJvgFg1gP0KblOXF2VsicaF492J0sHNsVZUfw2x4sk&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/44.0/win64/.../Firefox Setup 44.0.exe&downloadAs=Firefox-13108-dp.exe

http://www.downloadstowersupdate.com/c?x=1diTZgL euHYjgaDlWP0 Is7//PmPc1snAGtkFrtruk=&c=BbQ1X/PrgKsBNwxeGvs6 RtUOqRxAPZkJRkpfF0TNMOKe8gVTo5xkkT5IQaJKQ6YVRcXH9fqB/rhe1bWaFP/rvE21lZAahjKuWWYDyZvgGnRSnSlIkKmnq2p6DV pyyU&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/44.0/win64/.../Firefox Setup 44.0.exe&downloadAs=Firefox-13108-dp.exe

http://www.contentsendclean.com/c?x=gQjliTZ ndKriTlFZUMMObkBRtgCdiKJtxN9Y4pA8no=&c=03FgfmlI/CXcwdqeqHE Pa61MdKHDmwVGOarLEY2lzqtXhzPKnm2QnQq77BnSVYS 2CZjhPZqmqt2zFDUUdDrKlKiXk7zlcfQGxB0uE/9rUcGN2HJKRyVISUCFugp3l/&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/44.0/win64/.../Firefox Setup 44.0.exe&downloadAs=Firefox-13108-dp.exe

http://www.repositoryvaultsclear.com/c?x=6jHwwr OkK5 JHtGs/Uu/Ur8XtlzzscW1EgWPU0Rmbk=&c=m9fCX11mW9IV4GqjmcdweHbbtBluFs8uD/bxX1cVLLOsHxkgq9MKJo4A/h BXQ6Vc5fv/vbLr cPO3vyPdgUu49HKzDZ9MXPf7JsQt0JDIdClEXKYuq0PnjnstQeNfcz&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/44.0/win64/.../Firefox Setup 44.0.exe&downloadAs=Firefox-13108-dp.exe

http://www.grabbundlesapplication.com/c?x=2m64S1Afbe7vV6IclpvqSWEm KcLlD3xW5FnEr74wUI=&c=5Y2071ba8yM3hIkHFkQ99IyG75Iw so3NzlJ1caUDa7 BT/NqzzoG Q8gK7TfS/ beZS kDaMHwKhF/Z/MQhITNkLdpW1EEEI0ejO2ttn8CVrgLdsWXkqq0KDsJFmu Y&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/44.0/win64/.../Firefox Setup 44.0.exe&downloadAs=Firefox-13108-dp.exe

http://www.grabbundlesapplication.com/c?x=ULdJ1tQWi8czS aPgn 1YBD261Qh7S458/ANTkOTrFY=&c=Ipf3SPy/2mDDvkPtKQl Qic4WVcj40YMP3r5nD4bnoQzvF8bS9ROdZVIwkJhsdq26lA0853EeJALMNXn2KXbpWt7yUr43r bzST/O1VbyjGvTzpCfl/G 4DMyZC3CyY &fallback_url=https://ftp.mozilla.org/pub/firefox/releases/44.0/win64/.../Firefox Setup 44.0.exe&downloadAs=Firefox-13108-dp.exe

http://www.giftchuckletour.com/c?x=CePmkNekmne/XOQaWD/JhvgRBYqQFQEZmIDKk9ma5Jw=&c=bnNrppaIuj7gbOqtXSA6Uu/lgAyJUaiV49j5cWmm4N3XuWUdaw5mDE zpObj8feu8G ljDZz pCAUoPYab4xfxaMlStaxU7cdHNMJdH6GGi/CzaL6zoO7cOfJZKQddk&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/44.0/win64/.../Firefox Setup 44.0.exe&downloadAs=Firefox-13108-dp.exe

http://www.repositoryvaultsclear.com/c?x=Iu50zR ygM61cJN8INDfhkPQyv8 LTMd8/MmychEUo8=&c=JeMxYbW82T3K1uYRWY78cx9FNzSVJ/JDTTGgGkhQJfXbXsgrbCiMtVSksoXChP/HlWeMNUL86Tt8StD18JYCqjrfuMpUijnqqLZkEF81Uk6vMflqng5OtNB8ESDyPpn3&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/44.0/win64/.../Firefox Setup 44.0.exe&downloadAs=Firefox-13108-dp.exe

http://www.stockbundlevaults.com/c?x=XgZ6pXzcn IsY3dZOfYVtpb9le8o1R0H51ZuhV39Cz4=&c=q13GM4/cM01oI290NJZx1gHk AWagbzrrotIJ9J2JTEIjWRJuZH27Y3Ys l7800b3IrkAnNdHFHf4Jzlx7Y18 qooXGRYv4rSOz717X5ROfxDMC0TyIE00KUrhfMkv8t&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/44.0/win64/.../Firefox Setup 44.0.exe&downloadAs=Firefox-13108-dp.exe

Latest 30 of 72 download URLs

Remove firefox-13108-dp.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.