home

firefox-13108-dp.exe

Lite

Mode Beta (Fried Cookie Ltd)

The Fried Cookie installer utilizes the InstallCore download manager which may bundle additional offers for various ad-supported toolbars, extensions and utilities. The application firefox-13108-dp.exe, “Lite Setup ” by Mode Beta (Fried Cookie) has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions. The installer is marketed through download protals and search ads as the free Mozilla Firefox web browser but will also install additional software offers which include adware, PUPs and browser toolbars.
Publisher:
Mode Beta (Fried Cookie Ltd)  (signed and verified)

Product:
Lite

Description:
Lite Setup

MD5:
3257971e1524af9ca36fe14444e9096b

SHA-1:
8d2b6ae2cdf195712c304c48cb29f2f78dac16b5

SHA-256:
0ac272d6df3fe47258cd737eef0d99ac5cc5cda03bb1101840f223624c1f1587

Scanner detections:
1 / 68

Status:
Adware

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Description:
This 'download manager' is also considered bundleware, a utility designed to download software (possibly legitimate or opensource) and bundle it with a number of optional offers including ad-supported utilities, toolbars, shopping comparison tools and browser extensions.

Analysis date:
12/26/2024 4:59:52 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCore.Installer.Installer (M)
16.2.15.15

File size:
944.3 KB (966,936 bytes)

Product version:
4.2.2

Copyright:
Application

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\inetcache\ie\{random}\firefox-13108-dp.exe

Digital Signature
Signed by:
Mode Beta (Fried Cookie Ltd)

Authority:
GlobalSign nv-sa

Valid from:
12/16/2015 2:37:06 PM

Valid to:
7/7/2016 6:06:18 PM

Subject:
CN=Mode Beta (Fried Cookie Ltd), O=Mode Beta (Fried Cookie Ltd), L=Tel Aviv, C=IL

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
112172B4C29D53526C8AFAEF1C4F6265E881

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:tTtBYvtCO6iNum4dvHgNoW+iN6jEvZJCblnxIGX:tBWvL2HgJ+iNFRJwIGX

Entry address:
0xA5F8

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, CE, 8A, FF, FF, E8, D5, 9C, FF, FF, E8, 64, 9F, FF, FF, E8, 07, A0, FF, FF, E8, A6, BF, FF, FF, E8, 11, E9, FF, FF, E8, 78, EA, FF, FF, 33, C0, 55, 68, C9, AC, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 92, AC, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 26, F5, FF, FF, E8, 11, F1, FF, FF, 80, 3D, 34, B2, 40, 00, 00, 74, 0C, E8, 23, F6, FF, FF, 33, C0, E8, C4, 97, FF, FF, 8D, 55, F0, 33, C0, E8, B6, C5, FF, FF, 8B, 55...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
39.5 KB (40,448 bytes)

The file firefox-13108-dp.exe has been seen being distributed by the following 50 URLs.

http://www.stockcentralcycle.com/c?x=zxNGDlHf4YeqZp2smZylzhWpCNSnTPNAmIrzO46o1B4=&c=zOK5hfZ7yB9s661UPWAVxfKOfhz89py0phQe4QqBnMK5DZG9TiXqNDlnuDSOy228WcXKmv0byZbgOy4igqINEeP/iesbfcNV5D2rd3XBOaBQhykzoyHvbZtKhEoV5dLK&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/44.0.2/win64/.../Firefox Setup 44.0.2.exe&downloadAs=Firefox-13108-dp.exe

http://www.appranchsoftware.com/c?x=xlbgjg35Oic4Yz95luPYItLWgvTPfWZ8WUXOuMSJNuI=&c=nrfJQdl2q7klaGFBc7rgCQeOgr5J30IGxZWDWKBmI6yfqPHOEbroxOFrj0maWLPKa/pubCKJH1SApGzA1CrWBR fxm4urSfvWjo bjdJWY33f6u3MkBoCPuA3wqA3/1z&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/44.0.2/win64/.../Firefox Setup 44.0.2.exe&downloadAs=Firefox-13108-dp.exe

http://www.funchucklecycle.com/c?x=VG8NecP20xGq/y/XbW4wryjBrrBohksaWBxbXpN3tgQ=&c=XPFn/taRpGaJUzg4dbRWLbIuQDwh6kB8qp/zQWp5aWh6eEWPGV8EInC7bHq PNvGwMlx8P igxLM7iRJKB9KFqhW7GnTJNhPORBGc0y6uxcfoEczG58MhimEMLVRD003&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/44.0.2/win64/.../Firefox Setup 44.0.2.exe&downloadAs=Firefox-13108-dp.exe

http://www.laboratorysenddl.com/c?x=eOqYm6Lngj9vNJiA7stmYvMr6134N3x/HXQRQzH2A7E=&c=yuyvJnd2LWyvOn0tV3kGVifSXoxNZPQSOcg8aZvT2Nte TLY5UPjGJlswXJxuy2whRnWm5RjkE4RPfKXAa9VVMaAD4KyirjPYxnqKnjos9vl2ImKhK QHIjHU C6/X1c&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/44.0.2/win64/.../Firefox Setup 44.0.2.exe&downloadAs=Firefox-13108-dp.exe

http://www.laboratorygiftvaults.com/c?x=lQnZKzGcC5F4k3TNMmBWY51f ZrGKZ4SbgFwHIDDWtw=&c=/213l1q6/EUWqsfawvYnL6GWICTDseFsDxXcnxWmgBMNQwGEurzKYZYZF26JaIaLO2zX/5oIUcrO11FMTA03RxD0Mf4daR03CbyVCTJ8Za84ibTeZsHTkytUTVDVtYvD&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/44.0.2/win64/.../Firefox Setup 44.0.2.exe&downloadAs=Firefox-13108-dp.exe

http://www.bodytowerfun.com/c?x=hoNKxeI1PhNwsYX0LUf2ar4So2kTPoba 9eZ8d4SYBU=&c=Bn0HlZQHr4FLbS2eLbNZ9L2Eweq99UC1sxQMyWd4cIiMBqnh7G8Wa0DKPjRkjUwF6VhU2GV68X31PGF9RQUNOhEwbLkfHrlzzpuAJGKIJnBjcOSKKaZdlD39YYdoc4lj&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/44.0.2/win64/.../Firefox Setup 44.0.2.exe&downloadAs=Firefox-13108-dp.exe

http://www.contentheadtowers.com/c?x=8zEXkbKD3IDIqSIFW98h2tHtBVklMuI1M4yu0pc41fk=&c=kaWCaV2AI86vtgxrrLtQL3HIA9x3DRvQQsMkyKQlOSNx9yOu86ocdpAet4hEEURv9/inexBxHXR8H77kzoRvlyTz3 C4Dm1sdIGEdMHnKzvcs6O4kMuOroX7CRfKis42&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/44.0.2/win64/.../Firefox Setup 44.0.2.exe&downloadAs=Firefox-13108-dp.exe

http://www.contentheadtowers.com/c?x=9eHDrmUncwuZMzaFdjFrN7wB0qR01/iBfAIbT1Lnoo4=&c=NghNiA0jB5 fpDJ /qWfigLk705st67yWy9JbZcZOmuAQ5frfkzTv3raXCelVtpH2YO7eN2BUIs1JPeV1FhBOp/p3fJv99tatel5WqB6BBPqNedgY8Ts9/c0r1vjRMGe&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/44.0.2/win64/.../Firefox Setup 44.0.2.exe&downloadAs=Firefox-13108-dp.exe

http://www.funchucklecycle.com/c?x=I/0nbVCl7FdGWpXe9 pLuEfndrwR CZXgE4gbgKeJgc=&c=Lu66xtz97uFrPdsjrVVvqmoLbVgdU3RU2fV ew2N5EJmir3QbNWHcbmBMlDrU0l 4MFwYEfRnSXFJ8tVQt6b9J0KIBgiytbpxThY41OXy/sWwmgbFWL1hDm9xqUek9nP&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/44.0.2/win64/.../Firefox Setup 44.0.2.exe&downloadAs=Firefox-13108-dp.exe

http://www.laboratorysenddl.com/c?x=KQb9Ip9EMW31HRzCwnezty6BHJ0ogp6NmopwOSQmLnQ=&c=csD72KV5K3t70Sxqic4v3jC7aiq1/OeOF5W1ik64dxB9nXdmxGEtfxxmg9SlIMTp13l2rEshd Eqm5ZLOsLnpemmqOw4CX5Zk/fzufD/Kj0VoK93fBSCUdNdQPIpM26N&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/44.0.2/win64/.../Firefox Setup 44.0.2.exe&downloadAs=Firefox-13108-dp.exe

http://www.stockcentralcycle.com/c?x=0SjPAHlIY/ymotJRo0Gkv9Rre1TyKHrXjmgq1M GP0k=&c=mU82bnXdFHIokT/q23pDxpkx4j73QR4Z siiESS1NZ2V3T8EG3s/zLxy57n2qRlgdWkIBEswQWqyemGqV JyrhqabV9mQ2mPleyIs6QlQYWKGVFKhoR2ImI32QVKLXVS&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/44.0.2/win64/.../Firefox Setup 44.0.2.exe&downloadAs=Firefox-13108-dp.exe

http://www.laboratorygiftvaults.com/c?x=JVPptN59GW0w38MXdA8kE7F3T/2Dts7NmDEfMuqlNxw=&c=3z1TMO2DthZOnpuDiUjBf6MBe567woRXOvX/QOIr9LDnNKVL4J6c174LrP1tPspWB0T9L7h7aOuDz5Hh2EcZkSv1LxMd2WEiKfI6e9CoZ4E7iINvNVGd92NjOU9K5XYB&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/44.0.2/win64/.../Firefox Setup 44.0.2.exe&downloadAs=Firefox-13108-dp.exe

http://www.appranchsoftware.com/c?x=ojjiRTql8bgUSm2BCbbSSzK5cdPFaYfrcFxXl6kZsZU=&c=M6dY 1Ez9hCMETbWiX4GfvipduzI9awKDlSRIGeStIb0 j5hxnaIOWIUvApEiSb4sSEwSzijWnLLskHoHnsE oFe8MP3eC bZPtC0W xVEdQkhVr54e89ZhHUb 54gj&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/44.0.2/win64/.../Firefox Setup 44.0.2.exe&downloadAs=Firefox-13108-dp.exe

http://www.bodytowerfun.com/c?x=adBsQZkWbrXobROIGWUhXTPacSw8QOMa/UnEaV4u9YE=&c=L53gm2or0JlhV6rlrNlYXh8eGUcmFjD0P8QvtcI8vVM2Zp2vUNDO6EDoK41/wr5o2qj/9GW6I/H8Hyxz5YotDNE8d2hDGlb8Y/6oT0AdghGZ fPGOaKFhiWH6tejVtp5&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/44.0.2/win64/.../Firefox Setup 44.0.2.exe&downloadAs=Firefox-13108-dp.exe

http://www.appranchsoftware.com/c?x=o/G5Mm2vsx2i56pwJrRYj4vwx20nq7CVxX01t8r6UfQ=&c=I7JupJ6FK/MusTyJcRF7pMwE4ivqi8k2NlOmLT9DHLteE9M9es2hBIrLUWvaKtkrSWidbbiFhdHL04UhFm2Im4BSqGUKPXMXO4jn0Jv37iDELFNbO1v4FT0YTjmgPn5v&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/44.0.2/win64/.../Firefox Setup 44.0.2.exe&downloadAs=Firefox-13108-dp.exe

http://www.funchucklecycle.com/c?x=yd895kdkqEx241pj9q9RyQL4vuRvN3BgU3THRzTbSIM=&c=PdhGJxyF97xaTzTNsWZ1vKh g1eS5Z7sAbAEOpfp9PpnXsGeVQdsKuLYiKZQuwMeaCf/pyXI hELUzNo697kO4wwTpJsFXaYA5oBPw6NgSMIiXbgnxtpfP70JsEqF9TK&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/44.0.2/win64/.../Firefox Setup 44.0.2.exe&downloadAs=Firefox-13108-dp.exe

http://www.bodytowerfun.com/c?x=/A V65Myjbf4DmMU3hLQLbZKv1yZB7vxrxqdB6ToSa0=&c=LL7omVXvYsaWriH UHM90yNMo989CssseX4hHO oMW/Z12tLhukJik6lk/qMOT63RVHbCisLSlMgk7iUYJBFo/dbGmMq7Or/8T8K/992EUl7B6lmNTG2X sovtIzgX7g&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/44.0.2/win64/.../Firefox Setup 44.0.2.exe&downloadAs=Firefox-13108-dp.exe

http://www.appranchsoftware.com/c?x=0UfFuEWiogce0 rpxRm3wbzN fexq/EslTaAfxP363k=&c=a/GVXkjRAvXTbvcpwsWoCUh2DpH83xKZa/RiVg2YuwBbJwE/Pxn yWYMKc9L5TPHcH2UMcoACkJ4IKoY2r3Hqw2ojqDfyPF8SkJ35iEz4eobhIUDDf2Smt4qnE5gs7gk&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/44.0.2/win64/.../Firefox Setup 44.0.2.exe&downloadAs=Firefox-13108-dp.exe

http://www.sharetowerbyte.com/c?x=c2R6AnJhdEe5dvtuTKE0bY/9Q/AZwQTR05RI8x1m3NI=&c=9tgkLnEIDPGl52eWllFs8iOPtodTqkS34W8xJp Pgsx3zTJydXEfZsgmRtlJ65ItVrtpsT3BLMP6/ES02XFd0che6vPXxuAzAjgIoByCkyxN7ADHnJ5YjGb4kB3HojK/&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/44.0.2/win64/.../Firefox Setup 44.0.2.exe&downloadAs=Firefox-13108-dp.exe

http://www.stockcentralcycle.com/c?x=7/Yf7XVAPSJE7hxHoz2Kcm8PuqVBx51oTZQHtZE89w0=&c=t3fXN2bsjDfwdW2cjghzuZugZOIzVsJb33VSm06sNsHAEgDpr8fMw9avP 4fd7VT1XWD/5kE0DK8b8WOUxQHb0ZBQX91gCEmcEI 7pZOsR9GKviqA6e9/76rw3ra7kEb&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/44.0.2/win64/.../Firefox Setup 44.0.2.exe&downloadAs=Firefox-13108-dp.exe

http://www.stockcentralcycle.com/c?x=KXgSMs2BdziT3hp4wRLy2EzJfJEyvkdPTxMCXrqQaV8=&c=WJnzDXE4TJusjSBDWB8jYHNxCtv0k1Y3PKtLX3ipzyPiM4ePA/Ax45zJjJ9U GmK8eIcD5x4La9/VJcxjEsfqATRXezWiCiOKSfxLV NyJydwtMi53OX6U/HCz1M19uW&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/44.0.2/win64/.../Firefox Setup 44.0.2.exe&downloadAs=Firefox-13108-dp.exe

http://www.safedownloadfile.com/c?x=MUMjF1nnEiMNj7kll0aVfKcQ27dScTzf43e8E4zzZ7E=&c=IfqmLiulHXP0SalqvzT0mn74XUfbuJTiBQKCZHLR/Cm6vXyW73vw8td9z6hl3dxnudTq/3bvPQryoiezsafbQllGw6Imv/e1vw4hj5UwHaUqmZBSCqPoxprdIz46/CJj&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/44.0.2/win64/.../Firefox Setup 44.0.2.exe&downloadAs=Firefox-13108-dp.exe

http://www.safedownloadfile.com/c?x=CQswRrIVGbk9EMRZCXBTTnXGk9Sx4ubIaNW1u740RK0=&c=T03Lth7B OZ3utHSJibtUYcISSeA77le16cnJ raSd3b 9xwbA56xVB54QlqqXkAhzi3s1Ngh69rrh6Rl3 AnXxfRFDStHK4YvHGcK6zpMeoMORSpWpajuYStnyovK1H&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/44.0.2/win64/.../Firefox Setup 44.0.2.exe&downloadAs=Firefox-13108-dp.exe

http://www.contentheadtowers.com/c?x=5z4RLqWDNd/opfQqzbyzL9/ip8B//btJguCobeEEXFA=&c=Rj3 NqCsimkBeK hduR20 y8cpx9fUOWVAe8AFdEXbpW2Ur1GTfzq1q02zWjyvd9wYxaYxukJs63z/Xn8pDWeiztCM5RvxflRRrHCB8l10XtWP9JKlAcAoP0irIOrGL2&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/44.0.2/win64/.../Firefox Setup 44.0.2.exe&downloadAs=Firefox-13108-dp.exe

http://www.laboratorysenddl.com/c?x=8HtlNWIvDUczzvYdGGvwWyfuYvGxCschj WzacXT1QM=&c=BPlR2tXTqAkaKv1ktbBFuUUZKErVOkOPihj9ss0wgcT2ibcY1K5fJOs1cjrnySM099r6y0F2/RmdhwhUQZP8fv6KzoFwLZAvtrFjhNAQyjgOxXszIMfh9Y1AUtHgTCpv&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/44.0.2/win64/.../Firefox Setup 44.0.2.exe&downloadAs=Firefox-13108-dp.exe

http://www.stockcentralcycle.com/c?x=2Ygg5Uv/1bB/nDmdr0KF8WhUxtC56qIfuf01halIWCY=&c=iT8pJga3lF/fy9c22xuNCfrcigVUqV2hT1RZJ0yQLkkpgtcMFu3lX4fsPmdtdW8pUl1cK0rt1/UDfqZqkvM/vT0W8sT2llckx9FoNS 4XPZLmTvTlg0MyWNv NPonHp1&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/44.0.2/win64/.../Firefox Setup 44.0.2.exe&downloadAs=Firefox-13108-dp.exe

http://www.appranchsoftware.com/c?x=lYLBlVqOuPSAk8mb2hhRORMwivh3F/GeuVi7c08a8 0=&c=5Li8D2YbfMUun16B0 9M6LM2AIfPurAHu 2bw9plicgxIieHNDbFBWQiNHS88ODCiEJ WdqImA6HufYWX6ebgZWCh4gDqgweZORtAAjvXuFrNOYBGqUC55QYMlTqWpy&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/44.0.2/win64/.../Firefox Setup 44.0.2.exe&downloadAs=Firefox-13108-dp.exe

http://www.funchucklecycle.com/c?x=0vCkVnFdxc31vJt9ZHCEOrKQ4mgCwfPnJfRx0Y4kgoI=&c=nXFNUcWJj8sUMczdgMm1ir5m2SPtHQ4Hiw05bqt30v/Rc16XKtypebBxiZjB0eSC5tJ56MmwK5VaWPXuA82/yqTsSDjQ6NB5cplXSYJ19mQJLM4rtU7ZiJnt/uydj1KB&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/44.0.2/win64/.../Firefox Setup 44.0.2.exe&downloadAs=Firefox-13108-dp.exe

http://www.appranchsoftware.com/c?x=V8hcEhivvGHYPpGVGmr8pbeP5Mdmdju1DAszuXhe7W4=&c=nAkibAfUsj4dE4FqKnvzO/TDbiX6VeOxz6xQpCX3 G0iczdCRqxdzpEcmTKp2Q6/iZZ9PlV7VUncHgdB9I8v7iZNLQvKf4sm09byof1y07apkRDG6Sho8KMNpHt1LgGt&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/44.0.2/win64/.../Firefox Setup 44.0.2.exe&downloadAs=Firefox-13108-dp.exe

http://www.laboratorysenddl.com/c?x=KQb9Ip9EMW31HRzCwnezty6BHJ0ogp6NmopwOSQmLnQ=&c=csD72KV5K3t70Sxqic4v3jC7aiq1/OeOF5W1ik64dxB9nXdmxGEtfxxmg9SlIMTp13l2rEshd Eqm5ZLOsLnpemmqOw4CX5Zk/fzufD/Kj0VoK93fBSCUdNdQPIpM26N&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/44.0.2/win64/.../Firefox Setup 44.0.2.exe&downloadAs=Firefox-13108-dp.exe

Latest 30 of 84 download URLs

Remove firefox-13108-dp.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.