mediaplayerlite-0540.exe

Cod

SpeedyPrompt (Fried Cookie Ltd)

The Fried Cookie installer utilizes the InstallCore download manager which may bundle additional offers for various ad-supported toolbars, extensions and utilities. The application mediaplayerlite-0540.exe, “Cod Setup ” by SpeedyPrompt (Fried Cookie) has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions.
Publisher:
SpeedyPrompt (Fried Cookie Ltd)  (signed and verified)

Product:
Cod

Description:
Cod Setup

MD5:
dca934c5bd0230862e2432e6c05a2805

SHA-1:
1fea49b5397f6600afd60df61cc61bdd22f2404c

SHA-256:
db5d6c6dc31bbccff692fb10297f7408e7dc177d74f3ea6270e4b51f9a67297e

Scanner detections:
1 / 68

Status:
Adware

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Description:
This is an installer which may bundle legitimate applications with offers for additional 3rd-party applications that may be unwanted by the user. While the installer contains an 'opt-out' feature this is not set be defult and is usually overlooked.

Analysis date:
12/27/2024 7:55:26 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCore.FC.Installer (M)
16.5.21.22

File size:
941.5 KB (964,144 bytes)

Product version:
3.8.2

Copyright:
Internet Wizard

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\programs\mediaplayerlite-0540.exe

Digital Signature
Authority:
GlobalSign nv-sa

Valid from:
12/17/2015 9:03:52 PM

Valid to:
5/20/2016 11:07:50 PM

Subject:
CN=SpeedyPrompt (Fried Cookie Ltd), O=SpeedyPrompt (Fried Cookie Ltd), L=Tel Aviv, C=IL

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121D77437A5B286B055B435AA59CB4BA265

File PE Metadata
Compilation timestamp:
6/20/1992 5:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:p2WlruYDS59gb3D4JlKyLtlrriAkbMzGl+LfdZK:pbZu15QD4vh85l4ZK

Entry address:
0xA5F8

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, CE, 8A, FF, FF, E8, D5, 9C, FF, FF, E8, 64, 9F, FF, FF, E8, 07, A0, FF, FF, E8, A6, BF, FF, FF, E8, 11, E9, FF, FF, E8, 78, EA, FF, FF, 33, C0, 55, 68, C9, AC, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 92, AC, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 26, F5, FF, FF, E8, 11, F1, FF, FF, 80, 3D, 34, B2, 40, 00, 00, 74, 0C, E8, 23, F6, FF, FF, 33, C0, E8, C4, 97, FF, FF, 8D, 55, F0, 33, C0, E8, B6, C5, FF, FF, 8B, 55...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
39.5 KB (40,448 bytes)

The file mediaplayerlite-0540.exe has been seen being distributed by the following 50 URLs.

http://www.packagerepositorypackage.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

http://www.packagerepositorypackage.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

http://www.packagerepositorypackage.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

http://www.packagerepositorypackage.com/c?x=aeQdQes2ypAkx7DaAl0hwDnBONgkyQWtgyoVthTgu2w=&c=Aht1LgneTDlKnwa vWn lRUSgaWjQOsojY5iN5dguNBHY2i zLlY23QJUH0gLPh9tsZBa59mWPq5cieOMFFGtUiwxkNDbgZh2RUIaqlk1kKvozhohwINilgGepaV1jGV8ALAu5U5WeSDRh QfiSXA7AXaL/400BPHBFnhCluxi0=&e=0&downloadAs=MediaPlayerLite-0540.exe&fallback_url=http://.../setup-mediaplayerlite-0.5.4.0-silent.exe

http://www.packagerepositorypackage.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

http://www.packagerepositorypackage.com/c?x=3xUi3vj3FE4erYBGLztaUSjCoF2LezBYoeSfczyPpZ8=&c=3p5ejeow5/e71VTu7qh KAxT8rbMe2y9q2SOymv8ZYlfY11QIZXSlP8ihJIqSitZCM8GhzTg9 VE6qDcdZY019bVRWHWZAfc6CfLey4KnRylS PAaYbf15ayoMhOX6nbO/iq4SpNDCorkBoUJ 1H l Whpp72wluHLskAokPA50=&e=0&downloadAs=MediaPlayerLite-0540.exe&fallback_url=http://.../setup-mediaplayerlite-0.5.4.0-silent.exe

http://www.packagerepositorypackage.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

http://www.packagerepositorypackage.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

http://www.packagerepositorypackage.com/c?x=FV2HaKuI4H4HK 7TKrlLLeMJEF0XhJjneYnncqwKsTw=&c=zr37BeQTEeNdOzXghPdDCJt2VSs8NU8jzyRSe4Fj9x7ow3fVf lSAbgNSSQoSDgbmDBDosx MMRiIKJ3G1i5dricav6t YTRRFwXnP7C y/CDrkVE7x6NCU3Bwij1sJRCUREAsuYex1yU4UFugnDGhd4Hg1w1srI6PN25gSfXi8=&e=0&downloadAs=MediaPlayerLite-0540.exe&fallback_url=http://.../setup-mediaplayerlite-0.5.4.0-silent.exe

http://www.packagerepositorypackage.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

http://www.packagerepositorypackage.com/WVl6OTRQVGw2UzFwb2RHeEhRV2x6UVdGc2NtWk9kV2RJWlU5SmJtcEdha3cxU1dsRlUxUjRTRkZWY205amFEZ2xNMFFtWXoxdmMyUXdUR2hoWVZobmRrcHVOamR0ZVdjbE1rSlRSWGRwY1ZkdldWWWxNa1pzV0ZkUGJrdE1jVkpMYzB3MWVqbEVZU1V5Um1SelNrbHJZV0UyTmtrM1EzYzVKVEpHVDFoUmFrTlFORzlNUzI5QmEyOWpTV054UzJwbGVGTXhZbUp6VGpGMFluQnZNM0k0VFV3eWR6VnFNVFF4WlRkaVJXWlRRVzF5VW5sMFVucG5iMHRJU1ZvMUptUnZkMjVzYjJGa1FYTTlUV1ZrYVdGUWJHRjVaWEpNYVhSbExUQTFOREF1WlhobEptWmhiR3hpWVdOclgzVnliRDFvZEhSd0pUTkJKVEpHSlRKR1pHOTNibXh2WVdRdWJXVmthV0Z3YkdGNVpYSnNhWFJsTG01bGRDVXlSbk5sZEhWd0xXMWxaR2xoY0d4aGVXVnliR2wwWlMwd0xqVXVOQzR3TFhOcGJHVnVkQzVsZUdVPQ==

http://www.packagerepositorypackage.com/c?x=YaFSu/JTbpJpdKo3ieAAgC9cNJsqivmygbqCIGOEWrc=&c=RGXHv7wLCJ EnvjWcmwYsHcmyq6uTdanzd0gUPg0zcp1CCE8r5oU1lFfZorSbhKphjddJkaiGbFdMMJXvx pH5eyoNUvw1nnZqf SKgK3kJKeSd4Rck3zxHBIaAiutYoG5znQlrWB7KUS5Gvst58qXn0kMKWCByaovGC1s1PldY=&e=0&downloadAs=MediaPlayerLite-0540.exe&fallback_url=http://.../setup-mediaplayerlite-0.5.4.0-silent.exe

Latest 30 of 73 download URLs

Remove mediaplayerlite-0540.exe - Powered by Reason Core Security