home

pobierz_minecraft_windows_v1.8.9.exe

Lite

Platform Beta (Fried Cookie Ltd)

The Fried Cookie installer utilizes the InstallCore download manager which may bundle additional offers for various ad-supported toolbars, extensions and utilities. The application pobierz_minecraft_windows_v1.8.9.exe, “Lite Setup ” by Platform Beta (Fried Cookie) has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions. The installer is marketed through download protals and search ads as Minecraft but will also install additional software offers which include adware, PUPs and browser toolbars.
Publisher:
Platform Beta (Fried Cookie Ltd)  (signed and verified)

Product:
Lite

Description:
Lite Setup

MD5:
1935acdeb08aaf20c92e532d3a27da74

SHA-1:
fff62c80328854048f8297d414d394b24b6bf407

SHA-256:
ea922375910d749b1583980d85e161b946efcba14271e41f438d136f25a4531a

Scanner detections:
1 / 68

Status:
Adware

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Description:
This is an installer which may bundle legitimate applications with offers for additional 3rd-party applications that may be unwanted by the user. While the installer contains an 'opt-out' feature this is not set be defult and is usually overlooked.

Analysis date:
11/27/2024 2:56:53 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCore.Installer.Installer (M)
16.2.8.2

File size:
1004.1 KB (1,028,224 bytes)

Product version:
4.7

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Common path:
C:\users\{user}\downloads\pobierz_minecraft_windows_v1.8.9.exe

Digital Signature
Signed by:
Platform Beta (Fried Cookie Ltd)

Authority:
GlobalSign nv-sa

Valid from:
12/16/2015 2:41:12 PM

Valid to:
7/7/2016 5:55:56 PM

Subject:
CN=Platform Beta (Fried Cookie Ltd), O=Platform Beta (Fried Cookie Ltd), L=Tel Aviv, C=IL

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121C446C50C8915C47DFD619121C2806B7E

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:ELZgzMvgNRYXfeu50H4y1lLu4QlYiDwEFP2Sh8:EtFPr50H4gRuxlYOf2Sm

Entry address:
0xA5F8

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, CE, 8A, FF, FF, E8, D5, 9C, FF, FF, E8, 64, 9F, FF, FF, E8, 07, A0, FF, FF, E8, A6, BF, FF, FF, E8, 11, E9, FF, FF, E8, 78, EA, FF, FF, 33, C0, 55, 68, C9, AC, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 92, AC, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 26, F5, FF, FF, E8, 11, F1, FF, FF, 80, 3D, 34, B2, 40, 00, 00, 74, 0C, E8, 23, F6, FF, FF, 33, C0, E8, C4, 97, FF, FF, 8D, 55, F0, 33, C0, E8, B6, C5, FF, FF, 8B, 55...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
39.5 KB (40,448 bytes)

The file pobierz_minecraft_windows_v1.8.9.exe has been seen being distributed by the following 12 URLs.

http://www.byteapplicationvaults.com/c?x=ER5XeHbQ8P00iJD8ApMP8mWRgIrh8SpW i4IY5WQp5Y=&c=GS/8osJGOhHdLZgGDJBhsJLiZjq5 j WaoEihbD/yCmoE0R70SHvfhrbbmfw/BLHUnagk91rqF8rjwLq KjmSoEeQOJvEx73v63ZxKKgQwKz/jeQyrf/w/EGHBT4ALIQ&downloadAs=pobierz_Minecraft_windows_V1.8.9.exe&fallback_url=http://www.instalki.pl

http://www.byteapplicationvaults.com/c?x=KvVFEqWeC0qCJJ GswNPk5LHXm1Ukmibab14cwo/2kg=&c=zmkI6WnVGyhKlUsiFcr8lCaZahXzwAMDI qrBWO6LHgWsD2u14WURMpIHDYISW6yYGkNvcHKatZP Ejyvs6mL1ypP ErNOGPyLStOz8bdYiVWgy1NbS6fm9TJGc2FGqR&downloadAs=pobierz_Minecraft_windows_V1.8.9.exe&fallback_url=http://www.instalki.pl

http://www.byteapplicationvaults.com/c?x=zvAbpFPUs fp9yzW3tkBKAtieDbS7 Juyb9rm9KWCAk=&c=FSwd /lTYz4Qt8wk6ZZ4JiBZmGll6IKA9SmKuKkpSh/9/G9gELRN5Bq9byXyzfbmXtVSX3w4tt1CTzouHtiIh8REDI2EROEu2K3ydS4XSP2cNmkETBVxE8//OCwyHcBw7yai3pd2L9JqT5b/VqsQ LAHaRy agFyQ1 1dxirkkU5VHdBaSgLFrD9RAOcjKFP&downloadAs=pobierz_Minecraft_windows_V1.8.9.exe&fallback_url=http://www.instalki.pl

http://softonet.pl/wyslij55218-1.html

http://www.byteapplicationvaults.com/c?x=75OeIgLfQwK/MRvodduFw4zozDfqmLRgGMKdO0BwGEs=&c=kUD6lMb83xp3vOAE7xRXfnUbUvGyEMlFHcIhlMyDi6d04Q/7O2 BF8Qvdu65VMpR0JU ein3ZC4ZwkLEKNCvftytf2fPnSSnYRcgN5bLwrt/ZKNSJCDcp2SgonWixKmFwxHqz8Y6n8Aw2syocImyxaenSCMS0gwQGMFX4T8uV HeiAD i0TwgP992A6jIIyX&downloadAs=pobierz_Minecraft_windows_V1.8.9.exe&fallback_url=http://www.instalki.pl

http://www.byteapplicationvaults.com/c?x=Op P5A2uEU9Zy2oNRm p97M7/1/8s9UGK 8PI7lP63o=&c=/bNDar7FqX3iMSK0o5ZkzAx 6X5HGxiCySjiTZ 7Fc1/kfESPKQ5FrQdPYp0Shla6VlkPz0SZn/zew0T6CS4jg4br/IrCFnQmyto3uR6XkdL3uXe1aifJmMaHBkJaWrz3jC6QcW2 CFPQ26B5YKJuBfsMn30TqQQD7/2HNk5LAKqIHMFhbSdWPPUrLMRYTHq&downloadAs=pobierz_Minecraft_windows_V1.8.9.exe&fallback_url=http://www.instalki.pl

http://www.byteapplicationvaults.com/c?x=PXP6PFRmv0E5NBvk84XcxuG oNq9GypjtJ07DCzvxOQ=&c=0RrEq6XgWGl44H7L/KCfgsprmJU16CJNsokTytSP6G6sW0mzKDksFyRzp5epax9LywntQV59jkIc0k2cCGyjCzXmX1z0gIJdUH6HIHloJoBvIuP5caTAZLGbySKBD21gtzQ8ZE5KmkABnHTTXrVNVgOKyDwqF2f59FOQ5oagxIWNcg10TwZdfhyOolg1spQm&downloadAs=pobierz_Minecraft_windows_V1.8.9.exe&fallback_url=http://www.instalki.pl

http://www.byteapplicationvaults.com/c?x=flAqGv50iiKRocmDD2ZewDS8nvfJMUu/25PFT9xynEg=&c=sPrr8NSd4d0m6G9Om388r1ngU8hk4iJ KPxqQykK0q8K/FCdrjx0hha5EYeoluC6ZMjmm4pmjVUcNMlR7Qg3uIwLqeeIckek/YIMCxBbuhicQrEAO43x3NZixZWTXUy0&downloadAs=pobierz_Minecraft_windows_V1.8.9.exe&fallback_url=http://www.instalki.pl

http://www.byteapplicationvaults.com/c?x=D40KmmYKA8HPsN u5JkUZrWECaBUINYswaTg8F4Z/AU=&c=xF bVzylTyUMEpTu6iLq dtkgyfV4Fg88vGuPVGdyJV4SJ0MS31mZ7S3pyYB0E/fswzLeBriAIJXBXinDNOgkQLJZuepxKfSwzRL6xQTRcefE6c4n8eCCIGa7jZJHM2o&downloadAs=pobierz_Minecraft_windows_V1.8.9.exe&fallback_url=http://www.instalki.pl

http://www.byteapplicationvaults.com/c?x=MrQol39Ek52YBNsuRroILzXHCK4RBdzK8BkAYt0pgKQ=&c=SHP91CzJERrJs6IfeLKrlGjKJSe7qvgNeHn2txXqJAxn1kVZBdwFu22irGdO3IPCMXWbKBD46 ybyI8pqv7Arif/0ImSkRfChPUUDSYfJJsXb0MlYqr6 zj9CQHOMsCZ8/TBRjzBVEwtqrbU0KyB 79uH6nnJ2jywo8xVpdeEOuinJc 96K//HoZUf7jIVZy&downloadAs=pobierz_Minecraft_windows_V1.8.9.exe&fallback_url=http://www.instalki.pl

http://www.byteapplicationvaults.com/c?x=aK0uG5Mc4eoXQzQS 71NNOHSYOHiS3M1qVktUqyM1s8=&c=GLXCzqK676IyfqYY/K7/M7d0TrhX0UGRxEWmxTVyXfPgbGgnZubOAv/RO4NQSPiNqNChcUVMVtNGPsayIiNg6AMNcVYYhoYUQHWKfPOeyN3oBcw12jjhI9lDAk4/S7UW&downloadAs=pobierz_Minecraft_windows_V1.8.9.exe&fallback_url=http://www.instalki.pl

http://minecraft.softonic.pl/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAMCwgnP4SN6ceDryJz7PbJv3FQNYWEuR8Z8QB0MlMcx90IruMMWSr3LRIl0z7GVuj0jaKNU79g5WjSa/gwooZlzLhPQpw1IYweQj7KX43c3dqUR7wIMhuUKuU2uxP/.../U=

Remove pobierz_minecraft_windows_v1.8.9.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.