home

virtual_mix_pro.exe

Dob

Quality Install (Alpha Criteria Ltd.)

The application virtual_mix_pro.exe, “Dob Setup ” by Quality Install (Alpha Criteria) has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions. The file has been seen being downloaded from www.downloadclearbest.com and multiple other hosts.
Publisher:
Pofih   (signed by Quality Install (Alpha Criteria Ltd.))

Product:
Dob

Description:
Dob Setup

MD5:
7a5b4ec2575bd83b6c9c111065d22a9b

SHA-1:
525df027189390c8a3be18cbe4d971b389d45604

SHA-256:
3d59e7c4c0aa1feeb73ed9a3fbdf42fc07d9ae40b8dd105f9f87673a2be88681

Scanner detections:
1 / 68

Status:
Adware

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Description:
This is an installer which may bundle legitimate applications with offers for additional 3rd-party applications that may be unwanted by the user. While the installer contains an 'opt-out' feature this is not set be defult and is usually overlooked.

Analysis date:
12/26/2024 8:37:23 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCore.AC.Installer (M)
16.7.4.0

File size:
995.8 KB (1,019,672 bytes)

Product version:
5.6.1

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Common path:
C:\users\{user}\downloads\virtual_mix_pro.exe

Digital Signature
Signed by:
Quality Install (Alpha Criteria Ltd.)

Authority:
GlobalSign nv-sa

Valid from:
1/6/2016 5:14:15 AM

Valid to:
8/4/2016 7:59:05 AM

Subject:
CN=Quality Install (Alpha Criteria Ltd.), O=Quality Install (Alpha Criteria Ltd.), L=Tel Aviv, C=IL

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121BA484E4C31175E4A844ED055428DEC42

File PE Metadata
Compilation timestamp:
6/19/1992 3:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:S8RGd8NZW4pRvmrzNd1PQDw2dRxOrKamFs6tke:Smfg+RQNLQdOr8V

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, BF, A9, FF, FF, E8, 5E, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, 24, CE, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, 24, CE...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file virtual_mix_pro.exe has been seen being distributed by the following 10 URLs.

http://www.downloadclearbest.com/c?x=N xdvraAdrxXq8QzpmAUH7FFnoT7KVYBtnGpeY08sJI=&c=VoUlN/TroQYkgsj1ydZwinscbNMNvb98f91SWiDh Lq/nTVAQNv9 bUkcsOQncypjtK uSpVGKBBsUQ9XdKODjLhWTduOh8hK/Oo0eIyBt0cWS7ufPMAwYON3IYQ2NFtNm4cd6Rhk9Mcwue jlzCC1HOR9QF5K9VT1nV8/PUFRs=&e=0&downloadAs=Virtual_Mix_Pro.exe&fallback_url=http://softdownload4.com/s4m/.../virtualmixpro.exe

http://www.downloadclearbest.com/c?x=8/9Fv39uTihN8lrO4IWJSc4ZdKrjF2rhroIcAV2KRM4=&c=z mXVd gz4TsCH3B5IBhN4x0H9PAhn05/JA6LOvMkktGlHc6egAHR/Dsd3ZOlnJS Gn/xb2sVmZwwx6WOjzaWGSMw4kWP ZAfqGXHdwW8Px1qu W8vulKGYIZl7KEuitSyatVHXiQd75fiNgbhZueo72JVoO8TFwL/OrilHZiL8=&e=0&downloadAs=Virtual_Mix_Pro.exe&fallback_url=http://softdownload4.com/s4m/.../virtualmixpro.exe

http://www.downloadclearbest.com/c?x=WKGj7aTeZD HEem rehH/Vu11fThIgfaNjWkTT3MxOQ=&c=1rxSA82fhBu/bHtUpfEjytQ OQ/UEKjW0 Oq54cjuj6L0LZIS86gMiVG/4Cwdfsu0e88amUUjdrsW6HT7uSReMWOcqY FnDw3R93XJdVOnJZpags6gDAOmdB9N1m2PmlHwAlybVyfSpAC58InaAGS1eRXDVGAANvE3Ang0oNvXQ=&e=0&downloadAs=Virtual_Mix_Pro.exe&fallback_url=http://softdownload4.com/s4m/.../virtualmixpro.exe

http://www.downloadclearbest.com/c?x=ZomRu5zy99jL5v566lJCHfnSRe1G2K juzUli7bnRUA=&c=wd9AWMHGg9J6j9QjPAZO6N77T8vCEFwg9BBOHlLJY1pLoAf1D8qG2QRBJJldE8JI7iDLRt6/ixNrexi6CO7VUormN4Rh31xtlGHLRpJ7FNz y2dFxmOYLiXdWSbkANWAfvLRNAJ4NE2nN C2DHsOmcuG1MuTko1QbjTIMRlT61c=&e=0&downloadAs=Virtual_Mix_Pro.exe&fallback_url=http://softdownload4.com/s4m/.../virtualmixpro.exe

http://www.downloadclearbest.com/c?x=KPUec4B/ZWOUL1dOCp7HzeIvOyAJUREicsbqGq29VdI=&c=s0jXJI4FPOawmkVv1Sb92pURQ8u6S794//oVNB6MkGnYTUwzWVbW1433wjtQnYhyF 0uG4I8kMUlkSd8NlpScmpvrA2Zep3bXtoXN1EQ31DU0jw1sS4ne6RU2kc 0Pk7FI9yhUW8Ox4AQd3nqjORYaCkouqGpldtKiQn0LnCKaE=&e=0&downloadAs=Virtual_Mix_Pro.exe&fallback_url=http://softdownload4.com/s4m/.../virtualmixpro.exe

http://www.downloadclearbest.com/c?x=2dLYooCpIcgKPbKn8y6ZwEhHH78BHC/2bus0PhPgV3o=&c=2Ln5GogYUGDzkt0gMtWast0aFenlT/Sz8INNmtcNzWDfKwV6kJFJRCSjD00eed vopNtYN6GA3ryy9Jd 0sDuDq5d1nHgEm7LBNHO/IX6z4Qr9EQz pLM8SJxKk4 stmuXmFTjBVquaYKAKkuoEL IuSBjLWyW5m29pmXkNw5q0=&e=0&downloadAs=Virtual_Mix_Pro.exe&fallback_url=http://softdownload4.com/s4m/.../virtualmixpro.exe

http://www.downloadclearbest.com/c?x=Ydn2X TPpjQmTbmj10b3OJ5lmR9Fbxa9x7GtpagBRzE=&c=UrPjleDp4ReVEpLYN2 WbMPaBjBtISVYl3X9l92OrX7HfmdtenT8b2YLlGXmZzOIF Iz1SLBEIh3QKqzSintXNKMPXj QEnfh8gQ8/gvnZJp6LKcSiqYfOetj9spZlh290aTwCdkJ0Y6zAw/4XwdmzVvs/Mp1NussMpRm2buUEE=&e=0&downloadAs=Virtual_Mix_Pro.exe&fallback_url=http://softdownload4.com/s4m/.../virtualmixpro.exe

http://www.downloadclearbest.com/c?x=XVnS/uP6DJhigtjddz4rDvA6/ovi9mZQnAl1syjEeVY=&c=cKkq63SZewQI3hQvdKePvZu8ZrsEAkaZ5hfhbZ9jYzC3j3epUftG4ITpbxGk6PT7JaL9ag/7NjSLFPSwYKAE0pSpc2JNOCpnjY8gWGoNaNAeFkOPN/w4t/gQcC/YbXVGgxwIkhmIZmb67 p/eux8YB9ylBGap87xjCv7WXOmleI=&e=0&downloadAs=Virtual_Mix_Pro.exe&fallback_url=http://softdownload4.com/s4m/.../virtualmixpro.exe

http://www.downloadclearbest.com/c?x=SaArVgWy 7qk4S8S2CSUFwXBFN9emhXs4hPpONLXI6g=&c=EvyVPj3daqNd3gS2oWFH3uWg0i8753/DS0gjUWuBlggA522gU8zQfUT0Gq/sFRQ8mKF 0a6bWoBDGEmfiWJ uY00BdMsv7A55bQN5upFLtZo0UH1cC2UqtIB9GeRJVR8RrDtxmOEtfgmmo2nlULgn/qh1F6EjIRfEWLcgvNtJao=&e=0&downloadAs=Virtual_Mix_Pro.exe&fallback_url=http://softdownload4.com/s4m/.../virtualmixpro.exe

http://www.downloadclearbest.com/c?x=XUqhI8fODMG AiZkqmFE42VLw1fUf8qz5/CcyL7Tz0I=&c=qywrDKl9P/iiwOkCQ0IsYdQCOws6HR7Z4v2gDvx/ddwGMRg1EF32/AoTjiOnlDd6PB0ZVxJhzHwD59R9hJiqUiLytfVcBhfaUdYiYxe JmHQMwXNDhFMTCkivQG5YSg9Z4rGNnb0eMyv4FkHaUcTEYW3B7My/oZW8eeq1oS/PPE=&e=0&downloadAs=Virtual_Mix_Pro.exe&fallback_url=http://softdownload4.com/s4m/.../virtualmixpro.exe

Remove virtual_mix_pro.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.