home

vlc-2.1.3-win32.exe

VLC media player

Innovative Systems LLC

The application vlc-2.1.3-win32.exe by Innovative Systems has been detected as adware by 10 anti-malware scanners. The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The installer uses the OpenCandy monitzation platform which will donwload and install offers in the setup for potentially unwanted software including ad/search-supported toolbars. The file has been seen being downloaded from vlc.downloadable.co and multiple other hosts.
Publisher:
Innovative Systems LLC  (signed and verified)

Product:
VLC media player

Version:
1.0.0.0

MD5:
27cce7d175759cf312ead94b6edd19a0

SHA-1:
577728557e4cbd9a731785650b9694a64ebbf9ad

SHA-256:
e3eb2778b26a86c124fc8ff9baf8a4417cf801487a65637cacad83734dfece03

Scanner detections:
10 / 68

Status:
Adware

Explanation:
Packages the OpenCandy software bundler that offers to install additional software and may include web browser add-ons and toolbars which display advertising (based on publisher settings and geo context).

Analysis date:
12/25/2024 12:56:09 AM UTC  (today)

Scan engine
Detection
Engine version

avast!
Win32:Adware-gen [Adw]
2014.9-140729

AVG
Generic
2015.0.3399

Comodo Security
ApplicUnwnt
18978

ESET NOD32
Win32/JoyDownloader
8.10156

Malwarebytes
PUP.Optional.OpenCandy
v2014.07.29.07

McAfee
Artemis!27CCE7D17575
5600.7055

Reason Heuristics
PUP.InnovativeSystems.N
14.7.29.7

Sophos
Generic PUA FH
4.98

Trend Micro House Call
Suspicious_GEN.F47V0721
7.2.210

VIPRE Antivirus
Opencandy
31614

File size:
489.7 KB (501,408 bytes)

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\vlc-2.1.3-win32.exe

Digital Signature
Signed by:
Innovative Systems LLC

Authority:
VeriSign, Inc.

Valid from:
5/18/2014 5:00:00 PM

Valid to:
5/19/2015 4:59:59 PM

Subject:
CN=Innovative Systems LLC, O=Innovative Systems LLC, L=Dnepropetrovsk, S=Dnepropetrovska oblast, C=UA

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
450EACFE8D673E82864CE46BC1A92FCA

File PE Metadata
Compilation timestamp:
5/19/2013 4:53:11 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
12288:wKcGvUHuVz76r3pXF9zQi2VTEqx5HNcya+o9Rc9ebj5CJ:wGvUHA36LpXbQi2VTfBNcM8ieXkJ

Entry address:
0x333E

Entry point:
81, EC, D4, 02, 00, 00, 53, 55, 56, 57, 6A, 20, 33, ED, 5E, 89, 6C, 24, 18, C7, 44, 24, 10, 30, A2, 40, 00, 89, 6C, 24, 14, FF, 15, 34, 80, 40, 00, 68, 01, 80, 00, 00, FF, 15, BC, 80, 40, 00, 55, FF, 15, AC, 82, 40, 00, 6A, 08, A3, 78, 4F, 43, 00, E8, A8, 2E, 00, 00, A3, C4, 4E, 43, 00, 55, 8D, 44, 24, 34, 68, B4, 02, 00, 00, 50, 55, 68, F0, B1, 42, 00, FF, 15, 7C, 81, 40, 00, 68, 7C, A3, 40, 00, 68, C0, 3E, 43, 00, E8, 13, 2B, 00, 00, FF, 15, 34, 81, 40, 00, BB, 00, F0, 43, 00, 50, 53, E8, 01, 2B, 00, 00...
 
[+]

Entropy:
7.8114

Packer / compiler:
Nullsoft install system v2.x

Code size:
24.5 KB (25,088 bytes)

The file vlc-2.1.3-win32.exe has been seen being distributed by the following 15 URLs.

http://vlc.downloadable.co/get_file/wUia6yjQOMvI2nuzWf/oQkEsmV48LX77SwXwft3Ntv5xtDv9oHYng44cJgTta7HuZiro0l8bOGGGCeikCr50ybpq1oXEUx6apiX5D020sni1mbWI svT0mlPq4c2hVxDRn3kADh/hpZhvnK4D3GSGbZdzMfnMjYFarw0JFsFMaXlEj5tc43EJxEwjbPvUSwjcpekjrFhWyuouRnFn/V BZq0YsntZXBc1dPpRKpkw0xcqMqhn1O7ZKl/.../On0nounq

http://vlc.downloadable.co/get_file/wUia6yjQOMnI2nu1Wf6vCxAt2101NSqmEBHga5/ZtOM8/zGn4SgumpJLbxv1Y/j2PHmuhggLIGjPEeqtCvNul6trh8ybDR6T/i37DkLlszi1iP/D7oCMg2gIq5E6kVNEXXe1AX1/.../nD2F8Jobwz7h9W3ux8VDNlu0oQIC2M8ivZWNdzcr F oujURMuZr2zlL6ZLh0lD6tQMVb5NXuCzmw8cSCkXUqZrJDQ4E6MHYlsOnq

http://vlc.downloadable.co/get_file/wUia6yjQOMzI2m2zUbjxCggikkUwOTGmChOxatjZp7VvsTDsqSt4ytIEPwG7O6b IXKiw0kfaz2PGffyUOAlyPpqx8yPXlXF7SS7BkT9qnq8mf6SpN/SgzYD4cxy1kdJDXymDj5zl8Uv/Cj5USCTQrZOjIPzPHQNabMgLgoEcKX0XGg5IZrcLVgoiqv2ECcne4f2w Z2BGqwoBmWyO1nXZi8c8ntZXBc1dPpRKpkw0xcqMqhn1O7ZKl/.../7M3Ez24ybPVJRo4vOHcqounq

http://vlc.downloadable.co/get_file/wUia6yjQOMvI2nuzWf/oQkEsmV48LX77SwXwft3Ntv5xtDv9oHYng44cJgTta7Hufyro0l8bOGeGCe hEbQlyPpqxsyPQ0iD9GzyDUzluWm0yP/XpMuN2SMS48AiiAxIVXKnDDp3ksEt/CC5UGCTUuUFnNXqdD0FYqszLAoEcKX2VnBtLJeNZkdzxeSmTjQuO4/x2/9zUjqouRnFmvV Us3hJJfsfXof1cK3D gslg8eroL h0q7N/.../On0nounq

http://vlc.downloadable.co/get_file/wUia6yjQOMzI2m2zUbjxCggikkUwOTGmChOxatjZp7VvsTDsqSt4ytIEPwG7O6b IXKiw0kfaz2PGffyUOAlyPpqxsyPQ0iD9GzyDUzluWm0yP/SpMuByDdZqtY6gV9QVXW1AX1/ksk7qHSmDjbbUrcfwsTrJTYPYas5bBIOM6XlAiM8OJKfb15g0LPvUSwmcpe0jb4nBSqwsVDd36Y4FpnkesOtZDJW2cuvSKFkxl9A/.../On0nounq

http://vlc.downloadable.co/get_file/wUia6yjQOMvI2nuzWf/.../2ErzN6B0kyygBc1c7MazSDrjsJuCw3V0db0AT4Y3K34gounq

http://vlc.downloadable.co/get_file/wUia6yjQOM3I2mmuF6G5QwMsilYkNHutHhLgNoOP4bZ0/269qGt42doGJFXsK7H6NWHpiBQBcDaeELCtGbE3xbhhxMKfBwfS9S74BlSj4Tj/16SY65uEg2gIq5Y6kRMeB2SsSTR2ntFvp3/oUSCTRrZOysbjNDUDerJxJRsFIe uAmh0O8TKLAkkiqjlAC1mcob4w65sWnux61DOn/.../k1nmbbcyznKlAdEIppKpSDrjsJuCw3V0db0AT4Y3K34gounq

http://vlc.downloadable.co/get_file/.../oQkEsmV48LX77SwXwft3Ntv5xtDv9oHYng44cJgTtarHuezeuyxdSM2meGvusW780yasmnZKPDE b SXqDkf1u3m7mf6SpNjYm3Ef NZw3wQLETT7GDU2nsAj7G2mCXGSA7ZawtW3aGtTPfsgJFsFMKXlV3J2asWNLB0onvSsUn9nLZf5iOc0Cmm8tlrNnPpuD9G3c8i8LCgIzcrkF gnlF4f7oLvzQGsfKE2nSisEclb58apSDrjsJuCw3V0db0AT4Y3K34gounq

http://vlc.downloadable.co/get_file/wUia6yjQOMnI2nu1Wf6vCxAt2101NSqmEBHga5/ZtukkqzyqsGMxwd0EP0Xmarj O2G3g15bOHHPQr21E w9wrprh8ycBwaDq3a7TBqm8T791 fa7dPbm3EN/cYiiBZIV3y1Smchhshq9C/.../YghSflCc5U5NX9Hyr0sY RhC89IO8dRoYjbDd2ounq

http://vlc.downloadable.co/get_file/wUia6yjQOM3I2mmuF6G5QwMsilYkNHutGxLgJoWHp h152P0sGpzydgMKVXsK7H6NWHpiBQBcDaeELCtGbE3xb1lxcSdAAfS9SzyHgWu7Gm00v/QrdKbm2BBs8xp10dJF3ylACx0l9EivSH UHHPGeAJ2syiPTYOYqt0c0sSMbH2SHliP5eQJRk82emxAC1mcoTy2/9hVyr67guG2b0wFpn esGkfTcAjNO2XuMilQ9DstSp2BrqZel/.../Mz4SXrjodHJzj4rJLxHT5Y7P3Yiounq

http://vlc.13-6691-212324.53cf21be6b9af.dablecdn.com/get_file/c27_HpVgp_62EIEPXp35mg/1406087118/13/13/1/.../vlc-2.1.3-win32.exe

http://vlc.downloadable.co/get_file/wUia6yjQOM7Cwj XOm6FVNv3RVqLTPkEhv4cpqP5vE9rm/6qHokkodbP0ykYrr1NWH6nAdFMH2NBeq6X xpwLt kY7IFQfS9SzyHh u7Gm0yP/.../lcAivSH8UHHPH AInYXzPHQNa7MgLhAGIaS0XHl1ao6Xcgkpz6vgGDQjfozzw Z2BGqwoByWyO1nR5i7etCsbnNf3cWvFqounRcHqczvhhvyb6Bnlj6tQMVb5NXuCzmw8cSCkXUqZrJDQ4Q1Pn4itunq

http://download.dablecdn.com/get_file_for_cdn/13/13/1/.../vlc-2.1.3-win32.exe

http://vlc.downloadable.co/get_file/wUia6yjQOMvI2nuzWf/oQkEsmV48LX77SwXwft3Ntv5xtDv9oHYng44cJgTta7HufCro0l8BOGKPEKqtG78lheA01s3eDQqb7S35DkX1vGm0yP/.../5nnG sB8VP6MGyQmvi8JuSkD5kI6RIBo48M20iounq

http://vlc.downloadable.co/get_file/wUia6yjQOMzI2muzUbjxCgggkkU0PjqkGhzga5/Zs kkuzqi9j0w2dBNJ0Tterr0NmG3g15cOHHaQrXyCr50ybhpztTbW1 M/.../yLhiPfP 5GNg2gIq5QwiUcWDTXnVm880YF17CC5UGCTUvoAm9XqdD0EYqtrdkwdOOz9VHBtec3cLVgojqv2VmI3c8b40OcnD3ux8VDJlu05TNLkMpe8ZChW3sW9G 8llh8X7YO h1vyfOkswz6tWsVc7cz4SXrjodHJzj4rJLxHT5Y7P3Yiounq

Remove vlc-2.1.3-win32.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.