home

vlc-media-player-13060-dp.exe

Lite

Mode Beta (Fried Cookie Ltd)

The Fried Cookie installer utilizes the InstallCore download manager which may bundle additional offers for various ad-supported toolbars, extensions and utilities. The application vlc-media-player-13060-dp.exe, “Lite Setup ” by Mode Beta (Fried Cookie) has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions. With this installer, users are expecting to download the VideoLAN VLC media player but before that occurs they may be presented with additional offers, mostly potentially unwanted software or adware.
Publisher:
Mode Beta (Fried Cookie Ltd)  (signed and verified)

Product:
Lite

Description:
Lite Setup

MD5:
3064d42239118c624edfc6b287508077

SHA-1:
76e0e45e9936c913f1bbb5d5533d3130db3d8974

SHA-256:
9ac6284f1bdca85bd78c14af3c4bd5febf488a7713e6e52cf253d32eab154f89

Scanner detections:
1 / 68

Status:
Adware

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Description:
This is also known as bundleware, or downloadware, which is an downloader designed to simply deliver ad-supported offers in the setup routine of an otherwise legitimate software.

Analysis date:
11/2/2024 11:21:44 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCore.Installer.Installer (M)
16.2.16.15

File size:
944.3 KB (966,936 bytes)

Product version:
4.2.2

Copyright:
Application

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\vlc-media-player-13060-dp.exe

Digital Signature
Signed by:
Mode Beta (Fried Cookie Ltd)

Authority:
GlobalSign nv-sa

Valid from:
12/16/2015 2:37:06 PM

Valid to:
7/7/2016 6:06:18 PM

Subject:
CN=Mode Beta (Fried Cookie Ltd), O=Mode Beta (Fried Cookie Ltd), L=Tel Aviv, C=IL

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
112172B4C29D53526C8AFAEF1C4F6265E881

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:aTtBYvtCO6iNum4dvHgNoW+iN6jEvZJCblnxIGX:aBWvL2HgJ+iNFRJwIGX

Entry address:
0xA5F8

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, CE, 8A, FF, FF, E8, D5, 9C, FF, FF, E8, 64, 9F, FF, FF, E8, 07, A0, FF, FF, E8, A6, BF, FF, FF, E8, 11, E9, FF, FF, E8, 78, EA, FF, FF, 33, C0, 55, 68, C9, AC, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 92, AC, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 26, F5, FF, FF, E8, 11, F1, FF, FF, 80, 3D, 34, B2, 40, 00, 00, 74, 0C, E8, 23, F6, FF, FF, 33, C0, E8, C4, 97, FF, FF, 8D, 55, F0, 33, C0, E8, B6, C5, FF, FF, 8B, 55...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
39.5 KB (40,448 bytes)

The file vlc-media-player-13060-dp.exe has been seen being distributed by the following 11 URLs.

http://www.contentheadtowers.com/c?x=n5/R2kwz8ZoP1yXy9MzNOQiJvg6JyrEx41CAcaZqBb0=&c=u6IGk5ACcuDvZN6XLf4Pg7/EGtxOcxG0XK7FnD5vshZfAbYzD3vVBpbjGqtgzzvU6lHzJmgV0Cantn1WH03FL4YZHhIUL4WBb0gnPmT2MgTbk2mZZZMg3tZo 8qlMUDF&fallback_url=http://download.videolan.org/pub/videolan/vlc/2.2.2/.../vlc-2.2.2-win64.exe&downloadAs=VLC-media-player-13060-dp.exe

http://www.contentdlapplication.com/c?x=c9D6FFP0d6Y13onL/C0WSUCrJAS1KA3iQYAZWYZDv3g=&c=YGk WBj9Ggn0E5YA1EcucJIj5/aZ7VzOOLi6yYkucEz2LxA/PZr 5BKgUXCgWrrHPvWTD8OziNa7GQsguu 2VUSNtZUhmC1vkx9g2VL0YY0L8D2UWbxhCSd7u u 1dD0&fallback_url=http://download.videolan.org/pub/videolan/vlc/2.2.2/.../vlc-2.2.2-win64.exe&downloadAs=VLC-media-player-13060-dp.exe

http://www.safedownloadfile.com/c?x=0y6hnfjz4aD3C3x2dIo6wSrTTE 5m6hBq1tDC5kyF1w=&c=pa1ESSRlEXLLZUbQ/DbnLES6IY0o3ldmcvBWv2QNNpqucmbbneSWGh8 RhZLBwLlT4U5TEFUuSXSPG7BM9mfMxEdo6BMl136hAI4vtinz8xQSWRWah5wJn4QkzBYEraQ&fallback_url=http://download.videolan.org/pub/videolan/vlc/2.2.2/.../vlc-2.2.2-win64.exe&downloadAs=VLC-media-player-13060-dp.exe

http://www.laboratorysenddl.com/c?x=t2nof/9oEnGFYtLlC1kBUS2N PGSFpVdZsjw/gjBseI=&c=AXXisR0IQtQg1yxY8mLfQmoklA8ZEvMcJYNMUgS631qs3zm8B0673tLzI jjEn/UbQutEDnukE750y F2BWgUkupDUijagqFxjRfY4WohDpvzUP6lrLxN5ArJBpByCmC&fallback_url=http://download.videolan.org/pub/videolan/vlc/2.2.2/.../vlc-2.2.2-win64.exe&downloadAs=VLC-media-player-13060-dp.exe

http://www.laboratorysenddl.com/c?x=D62H7nIcwmohVll7cLQNbc6VgNvK1ceodUt0A8mSGik=&c=4KKjM7dnUWv6rjTe10SUXzLVZ85nWYdEpN7KCZgipJSNPtoNHR9ufASM3y9c9Pz2/2KrFjpivCGoNpPMZwigz2qEqolgyLD4P6/RBqYVyv7TFOC8 launIPFIS4Lzjks&fallback_url=http://download.videolan.org/pub/videolan/vlc/2.2.2/.../vlc-2.2.2-win64.exe&downloadAs=VLC-media-player-13060-dp.exe

http://www.appranchsoftware.com/c?x=47iqwZMdfbhh3l4kCynfZNBti207/z5rI/H6M9YEC6I=&c=0Xsw6HKWaXaTV8ymkSgDrtXEmN61yozyjelx7/kG87uut4d4H6pktVo o8Tv6I6w0W1UVa4vsFKFlHVhx/eTr5AA93dbNtLF1KG EB bSPwfVZT38CbAi0UrIVO5v00r&fallback_url=http://download.videolan.org/pub/videolan/vlc/2.2.2/.../vlc-2.2.2-win64.exe&downloadAs=VLC-media-player-13060-dp.exe

http://www.laboratorygiftvaults.com/c?x=a 1n/QIfszocsF94eU//noljt/mfcS KlXOYh/5bRw0=&c=UUdXOdlbP V6PfEgzBsqWIIbDt4zoU CSqSvImIw64okFrhPHHWL9S6UOC/r8fUxgdZGanPMmdAVD/sWYo0awtF0BxJ0XRX6KLjnCTCZb4krm5Ww7GApUUHqqaS 169a&fallback_url=http://download.videolan.org/pub/videolan/vlc/2.2.2/.../vlc-2.2.2-win64.exe&downloadAs=VLC-media-player-13060-dp.exe

http://www.sharetowerbyte.com/c?x=EvMfQD0qmLYyI7gUVK2yX2sLf9u0BM7ulHEvHMqjN E=&c=bBsFb1j2zcBHVA6j7m4ljryxoTfuQoS9syyB9goO3N njE6fl1nCAyS0TGi2OmR0wM23twgfT2qEUm NFV8ZEBcTE/o9C8hBOf4aY14TaY iqaSxpwq9YliIgjMgnVTJ&fallback_url=http://download.videolan.org/pub/videolan/vlc/2.2.2/.../vlc-2.2.2-win64.exe&downloadAs=VLC-media-player-13060-dp.exe

http://www.laboratorysenddl.com/c?x=muFmh9S0q qkFwjWXOXAJn2U/PhFK1FriJ YvR9Pa0k=&c=fIFxwyjHnAg4KNfq4Upox0BVqbg6gYE5tNFe7Iy9mUG89YNEtnkK sLSUdAo4dVtsw0vLuV7cgzNgsrAKmOHHR s2lqlv6GBBfI7AvhWf3VP9Qhu6IFfCvTqsJX9Jh10&fallback_url=http://download.videolan.org/pub/videolan/vlc/2.2.2/.../vlc-2.2.2-win64.exe&downloadAs=VLC-media-player-13060-dp.exe

http://www.safedownloadfile.com/c?x=peka6DQP1ZojiGVWUGaR77InQk7cw/m6QbWcAJ2QA20=&c=8sxVsMkvLO7aW0zb7v3Q1WWvBBhPhGyuLmnI4wq6rSpZB6Wi1hIWBxHEpPlCaN9s7dinypkolMYCtc1zzhT 1Lt3jzpS9J3TVmS4yQccZWKCzxbPPv6hBIoJoP/ kQ9G&fallback_url=http://download.videolan.org/pub/videolan/vlc/2.2.2/.../vlc-2.2.2-win64.exe&downloadAs=VLC-media-player-13060-dp.exe

http://www.contentheadtowers.com/c?x=puDfLtuafARX2yX4Mkfrnq4vbw/xxE0kFQQMKnO9/Nk=&c=V8t1X9blpt2VFpavvkJiDtVWPVUWS7wxTFU5v3a8FYfI4EGuxfT9Ct3GwP8 38/ZnatLm wQfy9EH50waI7EKuPqlVrxBCGW6HFwYvJ6tXzxs54WeyPgq/ruJReWjis4&fallback_url=http://download.videolan.org/pub/videolan/vlc/2.2.2/.../vlc-2.2.2-win64.exe&downloadAs=VLC-media-player-13060-dp.exe

Remove vlc-media-player-13060-dp.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.