home

vdownloader_setup.exe

Casecoka

Prompt Connector (Fried Cookie Ltd)

The Fried Cookie installer utilizes the InstallCore download manager which may bundle additional offers for various ad-supported toolbars, extensions and utilities. The application vdownloader_setup.exe, “Casecoka Setup ” by Prompt Connector (Fried Cookie) has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions.
Publisher:
Prompt Connector (Fried Cookie Ltd)  (signed and verified)

Product:
Casecoka

Description:
Casecoka Setup

Version:
3.1.3.2

MD5:
4fb16aedd0e09a52a24d2b690142bef0

SHA-1:
feb3f18ae4f586a2e1d80f85105a4331e7454c70

SHA-256:
0dc4564c5db72fcd43513559d135fe9a50494e5c0fd254c85afc00577ebd8237

Scanner detections:
1 / 68

Status:
Adware

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Description:
This is also known as bundleware, or downloadware, which is an downloader designed to simply deliver ad-supported offers in the setup routine of an otherwise legitimate software.

Analysis date:
4/29/2024 10:11:24 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCore.FC.Installer (M)
16.4.27.16

File size:
1.2 MB (1,261,120 bytes)

Product version:
5.7

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\vdownloader_setup.exe

Digital Signature
Signed by:
Prompt Connector (Fried Cookie Ltd)

Authority:
GlobalSign nv-sa

Valid from:
12/17/2015 10:12:26 PM

Valid to:
5/4/2016 7:02:31 PM

Subject:
CN=Prompt Connector (Fried Cookie Ltd), O=Prompt Connector (Fried Cookie Ltd), L=Tel Aviv, C=IL

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121FF1C5FA99B4724EE3F6C65B2CCA9F616

File PE Metadata
Compilation timestamp:
6/20/1992 5:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:gIG0xfc1s9thyzhAnYUoJEBbv744cp/TMEUO2:gt601svhyWv442/Yzr

Entry address:
0xA5F8

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, CE, 8A, FF, FF, E8, D5, 9C, FF, FF, E8, 64, 9F, FF, FF, E8, 07, A0, FF, FF, E8, A6, BF, FF, FF, E8, 11, E9, FF, FF, E8, 78, EA, FF, FF, 33, C0, 55, 68, C9, AC, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 92, AC, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 26, F5, FF, FF, E8, 11, F1, FF, FF, 80, 3D, 34, B2, 40, 00, 00, 74, 0C, E8, 23, F6, FF, FF, 33, C0, E8, C4, 97, FF, FF, 8D, 55, F0, 33, C0, E8, B6, C5, FF, FF, 8B, 55...
 
[+]

Entropy:
7.3026

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
39.5 KB (40,448 bytes)

The file vdownloader_setup.exe has been seen being distributed by the following 50 URLs.

http://www.vaultbytehead.com/c?x=fUtUihnu9qzbb4kg9YrY2oN9o6JRB/Fi0J0in5gQk 4=&c=kczIFvfoSCuBSW3i gjgVM8Od7O8SY6ZsV8pQgL70FufNujcvqezGuXLoEL2E3ce7 /oNSH6WMf75dbsD 77aVIg4BJuQmXvFc5tBAlRzHDvxgit7JkOcyfejjDW/YvEXZ/kUvjQW5kkZznIyzj6vfne78jkX/Nwu5ESvpOt8WgRKCaYM 2ocJ8Zdl3V/twe&e=0&downloadAs=VDownloader_Setup.exe&fallback_url=http://.../?p=plus

http://www.vaultbytehead.com/c?x=ZjHNM53cE1WcNIoC31GJHdv0bev KT6km8dZx/xVgNc=&c=iym6FMyE7P6DM2aDQaoEQ0kVSzCKJ/gk8ON/0yuCcgi9DgCpBz3p5/Lstg4AaiBAI5320s5wCF2SRxpI2lWxtuPi9WgUYL/fUAX5tYRQtqQjsJH2/Bfwhr4GEuQ2RFJP9l5CC/szCtx2e3DC6Ewek9YlEG4wISb/J9uuvY/ lEgN3xsGd0sow5luFQzGBGqP&e=0&downloadAs=VDownloader_Setup.exe&fallback_url=http://.../?p=plus

http://www.vaultbytehead.com/c?x=iFofFIjxMy0ooVsesJqeBiqRveOdZnG7qpIAE7A9HTc=&c=lRv 9LYG3mxh1eTg0sahe5AYDyFPZgeEDvBfOYWl5OHWOmaeP83cK/a9liOvN1nu7bORD0BIKcqaiIIdUTQwu NILRicXdFxizKd4inSqcY7vafRhFI8uqvwunGqGPqEX2/OBVzGR2gMTKYc7lads2A3MG8K2IZDo7FCTslZIjk=&e=0&downloadAs=VDownloader_Setup.exe&fallback_url=http://.../?p=plus

http://www.vaultbytehead.com/c?x=8EBgYYGDlVsZ 9f5PIl5BSOiRJobSlXlH83nTklnpv4=&c=Et9DBHn jzwMYGY5nNTAF pK/sS9eb2OByJ sbXXlrFMYM1mff6potw6MEAWrNCAHrr3gF/i1ht78KMDiz6i47odtycj60teNdU9FvQWGTcDH0CBlXJjJLHKwWF 4pFkUgWBfmV/s3 x3E1b88kujw==&e=0&downloadAs=VDownloader_Setup.exe&fallback_url=http://.../?p=plus

http://www.vaultbytehead.com/c?x= ZJnUuGZ6QLQRURxu6cx5Y9M2y4 mKLcBLhkLAtQUBs=&c=x2M8JohApI/oyuhxlQ c7AIiEmaxVCBONrRFB1e5pNGPzgmB99yKeKDNJy/W644K0a02QinAsrCKxqiIQ7h/aJQSEA4QTXxtlW0ABNVG4eYSmOfCNk61q Y/X UxfzS1KSmRv9suKWjDMrrEjFYijhK7Jp5k0JUM00n5RAkTjfTwqYzhKfmc2jwUh7IeJchs&e=0&downloadAs=VDownloader_Setup.exe&fallback_url=http://.../?p=plus

http://www.vaultbytehead.com/c?x=Le9yTPzrbqs4TVZ9pwsv7fu0SfQvFWcrlmKr/yVhQMw=&c=Ko2K18nYNxfJnS6H7W5kSQ54TPpFq4Zn3olW3T7M0fzdexZSD6XxSla5Hu7aqVFcNzIJ5860XqoDpcsRDNbmWHDJ3g1gdmj1VrVysgZy5e25Za9yC0N5HX/XzZYKupxra9Jbqr3OGegngGwzZPo9hYrQPohuZEfLvMcjCfhTlrI=&e=0&downloadAs=VDownloader_Setup.exe&fallback_url=http://.../?p=plus

http://www.vaultbytehead.com/c?x=BEtW5yZXkTkx4 z6O1TqM3SxTG2l0ANlUg3udCRWHu4=&c=QNTHHSWDO5lzJ27tYQf2DDfourXHpxLzr8LxN8ehkd58Evticja/yVmQ8rmFn0EZaler86xfm1IN2VkRVVF6z/n94kDbjA 4sJl4j2 zLGXxaJIbP8 sTXEWf20 va/g3oQ2xBW/EeMINcWokB3Wy7J7Z3xWfvisU8qYsKfE325gzTmMR2rxop713vHl4Ps/&e=0&downloadAs=VDownloader_Setup.exe&fallback_url=http://.../?p=plus

http://www.vaultbytehead.com/c?x=ST9GmfuFxCu/y2UVgLaBYJcH0iSKCev5e3hOCbXo2qE=&c=3v2dh/hDKEXBlMTiqllslPhGAAaz/l6FWFQSbFTUxIjQLT1F 9LwcO0cXdZxRrJ9DC0s13EqTD5S 7xfxprvDAZYqlZIJBg4qmUExH2L1BwoASNPWsu1E3MHqJdScO3Y dkVhxpq4E2j 6KmscZWXnY6QoKj6qSCJBP9u4XoJF9xDvZJOZI24WyOSjPECooX&e=0&downloadAs=VDownloader_Setup.exe&fallback_url=http://.../?p=plus

http://www.vaultbytehead.com/c?x=3nvvhA Gt0imqNzBDBQBpoGWhvc9OkL1u5Slv 69HIQ=&c=ps/hN99M 3TGtM5vEIQrBYj5VS o98LqVpU8hop63SohgByY5xo2DqEW6JOaCiNzuQBbo/8W1OfI58Y3SPNaGr/br4UuvuFyjpI/NRTfur3OpBi9LGCAy2s FfmsEHIisF7g8xisG3ICO0YCwmuKX6Ni5p0vBrlUlJJYO NNg6ayC30UJMoPl8wcZub2Y7hw&e=0&downloadAs=VDownloader_Setup.exe&fallback_url=http://.../?p=plus

http://www.vaultbytehead.com/c?x=53BxFsNeGmyIsh5xiQiZGk1l4bVz 4ZMmRQV7UZ2Hts=&c=c4dewPz1seHKQAq/r6Gp4gxK2/w3sFNTwGsJN8iF7XsdtrIysv nug7Yc4XJwPfc0rKVxwBZYwCNJ5aoYUS0Nm5R7vfKhXjw9xkFMVLCyQZdBysoQDlGZcxqmTiEjqR2dvO0mlG3eW/ 2QY 83X8mh3QGSfGBBvZLFnLy6RG58HADYEENzZQ9gLRmcUA8qgf&e=0&downloadAs=VDownloader_Setup.exe&fallback_url=http://.../?p=plus

http://www.vaultbytehead.com/c?x=Qnb7l0/AOXZRuBToZFbCx3HNer4KZA5aM8oeUsD1W8U=&c=1QqyzQ/mW8WFFhiAgtxowX747o2S2tGataSd356arU0LCHNpCiRVcxHF4JubgimQS/WVwGiAuDd6YAmzBTi2kzEF5gz9YVmGGIeorKKhJ5RQaqZ7HBr4hTqR9yBOW6hzFWCWTZPJu4kW3dc5SNwhRoId2ZSbam/cOc3CjYSa3viK6s 7t8eVDcq7FH456dr6&e=0&downloadAs=VDownloader_Setup.exe&fallback_url=http://.../?p=plus

http://www.vaultbytehead.com/c?x=z9/TakVyExYCea7L9oRSSOu/AZwZJyRrnuxCFQD6RBU=&c=QVzHkJhOHSqD2lJpsMThtijckKdt4uNjr Fi2GUm0nKDuqtRDQnfFY4B/yxxpMCXYZXp0dyYWPdM6OG7FHyqb fazAwnyosxTJJNMkDk64Tx6Pqo2Owsu0ieM1gJgNgD7JgcfybZFkz/TEiFR coQXH/rqDtWD1FN0Kv3Jcu0iM4hTk9kFCUV8P5rLCRDb3 &e=0&downloadAs=VDownloader_Setup.exe&fallback_url=http://.../?p=plus

http://www.vaultbytehead.com/c?x=1LM3iQil8QQL RjGbHWFY3ASZPvTyz7Mb/i7UcOJxE4=&c= 6sr5BYPPX5qDEBMP4W6aQubNOjcEXLYVDIm5CtWiJ/pzeoWIq9vMObJ4XscqWaiOym3EEXiNFsVhH3wRdeQcSLKtOxkw71/9eHyyg1bwhUTZFyPSUdzJo7S4GH8XqtqnaqCqy4jHWYliMfAcMnOanJEplayHg7m2ZmECJ1ojhIcK8lurVWewp1jiHLO5srR&e=0&downloadAs=VDownloader_Setup.exe&fallback_url=http://.../?p=plus

http://www.vaultbytehead.com/c?x=9FqdzV3mghvkbo2SjBdVdu9dwJEGZx4OY00NqGGFKDQ=&c=fHVg2kWp9DYCtJtX6y0HWMD8He4R3ORIiRhdUf5DtiY0Xc07ImECqfpcmA8ow /C3/8FgFVIdy59DCftD Ks0WPzaYw0iAjtbCC5tyD1BGkbUFUno2ukYtT5fFfTD9bJhFvBV0WvIYdxAIy20FUpaA==&e=0&downloadAs=VDownloader_Setup.exe&fallback_url=http://.../?p=plus

http://www.vaultbytehead.com/c?x=7c7UxmS5BTOuo/QZv0Ab/6kfDLxxwTtjBl4jYC5K3Wo=&c=wiGMOFbjMTBnW4eiCvAkHCrHL Ny4dk4qr vWJipjHKJDFY3EN72lhAi7ctzPBi cUSrvWVPGa/F84mZzNRN1n7tvHIW/HZHQ2o1PaUeOpEu7ere/wQsbhHhin6hsC1KbcHbuOGr3k22zxxdGlB00IfiUoDU2wRLCFTEFK/uf14=&e=0&downloadAs=VDownloader_Setup.exe&fallback_url=http://.../?p=plus

http://www.vaultbytehead.com/c?x=ZaB34IWjlnAYTmcXkHqF9DLdfWwxtJqHPPEC YU/2lQ=&c=VPN29kUIy1aEFCr8l8 q0Nd7duYCTf26bo4a9U IQVzfJ5P8E8/ D3J5tIU2T2FOjLhA0Ngffn7gkyQ9cxfuLmhDbFwmwEL3mrDHll0CnV2LQ5SFJ6N8ij16RP9srT81rcE20ahaZzDTC wpYVg3BW53xgtoHvIKASEEXpTZl6jcAaCSl MZERSMXzZjs2hk&e=0&downloadAs=VDownloader_Setup.exe&fallback_url=http://.../?p=plus

http://www.vaultbytehead.com/c?x=cafFfxATWeNa1A GUsPLm9L38Dp8LJfUARCAethgiis=&c=IObwKfLPZNYvpQlBPx0x65jaO4KJit4ZaAAwYxxQp3Jp8nhPL55mpOQKVfbfzjt4zX7/JldlYuFwiHhs19cK/aSX3PiexdSwCJNEcliEPp73hRUJb8yrGsgLM7tNKKb6XC9mmO248ep4PHB3TCbqv5kZ3aGootrKSvzx47TPyoZBs8ngwozEoIWNaMheq0kj&e=0&downloadAs=VDownloader_Setup.exe&fallback_url=http://.../?p=plus

http://www.vaultbytehead.com/c?x=wu7VxbIAfb7wwbdqKEzni5FOyJxoGvgp2mQawr EyRo=&c=bWgxrEikWgUiJtQzRySCCM1fpOZLnb2MFQ8Vob3iPCj6Ia3g58Q23S89rsXUlgsqj/GUjjXJw0J6aw1I PWz37peR0ivLD6XPjMrSCZYmydIXy4kD2QB9GErBg61a8e/ypcgWnK vVjX KFlan2EhlNDKOYJH/ne6RS3YckRBBgwfRYbIiMyoTuqtsAX/MYP&e=0&downloadAs=VDownloader_Setup.exe&fallback_url=http://.../?p=plus

http://www.vaultbytehead.com/c?x=zcpK5XcRt1bNVqVaXFMKmlLdSorLTEx9qXKtbHIm/xE=&c=0DK5iR/wBGneXMP3wwnFRc3qTi6fJ4JHzyTdCUcisrErnGETdOqhqJYuNRjhdRVaABLLapN69KBzej7xWMuHFv0XrdzYzCVsbvICtlQu0P1bbytG2eXln30NedXKRskcbTuoDBgwc5WWKCUe4oxnswNjI34CzE2ocau3dQT9w6A=&e=0&downloadAs=VDownloader_Setup.exe&fallback_url=http://.../?p=plus

http://www.vaultbytehead.com/c?x=FaRgTmMFcvyRLCSmnHFxEbxTEG1GuaORe60onrz/3SU=&c=SDdjtP/OdN7JepwQs3JyEZKG6LeWZwanM81HNHaq4clZSTFlogqQZQLeWLOVLzrER/DJB6VqqQTdmPFA0on6uWqCNBMM8OK0X5S32N560uKn4slVvo yKpgQqb8u4eBS9wruPefyXMtx0SFjM9/Celgbze8RSHqwzp8UQURTlaZPiHkt JTbLNfSYcGIVaRj&e=0&downloadAs=VDownloader_Setup.exe&fallback_url=http://.../?p=plus

http://www.vaultbytehead.com/c?x=L zEeBlVd7ctN8u1JdRBvBNFl66Jlgy AlAzLXSq1Tg=&c=h5aCllpMDz3Gy4B/ndYAHc1MwMxCeqnxoucOrO5w1k yKqiN0l/caTxoAhC8GgJq88DNgkG1iKQAIYCHZKXiWNyfsUg4/h7RqJ3S8oxnr3QTSF3sKos9xjd0POlj7MDmWoDhzhB0qaGYfQciM2/1Eg==&e=0&downloadAs=VDownloader_Setup.exe&fallback_url=http://.../?p=plus

http://www.vaultbytehead.com/c?x=D8E/lMbnMKUYmHeK9hVfiNYtFOfmyPo37FvcGMMnjEI=&c=SpelUJzETMe3FGk9m3z2HXQhKQmyj1X1f45zP59mHz/EZLFLnqOeWHIWPejkfHAXFG kVgtuC/lEu/7OTLf3 8kTzPChkCfPQuQx0t0 PjygIPgzo BM8n LsKiU26tNFp6kCXQx2OqWjiXfVnZVf4jIFRMjxM2s4HQwikvmzcJ9Rm1KNsm5G7H8W46XYO4m&e=0&downloadAs=VDownloader_Setup.exe&fallback_url=http://.../?p=plus

http://www.vaultbytehead.com/c?x=7rxV5ctVodkc4QxjlpITr/lKMcEdICcWbYvqPgRjzwk=&c=8yUlhBvXgJYLrRTcjK9JcukwDipEnZGE4gbUe5rL3Vwsq22iEal97LhRlDWHFzFbONI5JqemoOJUv1GzI6ZSYCEDM5aXgVPgTeEmdQ1UC3nyC4JsFU781L3Bt/K74kefxHVe3PJ3Vla/Vl2tI/cGo5w6vIlA2qP0J07/DFtgXNxM8i2QXY/eHrDpupTPycTw&e=0&downloadAs=VDownloader_Setup.exe&fallback_url=http://.../?p=plus

http://www.vaultbytehead.com/c?x=u0 XA3x7N2tbzPN/iuxsaVI7/gtsONLgmwwE8AK Ypg=&c=XPii77N735oWH0rdTRQsbrjkelyA2l/6uBPZA/6mcnX3SzngM84s4C5kNqFVUlLyjDl8qV/mKFfXF4PmENWxJ2ShYWbkgVKr gVzWsC5B6SJuPK2mcmEeRApho8qlZTrzJjjm51Iy8rLHkd8xpS4XwTIO2JAURfq9NE9UjRaEK8=&e=0&downloadAs=VDownloader_Setup.exe&fallback_url=http://.../?p=plus

http://www.vaultbytehead.com/c?x=sJf5pzbJ217whV8SSCzS RBdJFhfc9FD6Sit4ukO/J8=&c=giMD8eDGL9ppA4qhXhkXNy lunhTv52qmreHtzSHrrWgBv4m087TMGkXrsEThrsXuJGrB/fibAd62xTVOdP5GHq4FV /wB/YEDq2rM4veEkkVx seX32XwTBELhStULR0ys/C6DnIF5uaXcju4eiEw==&e=0&downloadAs=VDownloader_Setup.exe&fallback_url=http://.../?p=plus

http://www.vaultbytehead.com/c?x=DGMK/v3k6njsxDLGFGyFSlLyyyOCE7A2o32AGdhTooo=&c=bzKB0ixqQTjoK1IywwVwuaPHCqSvjWP/oGzwO8vYScRd8435AoLeJsZ3AeG4ejCSRbrflqZMrp8dp2dvk8wX7l7qkh8azGM nPn5rMzIxgVhwSHEmtwiMR34dTrZvIzNRX/Gn0G4gnEUzHnuCyocGEjaRTVqYKbCq/ofIthSLgE=&e=0&downloadAs=VDownloader_Setup.exe&fallback_url=http://.../?p=plus

http://www.vaultbytehead.com/c?x=eLEoDCHEc1x 0bYo5bf WpS6FadJsMF2dTkMsrdQVlE=&c=Qi20mPFbQu7PNzMJ4/mYdOUmt/rwj9bJj f8MsRuLB/4kvAiobVTaktomymd0BDXPlW7zNOlnnKAFAgH9zVFLnub6E1bdVY BQy2XuZ7FyRgNo7xBjH7i2ZC2gUrTHl2Pq9hsh3rL2ZYyP/wLvp2OYdxlG1VqzlR2sP1t6DUUVQ=&e=0&downloadAs=VDownloader_Setup.exe&fallback_url=http://.../?p=plus

http://www.vaultbytehead.com/c?x=W3NOwA4zgwCab1UuCzB0PBvrYhZ05wsVY91WufrIbLk=&c=23NRpbN5Fh0ljWFVls5gdDaUHXy3 jC700esfd6DCcr1r20d6TDZ7bhI1PGL4hIRC2HMqAybEuznOCuJQtydOPQLC0mj3CgG0VcwYmfqUXhZtzLTj2nyVkpzpGP9joH4IHdxdQiZsR7ci1E1P0pP5FkWvNLt31ePuy/9XZJ4Xlo=&e=0&downloadAs=VDownloader_Setup.exe&fallback_url=http://.../?p=plus

http://www.vaultbytehead.com/c?x=WeripD1wBAjIKSws5Ix7GeatoedBi2gANox1Scrwatc=&c=L9e9EJTjH/UbLErTByD4gRl2CLL/3XlIqf0aAz/AC5i21Sp/4XMekkg1oYDWh0ANFmMtmLVN/w7XFB7aG9FkVctybA9gRHDaTg7E EoQbe1/bds8dDGRc3NPuEn4jqoEjAk65bQVQgGXLbeSvdUO73/Sijb10dJGAmcGPJsWLoo=&e=0&downloadAs=VDownloader_Setup.exe&fallback_url=http://.../?p=plus

http://www.vaultbytehead.com/c?x=KoQ/LJ97CnI4psaaedqb69uCHtn6lqeMkhstNwXaZrE=&c=0ZBxjZ/JGuFULezswi1GXU3sVoDt15okvg9vDVZPiHkLEafanWlFEga7wqXOBSLM0jA1v1gW/VWXj Y4QrXl3VJalhUIx0Rfwx5j0dQnVAsysostA/jlGSMF3mh9q6r4TMgpNhVWmd7/9QDiEz91hpdYk/eFJPph/8a36dvEwl8=&e=0&downloadAs=VDownloader_Setup.exe&fallback_url=http://.../?p=plus

Latest 30 of 147 download URLs

Remove vdownloader_setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.