home

vlc-player.exe

Application

Dove Max (Fried Cookie Ltd.)

The Fried Cookie installer utilizes the InstallCore download manager which may bundle additional offers for various ad-supported toolbars, extensions and utilities. The application vlc-player.exe, “Application Setup ” by Dove Max (Fried Cookie) has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions. With this installer, users are expecting to download the VideoLAN VLC media player but before that occurs they may be presented with additional offers, mostly potentially unwanted software or adware.
Publisher:
Dove Max (Fried Cookie Ltd.)  (signed and verified)

Product:
Application

Description:
Application Setup

MD5:
383fca76b230b4fae8f92bb7fc18e7e1

SHA-1:
bab6190eb76bac7af3f82b60d8af7343e7ab88b2

SHA-256:
6734e804cbe28e28d69964208f8bc8764d6deecf1a3c15f011a6949264ffaa9f

Scanner detections:
1 / 68

Status:
Adware

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Description:
This is also known as bundleware, or downloadware, which is an downloader designed to simply deliver ad-supported offers in the setup routine of an otherwise legitimate software.

Analysis date:
5/10/2024 6:22:57 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCore.Installer.Installer (M)
16.1.25.4

File size:
991.1 KB (1,014,848 bytes)

Product version:
1.8

Copyright:
Software

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\vlc-player.exe

Digital Signature
Signed by:
Dove Max (Fried Cookie Ltd.)

Authority:
GlobalSign nv-sa

Valid from:
12/16/2015 10:03:00 AM

Valid to:
7/24/2016 12:57:26 PM

Subject:
CN=Dove Max (Fried Cookie Ltd.), O=Dove Max (Fried Cookie Ltd.), L=Tel Aviv, C=IL

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121CE9583D2CC8D85A6A453411F33888A7F

File PE Metadata
Compilation timestamp:
6/19/1992 7:52:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:DdhJtnSXblUUn6XikcXNeSY3626HRUNM3wYeKtiZISo4:DdDm4X2eZGeKtAIz4

Entry address:
0xA5F8

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, CE, 8A, FF, FF, E8, D5, 9C, FF, FF, E8, 64, 9F, FF, FF, E8, 07, A0, FF, FF, E8, A6, BF, FF, FF, E8, 11, E9, FF, FF, E8, 78, EA, FF, FF, 33, C0, 55, 68, C9, AC, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 92, AC, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 26, F5, FF, FF, E8, 11, F1, FF, FF, 80, 3D, 34, B2, 40, 00, 00, 74, 0C, E8, 23, F6, FF, FF, 33, C0, E8, C4, 97, FF, FF, 8D, 55, F0, 33, C0, E8, B6, C5, FF, FF, 8B, 55...
 
[+]

Entropy:
7.9289

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
39.5 KB (40,448 bytes)

The file vlc-player.exe has been seen being distributed by the following 10 URLs.

http://www.perkydownloadwarehouse.com/c?x=XQQbJPBsbbpnI5tBZL1lJlzV1ku4HJZ7Qno50A1VxjA=&c=3j1ipAJ1 tEO eAtshW5ahXSjx5GNYPiAsJAh0ovzcyQMKL4rl7lBgPt9ekgPYdcZFwwpPYv2w1O519eC1wCa9fPEDXI T09ySINvGGeoFvCVGmlnq/lwCCeHfWyKQLf&downloadAs=VLC-Player.exe&fallback_url=http://softdownload3.com/s4m/.../Vlc-Player.exe

http://www.perkydownloadwarehouse.com/c?x=bJfqrB C694Xt9zxGwlQF1ZHkJgM54iztFzeVXfAAWs=&c=VcFrCMFJ6mXReGEOaDVXj22H0ynj2ohv665pnoXMbeWa5a31BBleY2 baZqz11My8Sx7TG039yxh6Xy9tacx9UscnPPxzVnaAQi9TcRo87hm5fTP/NbJmu0WrPhaT9qc&downloadAs=VLC-Player.exe&fallback_url=http://softdownload3.com/s4m/.../Vlc-Player.exe

http://www.perkydownloadwarehouse.com/c?x=Vt3Df2tL5vhpxT0S/YveEWeNK3kYSVADwYtiwkqS7Xw=&c=sDxF2mEpg1eIeadSMCagGVAFGuo/T9SP75 QP0mTpxowsVSFDA0A4bh 06sq/8iF HO3dQeniBCSF8mUtCAbrB0DreJri4bTk/v8XLPZx W/Z6poiprvSnJxsX1KOJzs&downloadAs=VLC-Player.exe&fallback_url=http://softdownload3.com/s4m/.../Vlc-Player.exe

http://www.perkydownloadwarehouse.com/c?x=zuEd9XGO580aSBJ8koKcL97HQxJlFbirEkQ1LYRNvrk=&c=g6a2jxHEtMsrjSiW49hfBjcGa7XhmB1EqMU0Gv7xnEi zNLboHFwRdsm3MxbuGtc4 HvcdZo200EBBpgPEAz7qMGpbn5pnEGayyPI90AoMjfEnX0CJ1ojrsuL9FsnAIs&downloadAs=VLC-Player.exe&fallback_url=http://softdownload3.com/s4m/.../Vlc-Player.exe

http://www.perkydownloadwarehouse.com/c?x=2wi/hOCACTKSHQas8/Wod3Byr3tye7TFX2/zU5L/OUQ=&c=P6vdQ/N/wPtNlwE30/qD 0l/mjPvH1rnoW6cKFj0gp5ZTEDHaHtJgCUL3wUTfhVeRq67f65d4zidlaLQQ/jjXPjPUScwusMyU4C gzdtAqCuMHeJYl7WFV713IcxmCIF&downloadAs=VLC-Player.exe&fallback_url=http://softdownload3.com/s4m/.../Vlc-Player.exe

http://www.perkydownloadwarehouse.com/c?x=ju6eZdlsbylxldObl O6Zdxa3kUbJJhdUsXP1jTkrZs=&c=ONHMFxuoLWPYwyQCWESNYj5VKk0I3xwO4JVUg G S7AYsu8gpcwizubWze1krFEIMzVyPB/6uLVeXEXRAmNn 9b2j/VNoblmWFdFV9sgqA8Ha1MtvWaWIRHtyCDVJSBt&downloadAs=VLC-Player.exe&fallback_url=http://softdownload3.com/s4m/.../Vlc-Player.exe

http://www.perkydownloadwarehouse.com/c?x=lU/F4vuJhbuCPR1NAUM6ioryDN7Y4g/RGW5KGmiUL6o=&c=4Fk7U6QkCudbdetbrDfzRpzdVHhvPian9tgqeOPVTojKCOkxq4yZ2jNyhb9OQDgk0HSWBg2yUV1XEyLvu9A9Q97VVBBA1JEKUSmzSdAoTLUlkrOL4W1B/K84XBEbRKyb&downloadAs=VLC-Player.exe&fallback_url=http://softdownload3.com/s4m/.../Vlc-Player.exe

http://www.perkydownloadwarehouse.com/c?x=9E58BxWYH7cHS8TRxzUyyStL5sN77U/Cqr/1PPIfWNs=&c=p8z2tZ/tOZDULjisg9qJ/6FbrUjSpmJa/0J3F1Npq5N9f0yUolPeuQtX X 9q0qJJVjsiQgg1fD1oX3GRuM3TowwhpPsu/Ab63y1iSPdbzVkYdc1X5bPv8gMU/5Dp4tI&downloadAs=VLC-Player.exe&fallback_url=http://softdownload3.com/s4m/.../Vlc-Player.exe

http://www.perkydownloadwarehouse.com/c?x=e0yGutj73xezGCgT9JvHRTOPsUYdU33rbtWXkifzDXc=&c=uRzbPqRWZZlxzoTd5KsmNtuRnMZhpf1XQC khjwd44Mo2NI0kxExFjd4lmBaEzlmhkoK8kM3P8hNufa Ecri tOYkgFE9TV8hFoLLHilk1iv5 J7 qMHgGqzu4HDDSlw&downloadAs=VLC-Player.exe&fallback_url=http://softdownload3.com/s4m/.../Vlc-Player.exe

http://www.perkydownloadwarehouse.com/c?x=pNlQd5iP9PmZyFFIkRAYUtVKV2PSutvuNC1 fNTySnw=&c=LSsOSOxPwQqzJRdOq1uWTKbCCXQ8YCyC4WCCBT1iqF5nXjQGP36N FhkXeS1ZT5zEuuzPaRRZg9S829e9lDCvfDDVpetgLbaTRdSXmpPbdxpCd2XOBreE9GnHaiChSKI&downloadAs=VLC-Player.exe&fallback_url=http://softdownload3.com/s4m/.../Vlc-Player.exe

Remove vlc-player.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.