ares-galaxy-32-bits.exe

Installer

SetupFlash (Fried Cookie Ltd)

The Fried Cookie installer utilizes the InstallCore download manager which may bundle additional offers for various ad-supported toolbars, extensions and utilities. The application ares-galaxy-32-bits.exe, “Installer Setup ” by SetupFlash (Fried Cookie) has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions.
Publisher:
Application   (signed by SetupFlash (Fried Cookie Ltd))

Product:
Installer

Description:
Installer Setup

Version:
4.1.4.5

MD5:
c1c7271e52b6826b716bb4c8659b52fa

SHA-1:
288948710bdba2acedc0a8a3efbed921bfcefeea

SHA-256:
cf8b46416548977e67b5d0ba31458fbd63572fa504bc706153310dd6661824d2

Scanner detections:
1 / 68

Status:
Adware

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Description:
This 'download manager' is also considered bundleware, a utility designed to download software (possibly legitimate or opensource) and bundle it with a number of optional offers including ad-supported utilities, toolbars, shopping comparison tools and browser extensions.

Analysis date:
11/27/2024 1:21:23 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCore.Installer.Installer (M)
15.8.25.20

File size:
799.4 KB (818,592 bytes)

Product version:
3.3.2

Copyright:
Installer

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\ares-galaxy-32-bits.exe

Digital Signature
Authority:
GlobalSign nv-sa

Valid from:
6/2/2015 12:31:23 PM

Valid to:
6/2/2016 12:31:23 PM

Subject:
CN=SetupFlash (Fried Cookie Ltd), O=SetupFlash (Fried Cookie Ltd), L=Tel Aviv, C=IL

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121BC71749B7E66E31DB05FEA20FA56193E

File PE Metadata
Compilation timestamp:
6/19/1992 7:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
12288:rcS3GWPWzLmRbBjWReDK56ss06SRdEMvC6g1oyoTmyb2fwT2+pHTEt:rn3rWzijwQK5l1R4ylu8NTi

Entry address:
0xA5F8

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, CE, 8A, FF, FF, E8, D5, 9C, FF, FF, E8, 64, 9F, FF, FF, E8, 07, A0, FF, FF, E8, A6, BF, FF, FF, E8, 11, E9, FF, FF, E8, 78, EA, FF, FF, 33, C0, 55, 68, C9, AC, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 92, AC, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 26, F5, FF, FF, E8, 11, F1, FF, FF, 80, 3D, 34, B2, 40, 00, 00, 74, 0C, E8, 23, F6, FF, FF, 33, C0, E8, C4, 97, FF, FF, 8D, 55, F0, 33, C0, E8, B6, C5, FF, FF, 8B, 55...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
39.5 KB (40,448 bytes)

The file ares-galaxy-32-bits.exe has been seen being distributed by the following 50 URLs.

http://cdn.baixakicityfiles.com/c?x=1i/c7NTTk3Wr3IZX4xZoi0JtDvWvIloVgGTOSc1mZ0I=&c=6C917fHq2gW6iPNTo4ihoGVyd4MJFi jD6RP5ygoaeZj7KXD7P2Fectr9jfxrAB4QGOkYghPp9rDLYMZeXB1xd6gtFhzeDGOREoOefOfogBjmN4bRV96TiiThbPtA duWTSN/3f7IIC9ml5P68exg==&downloadAs=ares-galaxy-32-bits.exe&fallback_url=http://sourceforge.net/projects/aresgalaxy/files/aresgalaxy/AresRegular231_072615/.../download?nowrap

http://cdn.baixakicityfiles.com/c?x=/beGwe2I jwcG76M/PA7jnfHSmFETkTA3PWMixZWbQk=&c=nfZ3MRc3CxicfUKLJVNQPVYzca9ekRIFmYzLwnlnsEiHL381HZryuB0xiwM5DQ q6Rc kQ pAZ7E7myAZR///1PftsgpPI4nLsLZNoRJmaa5JlBfnvzdsS6iWY/LfPza3KPusZ9Hw1gzIPDt3nO0kQ==&downloadAs=ares-galaxy-32-bits.exe&fallback_url=http://sourceforge.net/projects/aresgalaxy/files/aresgalaxy/AresRegular231_072615/.../download?nowrap

http://cdn.baixakicityfiles.com/c?x=hnrTU2HL8sUltcUw4G3v4Mrv4aZ2/U4 zdBnnt6TNCM=&c=0b7s2a8Z6rPrSv7/hEVoGIK811UrY/f3U815BXFXVajwx3qKfUGbUF94kjD NVDHaUQPav RQPiYM96IEb3VYk68324JUC6PvZPuF Husrag 9Nz0XQI8wlsttxMDwYrw9s07utDTlld/rZ1MEeOkQ==&downloadAs=ares-galaxy-32-bits.exe&fallback_url=http://sourceforge.net/projects/aresgalaxy/files/aresgalaxy/AresRegular231_072615/.../download?nowrap

http://cdn.baixakicityfiles.com/c?x=sGb54MNIRrfe71gU6ZUbcNdIpgbOEEFGWRb2jjlyzwg=&c=58vsfrBhdXAxuJncHuEqaJ1Xhxd/OLfMV29rI0l5wGT6mehaNfTmoU95PGPDjy /iHqk/fMpzeJXeGiK Z7YLH W973OVZi2SiWS1jG30QKqERgcZcloJ9aLlUnMKFJAv2RLKV8BoYt0Z9 T x7QAg==&downloadAs=ares-galaxy-32-bits.exe&fallback_url=https://sourceforge.net/projects/aresgalaxy/files/aresgalaxy/AresRegular232_082715/aresregular232_installer.exe/download?nowrap&TYP=http://www.baixaki.com.br/.../

http://cdn.baixakicityfiles.com/c?x=Z8 RZNxmxAC80T9shkZtYgj9/OfZGxooFAEKTeHkWRM=&c=9tG0Wujsfn9C8SLxuAqrOP3yS16KZ5csQsjKjx4bZHY34apjTIUaVc/xZ6L0io1D8rMG yVeepenf0caRvgRFc2L55fbkTSpGNL9kBS0vIjpiQgJnKwQtUOc WQsT4FTdUxEzPGPCmj3HfA78Z0w4g==&downloadAs=ares-galaxy-32-bits.exe&fallback_url=https://sourceforge.net/projects/aresgalaxy/files/aresgalaxy/AresRegular232_082715/.../download?nowrap

http://cdn.baixakicityfiles.com/c?x=RawFhG7AzcmQWIRGu98aU8kubMQEHYGqCXO7FKGHRc4=&c=Z1oAZNwTopuWlP2rsHY1PTnZT8mszCls/32bjBDlU7YkrIdpm1Ng8J3jMDEj5qTtlCYkRx9julhhtdlgK4tW2oQ4lWLE9UN/lN2Qe6Rz8Th35HaH p6IpDssfMTjIs1iUMuIjiKfp5eOsTnAmRyr/Q==&downloadAs=ares-galaxy-32-bits.exe&fallback_url=https://sourceforge.net/projects/aresgalaxy/files/aresgalaxy/AresRegular232_082715/.../download?nowrap

http://cdn.baixakicityfiles.com/c?x=ghOF1oPp WUPI5zICcXVdjAjzl8zIYwSvpT2l l2Gpc=&c=snnUS0z2IAuc0nA43t0bDBU20hx9 EiNhGSYnYMhPtKHr9H9uXmX9h/JQs7w5PvgMZafxGxyIP TFXtq5BpaHfyOoJ2w CxCeMq4KARna32s3SXgn1lWZG4W5vLJk7di6KPdsGoa/pvWcVb3hifMOw==&downloadAs=ares-galaxy-32-bits.exe&fallback_url=http://sourceforge.net/projects/aresgalaxy/files/aresgalaxy/AresRegular231_072615/.../download?nowrap

http://cdn.baixakicityfiles.com/c?x=ecOO2JiwfqyJRjQGVyLR3YM3l1sbkzIi8bRVcsTNjeU=&c=qWLeUYXu3S kgFGtzciIFpXZRxAs3fzKE4NATJCPjTwwUbMwr 6kN3lhlSi8qlCT7kKRq7KmfyGZkIlqhurBP2Vzvku8oILk0TOGo25DjhDu7Gnud1UvXbaTO0NhqrLm9a3M7CdWZLaSzEhd0MriQ==&downloadAs=ares-galaxy-32-bits.exe&fallback_url=http://sourceforge.net/projects/aresgalaxy/files/aresgalaxy/AresRegular231_072615/.../download?nowrap

http://cdn.baixakicityfiles.com/c?x=/fCFt9z9yp3QDs1bPKBCL48FUQr5j3oc 31cWAZ0GR4=&c=z3xwoS9TiOY03gLwwZHfpkaQEY0mMBgP97VHLv 0SjkASfN7oi9ubWhpPQ0UkD6TieNKR3NFnt1 P7ML3Hh//4ighQdng jA Bc19guYohZVXD0d5AcGjMxmkw3Ig0rBNIc06luvRPbey3QQBTNsiw==&downloadAs=ares-galaxy-32-bits.exe&fallback_url=https://sourceforge.net/projects/aresgalaxy/files/aresgalaxy/AresRegular232_082715/.../download?nowrap

http://cdn.baixakicityfiles.com/c?x=Cmh0Y8S9380nDJjTrMIQxmJNiHy7Pg8dGpV6bhUvG64=&c=eNwSdHlDSomN/VnLkwPGqwYPUytQ XczDBdSNCzBI8Z9HBHcA2fkIisEFlKbLDfxyrXpGQ9p2d0e nnfo7HkirC/LOg2CMguS/XUkMcdPDMkSM6XT HLXr2vRqKRB4EqM1C0lEIMQOh xtHcePrfuA==&downloadAs=ares-galaxy-32-bits.exe&fallback_url=http://sourceforge.net/projects/aresgalaxy/files/aresgalaxy/AresRegular231_072615/.../download?nowrap

http://cdn.baixakicityfiles.com/c?x=Ds5nvzK9vlF OYTA3WYCIz97aLhV2VHfGShQWZL 6Gs=&c=mjmsm0sskBsKbwHLy5e89xbEXrPKI p/D9 1hTmYMYjOkdRj7pcyGvY39//Sh5aquwDerqXcIQaypMqJ3cxv0 fxyPi/veQruy0lyzd7DUVsVKr5Sk4kQkBlmsoEFAYTi2cA/iakm6849VCm0qINlQ==&downloadAs=ares-galaxy-32-bits.exe&fallback_url=https://sourceforge.net/projects/aresgalaxy/files/aresgalaxy/AresRegular232_082715/.../download?nowrap

http://cdn.baixakicityfiles.com/c?x=g5cbM4ZF1otUtS0ENehics41Z3q8ytet21uhCtFY5Iw=&c=yIZbqrGTiUQSAps3s4GllSU4IJ0gnmqyRXjOVY1A2NqjsCP13SRKRD7YkZFc5YCKhUAX7pXMix/xEgE7tX3jtSP IY wglvvzggKlR9SN1uioReYAEajVYe5ZDyQ9LFzyv5lRo22KUxt8feI7Nsilg==&downloadAs=ares-galaxy-32-bits.exe&fallback_url=http://sourceforge.net/projects/aresgalaxy/files/aresgalaxy/AresRegular231_072615/.../download?nowrap

http://cdn.baixakicityfiles.com/c?x=BZuet5mBqQNJSkndME LTFv78MCPSqx9xoxQyw3ycDo=&c=zwCptI6xtwWvNpan/EG S erDgonHxEALPRwi7koaynUFcTBEzR63kldFBkWvWrx7TlZIcusvOUMWiKDGUYJIGMUY/QIRuaSLsE62UzJ1YS6qHFe5QqdYFzo9giOqE 5s0mmU8Qg5foRqq3lLGWuMQ==&downloadAs=ares-galaxy-32-bits.exe&fallback_url=http://sourceforge.net/projects/aresgalaxy/files/aresgalaxy/AresRegular231_072615/.../download?nowrap

http://cdn.baixakicityfiles.com/c?x=4C8hnoLNhRETB5VKHPU2icGweediJUeKhUV4scYbX90=&c=wwueM7LR99ODi6l IKWpp0bsYTYDMnNBJOjLD79ARM0XyPG7IMfYufNzaEgCz2BuSmzNDtb/PJpFuFg9UYX3 YK29eDOQu9yvbVXbiDuI 0u4dv83HXL3DcmXyu/0R9MkouOeLEBuOQuvrZgS8BWJw==&downloadAs=ares-galaxy-32-bits.exe&fallback_url=https://sourceforge.net/projects/aresgalaxy/files/aresgalaxy/AresRegular232_082715/aresregular232_installer.exe/download?nowrap&TYP=http://www.baixaki.com.br/.../

http://cdn.baixakicityfiles.com/c?x=0ajUBxDpSf5dVLZR6eLM7ogXFMKBamjjYe7tASwIBJ0=&c=nA4m3otd3 aW B5RBn1MHDGTEn98azv35 rHtSilaXhCIH3i3H72FhbAjaXLKTXzbFJGMS3pGOm 1G84/g4fkaFdAovy5C96HNwsVaqTa2iK43Qp3 23oMJ49YKEZJUdWboJ0150ukkTdF D1WTwMg==&downloadAs=ares-galaxy-32-bits.exe&fallback_url=https://sourceforge.net/projects/aresgalaxy/files/aresgalaxy/AresRegular232_082715/.../download?nowrap

http://cdn.baixakicityfiles.com/c?x=Q6/3qwZVK8fUxUg4vTkBl4ubOzLHXJKbP8QHAt7NYhA=&c=JkNCsLtvxEfL7oPilP1rsU53 /8vzWdON0Yhl7V6sz2G7uUEgLcut16XrKna33H6mxnV/7DW7jphZ8GTOsPn6A5lfrxihdzkhcSeoTVB9iJdIt7WjlyS7fHRjlML5YJpMsqZ5FGNgxPTCaNcx4GkjA==&downloadAs=ares-galaxy-32-bits.exe&fallback_url=https://sourceforge.net/projects/aresgalaxy/files/aresgalaxy/AresRegular232_082715/.../download?nowrap

http://cdn.baixakicityfiles.com/c?x=hlHFeLfGqVFwMEEY hDslKBod3z2urvZSogV2LFBwfQ=&c=E heJ9fFAg9SPEPsPjwrsMtsSHzcQ3TzZdwYc4yxOeKrRLCNwiERZGI Alw1Js7dkaxufvxbsWzud3sKMCnHMd3z4UsGpc8otZrPRu4dEn 8PvTrHAnh3ZzMGoYLjDriz3RxjRWmHx0qaPO1MwB/XQ==&downloadAs=ares-galaxy-32-bits.exe&fallback_url=http://sourceforge.net/projects/aresgalaxy/files/aresgalaxy/AresRegular231_072615/.../download?nowrap

http://cdn.baixakicityfiles.com/c?x=We2IBjj4gi9rzeIojrTBFSuOMP7OFXAmmekbf064spI=&c=vRf/vWrc6Gkp9mTaU4h1yJAEVBkzyMWgL4o1DzRy93oAjc0Cuo0AwQq85uAYlsUDCv/mlMuf5j9m1HNd84/huGhu3Vc4R4wy4qPd7e5uTw673220k3aHIFSU6jgjadRr/6PDk3tFsMZWkqZAILHOIA==&downloadAs=ares-galaxy-32-bits.exe&fallback_url=http://sourceforge.net/projects/aresgalaxy/files/aresgalaxy/AresRegular231_072615/.../download?nowrap

http://cdn.baixakicityfiles.com/c?x=VqDnX 72t7ksNbOwrj3PJGnooSkA2xZi6Aeoly1HmRA=&c=zjnB3J6sMLHiBqklyT0w 9CWC/p2D5cF6aG5hyrUcHFPnpSk7NMcXl3Cbeq5xKJ3JTWjIGr4l83i0M3PbZqiO6mP4xh0/ Ahpp/LWbnP4MsATUo2rwK2I5t9QTvY22t2uyHIFm2 WLMT33Avc03W9A==&downloadAs=ares-galaxy-32-bits.exe&fallback_url=https://sourceforge.net/projects/aresgalaxy/files/aresgalaxy/AresRegular232_082715/.../download?nowrap

http://cdn.baixakicityfiles.com/c?x=m4BUDsDyLvI8dKcEYN7LrKQeqDHQdv9ohpuxQbpmqIs=&c=9F3KBN1H 2SqRIAOj/Khbpiy2yvA6Tg2kpFWTY3FgvbnZr4DC2s/FNwPzaRIhZ4ZRld9rM8GNGjn6x oKTw6oSsvzx/jFgPF aMZccReznZ7UOVaNxzRrnRtxiFcsjSFqP Id5Z 1TzEMRMm0bANXQ==&downloadAs=ares-galaxy-32-bits.exe&fallback_url=http://sourceforge.net/projects/aresgalaxy/files/aresgalaxy/AresRegular231_072615/.../download?nowrap

http://cdn.baixakicityfiles.com/c?x=raFh9H87EAY1xbNlMZH0VlssPbyLG94RkHms5W47drg=&c=smMnFssAbaqGbe6uk976c/oUu1a9zc6z4rHVillCsq22qeQrZ5Dy6xabvQu/uF9v3vZXla9TI 424AaiEtxW6i/3Aqd0EeedD9S6jYXPSPv84jnibWk1daJ4gIOif0FxW3gDw0uLxIjTDT9Lr9T1Ew==&downloadAs=ares-galaxy-32-bits.exe&fallback_url=https://sourceforge.net/projects/aresgalaxy/files/aresgalaxy/AresRegular232_082715/.../download?nowrap

http://cdn.baixakicityfiles.com/c?x=ZituReOa339mHpYBNI B2WgnxVy64iNdt9J4/dw4b3o=&c=kj4TdUW7hAJhHmiP 5n3xHlqMQ0ypiCFZI69vKY1wKG47vbWkY7H4zZmUDM3kUEvu9S0WLRvGzjEQldFd150Lygqw/TS7qPo2Cf uI5dmDVg7Y44g/jqIrA3M5DcoLiDP1WDFGtByHaIdN1d5N7cJg==&downloadAs=ares-galaxy-32-bits.exe&fallback_url=http://sourceforge.net/projects/aresgalaxy/files/aresgalaxy/AresRegular231_072615/.../download?nowrap

http://cdn.baixakicityfiles.com/c?x=1bEjgR6QbgUYZu5azma8wOSPOQhV9QCapYUQXV dmlM=&c=70pH2hBnXRmx1aPxBM/8ind4EJH8EVMt3ChOP9dcejvw3fxbN5/fQkC1T04alR82fVVNDjIylGNXoj/5KVqx5KT01ABNgk Tun2Aacykto8 aJt4I 6YeFyyjM1H7KuJJbIsulekAJFweGX5hKLS1Q==&downloadAs=ares-galaxy-32-bits.exe&fallback_url=https://sourceforge.net/projects/aresgalaxy/files/aresgalaxy/AresRegular232_082715/aresregular232_installer.exe/download?nowrap&TYP=http://www.baixaki.com.br/.../

http://cdn.baixakicityfiles.com/c?x=URVcpuDXiNzaBI8CnEL7ay38z/DFkqtl4L8wJwK3Ldo=&c=6TupDcMt29LNgnZvnGfeJ44/TAc5ynjQvvg65yb88wA1jRevktLuGxLVv0yQgMA3/DayFbIBJ8O2xKbaL6WtsqhVCeDmcDxHxMDnW7lgPHliXI9CByeRUpx4k1qOtQ5WJcGjkYct12mDcBmUxIAHbA==&downloadAs=ares-galaxy-32-bits.exe&fallback_url=https://sourceforge.net/projects/aresgalaxy/files/aresgalaxy/AresRegular232_082715/.../download?nowrap

http://cdn.baixakicityfiles.com/c?x=JXHyTW0ke2LK43evVnW0NtiNt8/yI72TjfNK 0kTmsE=&c=cOokJw0JmzODD1NFane3L8fpmK7nbMkNrGKmslar5N7LZX/Lz5ovD1IEnGkeLbIbuH8Rkwrl6 fSYXZTrMCJdqR1V3vfxXS0wOtgW4x2z0A49fABSeihyaxQe5a9XP9etpNZjrzCCmJU1y323WxXQw==&downloadAs=ares-galaxy-32-bits.exe&fallback_url=http://sourceforge.net/projects/aresgalaxy/files/aresgalaxy/AresRegular231_072615/.../download?nowrap

http://cdn.baixakicityfiles.com/c?x=H/c2hGfq4aqt4eNrcCh0bGnQ9RAFgC8gy9 WUOPJRKw=&c=ekIPaOFq3bB76HiZsNlXFqcY9FAdFJ2XI F/gHqTXWhfXCENsXg7tmpAiC41H3SNB7b2SPwpVZNftPnZUHBAgWzk2gePC s/ft7NFNhbguautgdh3jC8K6Y6aoOD17xk4MbFOKF 3w0yO8DDZs0adw==&downloadAs=ares-galaxy-32-bits.exe&fallback_url=https://sourceforge.net/projects/aresgalaxy/files/aresgalaxy/AresRegular232_082715/.../download?nowrap

http://cdn.baixakicityfiles.com/c?x=wzer5wbn3DRS5zVhivzLy ohrdvdB/tqDAbMoDQooWQ=&c=a Hzpc9oXtFpjP9rYfP8uxG47cS16kTTAeptTyHXsyJJQiwnqx3SFN4IlrLrMQc6Mph9u9nsMxAH3aoA2mpjwcUbL/HqEsJIrk5jqpu6Fbcx YcmKoiZ6lf6m Kg3Q89XUdzLZFHUQtjXKH9z6fZjg==&downloadAs=ares-galaxy-32-bits.exe&fallback_url=http://sourceforge.net/projects/aresgalaxy/files/aresgalaxy/AresRegular231_072615/.../download?nowrap

Latest 30 of 56 download URLs

Remove ares-galaxy-32-bits.exe - Powered by Reason Core Security