home

firefox installer.exe

Internet

Silver Setup (Fried Cookie Ltd.)

The Fried Cookie installer utilizes the InstallCore download manager which may bundle additional offers for various ad-supported toolbars, extensions and utilities. The application firefox installer.exe, “Internet Setup ” by Silver Setup (Fried Cookie) has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions. The installer is marketed through download protals and search ads as the free Mozilla Firefox web browser but will also install additional software offers which include adware, PUPs and browser toolbars.
Publisher:
Silver Setup (Fried Cookie Ltd.)  (signed and verified)

Product:
Internet

Description:
Internet Setup

Version:
1.2.3.8

MD5:
f8d8a43c31f57f1ce00444947fbd9609

SHA-1:
ec7bf3c7a370b05054a8d58d8840f1dd5ad2fbcf

SHA-256:
6a3adc7778b8aa829abc0c82c0881bc38deed23b5b928f88828c5d5cc006459a

Scanner detections:
1 / 68

Status:
Adware

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Description:
This is an installer which may bundle legitimate applications with offers for additional 3rd-party applications that may be unwanted by the user. While the installer contains an 'opt-out' feature this is not set be defult and is usually overlooked.

Analysis date:
11/28/2024 2:46:48 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCore.Installer.Installer (M)
16.2.9.2

File size:
963.4 KB (986,472 bytes)

Product version:
3.3

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\firefox installer.exe

Digital Signature
Signed by:
Silver Setup (Fried Cookie Ltd.)

Authority:
GlobalSign nv-sa

Valid from:
12/16/2015 2:13:58 PM

Valid to:
7/24/2016 4:33:54 PM

Subject:
CN=Silver Setup (Fried Cookie Ltd.), O=Silver Setup (Fried Cookie Ltd.), L=Tel Aviv, C=IL

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
112140334915ED026A82D6160FD4F0BAD4D4

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:1evQdNB1+F3tA5IWFJVxYRDRGkvUM0R/JZNs3:1RPB1+dtAJYRDRrvBC/JZw

Entry address:
0xA5F8

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, CE, 8A, FF, FF, E8, D5, 9C, FF, FF, E8, 64, 9F, FF, FF, E8, 07, A0, FF, FF, E8, A6, BF, FF, FF, E8, 11, E9, FF, FF, E8, 78, EA, FF, FF, 33, C0, 55, 68, C9, AC, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 92, AC, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 26, F5, FF, FF, E8, 11, F1, FF, FF, 80, 3D, 34, B2, 40, 00, 00, 74, 0C, E8, 23, F6, FF, FF, 33, C0, E8, C4, 97, FF, FF, 8D, 55, F0, 33, C0, E8, B6, C5, FF, FF, 8B, 55...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
39.5 KB (40,448 bytes)

The file firefox installer.exe has been seen being distributed by the following 22 URLs.

http://www.bundlesbytetown.com/c?x=354sADevQin8vXAhYcevhCAXBkwvKUPLngsBLmkZNow=&c=ZtUrH6YS3FjIeIPtH5Kofllfl3a06bykGwvNMwZ1CVlVEZdkHtVkHURSp524EpCigwty yBfIdTyoN/NvXzN/2YEw0TDzhO3hwQvTkbdLlIQfawurTLqdRO0eSXYopwl&downloadAs=Firefox Installer.exe&fallback_url=http://cdn.darwendlmfilesnow.com

http://www.bundlesbytetown.com/c?x=CwKoej lmzJvjotlxi1JXtrIdu2WWzQ7nWpQY0HxQ38=&c=2tawRFTXIRHkndFoTxV5lpQAt/gKY0XJHI1YXUS/fJhdff/AF613u46yKpjzylRx1xg9ihWOzFA AzB0YL7D6D4wUlXMK8/Q696I4ZjZa DmOhkQvedUrW78xfX3CCzt&downloadAs=Firefox Installer.exe&fallback_url=http://cdn.darwendlmfilesnow.com

http://www.applicationschuckledownload.com/c?x= AHuIfNZXs20HrL4wsTSu8J25QmWjfu3x5nZmns9Sew=&c=pGShyph9xPHYR spSYUc09YhXr1l0/dXQKcT0nKYaeLAGhPRtuV9bDDrCow83Pl9Odi7kFErPpmZptiZSbKs BVm1icr3W/eeODU32/WpK4pI1 esfjHDKAOuO92tCI4&downloadAs=Firefox Installer.exe&fallback_url=http://cdn.darwendlmfilesnow.com

http://www.appsgiftgrab.com/c?x=LX9CDd68/vaU1m7A5LMHhdBf6WtvR7EHekG5w CgC5Q=&c=fbeDSqhrnDhBirGg5kJ4zFu6sIK/WNznmgwcmZG 0jyQCM3bHIP0/ ryYDY5aVvFOxZF2/isyW NTuxw QZlyLdHFx0WLas7kkQdXvdmJIoJMFWeZmXmsHrMAJ3FNZip&downloadAs=Firefox Installer.exe&fallback_url=http://cdn.darwendlmfilesnow.com

http://www.applicationschuckledownload.com/c?x=YEsGBPoPpAEONtWmIgc4ZEsp7efL4qCPPz9NEvPkdeg=&c=z5fgkZVy0iK3r9Q6eV066O2limA1uA IcktZ9adrcUWL/T gw5kvHXin6sdDAbxvc/GBpkKbcq1unV3aYdLd7FULebxNmXQ8aofcUzSAKtXo4xlKfNIy69yoDpXMkbzo&downloadAs=Firefox Installer.exe&fallback_url=http://cdn.darwendlmfilesnow.com

http://www.signsquickbits.com/c?x=yC79wtai7s3nhh8c/6/NVe34zAghnp7UW1Qm7P8pjPI=&c=k3F 5bhdu0HknQdRGcdMRuoeCgS4YKXLriYFB8/U0M2wWCMV0atkTQLqounb1MLr0Ubnx3Op8AdzZ2OKw1g6eGpukQrDQpSuAp7JVm40E5tjXf1XuLf8D8eV0nSDudAC&downloadAs=Firefox Installer.exe&fallback_url=http://cdn.darwendlmfilesnow.com

http://www.bundlesbytetown.com/c?x=t/9/vsVQI/2 1uX7Z 09GhysImYMMETYqkKUSAt7gHg=&c=T EwvUDyyOiYXkMTMizFdIyEhqWPnyfGaf7x8kQocn8RHPcGQAXssbX4qBWu40NJVanO1bg4QT YemHcpsy3hHQtyPjUVS8B/ABGp8wvBYNGWwt3nESLlAibIAtYMslD&downloadAs=Firefox Installer.exe&fallback_url=http://cdn.darwendlmfilesnow.com

http://www.appsgiftgrab.com/c?x=X5BIGybJxNEKrtYrHqv55 ABHYOTFqMVbmFPU6QXhrM=&c=f0UErjKdQhGRsV7ikBIGEozE/FaJSb2YEUJfO62 QAOX6TwYxfAyG1ieJrT6acYmdNn XPul UAjWpetv6eNWznq7rEmbKFDu0Yy5zFmkOso6XHeEnPUTZGpNuNojE80&downloadAs=Firefox Installer.exe&fallback_url=http://cdn.darwendlmfilesnow.com

http://www.signsquickbits.com/c?x=yhDnsuTLGjQO/iEAzgyn01axmg8LvfvlXVO3z TgJsQ=&c=ZFGT6xMH3vXZ8vBxRjBi1YxXSkbs9lQwbjVzyL3bMEQbXk0O6pifJ8Hf BD1chFQWvYfiIZZpXbbxKVNfhft1q7YyXvGhEfvMzlJdQyrsJO41szGAyucZztwREXeerUn&downloadAs=Firefox Installer.exe&fallback_url=http://cdn.darwendlmfilesnow.com

http://www.signsquickbits.com/c?x=KQ XyXR1Yf1vhyyHhP9yZUiWmnOkwNGETq9qPmwSY5g=&c=DU/i1huc2fCNzQ3T6lo2wNvtHPycTPRw7aLkk3JF/ohkmQBuXgZM/wDEm0XxAKF47SZlR/AQc Yr7RL9cKBTa6pe7CwPZDkkhlif21mE7oNgyWILN0ZkEIkRRpBYdO8&downloadAs=Firefox Installer.exe&fallback_url=http://cdn.darwendlmfilesnow.com

http://www.appsgiftgrab.com/c?x=njUf7eDu6cAc5ll9H9o9F6E9f1 orweO2Ub5IhdQX2U=&c=zlRADIjIsOU0YP/6NK7idB2ak6b3NVv1zw/InJzKIZFtiUKqm2yIbFSHzpTzc2BLRIOMKYmxpo7eK8HykBxvQFNDqBRQ7Fe6ACqZHSoImwRFWe5OvR A6YO9tCcOxqsR&downloadAs=Firefox Installer.exe&fallback_url=http://cdn.darwendlmfilesnow.com

http://www.appsgiftgrab.com/c?x=y kTJocNNyIx6ZtOW5EIurfMBXmt/QQ5 eyAbTtVafI=&c=OZMcpQydXUU0ijU/y8Far8dwluFgc5fCFYBMD3PwJFx0yN1Plc7l/N7o wgHcS/E0IItg6H/w2erzOfIibIUVKLURq6D8tcxoMk9lsHV8n4 jsC/EJX8thljfX93hWSM&downloadAs=Firefox Installer.exe&fallback_url=http://cdn.darwendlmfilesnow.com

http://www.bundlesbytetown.com/c?x=wNJiokJr61t7ro1eYAZ99OdfP0W EkyA5O/SK1m9KHs=&c=nCcViuiT983LxMliUTCKGolrDypyxN9iu0aaAtAt9ZIGVrBBUgpnhHyyGf1xk43ipgy5nkP0Epuis2t4QDUbolQFi1uReCH7zNxL3ohWsruoDdDUhINwckBwg574XeQE&downloadAs=Firefox Installer.exe&fallback_url=http://cdn.darwendlmfilesnow.com

http://www.applicationschuckledownload.com/c?x=hrHrhLJONuzPRGPaZVgu9bK 45cGNEcGATRv4utguQ8=&c=IYG2HUSFQbewCnDKUVgJMClVnoS3Gx9nWnkRePbEwhpHMzciAabZ1gMC7uhKqI2WEtuPg8EeDpibgbFWG3sK3XJT/l5IR0jHrOU40bQHxkSkRDmvKbsNuthrdjT6Li82&downloadAs=Firefox Installer.exe&fallback_url=http://cdn.darwendlmfilesnow.com

http://www.applicationschuckledownload.com/c?x=WOw9Be02OSUIuYEEVX3 8a2ywz9snMbjmVzy6aGoUnk=&c=2avhOGkepFGM8K2S/emS7qBvGppSrW3EsZqyO3ewOPIBdJNAEpEM4zTPPc14V5215aXBebiCIiC/k4KbX/9RWb2fE75yQ1/1PvMYu1oyowfssTsjUe3AB1uVi vVVatP&downloadAs=Firefox Installer.exe&fallback_url=http://cdn.darwendlmfilesnow.com

http://www.bundlesbytetown.com/c?x=dEf/QfwHSmkQ4SXgBFgt HoKCdspjxTaAzUDJ6V7pdo=&c=HPzhNkayIpB9E0yXV7XybjfvT96 kqlS8hbIjq8VXQCg3L6GD1q76GMGGqZX43Oy0wlxYhFf w58hE/m4n59svAC2eW4JcNEIB7X9VJRTa5JIuRc4hjb1fGoaFOZAvH7&downloadAs=Firefox Installer.exe&fallback_url=http://cdn.darwendlmfilesnow.com

http://www.applicationschuckledownload.com/c?x=QYv5RiA8RJ/I9r1ciSmDpzVOV6KuuLxC6HFonXycXbk=&c=gOhTKtl6HIMQT0odBtprOqoN1vG9osVVGJ9IfeKLlcU PUCK o2ufh0J w59HimpFoXRipNB0bgw2EJI/q5p2jTJ7fCW1lLFuTyHdWQqxzSwrzKaGSEgaz7eyxe8qTzE&downloadAs=Firefox Installer.exe&fallback_url=http://cdn.darwendlmfilesnow.com

http://www.applicationschuckledownload.com/c?x=Rs3KY9/n2iuObQxFxD0 9eRLTmEsYGACJ/A Ca dwsI=&c=GeKzjpaudDfvpBnNWryQg37JlGLuRXxAOrU/oJDNNs3Gy2te0aIqwFs2qVLMEQ8F2xwBgr0L3iUemLPKUGA1XC4fnw/FwESRcdUfOYrSzuaDK09QDQgce1PZ2eCvIwcI&downloadAs=Firefox Installer.exe&fallback_url=http://cdn.darwendlmfilesnow.com

http://www.downloadbundledownload.com/c?x=5VCzF7HyWA8fGsLt6/RqE 5A1NLnYO/G09D8XhhdB8c=&c=CJX2 mdqJ0r8alWgwAZFQ1iWk0NrNk/Y0aXasMOwysFcblFFL7aaGqNgoO/yn9YDYBXKyhFMjztXJu8Lc2AGrEeH2kTwrPIEn27DJL80Nas0LXc9z8Pg10cNGU3qrFC9&downloadAs=Firefox Installer.exe&fallback_url=http://cdn.darwendlmfilesnow.com

http://www.bundlesbytetown.com/c?x=3X g0L/w3B3LcyJkk23NvN9DQZDCdXIcJoF4eRpM7f8=&c=FSj/7OCm1dHPJSOHNSXhTXNRhUAZk7SFPfhigLqjkt8O/A/ublAnOydOGJs0s4RbwIFTlILs//IQis3t2p1xDHmXVaQTryWl 3eG7XHUVqzzsUVg446xHFQdCpAdHevu&downloadAs=Firefox Installer.exe&fallback_url=http://cdn.darwendlmfilesnow.com

http://www.repositoryheartbundle.com/c?x=8uvukKS4M5H5Do0OyokPUFPieWPsH8GGvEMfGAt4LqM=&c=C2jZ5hEPEHq5vv3JM5n2mjYHUbLTxkfP8 y2A5tuCAGfqvp4rCwKUrwqT8S1tj70oMNkZ7ufEXxoYbxmApVsoV9jYrhMR9tHlkFK7gKYoJNlmM17UQiHYUrt18NXH7g2&downloadAs=Firefox Installer.exe&fallback_url=http://cdn.darwendlmfilesnow.com

http://www.vaultsapptown.com/c?x=uF5ui63K1WNqOObYP8Io2xUXcQ5TaI oUquDt2aWhDo=&c=p7S7WmHjIFbmhKk6 WaLM VPs1Gz8Qq3J fA0K09C5OR8mouF1 t7AYcn2tzV58u4DNMA0N6F1RZxxsb1GMl2zNLtBRh9GNvmXI24ADOA9iq4YBw/ihCWhVdV2MRCnWj&downloadAs=Firefox Installer.exe&fallback_url=http://cdn.darwendlmfilesnow.com

Remove firefox installer.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.