home

firefox setup.exe

Internet

Silver Setup (Fried Cookie Ltd.)

The Fried Cookie installer utilizes the InstallCore download manager which may bundle additional offers for various ad-supported toolbars, extensions and utilities. The application firefox setup.exe, “Internet Setup ” by Silver Setup (Fried Cookie) has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions. The installer is marketed through download protals and search ads as the free Mozilla Firefox web browser but will also install additional software offers which include adware, PUPs and browser toolbars.
Publisher:
Silver Setup (Fried Cookie Ltd.)  (signed and verified)

Product:
Internet

Description:
Internet Setup

Version:
1.2.3.8

MD5:
5da77186e437b15a8492539d1e2bd714

SHA-1:
39024cb0c17f1467dbfa28b94e0faebd895aa3f4

SHA-256:
3a3fb3e824f32563072102d5561cb1d9f87c1c3f519040469a5f9356af28f6a0

Scanner detections:
1 / 68

Status:
Adware

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Description:
This is an installer which may bundle legitimate applications with offers for additional 3rd-party applications that may be unwanted by the user. While the installer contains an 'opt-out' feature this is not set be defult and is usually overlooked.

Analysis date:
11/2/2024 4:20:49 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCore.Installer.Installer (M)
16.2.4.13

File size:
963.4 KB (986,472 bytes)

Product version:
3.3

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\firefox setup.exe

Digital Signature
Signed by:
Silver Setup (Fried Cookie Ltd.)

Authority:
GlobalSign nv-sa

Valid from:
12/16/2015 6:43:58 PM

Valid to:
7/24/2016 8:03:54 PM

Subject:
CN=Silver Setup (Fried Cookie Ltd.), O=Silver Setup (Fried Cookie Ltd.), L=Tel Aviv, C=IL

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
112140334915ED026A82D6160FD4F0BAD4D4

File PE Metadata
Compilation timestamp:
6/20/1992 3:52:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:tevQdNB1+F3tA5IWFJVxYRDRGkvUM0R/JZNs3:tRPB1+dtAJYRDRrvBC/JZw

Entry address:
0xA5F8

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, CE, 8A, FF, FF, E8, D5, 9C, FF, FF, E8, 64, 9F, FF, FF, E8, 07, A0, FF, FF, E8, A6, BF, FF, FF, E8, 11, E9, FF, FF, E8, 78, EA, FF, FF, 33, C0, 55, 68, C9, AC, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 92, AC, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 26, F5, FF, FF, E8, 11, F1, FF, FF, 80, 3D, 34, B2, 40, 00, 00, 74, 0C, E8, 23, F6, FF, FF, 33, C0, E8, C4, 97, FF, FF, 8D, 55, F0, 33, C0, E8, B6, C5, FF, FF, 8B, 55...
 
[+]

Entropy:
7.9302

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
39.5 KB (40,448 bytes)

The file firefox setup.exe has been seen being distributed by the following 30 URLs.

http://www.sharecleanbest.com/c?x=TEXB5zt5I4p3 l1qAXQtHz9Sp5H56ISV/xeql2N O7s=&c=4sMe26xEwDKApaKkheInBWVH16o7lLOgqWv9qQlFnqIfvobM3NQQDF90FjAqrqNIAv0/QE1nRvitUISy7apboL4SMkD3nhLMEHmkAa7Iw ofEEc/.../UTL&downloadAs=Firefox Setup.exe

http://www.repositoryhostinggrab.com/c?x=ptdvznzxxIE7j6QWr0HnOma7wBDMtmYJ8IQk8CPitPw=&c=JhEbqjecAICastDpoW1ABCSKZmkFxlkX r3NITC3LDyeUSzZ5WWMUCSEpX7aeiHv1IWKl3 3x3yTpzp4ExRPJ8qDwONeR4upNtieE82g3BQDPeboEsauLEAFDpBldQlf&downloadAs=Firefox Setup.exe

http://www.applicationbytecenter.com/c?x=n OazK3aZUvbxFR4zrF8LkzDM7n1 DWyxrvaYgcBW1w=&c=5r TlqypI58Zcj1ABPTFnhMnKlL6B mhPOj1hKZGMosCR5N1y89ZYY5o4fBcwps7KsiobEp4QODPiU5ECixIQqKfOBDHuzk6dDL zXfaQTn8 8Wu8AREVMt/.../&downloadAs=Firefox Setup.exe

http://www.repositoryheartbundle.com/c?x=/.../RmKYKw5MajIDjrNY06V9bOcPIW1jiWhfIxjYbxOKLTfwKccYjYVlEK 6Ex1DvpmZptPFb76F F1wWV hyj2Bi4o36gDG4NnbJVk 8Kcg2VZBhEbiDZU&downloadAs=Firefox Setup.exe

http://www.sharecleanbest.com/c?x=OUeeLAAJd5Qjkmgj4umv EGI9oBWkjlAoLsR3Nd2/RI=&c=n95mGKG0k0ssNSFwF1LlKaiWwGrGhLbh9Qc/.../BIMmGyEc8N3Vqv0UnIdlFsqaDYOubGo7I7uSNlW69BbXD2K0I3&downloadAs=Firefox Setup.exe

http://www.hostheadflash.com/c?x=mZG3/Gcr4c/Ed9otKHQk0Ifyshcd9pQVWqJS2a0l1NQ=&c=FPdBKUkG AeQcz1/.../BBWfD6SmyzplLr&downloadAs=Firefox Setup.exe

http://www.repositoryheartbundle.com/c?x=jlTwoIN/N2rKtpfid9xlC/.../PdFooH8vxJ69mGPME82yE0lE4THDj&downloadAs=Firefox Setup.exe

http://www.hostheadflash.com/.../KRWyjjQzg6 z7Baco5zEY2EF9x1dwTQbk71vB0=&c=ZwHVK90k Tgwc6YrobrF6TJRHfaqSyRDgJj1y6fLg9A9xJER998Sg7Qh09IZAF5zAaWQwTUstk fi3H24dYSVV1 0MsVYNGcLSEgp7SQsnn8ZKbUnDazeQCK9Nn1Fj3r&downloadAs=Firefox Setup.exe

http://www.hostheadflash.com/c?x=0offOTzAuoPok7gq0fOyZBMHdRaB3PUouft3til3Xds=&c=uhxV/Vu0MZasNBSUwTatvKBf/q90SH49XtfqqQnEzjLLST33AosJx72YXAwZ687J/.../ QflMG7EJnD0nqQc33pPDEPsiW1zQYcohVX&downloadAs=Firefox Setup.exe

http://www.sharecleanbest.com/c?x=D44sXpfMC9oKuehRJfiv/GRjNwpoc/j4PmXfreC30Fs=&c=CqiP52wGVDiqDFJI4F4hx0aaEl6RzwzkDhULl2FdfvB6rMhIA3Irrk7eoQcD9HgVy/.../MSG6WWWD9JTw61Z0i1WH&downloadAs=Firefox Setup.exe

http://www.hostheadflash.com/c?x=JqLXTHhhVQiLRq8dxWOfa6VH/nXUUbnda17KZTpYVMM=&c=09yw088T5CDoczKoj4HoTwMn53Db2bBuJzrS5/Sn6MYRMUN/.../kUVhk1hRy&downloadAs=Firefox Setup.exe

http://www.hostheadflash.com/c?x=rZQ9pArpUX94xtjpQzhVZmqzGsB2AGxKf2Ye gAqs14=&c=1FAh2aP0NZM5jXHsvhmRdKF9WHEW0K1yrxfJ9Zw9sd5G9/jvLQQ30lCzlIe/.../ 7omL&downloadAs=Firefox Setup.exe

http://www.repositoryhostinggrab.com/c?x=jXEb0ctQJYurYwaGUPy/JKtZQTfPFuesft83acezKc4=&c=konV6ITo yR1nrjT/qIcr98N271DuPcEnUyLZQ1X4poh0HRsusda3omw7VTTb0s8Uoo/sxbK8UXxXdHC3Tr 3p01hc5rJPyFMJ3v1 NkjNaex/kAU//5E3UK2dcyQPkp&downloadAs=Firefox Setup.exe

http://www.stockfactorytower.com/c?x=UCp9l5N3lQpJRRyn6sxgzTnZrlg4zatHYdxxS0K2YHo=&c=VbbqstcsjPta0oJ0oJzgjuQmPBb8NnU NSkKW5kVnfTPqfykBdUoCHhJWsSV Cd2EAh18gq2Au52xlZuboBh5pmGJZpB loFfl41nyWlTOkPIqNtATufWXyKeLmqEi92&downloadAs=Firefox Setup.exe

http://www.repositorycurrentflash.com/.../3C0tak3vNAG3ESgQ=&c=sStCr3PGv55ansYfuyEtv0AG6gG9IZpn4mAdCKbBkfVc9wPgUMLI26N1Fke5UsQJBE5GlzNH07HRCCVrxiSpNa2 XiMdAltRLfKh73uCoMHffiGqJQJegKaEQaPbd5K3&downloadAs=Firefox Setup.exe

http://www.repositorycurrentflash.com/c?x=YGIMN2jve5RvSifvNC0O1UIZLYF1HM52tjjZg/oZ nA=&c=n1P4RzFltwWrHfPjIqhA4tqvEKwHEH/.../d9mUj74ECkQ qyzxX7p 1wmZ2go3Vg cKofZW9rSg4QYAgroOUJZboLYvEn1YesOkoyA&downloadAs=Firefox Setup.exe

http://www.repositorycurrentflash.com/.../O63hBgsU8lkkXm8lXHaBrP sO8G2ZHPDV5sD3buW1v0QQuuI3wnnwZW3Z9KTlVrLcJn7vYbTGjygBo5EX1LdHJfU5LdEGaKl76WVG&downloadAs=Firefox Setup.exe

http://www.vaultsapptown.com/c?x=iKKjjLx0Xh 2sRyN4aaCbN/XApwVXPghNpU90ro14nk=&c=NpuoEJ9MYTxVYxijIvLsJ ZZsOB9k/bO2xZKjPq76aDIRSZICGYLm37x0k3iCTZeZ/.../seRIARCwVKa7NQGVQV&downloadAs=Firefox Setup.exe

http://www.vaultsapptown.com/c?x=BwvhQVEEXzngo6iDNjKc3eMF47OqCEt17r2w54CAztA=&c=j6if54yk8EiH6arUDXcSdDxUJZbnq0JIZYN2Ly2fPpE17MdaXNnbDIsvaGqQh/.../uTsiZl5c1T5hX16umnvv0 KmvPM&downloadAs=Firefox Setup.exe

http://www.newsignsuniverse.com/c?x=Ke /c7ms9yJJwWjESJgeqzxHbttHKXK KqpO76WS Bc=&c=bbgomPyyzP6kSyNYpj6AOM9 qOuA iqAfCjlJxzSlVAY LKaJK3YuqiVSLogM6moQJsfPLtiUsYdRT1pK 0BH/.../JeWlH0z6yha&downloadAs=Firefox Setup.exe

http://www.vaultsapptown.com/c?x=O3bQZCFeZUxQmfZhvPluMWINnVcII0hn52sRou2 cF4=&c=0t8s4AXp1p4R1YdZxTft6cOwapTa2VfzNe2PTvse3Dqh45G2OVnaSFE2KVaRdzaWBDg8dFUIlBVXboeLZsu45 jlUdmHrmACnzGlCl71T9DDFFZIVEg94MzBUz6CYIxo&downloadAs=Firefox Setup.exe

http://www.downloadbundledownload.com/c?x=W7E W6rlroikdRoV6g/VIBWs8MLC9AwcQGRDcAQMlYw=&c=iBEx q/FUARyz7ST6YPVH8twVb7CIPreHAAeGOQW0HQkSJ7gOAQfggBXB3VyEIY82LTAAXsW/.../Laypyx0EROQ2U yu2siVxdUja Rj1QEC2uYWctLL&downloadAs=Firefox Setup.exe

http://www.sharecleanbest.com/c?x= LPcDJqafxQcEnCufB6de hI73kGMc79ndA9sa2ejzs=&c=kYP7/ oUHY670wQKjqwjfB8tf4UHT99frWbHFiH1YbA7HjEBhpdQXJAHQ6rDnbTdVhcqVqm5FrV7F/.../wS8KicTXkdAg8i&downloadAs=Firefox Setup.exe

http://www.repositorycurrentflash.com/c?x=1C4CfFyXSCPwjhiG0KDFuBKJ5UmY/.../7eUORMIKa7wy0Tq v3543yxvR&downloadAs=Firefox Setup.exe

http://www.repositorycurrentflash.com/c?x=dWdpebLFIqkj4p 3ehNtdQVy8bbenSB5HwB0spUQCj4=&c=yba kNj8VuBOz/BOngQwynPmYX57FWMbP1cxRPdlUkuInv5ZZpHpJ/.../wyrmtd5JHLoOZixxaASrlWtbv3MD9fomCAHBnSLWcoxzMuj6yZQNAKWdWVsUaK3h1h&downloadAs=Firefox Setup.exe

http://www.repositorycurrentflash.com/c?x=KGx663mVrEoH9wwK8LRd43xuafHbwtIvaqpEUsRPBK8=&c=Da58qX4iXmF8NdmPx9Y5WDwKNfF2Tw/.../tjaqghmWmvsQM9eQ0x5ImrFDZdRvg1m59 QhanGm87gfG23cYbynjthqH87tO7u1ZOzuPp&downloadAs=Firefox Setup.exe

http://www.sharecleanbest.com/c?x=I2tx oVgqc/1kRk/LOPtCen1xEmXXuC1OXz6SHbsLbQ=&c=EL1BKg1fN6xx 4VRLUEmX1ppBQrik7PFXTFTtxTwEgk4uFx2N52B/s/.../kCxTHKXEE2nRjZPNtOFS1k05mgUWiXhYR1w87chEf0ZCPm68ELKXFx9EmGsd&downloadAs=Firefox Setup.exe

http://www.sharecleanbest.com/c?x=4h3YQz5Axck Vm4nHozJFx/cEEsQs taplTFqx5sg Q=&c=kc1vVPGtwjcgE09bVjVPgcjz3/.../h1xDemiUkJxe6k5cQ5tDYoXNkUVKmIzznQGasJlVWqVdy6R0HAs16NUuNUEyWIejzqTBs3GssXl3SsZ8erVkaHp&downloadAs=Firefox Setup.exe

http://www.sharecleanbest.com/.../7uA5bPROZFW9kL0=&c=GY2WWIXGKurA53 VmKga0zWMlAap4z7IcZoSodsApXmmlz5s1a rEIdgjcbPcCiQ8QbaGBgWDzFkSeTziCkyozBQj6Ckh3avgidPUZlqA7oPubY6Q6RI7UlbiGOKjCd3&downloadAs=Firefox Setup.exe

http://www.sharecleanbest.com/c?x=K9gRy3i2CkduWK2ClbEv7YcQI6mo86PQ21VDiDi5Ovw=&c=qnrrrDzWSjf7HFHM/ate0plihddJqZe4x/.../bAq4nNka K7 DSId8I6v2JkU2ilozofcVXiwGclq9bTfHxX&downloadAs=Firefox Setup.exe

Latest 30 of 30 download URLs

Remove firefox setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.