home

firefox setup.exe

Application Installer

Criteria Quality (Fried Cookie Ltd.)

The Fried Cookie installer utilizes the InstallCore download manager which may bundle additional offers for various ad-supported toolbars, extensions and utilities. The application firefox setup.exe, “Application Installer Setup ” by Criteria Quality (Fried Cookie) has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions. The installer is marketed through download protals and search ads as the free Mozilla Firefox web browser but will also install additional software offers which include adware, PUPs and browser toolbars.
Publisher:
Installer   (signed by Criteria Quality (Fried Cookie Ltd.))

Product:
Application Installer

Description:
Application Installer Setup

MD5:
ee68f2f3bf13a1791dfe3620710279b9

SHA-1:
9255e133773872d46e287a3fb3eec0517df5b86b

SHA-256:
35ef4619eab7ddb3ee72db3da33cb091cae546ae1773de6b31fcade164dc9296

Scanner detections:
1 / 68

Status:
Adware

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Description:
This is an installer which may bundle legitimate applications with offers for additional 3rd-party applications that may be unwanted by the user. While the installer contains an 'opt-out' feature this is not set be defult and is usually overlooked.

Analysis date:
11/29/2024 3:38:55 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCore.Installer.Installer (M)
16.1.24.22

File size:
969.4 KB (992,656 bytes)

Product version:
1.2.7

Copyright:
Internet

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\firefox setup.exe

Digital Signature
Signed by:
Criteria Quality (Fried Cookie Ltd.)

Authority:
GlobalSign nv-sa

Valid from:
12/16/2015 12:21:34 PM

Valid to:
6/29/2016 11:39:55 AM

Subject:
CN=Criteria Quality (Fried Cookie Ltd.), O=Criteria Quality (Fried Cookie Ltd.), L=Tel Aviv, C=IL

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
11216ABCF20419312093F809F0E003C850D7

File PE Metadata
Compilation timestamp:
6/19/1992 7:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:3N7LKXirSl5g5MYuHz9GNh6zCaWM4UEIBtot+k2G:3R2XirSXXYuT9GrMDE6Rk2G

Entry address:
0xA5F8

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, CE, 8A, FF, FF, E8, D5, 9C, FF, FF, E8, 64, 9F, FF, FF, E8, 07, A0, FF, FF, E8, A6, BF, FF, FF, E8, 11, E9, FF, FF, E8, 78, EA, FF, FF, 33, C0, 55, 68, C9, AC, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 92, AC, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 26, F5, FF, FF, E8, 11, F1, FF, FF, 80, 3D, 34, B2, 40, 00, 00, 74, 0C, E8, 23, F6, FF, FF, 33, C0, E8, C4, 97, FF, FF, 8D, 55, F0, 33, C0, E8, B6, C5, FF, FF, 8B, 55...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
39.5 KB (40,448 bytes)

The file firefox setup.exe has been seen being distributed by the following 34 URLs.

http://www.giftbestsafe.com/c?x=BQpfpWyaDugQpE3AEdwbpziHQfT3nuoPLZWQXl9ow/I=&c=CeVbyXKX2g/RiDvhy4clJpZBC098d UtaDeCrDrDLAxhKNlZvGNSKdIjMsa83/.../kmUaRyQhBuEo4Vj641PFAtJCC 4EAjOYpEz5H4UY8&downloadAs=Firefox Setup.exe

http://www.vaultranchbyte.com/c?x=UQO 95O50gEjwHxGOytwreB1b4Tpifhho7so4y5xJWY=&c=/.../th7mSI7pR&downloadAs=Firefox Setup.exe

http://www.filestomes.com/c?x=vdSaK7XaBmjqiRItloNGHKJbAmvEyW5vpq845f5xUDY=&c=n3o1MDOydHwMRul3rrWXhitEn73KziE4zYSS3P5eI6bRJQpy9Ve0a7KrZvg4kKClu9rGaASnzlXC7ZF4DIdhYBLSRqtD7YjCs22EsH4eXTmsBpvGP2ipryxiYv8qWzUR&downloadAs=Firefox Setup.exe

http://www.tourworldmeta.com/c?x=ikdlis8AtxnLKbxNjyPvaBd2g91TiTkcrylPIV1dtkQ=&c=MlCi8yCC9s96Ym9pONbSx bZvEFbDpAlI1LCuZkSo4r17aloK76qnBh3rmIsqCR7mTPcjxzhWCj3TN4qPyBEdoD2ATMHXq1CUDWcZiw8S5Ty10ru RoE4IpiZ0ZocZWD&downloadAs=Firefox Setup.exe

http://www.vaultranchbyte.com/c?x=XDNLN7rgxauJRAzC 4I6onFRMnrAJoD TX8Wr5a1oc=&c=a6nu16aLoaHqAktnqkBblwEAU4ZdUL4Z0dmYBFB3LvVzrio5bPyBDqrGw1p7jX0wOkKcUYXJ84NcZ/.../TFkwTn6QCsZvC2VbJyJsfJpAtxeJ83us&downloadAs=Firefox Setup.exe

http://www.vaultranchbyte.com/c?x=HAVCDIy2B4pgi37ufTO3aB/dZzC6/kehn37eZO1yc7o=&c=5nvy 68GnhFfWa6EWvnXAhCKxcmq2biZiw2/ag/.../DD5hSikH5 mN2X Hy80J6kWL4OBoBr0DCy0yy9Mkvy&downloadAs=Firefox Setup.exe

http://www.tourworldmeta.com/.../rLNi0w4X4XOciXdAmJn FrfFI3HdppTIznCNZd7Uauqd4AmReS5xvnpGTwc2OWtKvQ70ULbDaSVtVQj6poK5rCod3xWCgVXzl1gnsRBvLriBmtdgIly8 oIVBqHdJR&downloadAs=Firefox Setup.exe

http://www.filestomes.com/c?x=64/.../o1JttDjaWZnfqs9VS4M9gFIuclYLZHndxa4o91CSNTInQCqN1YfNWJfzMHp3NAjl9LHW8ej6Rfjzt43nwsc2Bv77F1QxbSNq6rvrwV30m7L iS RMnml9of&downloadAs=Firefox Setup.exe

http://www.filestomes.com/.../mu&downloadAs=Firefox Setup.exe

http://www.vaultranchbyte.com/c?x=zeOfVah9SVCi2XYvfnB3/uAZ/97kT 5aS5YFLVFjukM=&c=8CLnOjFTvRVQIcuadsbxThN6Jj/Tx6xdY1W2l94GD7ybckwKHAIW1/.../4LHOa5q7uf1f2KrbI0bQunbru6AoiiKYL7lrEl0hkEjQmX9Y bsWhzrKl82B2YsCIuf&downloadAs=Firefox Setup.exe

http://www.nowappclear.com/c?x=cCasES4oB0mZ44frW6vej8cr vS7U9pOqNm8MhQw4os=&c=Nv1ep4vbrEgWgO7U8KOHyI0HSjJAAKEdnE/Ei6ndMU4WF6KWz2ECNgoON7cfJw/.../vwxL5pntTphRg24Wgc5t6n3Vwb6OSfuEOEUgvF&downloadAs=Firefox Setup.exe

http://www.giftbestsafe.com/c?x=/InU0ri6cE21QNcSzBq3dSwYVWwsDge238jhnGOWJZA=&c=EH UhQaQcqO3uUcpgi4AM9blC6KUfnNYRZt69Fh47ysU4G3CbON6RxrBqLzaIMqYweWZP2RUPFdU1lNvGZRkb0YfPOG/DDQ7CcSJ/.../WMUX3w6gk8CB6lcftG1ND2kOK&downloadAs=Firefox Setup.exe

http://www.tourworldmeta.com/c?x=7Ni2gz2VJ a4lAJKbONyzfvHKVTNQIcZmwMMgZ0 sNc=&c=tTbozoiua5JabwVf5YLIpawvXfcgdbpQ8NXwlfK3C4MH3FXtfXxhWygGj8QtMujWNMHSlfgE7ySmnu17iWdF010Lf1kBty2VisEsMhoflYv6YLSAAqXarRPsxhlRQY24&downloadAs=Firefox Setup.exe

http://www.filestomes.com/c?x=1NNdsKBQQlxvR8qU3qt FEJGr2zGayzXpiUOZw7CU/M=&c=9 qIcaSWzvknC9SpWRgdRV2hyiu5ADIpoSVTF7//.../araODrVN3JKUhLQJqGgbuehsIZnzhlHcRIB6LKReDEfVh1 vg2tNJmNil8dkPOTu632Y18dN&downloadAs=Firefox Setup.exe

http://www.tourworldmeta.com/.../1Hfq8fsd2CYqM&downloadAs=Firefox Setup.exe

http://www.filestomes.com/.../ TQMBM2NE1f1e1aYwjDirgB33hCwLc=&c=h0CXsruAxJWVyfmYQgTS2c3bnzz8a3jilOXR0TIYTCLmHF7Fcso3eRp87SsBSzrE2aJjjWjZnqFRn3J3JIuA SGnuSWhDUoabu z0HzMjq5Zdr1AMIXxIs6jSYNmVP6T&downloadAs=Firefox Setup.exe

http://www.filestomes.com/c?x=vUjrZpaTHgqiJo58thqE3XTZNE8n/TEdXTmT7ZvnEAs=&c=eNH0z2irTliXSX1OuHA9tPJ91GZPki2vm/zsYK2Fph5RK64DTna/5ESS0ImSbF7aRnMAf54i4ATOkBrB1PnMDbAO8ss4dwRRsf/.../C8Kf1W7c5ElJ9p0&downloadAs=Firefox Setup.exe

http://www.filestomes.com/.../JoL3yw3jAu2sTlY=&c=DXZhU6hJxWsgcIYSPt6JEVITujNqzRV OzFYbHZcab5IMbzvH3HbERhhC5UxlPbBtEaTXvPD ChUXhbFiHuwOGxJ8y5zVOvwNDCwoTNDaMSd1asBM8jBJnjghk28j3EF&downloadAs=Firefox Setup.exe

http://www.filestomes.com/c?x=EjAS420xM7Bnns26NeMNZe2AmvE 1fo1XIY3eoymKl8=&c=p4ahugx6upxFZ45uoQawvigx3epaFJpxtC1QJ/n7Q LxPfNo4awe9Y 7fTFeUtQHVR9YS/3TR1/.../y4216NNlh3Jhhd p BwjYPFnAox&downloadAs=Firefox Setup.exe

http://www.vaultranchbyte.com/.../MrUOa1QooOnCMxeYtfTuT8JfLc=&c=1tCMUVFJjHycoT9WPTO3OJjeDyM46ganfUh9TnhI7aQuAsaYNIUtCdGKhQ1DSxAM9nAeQ50a2KBY82H6wpMKOw1HqM6n6x0ZkuQuGRWDK3CntVXiUg4j09pjaDwKd 81&downloadAs=Firefox Setup.exe

http://www.tourworldmeta.com/c?x=jAW0OBaQP3 UIkjA9fF0Z6BRzPAt5nlyM6Mm38gH5uA=&c=30PscfvpaDe4fFzFStkMXoLxhaLgzzVaJeWG 61bW1XRpbjuYwllw6mzHXOeBvh4FP2zOHqBlo/.../3rUvnbSrlx2a9gkQOW7Vo98bZcxYesG&downloadAs=Firefox Setup.exe

http://www.nowappclear.com/c?x=iUjmJhMTonh7wtyLowm5tq9KFiA344yyQSyDhr5CJIg=&c=2yo1r33QWo0krknwZ7XeQUF9sSPRsLiE4fTStNR8lHWfno6d3GOqEZwlEhLtlmc1hLbkZCT5vjevQ62IYXhaQDL0sJNXEgRbyjz4NTD6ti2WWaQqVRg YO417zzq1APg&downloadAs=Firefox Setup.exe

http://www.filestomes.com/c?x=7Y6ASQBCyC DVjFG9uY0QrYzx/I7uRLNt7g/nDQyCqc=&c=2MFWNQnT7QwdeLOzXrkl5tJk3IVl TmI6LsT5v3V9cgnzqtFTP9IHsUdzvteisUmTya9nRYBvVznf/.../IMcR1zBhcgGX0XS&downloadAs=Firefox Setup.exe

http://www.vaultranchbyte.com/.../aBs 8iS1Nb838NjzIZsn9sHccGTLhrJywBuaiGkqs9J hfwR4grme4MpiF9UpeWknnQc5FqF NWOmU67&downloadAs=Firefox Setup.exe

http://www.tourworldmeta.com/.../9jALkcLn705ESlOPJ2AP89uB 0YReU0SDvhXZU=&c=MEtY7yIq3OYhhAnQHMY6hSLGM9pHD2fxvoSLW2AEwz cRH2GVSscmtHtZQSSdFlANDZ7NDwaV8BMC6wajobJdOypdo7Of81tNH x6VbkNlvFz7X8pVcS NXiJqYUi3oa&downloadAs=Firefox Setup.exe

http://www.tourworldmeta.com/c?x=da4Q9lbDQdGzwdyhSTOXTCIq1btCZe99ykgW C2nBaU=&c=k4nz7dI2yi aHGD2Xm/.../ESZ7fa7ROjbF4XzIglgi1v 3hZx0Xtkrg73EIbVrBRXxtm45DjNAzWmScklXdjBbycKJjeTw2NdDwgOoRtbo6LzvTyzXLJ6zEq C8&downloadAs=Firefox Setup.exe

http://www.vaultranchbyte.com/c?x=HFEtMVlVBNLJQonWWgBIFUcEisW12/.../bJfoo1SsuUa5uchjJddM97nwrF7inZfXg8NVt8WKvoLZQu5UHu0CSCPd9OVpiapCkN7UggJ3b8AD4wDK5i3J&downloadAs=Firefox Setup.exe

http://www.filestomes.com/c?x= ELu5bXqIMQSLuKl7poEP0ge4ssMt5Gh7l2t42R9SkA=&c=XaU3kKAC XFUsUWf2SYkxuITMyOWolJdie4DcaD0ysKqqMmnib136moAa4ngimmgV2RRRZTtZ9Wm0RTujPI9XyioFfkxEGE3B6kpicAnzOGRYlGz6T48pzyBIOzhcEnh&downloadAs=Firefox Setup.exe

http://www.tourworldmeta.com/c?x=7QQZK9OX2efkDv MltfeHNvpRxp9CjVN6kT86E6sDck=&c=3VsUPf8dG0sHKX9/E2TtEmFqsCrnOGyEX7V1vcW/.../A4SkanIDIXKYSgOyNih9kLNebOa&downloadAs=Firefox Setup.exe

http://www.nowappclear.com/c?x=hZizxdAXeEHci6cTV2fnPwh1/bvvIKwBQU93EjDZJdc=&c=D zxKkO 6S 7o0lN8qN6ca7/l91nR5C8SDByjRVBaPvl51EKqKrSo1KolE1S8L/.../C2cFVGdf8t6gHUIkgiket2PGwrQpYPk cOpWKi Mz0EYDotXubVkMH&downloadAs=Firefox Setup.exe

Latest 30 of 34 download URLs

Remove firefox setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.