home

firefox setup.exe

Internet

Silver Setup (Fried Cookie Ltd.)

The Fried Cookie installer utilizes the InstallCore download manager which may bundle additional offers for various ad-supported toolbars, extensions and utilities. The application firefox setup.exe, “Internet Setup ” by Silver Setup (Fried Cookie) has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions. The installer is marketed through download protals and search ads as the free Mozilla Firefox web browser but will also install additional software offers which include adware, PUPs and browser toolbars.
Publisher:
Silver Setup (Fried Cookie Ltd.)  (signed and verified)

Product:
Internet

Description:
Internet Setup

Version:
1.2.3.8

MD5:
f3161844e2b22cf9ffb41c53fd49ceed

SHA-1:
a286dda87bc7a93097a2ace4110ff2fa30083b63

SHA-256:
fb10b8aa922ead512337348886ba1587f59d247a6058eac414f3049e5d67af0c

Scanner detections:
1 / 68

Status:
Adware

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Description:
This 'download manager' is also considered bundleware, a utility designed to download software (possibly legitimate or opensource) and bundle it with a number of optional offers including ad-supported utilities, toolbars, shopping comparison tools and browser extensions.

Analysis date:
11/28/2024 2:31:52 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCore.Installer.Installer (M)
16.2.5.22

File size:
963.4 KB (986,472 bytes)

Product version:
3.3

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\firefox setup.exe

Digital Signature
Signed by:
Silver Setup (Fried Cookie Ltd.)

Authority:
GlobalSign nv-sa

Valid from:
12/16/2015 2:13:58 PM

Valid to:
7/24/2016 4:33:54 PM

Subject:
CN=Silver Setup (Fried Cookie Ltd.), O=Silver Setup (Fried Cookie Ltd.), L=Tel Aviv, C=IL

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
112140334915ED026A82D6160FD4F0BAD4D4

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:nevQdNB1+F3tA5IWFJVxYRDRGkvUM0R/JZNs3:nRPB1+dtAJYRDRrvBC/JZw

Entry address:
0xA5F8

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, CE, 8A, FF, FF, E8, D5, 9C, FF, FF, E8, 64, 9F, FF, FF, E8, 07, A0, FF, FF, E8, A6, BF, FF, FF, E8, 11, E9, FF, FF, E8, 78, EA, FF, FF, 33, C0, 55, 68, C9, AC, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 92, AC, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 26, F5, FF, FF, E8, 11, F1, FF, FF, 80, 3D, 34, B2, 40, 00, 00, 74, 0C, E8, 23, F6, FF, FF, 33, C0, E8, C4, 97, FF, FF, 8D, 55, F0, 33, C0, E8, B6, C5, FF, FF, 8B, 55...
 
[+]

Entropy:
7.9302

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
39.5 KB (40,448 bytes)

The file firefox setup.exe has been seen being distributed by the following 26 URLs.

http://www.downloadbundledownload.com/c?x=4lHMFNVVN0boK5k6lv doy7UBCK0V9KqHnXtKvVKWko=&c=YW5IOz4XrfX 0EI2NFNsQBvdZ9UiGlxh9SbWJMNmV03YXx9vAd8sQM/wAb g Qn3bCjBAOcobcJr7194Yxqtnhy0UlfoZ1UXcMTCXHzbgrdF9xnS9jdV9GL4T5anQ1a8&downloadAs=Firefox Setup.exe&fallback_url=http://cdn.darwendlmfilesnow.com

http://www.signsquickbits.com/c?x=b8hJPM1STc2a6xj7JT1DhDKO9WLaMaMBSPjiccSVhnk=&c=XOVPaq8oxQ8kk/2YC7zsIhXfbsivRaci0PpVf2PaD0DZJt7ZQb7vUPf/b7KMOkrsMhqHdp/ufvEuDTFA4gnMn3HdrJdIOb1fQedgnt5zftvTF5OM5rYrEXj/8YtBBAuk&downloadAs=Firefox Setup.exe&fallback_url=http://cdn.darwendlmfilesnow.com

http://www.repositoryheartbundle.com/c?x=aV0f0e5YTXaYyQi0HyZA6dSKaKui67vWAS92sG7iM2M=&c=xO7Fv8ekZbqDPP5huH5vOfZ3MonoVPvNSRLBMinTdVnLxf3cFiWKZWT4TrkrEAEta5ofeQbQ8g56fOKsDpK1QJBcgcpn3iujypkJlmlHHGIjwJoOiwqfpOygpgnabXyo&downloadAs=Firefox Setup.exe&fallback_url=http://cdn.darwendlmfilesnow.com

http://www.newsignsuniverse.com/c?x=tRsNE2oHkxwoUQO83ZG4EUWDFqZpAujdM5jU8Pt/xng=&c=VdYAiNkzQf/WAvGrCYvgRB/RD6aihpck0oIAoMA6zU2cSzZAnNZ8FkGpuheU19AEtEDJjXMV5 gnHeIWbXYaByu6dMD0IotXL3FMg37l1FvDXHGEzkkF2aWIesLRrHsk&downloadAs=Firefox Setup.exe&fallback_url=http://cdn.darwendlmfilesnow.com

http://www.applicationschuckledownload.com/c?x=/rJ4tdvYH9HpywyPOBLoV7qST5jUun0wsqBayoFQG14=&c=VISNRIOYc14X7cXJbZUr7YeL6NSX2Os8UEpwmr2At9W4tRU C as0bktePS3Z/anuCkxRALDAFImSS9jzuzGB NZ0rH838cT8 FVPPQWBlmwLCxdneC7kbosSGzGvr3b&downloadAs=Firefox Setup.exe&fallback_url=http://cdn.darwendlmfilesnow.com

http://www.hostheadflash.com/c?x=uoShp2axaJBTGeFHLhc9Ctq3OdOizDynSkzCOZjH9Zo=&c=0e07RwA3VGYOogrZnoby85JPuWKkQzBwOy 4e08FQHjZ580EkTYvdaIqyxlZ4rvD4e NHJlHQdgUYdzq7vhZgDEit7DIYHo1uMhVRdJs9owV6nDnBZYSpDUNknM4sC8h&downloadAs=Firefox Setup.exe&fallback_url=http://cdn.darwendlmfilesnow.com

http://www.downloadbundledownload.com/c?x=t0Qi20pVSMmfN gRYpUy KdN4cflccGnzmzQpWBhk4=&c=Et1ebqgA/T00sgqMX1Q/FEIITplmmOMYAnwfahQOsLIdLB3LpErkFV8Yjis CDAoiHAFsBXKWIFjmCX4g9dwm/2rJDNKH1hmpSynz332Gz5WY283iT wR46/srmObYSU&downloadAs=Firefox Setup.exe&fallback_url=http://cdn.darwendlmfilesnow.com

http://www.bundlesbytetown.com/c?x=lYsDF9J50WSm0HGpevVR/rHc g9q1EU1cq8gSbo9Xas=&c=MvhnsaBMhot48FGe3Z09SRAHPfEcQEXtGaJ xfIQIzUXKrk69BlERvWXlfpY6ESYeyqN6bM64ebE00Zc6X2o2CEcUDEyIHqnTifnEmsLXsj341zKLRwrzX150sCLyt4 &downloadAs=Firefox Setup.exe&fallback_url=http://cdn.darwendlmfilesnow.com

http://www.vaultsapptown.com/c?x=TL4I2or53jwF0VyCwUYMiyvn9k4VrWjovxUOxxj6CcE=&c=F9rIcPaoy3DRJ0q0CWAsIBGFIzTEU9rvk9mwMZpmDR5YnHAuWABtISeik7AFQDjRE4U Z1u8gLMWtHTfH/CSDFwkNCf48ijF1oBjSFakBMplbxAL5tUxrH9zDi1Ya27p&downloadAs=Firefox Setup.exe&fallback_url=http://cdn.darwendlmfilesnow.com

http://www.hostheadflash.com/c?x=wOUXJwEubZgEhW7GdJjQ84Kn7w999fO0cSMDuABuEJs=&c=uSAu3bi0NMoniQLEbKYYrwU13tMAJ68bpkP Et5vpOivi/3RRmJWtl5ib08eQn Nq1sWVQSM TDl32ekBTP xF3y99mU3XyRRP3cEjXtk zVrXYC2P4i WUCrdQJDlN/&downloadAs=Firefox Setup.exe&fallback_url=http://cdn.darwendlmfilesnow.com

http://www.bundlesbytetown.com/c?x=eK9tZsx9eHfh Gx1RsI0K ZLTjYjopyiT6U1BwJG8HA=&c=QL9vkZzS8LA6Szsc7Y6Ivd/zKw//u/QoYqi2Uc9caZ0UHKK/4NiVkeIv8RucihDlNl2dPluYPOaGSRhTJYH778gLmC/mbAlP2Ip3WiI6FHewV1JSENPndMs BtZvidFz&downloadAs=Firefox Setup.exe&fallback_url=http://cdn.darwendlmfilesnow.com

http://www.bundlesbytetown.com/c?x=BRTDQKKY9rO4FPcblEBq42rrwVU7ZTUVWZ 0yvTYhes=&c=qP u1VLuDnSVb3UM2ftikgh8RzYkFy1/dK/sB TD P0GwQfK bjldFtoteWJSVdU41xJcphIr/7FpXQUUXxEbP1eMvYrgDxGRXDj75uZYSC2S4st2dDgMpVQvkVVhc3f&downloadAs=Firefox Setup.exe&fallback_url=http://cdn.darwendlmfilesnow.com

http://www.stockfactorytower.com/c?x=R/4TwTm6rsKz6aT 500khvEmjDMnR1x8fu99wtbfzzA=&c=8ARcRPMB2Vk65iWLyZ9PaQ5QN0q46zq rlqkPeFdGP9rxn4vHpQvCFaEh 7tG3Fs8TM 0XwF3H8J9mPezsLSm2PUKQXaybvBw05sFbnxoSKLnRSwhiWY3cbROejCCXIA&downloadAs=Firefox Setup.exe&fallback_url=http://cdn.darwendlmfilesnow.com

http://www.stockfactorytower.com/c?x=rRdAuNtR1NtNUT1BybKJ8QWviYIXGU4CqytTiAqLDPc=&c=Be6Vvzru3vWR9ocBn3C 11zqJgiyOcWSPM1dJSxpI1DcXT6piEMHMlPqepfQe29Mhs7H4B2cEwMPw fQUmmZxyYuiprkOD6G84MR0NC7g2g9C0omNu8hUG6lTelCcZwo&downloadAs=Firefox Setup.exe&fallback_url=http://cdn.darwendlmfilesnow.com

http://www.bundlesbytetown.com/c?x=kHofjopVNRqcCfiTXcgZ4PGHq7NgUtHzqCF3I0ZILQQ=&c=fj9qg LJYbFF KzCd/s/w4Z6XTW/dDjOXUemYtKOtWS1gTdJ1agMZcdkfGNg9MfEIFJM9wfFyLIKYgOD Wa255i2CwDOGclNm6xLcsvY7ZZj6exb9MW/j0dWDnUtu6FQ&downloadAs=Firefox Setup.exe&fallback_url=http://cdn.darwendlmfilesnow.com

http://www.newsignsuniverse.com/c?x=Tlv6GIZtreOvHLBY3UeamjbeKd y5fiq7jyvyY6NxRs=&c=UtFVLeeVeEwcDn65D/vcpGVXbvir6NK3CzvQQ0LjGAIexdOIsnsMozj3UYRznUueY9oY3oTYQV7Pe/CEKrwPPuSCnDfNhF fD9Mb4m4G53Po5IIWrqCp/z4QJt5jLLCt&downloadAs=Firefox Setup.exe&fallback_url=http://cdn.darwendlmfilesnow.com

http://www.hostheadflash.com/c?x=AqU2vc4Iu7Q xDuxygOOi8TocjxrLHHrHXSW3j i2kc=&c=u3xfhOPbYhbOMhd37G4F08VJSkIHgS0872EiCGO0odbfpNxCmj JdY gtgVLKVtgf5nFgmb6TSW7BGMCe2drUrMpnhKXWt8Q3g HedPK1weCTi9tAQZPoIq/uURURWLG&downloadAs=Firefox Setup.exe&fallback_url=http://cdn.darwendlmfilesnow.com

http://www.repositoryhostinggrab.com/c?x=2mLRNvkICI7/xqAQ260sguPXh 8IOOaZi3tBi6DPbnU=&c=C4vNJAcAWOCT6crjAwU6Tn2lPpxWxm61/AB6Q98XclmM9hWDDtYNfrkznJoRI6VenAaK4dsdVIRJN0056cfc aalWCsrkx9dZz2NgfygS3x9oPjmT YY/0Y779AVczcL&downloadAs=Firefox Setup.exe&fallback_url=http://cdn.darwendlmfilesnow.com

http://www.repositoryheartbundle.com/c?x=kM/wx4LqVTdvqSMKyIPcim9 q9/BWFYjmz0ffuq1Tkc=&c=EG6oAfVhfD5reLYigGzY7TJP9E3hR8XBxjuXUTlm82eyMNzD5hv5Ci0z36NGFmD0ReuG/Cz/zO7PJbtl0uF763zFD XBRBLzB99I6F5K6GvYVmW9bB1jiQ/qkIuEstwU&downloadAs=Firefox Setup.exe&fallback_url=http://cdn.darwendlmfilesnow.com

http://www.repositoryheartbundle.com/c?x=kNZkPHg2UI3gdLyGNXSCfvwxWfkinS14r7Gp6g /kHM=&c=aDJiwxQYdYIotXCLuJXXGIwp8gF436cFXI61BA1k6KZI8eUDK6CGJ8wQttoboCbiIHbkAhfq/gwWwP91azruhRnOURbkiOxvy6DWROY61m8LTSvqWZkRenvNiAy/Z tu&downloadAs=Firefox Setup.exe&fallback_url=http://cdn.darwendlmfilesnow.com

http://www.repositorycurrentflash.com/c?x=QckJXBvtHHl0jTHqjs0Buxqby0zzQ53B9UZS58fbkmU=&c=qW8JqS zJyX2yyxP7OXkv5F2AgK1koFYPv4kS605MtwHo2TQmCIoeSyWB7RvfR7q/VIMEMQBN9d6IhIBHV/PdJUwvwxHpQK0qvK/g6qXe1OjDPIWm50qDzhJdLP /SUG&downloadAs=Firefox Setup.exe&fallback_url=http://cdn.darwendlmfilesnow.com

http://www.vaultsapptown.com/c?x=nPYTm/Et6hFPyDqGJHA86vmIAOqPbydKT02kuyCmtp8=&c=SgIq4tqkvSbswkNaBBvh0JlY8nEb6z/BswsKFkEO8sAHjebs3Td65XtTXviLeYFkYekXu1w3ldNtXBdzrAERwtHB4l1PoA75rQmjpl8 vzhxHUjEE5s7EzokXrptbHRL&downloadAs=Firefox Setup.exe&fallback_url=http://cdn.darwendlmfilesnow.com

http://www.downloadbundledownload.com/c?x= V7sQuEd4a0kIZ2Yo7og1nQU/RcFZre9JIt6G0fY69Q=&c=1dxFs4x9Ea1wLA5lbEJ6h1GpDBGnuQYdC4d0ek/wYrUwJ8dUFS5 XE u1tvKa9SCkKPqsGXDQ5ffND6YXr4N8vdXtZLAtzZ1rfG8XCLfIv6bd1dJ7A6LBgLtxB9uj8nm&downloadAs=Firefox Setup.exe&fallback_url=http://cdn.darwendlmfilesnow.com

http://www.sharecleanbest.com/c?x=foHMLSf0MqyZWi1xA9GeVfLeESoAq0qnXbEkTSsYhnM=&c=LdS4nxkFC2h nxNelvdOisi6Ve8Jgm04jiC9cMCNrDUxbUOSgvy152vQSR osXMC7PxZoQUcH4aUKhQ90QsvtNgoylBEIP QzEio8jVPeVYKP0VRI6rPmcKDL0w5ADra&downloadAs=Firefox Setup.exe&fallback_url=http://cdn.darwendlmfilesnow.com

http://www.vaultsapptown.com/c?x=Co62ukDSkCbIKWfP7BwHffLTnpxnDmPsCGv/RiGGK5A=&c=HecKzScm6t6VYDidPgh20WGE9 ReSqmsiqKYG/JySHsvMnhsOObH 6RGJF1Qu/Mu1wB15hkvoEqe6CTcP7lb38u4b2PT6veC3zCJC56FmLjhRqiURWIKc4sarPt2eGvB&downloadAs=Firefox Setup.exe&fallback_url=http://cdn.darwendlmfilesnow.com

http://www.sharecleanbest.com/c?x=o3Ba0l0VwU2M8wHJL0HeTJptJlncXCXjfBAvovVrthM=&c=NtCzSAlak2NXYAxdRiSeCExPqrEuOohBMKq1/60r0WNL/Kh5/KI4LXZIWkcye0yqmPzfKQFC17z zUNoJwooDj3q16reM0D6qI1uHYeslDwKj4EoBchn2NANfmN66QO9&downloadAs=Firefox Setup.exe&fallback_url=http://cdn.darwendlmfilesnow.com

Remove firefox setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.