home

firefox setup.exe

Lacuf

InstallFlash (Fried Cookie Ltd)

The Fried Cookie installer utilizes the InstallCore download manager which may bundle additional offers for various ad-supported toolbars, extensions and utilities. The application firefox setup.exe, “Lacuf Setup ” by InstallFlash (Fried Cookie) has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions. With this installer, users are expecting to download the free Mozilla Firefox web browser but before that occurs they may be presented with additional offers, mostly potentially unwanted software or adware.
Publisher:
Robu   (signed by InstallFlash (Fried Cookie Ltd))

Product:
Lacuf

Description:
Lacuf Setup

Version:
3.8.4.3

MD5:
e124a914d1e23a0ce3819011058d51bb

SHA-1:
ef234c9a3a349efcb7916006ff33268280bfef3b

SHA-256:
17dd9f357f8175d4e436ea4a355f16b27dc200c52e9ec7ac77f7a38692eb9a2e

Scanner detections:
1 / 68

Status:
Adware

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Description:
This is also known as bundleware, or downloadware, which is an downloader designed to simply deliver ad-supported offers in the setup routine of an otherwise legitimate software.

Analysis date:
11/1/2024 4:33:02 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCore.FC.Installer (M)
16.3.1.4

File size:
1.1 MB (1,120,352 bytes)

Product version:
2.4.5

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\firefox setup.exe

Digital Signature
Signed by:
InstallFlash (Fried Cookie Ltd)

Authority:
GlobalSign nv-sa

Valid from:
12/17/2015 6:48:16 PM

Valid to:
6/2/2016 8:54:43 PM

Subject:
CN=InstallFlash (Fried Cookie Ltd), O=InstallFlash (Fried Cookie Ltd), L=Tel Aviv, C=IL

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121ACE394F39EFB26D753579A412465CB79

File PE Metadata
Compilation timestamp:
6/20/1992 3:52:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:a5pydzYpRU332AMsh7+m+JeFxOAgJFiG4C3/YuFA8TPu5RY5:aDazYmmEA+xOtFiG4C3DFyRY5

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, 53, C9, FF, FF, E8, 9A, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, 24, CE, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, 24, CE...
 
[+]

Entropy:
7.8700

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file firefox setup.exe has been seen being distributed by the following 34 URLs.

http://www.presentfuncity.com/c?x=73VfL2Cvpr6Vt84DspqiYi WC5 rF0CalKY8AbZ4jPM=&c=C6Oi81 I10kgPoXXh27RsSXglj4wCzHY0b5ixnNuxgq5Sx9U7K7sRs egArSlENnHEMgm11OwZcRzY2R0xiL6xCqBaRX5JmwT8LXi94ICz9iT0/lpPdDK5VJHgg4Ff m&downloadAs=Firefox Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.bundleworlddl.com/c?x=D5bC0pjyp SAf638Tci3CDwpDZ9fS7hbn/ZNIpXKO4U=&c=5XXIVkW5m9ydzl70lA5ufqfEOAfDbm3kg/loHVDQJbOlgCdoHnrTA8V2jj6FR3xKMpZ/M35KXV4iCCVQ1xsLi7RPjIbsj00h9kALZT7KxFtdhQKo4YVFkHV1xUAWW8FF&downloadAs=Firefox Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.packageflashcurrent.com/c?x=jHr3KSRpzcQ3vg0xeferCCtcyiXHUI AJPVOEhMqjDY=&c=mEEZFl2uEzza/OL0lhydHRnmMMH3rxh5T e08VPpuO 2qGH492pm6R2ymWf1UrmtqKV3ldtyNQi9ptKvGCg0PrPKCtnuS0sIisjB8zSsp/KbeYlU V0p45eluYKWa8NZ&downloadAs=Firefox Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.downloadsbestbundles.com/c?x=pmPLlx9Lcm/LTLVMd7WksL2Woq2edoZOloikBnXkkmM=&c=l0ro5tlqCA39RjU1TcMXETmWxQglTD3wtYVwAg7Eyvkxdrfao1TGTXviMe650bnD 3E4twltI80ld4HiG5rSxR2JInv4mxKy59M0nAMZMKdcCxw/QnySletIvHumaqOT&downloadAs=Firefox Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.packageflashcurrent.com/c?x=SpvGE02J 2Qtl7y66JOB0QYvQotfzW5bM8SgmgOgpr4=&c=/6PoP3y1W7QNksZFBy9T/pEYQV20BjsZ7JovOKd4ASlJaABugUSjUR7j1BHAgdMy9myhJgmrQskNhJEbbm8X4u1XMuT8GdWgLHibP2GRGqlomzJbazyfFm3JlBJ0BiVK&downloadAs=Firefox Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.presentfuncity.com/c?x=mQqvZ21zBGNrDPSZ6VOSI ovM9uDRIbLigV1ij68jvY=&c=ttRSNqa98soJyv2L4rvWyIBH2NbfQW2O2rIVQGSjfpcfveV24w8fIs9XCN8P8qGUzshkPzznYQlLMxC z7fZHClMsYja74CNm5TM0GfP25lQvxdzZri6VAn /w8PSlwm&downloadAs=Firefox Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.tagfilescity.com/c?x=vNHgzf/Vnq2XHfsGMdw1JR3EU2eyg1vZepSxHNXFLFo=&c=8Zd1P7ORa29g/65bwmehnGhtKsLbxyB2HKje523PyCwR4R8HSHlupMWR9LYf6/VF481p4lmHCp/vbIdBxNNiDHlvJGPALoS RTxAZSjW3up933uQ6qEdV9jUApFvy7Up&downloadAs=Firefox Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.bundleworlddl.com/c?x=EnrHScWte80tL/PRSaj/UoQJyrYl8t2ba1eT7ZS4hEI=&c=JckQGo3E25LCqv9clXqwXgbI0STiiTR22CBBMAq7YaJXNiXzZlh3WK7Ux9Bz7DTTQIdlcDOYt6weAqDa6IIld2R/FkQGJTXb78jd6r4vlnIf1nC/f/ewgjqD 3BX2M10&downloadAs=Firefox Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.bundlerepositorybundle.com/c?x=EsIscw/Aj1rCQyZcwCOoBW5kYXe nigRQIXtDc1CVcY=&c=9pWL4TypGZ2yFq8SUe DHmicOt2JPZgUCHlCoB4Nfcr6X1ztPw/dkev3LQQpz5IoO/l/5lZsBSNVtgFeIjftzIWRs6d Yc2bCxAPvNJTCXrbfqzmPgqeh0DFZIx131SL&downloadAs=Firefox Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.packageflashcurrent.com/c?x=eqgFkV1D3BR9XUIuv8pTGBrJYcbxAxsRuNhHOdZGpc4=&c=t82w4 9/W9ihs/k2XRLu58fe6dr2HVKpbKeG14Bxru/3 mdvsBm99awJsGcHlk7tWgtO2nV2OP7poO7XGcVriSvDtxKeJ90/rnzH9CJJ82PZ /yl9io9fsTtZIy Tj0a&downloadAs=Firefox Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.downloadsbestbundles.com/c?x=EjpUjXkRfBB1xzp5fHGZY/NVeutOdiqW1AflVvPknWU=&c=IIjj7hvfaaP6yox /Lj/diMCBIsgn85TjGWN5FsTL/ew ldy/XNdiMDWVKWVCDrrtRW5oIFYDmI5OQoeNMOM2iw4SYUXADhfno4/vrwLhb1ndxueqUYrxrFsC3uG1o3l&downloadAs=Firefox Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.bundleworlddl.com/c?x=WAcYjJoC MghScMuJK1uBJ2XSA XAk3vfrLcYOji8jY=&c=OEvAuOXidzotPEjiKTfZFM50CBZjTiuCMU6rp0LOPHoDaxmnOpo23CouLDJ2IqtjRZUlYuB2949WLK0LF8AOL9NhgrSNVDQo853XbfEZys5hWXhRyiyEq4t8qRWuZ7rO&downloadAs=Firefox Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.packageflashcurrent.com/c?x=PBpu6 vL9pB7QHqvcGRAwMODlLCLOHDMTaWcX37A 2E=&c=qt0ioc0nKnbrCsne2XWNkptZgv6/l8O5oMfgVSyoh7GmY 5UAA 1Pv/Gte54dzPiFQVmOYY540p9bU9Ex1zqLuLHRAExiu5HrLFqzVV2HyeBvUwgM61i 0jjrecErxBN&downloadAs=Firefox Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.downloadsbestbundles.com/c?x=OQblLt5NXcz8TxST1lakeJvOqVPrjMtZz29SN0rrQ6s=&c=ARK9p43S32KcpcffCmQXgj3j1b5aASZNNuc1O6204 A643U5rII6UQzEyUW9n9BSN7RNMDot97MX/6DMcIEYQuBf77XXKd eD8BmyOGgfZ/fzN0qpp vWlne3QDsjxKZ&downloadAs=Firefox Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.sharetownworld.com/c?x=Z9Y5ogh3rPj8OlzGKND3lLGAOZyGhbKUofeM2hVeovI=&c=fq9QrPJeVM0jIRIHKLY/i3AdTo/uPRtFQOrstQ4CmHupOVGOs7iivWJ0befaZwhF4Dp8tqRxU7QJpq2os99DUQjQw1LGp2 4fn8 4wihPRywP2kwII8cHTYHTdwYox8M&downloadAs=Firefox Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.bundlerepositorybundle.com/c?x=YtXZVUMoPvyzjoODJXz29Nc3JP01dnDvPdCFJTraV8s=&c=QNIug346zDZnWkuDjKynjZgjdidNb8mukU3CoNV vHJAHPnYRxjDFdWyrad2FVYlibg o5voj3Wfr9b BrauP2G9T9G5RIXbOG/2o55JkGXq3vPblhzLe8nAUBOOGlZG&downloadAs=Firefox Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.bundlerepositorybundle.com/c?x=JkRs2doGuwnRuHLIU0zV/zFTWpat9lNeNqUVkCDy Z0=&c=BFeG/HEJ6nRF9zvfJwf2GSJRRvrYxypJZ9cHU4cCxRZSuqnS5UrtOI95QAuN dtEd5zNDVXcVRw93kzF m9kKC0cbX6TnuHxjeUk0a7zv4iiwheQbK5CaHx9zrgxd0Zj&downloadAs=Firefox Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.packageflashcurrent.com/c?x=Hods7jeO4bto8LzxdyUDOcIcc5nQK/ A9kYKmMh7x Q=&c=4VWV5oLBL5i6p7BUZm656zBHZPrw3axxtH/KISZHzIo9 IH5 7zDxrUr6ed3WVwarvm6lFskZmjsqdT3vDqLzdn3a2fI9fl7yRw3vOoYWnSX2E7X7T2tQMaVbLflvHZq&downloadAs=Firefox Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.downloadsbestbundles.com/c?x=Lb25GfXqueCu4CDHHCyald xRsYc7IjAnEk5 d7d9WA=&c=2OI9WBx/i61zDS0GLYq/faQmYG9Tyx4BhNWkHGYIJBeml/Bw8GUQ7sN8ZEx9uXylfXGuFSibqX56QocTpgsD9JB8TZEkgiqKC2DCTHQNluYkC4uoANR06igFlDnFUWG7&downloadAs=Firefox Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.sharetownworld.com/c?x=Bgs39Mm5cyoaTs1Vp1JDV1EAE7Rmq5Vh45xWEnVRiks=&c=6rcABJS1QcVtg1iXWRcwyWvURStJFjYU MxPO 3ayThbg1/PMcQotVapeoNorKvhM0hOB670YOOJv2QHingaeaXe2cicidK4iBIxaC5F9gELN/ WnNZNPxfZE0cBpc3d&downloadAs=Firefox Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.bundleworlddl.com/c?x=bRGcIyDCV2jxVSJ3FEHMYjSAHxe/0whpxMGLinLIaI8=&c=Nt3BH0pJUJOLBxgIFCr4BO EeNezHwbtnQGVNP8Ay5HUxLwasUwjkWf XkZkWnZ2 9W0oNQVb LfDxoKbdEUGyTpopGfTh6fmVbh3H0DqqW1rC4jkJZ04msJYMTAVv/&downloadAs=Firefox Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.presentfuncity.com/c?x=183NbSrMxqEJoBJvrt2iaGMFpWt3bYu8FB65L1smoyg=&c=6ISuCl4YfEYuRNcJqKOoVWsxWVj7Df52kPUzIBVK DDhhMQWEpYM54nYW5P/kdEqwwCynRP sayBBBqJ8/8XMfm/DdqZTSVo5iecsngRoDVx1iRLg8lLxxdnFBqpIrVx&downloadAs=Firefox Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.packageflashcurrent.com/c?x=70c5icNTO6GwYYNDmcdAj7M1U8Entfc2Ro2Hwq5i0eo=&c=7D3YWrgYMIGqzCiIFfQSA53bt7CK8m5ixqzv8foUSp2Kqyvks2/TUom7Yb/AVf6r4zIAKjCALrWhBigFo178Mhmubce8ARzC2ig2bxDJC1rc kkMHbUse7ENhNpSJjj9&downloadAs=Firefox Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.downloadsbestbundles.com/c?x=REAOsLQt9QdbdbZZjYp/5QCajt9JFEpvD3VtxYlRXWM=&c=/2woKs406MJHwdfu0xxznFEw/nmiUGTjW3gaaWE4UiZLBzEgZsxYnhCvP2X/SAOn8hyNc Ub08kT6gXbby/JwiAcBU5lkLoR9gEzr8c OpAZmTvcHZmwd6IQle2axcuM&downloadAs=Firefox Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.bundlerepositorybundle.com/c?x=RbbSEubTGvwKKUXDm4kQKEBlqYW UcXsF PXynbJFWk=&c=BLMIdw8rEjBHwHHSwLALhJ0Q9NfVhcRZ44SOcm0KIyGOCeZDXZjrqAUwZeeS0nwlzbrYbZZ3Hsw81i/UVjaTmTKZw6EOFDxt mAvwmKVFsopDtyeGCOoDsSi9d2PNUVm&downloadAs=Firefox Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.sharetownworld.com/c?x=deiC tVZHGbNFcjCxNqrt9lOOUeEF6u1gmqplUh1pi4=&c=wgSNqP1xAJsQaZsxVGMW0P8UXnFxVWQB4pjoe4cmRgCe8xClkqqcul/DgxU76qX/P/zanlgU9pixYAV9ZwqGWyYlzj3FOTsWVEdXRKAlzmndfYVaEnxJsF 4VsJ1lEda&downloadAs=Firefox Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.sharetownworld.com/c?x=7HPGCbJtaKhkrl3ZJqgn zU3NwjaMeCJZfDhsEmlXTE=&c=R9wGtSuATLeGO69zFKOGkCM1jTJ0QqfpB3YFefyD/fX/wJH76b1jNLw/AWK4167RagkMVxJCnkQ4wVhjnr/l28lJhvbUa TQk17U0G8/QUx1x/iNzGf4/0bZUx91D 8H&downloadAs=Firefox Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.sharetownworld.com/c?x=zAs4VDBDfcQal7H1lmC9Ju6P8r 1iy6QN 5wdNXICVA=&c=Ygis1NLEWfpAK5NHtMusJDWCcbD4cph8IpPOgNiDUU3EAEiqTZmnlX0YJTMWt5Mb0hQZINoWmolZaQENP/PHw4iC9Min9BwRAg7dzE d1ExSwYizIFpf7KIeWJAGU4KG&downloadAs=Firefox Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.presentfuncity.com/c?x=kipXr99glgVIJVvz3wsj8V801uy9b97gj1py9JTwSV4=&c=HWP8OyDRQEApEwPaSiHdarf5HEnpHgxIZKhSZU5nETGrGagkwDRtGj1 QhjxqhNecHzxbLtP1aVpT5eaiI2F9UYhXaF2UDvO2Sq0QpjRsNrWunr2OO4XHbgVDqAEt7Rt&downloadAs=Firefox Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.tagfilescity.com/c?x=OgVp6tJNnU/npt5STNQVbxSi2o5JnGjiWs/0n/xK9Dw=&c=cu8fgHiY9d4YWo bILqgRfHP1Zb7I3tLUPv7r WMXt LZEnBUVQta8tTZ5h0vWiJ3cqxQ2t4WUT0IkO6pWryP6D8xxx99GkyvTRsCApuyEYU3PgLTlTCXVUZSObKrHhU&downloadAs=Firefox Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

Latest 30 of 34 download URLs

Remove firefox setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.