home

freefileviewersetup.exe

Application Installer Generic

ConnectorSuperb (Fried Cookie Ltd.)

The Fried Cookie installer utilizes the InstallCore download manager which may bundle additional offers for various ad-supported toolbars, extensions and utilities. The application freefileviewersetup.exe, “Application Installer Generic Setup ” by ConnectorSuperb (Fried Cookie) has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions.
Publisher:
Installer Internet   (signed by ConnectorSuperb (Fried Cookie Ltd.))

Product:
Application Installer Generic

Description:
Application Installer Generic Setup

Version:
2.0.3.0

MD5:
acfb9ae43ccee1953a686c2f09158adc

SHA-1:
124f7eeb3f3394b91fc556164a651cb6f76d63c3

SHA-256:
7531faf2cd42970558d584ecb5040440c24f00d8691e6564193ea7eb7db782eb

Scanner detections:
1 / 68

Status:
Adware

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Description:
This is also known as bundleware, or downloadware, which is an downloader designed to simply deliver ad-supported offers in the setup routine of an otherwise legitimate software.

Analysis date:
11/1/2024 2:48:14 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCore.Installer.Installer (M)
16.1.6.17

File size:
1020.6 KB (1,045,128 bytes)

Product version:
5.0

Copyright:
Internet Generic

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\freefileviewersetup.exe

Digital Signature
Signed by:
ConnectorSuperb (Fried Cookie Ltd.)

Authority:
GlobalSign nv-sa

Valid from:
12/17/2015 4:04:08 AM

Valid to:
6/22/2016 7:39:20 AM

Subject:
CN=ConnectorSuperb (Fried Cookie Ltd.), O=ConnectorSuperb (Fried Cookie Ltd.), L=Tel Aviv, C=IL

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
11219EF17445BF3BA3EF710A9A48CFEB1F2E

File PE Metadata
Compilation timestamp:
6/19/1992 3:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:AfZyLnuGSraIYFd9H23Q8N8UMQtbrOOIeRmntj:AfyytYFqA8NDxrXRmnl

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, 53, C9, FF, FF, E8, 9A, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, 24, CE, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, 24, CE...
 
[+]

Entropy:
7.9179

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file freefileviewersetup.exe has been seen being distributed by the following 26 URLs.

http://www.citybundleclear.com/c?x=67/31XVy5FmDZzS0OVSbZ87p7QrTAbQVhgX6notXiac=&c=szAPjXDnNffiGMrDUcmTjOdEcVL2 raFQlndTd022Feo2C7a4fnBwAxbgIGTHDfpl 0bYrCa5vj4wHonVgdKokXvtxfQZ/9r9HFG5kreLq79h8 KDVj70l OzALBjQz6XHbA0DIUDwj12xv2NLWB9Q==&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.updatebinariessend.com/c?x=oPrO4oJlIBoqaPi323eHatpRyx/PLhp/PPirOV8ArTY=&c=MK75o40p/kUz273icK aYmc661TT58T GpU3mnNE9hro8dalwGSWBr3oqV620iBsDGL9TzyzLJHpkGn1p8BR9y9ihpHSBKeC1ChMXJ4lmQopXhso0jh/PWKuV7FmXyqxrlbINkURSSubEjkPe/6tfQ==&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.headbulktowers.com/c?x=Si3bZWAIhkuw1dSAJwYIXW/jYqscw8fC6opPb6so4FI=&c=8ko10vx/X88pxnAdYw3kqKRX3PV4N2cnHeugh0O1WYFehEATYHizZHNGAommd652PT7vCpbO3G2VDgYByuNjEg07CknQJ4VOlzJs/nYkRuXLFVzpqBfmfl840vEXfJZ1YBakAlCJEca2q0TY9DTAFg==&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.updatebinariessend.com/c?x=WDN8eZjD4QXSG24BYigFc0JVrxQmNqV3ipDVy6VtliE=&c=tikvA0ncXvrNb1k3qPb4yjXHwf YXm8DfTFXSwCoMVD/5jqnN0mkt612XUzmgxzKbbfoR4Kt/4YGEnKken5QP4L FVwpAcM4wYRJTr0qOsl9dogOmQSEWkCRvQpeoIUQRabMHxoAjL3w3lQaK3h8Rw==&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.updatebinariessend.com/c?x=ZhRFkRLJKAtj9ETC/E4jM9l2aqnYZYVW75Wm6rdLXHI=&c=FDcRCluFLcSldN1He2fLQWSjTdE/vgwHYJpJJxNQbQehVA2OOvm2h5PZ1KWqXSvfYE6o3ky5FAHHPy71dIjkhO3qBobVVwljao7Jw1cnrJiYQi9bNJSS9wTelegBITbDX 6UXtHqCqWlMgM1GOOT7g==&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.updatebinariessend.com/c?x=kRSnFArFQ5skEWCWLUEj1JabEKLVhhUWFyjTyGIaoLY=&c=We33Rw7gbBmhz8fnhIvQzK8xqS//5Yljrc0nfXnhGgE3lKWHal3mIdVbiLE5r0a5n6yRz1olhHmB/UIP6HixDZtoyrJYxEentlq4eMHG8QBrEBf2LNFE6fwPMn6kpUtAAbvsiayEHWNe/Di1hCxo3w==&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.hostingtodayapps.com/c?x=zq3ToPFgR8kk7F 4NzK/CBaSFxarn9ndK57dxCOwlL0=&c=YSYuUCh0/Se9eUccaY79xCuIZXa0tIxP0xRII/P7ANqoW9Rzgigu ugW3JET3nOiIOYa2gHrQ0hefrbIKIP9qEM5tgX55qr7V/CTw92KkoY4Of P4Rj4lcmFhaXwT3Xnaj Z3qTLm5iZyJmvr1FV9Q==&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.updatebinariessend.com/c?x= v03dVdo4hFePVnwDsAUC83ouvwt1QdBvg6tEVWwkA0=&c=dp 6HKOvyIvNgie5C8vOd/piJXzO/vKGcPk/ y6U/B8m9TioszqU bGXZ24NJZcCCi0zQEOAD4zjsdxrbm41X/Mp82D6jrEh5cqFkySHYFytIxvLwDVXHLjFY9I15Tuk8et37qT35P0AHwYzIreUug==&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.updatebinariessend.com/c?x=Gz7QvGj8LVTEL7VdIJl1Cpyw3qYwEAdZJktX8Dxb R4=&c=Icghzgpg3HkrHQI3QOwLRkS3GPyTlpz9WyLlutusQFCSmU8EaH2jB9FkZQOSlpKLbEQOhKueWqWKIAZ5/r216rdcawJ0BMFLPg2Kkrm3xAYo7FlvuGcOicdh6LhQd1P2CH8Cg0dDTAfgzmSlDPhjSA==&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.universesafehead.com/c?x=niuZEiwqnlzGxYFsboNgGTU2P2GCTvdDd4sl0Tp6eaE=&c=T1WY8MEWWubhIhFDb5zrUaP3W5kyQS0IViBLh/PFcbFUJFaHz5c9Em/hJ9i0LO2Qu51kyTU 5dv0d1HKwy52/35j6deDe1haNBHZQGTmVMbWruO utQ25CxTLSufq6yWqfcPnN9l4Q5rNXgSihqupg==&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.updatebinariessend.com/c?x=x2spE1sFZufwWTSkC6/XJIwaQtn4EtDWt9oO70P3urg=&c=Szfa/7gkWO1fjFnTtG0yM /sGL TOyYPUcgFHmV6v5q19iqvQXujQ33P6DOb6clURnTd3eIdEJYs4mjRa0m5U/TcUxatIGKkK9LQ3gjFaKERtcenzXFvfi1SsyNoRAGjVFL/ kik6 leeuS dey2rw==&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.updatebinariessend.com/c?x=EVZlMsfW6Z7eersOxipbBT6ttesKb7GsZ6m6SKth2b0=&c=UBYn EB2kOIbJ1Ox/gDsI C9D0VhWu5qO4IC7sGVlw/kFQKdrTEsVsSzwwEDAWFFxo7QFzBZ3mW/1S3tzu2r0vPN3 rN5LXEKvbODCVU6/LcNa6yppbK2sdBZZFN3jdSCLl8xUp4FYi7bjR3cW OqA==&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.updatebinariessend.com/c?x=69W1fHcew1gRwDSW4Ft0LuZSYk31BDA8qX7jp9DKV6s=&c=XHGeuihUL6VB5bU/P6ExQpq5PxGiubBhYz99UsoMmqZptoMUqx2l7xXTPD2ICVUbZEpNyqF0PrfpDk1ESWYdjrqfqVeWDRW603OWe1flKxzJ dT/FDK0QzsWHpiJ6KPmJhPb450pUG X7mRaPV1c5g==&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.updatebinariessend.com/c?x=mZ rA9rNbIOJkzfrOGdp0ZH9BhduZ5inWOQwx24K0Tc=&c=oGyjGeppCoPCZkHneWWndJ5s1k8qCrRLDc7HPX1RwCcwDguAEudLuZtSGLeGildRKE8rU9hCpnXXDb8OT1DeI6tz3JDTE6fQdyRN9G/ksIePXrI8rBnn1CmPI2xCLAK37xUTiG6AHDNVg4GL8hX5jg==&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.citybundleclear.com/c?x=cYFsKtPZ/3DzRGZihwLrX12LDnEQWR6culV2QpUEz 0=&c=2cnW5riGNCkoxwZ7vnLqmCuZgWqjY jO/2N YDy5NzegVbUrZJcvKqNCdq5c3Bw2CB pZIjFg9i1/czcVTgnPJKsO3THxLargBDcKJOBJNc7/sQXS9DJdtaZdjgsAuKG3vHItB lQsLSNOx/5Bgbqw==&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.hostingtodayapps.com/c?x=EfWmcr3/F7W6LPjm8Lb/K0KvFQCDzM9d8cg LhiPG4A=&c=Yx7cA3wLOVtHKK1epmr7RDwdh37rqrAaQhGRrJPKyx7aAarGhBn0DCQJ4cgeMSpwOh49VXF6oOVxg1nU6QnJtLP8J78qQIR6fJIr6U4QplXtQZAHWRQX1Th3zvV4F87Dup9NrlpdHzFmoh2NJgOn5w==&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.heartheadnew.com/c?x=kWXk2x697KsTPJoe7bhUTx4hOjlQvtzQ7YMxuwG YI=&c=BOYwLcyuu9Q5i7pxf2r8DTeQLZExoFYQARGA3uW2wF9ZBjmE5HqDwmgbjLwLi7d/9iAYKMnjyTTkcjmlLEl8/8LQfneJAaloZzHO2i/nFcQFKYuSXs4Hirc50hOjueCSAz4WrWJYMdmBYvcSdltlfA==&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.universesafehead.com/c?x=dY9e5S7aBZjssTd9nbTmQVeNoXOWnfODHJMx2dFZL2E=&c=AdUZ1FFXYlvtnTbOXU GxYInPY3yt3DaSAixuLesZbsPfWHTkRrQF4wl6DrRL8P6wilsHsGGU0uK6yaqT4vMErY2Yoek037bk4eEipyTgilQtaIImBeEKt93DiAYCFbAY5E6wd5mQMOQSP2q8uxgQ==&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.updatebinariessend.com/c?x=6a34XG6QFdSW7bSSpoLI3owyAYk4F5KpHrGaTnKkJbg=&c=XleeDgKshcJpYHAEQN AmPbg/Jy4P3cRcfPKrKJVIw4BLU5sjs5e4Eqw8wjzl88nVcnjZLXbMnhYWwS eswpE6SPlcu9yeB0Hx8wLnTEiUehMXc qTyMmv9slQOj/JXq1tFNAchP33DU0i1KtmwS g==&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.citybundleclear.com/c?x=GNhugQ45bLDcUwJnj9X4E/zVOOjvTzK6l9V0BsHGAOI=&c=BR2yjkjHbIo yijcJiw8f0bh6aUn2DIMi2ceWBsFRr0TWZgITw5tNOIvIvuUR6Z/d7CuFPbfsTQwEXziyLJgZnUgGYJPsPB /v2ekRZOT oFG IwGGH64lN1nqHbo9XvCnLcqfdTOiWIRJHyicNvCQ==&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.updatebinariessend.com/c?x=Wl4Tk0uVNX1RZfMJue6q9oUoAOqIK5ZnbvY1W7bwqJk=&c=vdlKFTRROdNdPgoPGKk71aS3kmu4mkPxnJV / i3ZMqiY0u0VLKh 2HITXvMYZ WoTBijJf2 lTK5Rr235XuLNTcNssB5MeqtxPNPrNYfEETPP PQwo5SZqRLzyPjvEH3Ghrrc6QwZGQaDIEuh0VBw==&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.updatebinariessend.com/c?x= KNYj6SnRck z 1/w3kwcDdGEs5VnAuqgZ0/5V6sh8Y=&c=eT4IYeKrT3CwB2jux2RsbFTMGcSReGyfDxniqHsM2JKrWQ3DASwbr5RLE75Y rB0Ly2Qd02PQ7m/aptacrv/Fu/JpA0fQuJB1t9aIBU8DWMjjmjvHYXdCGh8GVsK1eLEOIZOpc8IalasFiyQsTW00Q==&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.updatebinariessend.com/c?x=jo5vDiqkncHE/Ln36vwJMiKGtSF8A0zoE8aLvgS7n64=&c=iD8Nnd7hxZTRNuLcGDcmV5Sy9VyGxhv9KGLN6kja4f9oJYtTz5ut26z0iibikX9nXT1rPBwcOcE9IuQeqU6cg8ndb3qZDJMJQ4wNzDpQl/tJ4FIZ/5HRFg6PbTiDXNLjvZeAl6cH1QOVUy8IlAa7WQ==&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.updatebinariessend.com/c?x=xb1nm9mYfV2WlAD2MLg1W/wvNuZANZypXKHL4djP044=&c=iDFYmWmEsHrpNr3k65HWQ3wUjzsZqJgCc fJVI4b8HRqssoiSptQCPjMG8Kpz4VXcoDKZXExp7iAs4Ny9uEBjaieYwwLcMr0WMqVK8Hx0Z5EItthjkQyk7CcJ qAb3VPZvMfdNax/pqCj9GNukUvjQ==&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.universesafehead.com/c?x=/ExbV5DWqBubGYL d4SZsaTvAJVAsaZoA3qDJCVmT1Y=&c=6d gHCK6uhBWuP2kDqQzSNXxo858P/4CHfzqGKo43UZnRTcFyzhendIHZvNLeI4ketxT7fUh5jtiV6TUPn7pkkmIGKa7ra/rUiZuJXT4Yu6D8p JTfF/INELD6TbxMG40w6kb3ZgyhV3J48mXNcDIg==&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.updatebinariessend.com/c?x=RR9pVsn5Pf3n22oqVUJfUIvz7JblYySwg3ym73fzmBI=&c=Lf8c32FNABsR XFTsnzV7NmE0NQQcYhE9teNBGbD9YmXCdcLtQ8v8BWw1Tq1pUpVPBYqBlLK/9s2eBZFObTdmXDf/sMINPLyoTEd4iXtBOHGgWA4hTaqlUbqUgrq4WEl RruvC6km51HpSu/iBbXDw==&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

Remove freefileviewersetup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.