home

freefileviewersetup.exe

Deko

MaxSpeedy (Fried Cookie Ltd.)

The Fried Cookie installer utilizes the InstallCore download manager which may bundle additional offers for various ad-supported toolbars, extensions and utilities. The application freefileviewersetup.exe, “Deko Setup ” by MaxSpeedy (Fried Cookie) has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions.
Publisher:
Carero   (signed by MaxSpeedy (Fried Cookie Ltd.))

Product:
Deko

Description:
Deko Setup

MD5:
92d73f7a81005a6ad339e1dac7060ddc

SHA-1:
309ecf4ba9ba16a87d6a7a2e6efcb7c8d8335462

SHA-256:
3c54548de429c9a9abcf77f8116dd23c46e64f4e2ef22ee6322d5a167b1abe9f

Scanner detections:
1 / 68

Status:
Adware

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Description:
This is also known as bundleware, or downloadware, which is an downloader designed to simply deliver ad-supported offers in the setup routine of an otherwise legitimate software.

Analysis date:
11/15/2024 3:37:57 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCore.FC.Installer (M)
16.3.14.14

File size:
1 MB (1,081,072 bytes)

Product version:
2.1

Copyright:
Internet Software

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\programs\freefileviewersetup.exe

Digital Signature
Signed by:
MaxSpeedy (Fried Cookie Ltd.)

Authority:
GlobalSign nv-sa

Valid from:
12/17/2015 6:41:09 PM

Valid to:
6/8/2016 8:36:58 PM

Subject:
CN=MaxSpeedy (Fried Cookie Ltd.), O=MaxSpeedy (Fried Cookie Ltd.), L=Tel Aviv, C=IL

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
112125C58A41E827F13C76AD2A1D648B8808

File PE Metadata
Compilation timestamp:
6/20/1992 3:52:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:Fpurc/q1bLyox6DNLufhpqdMsmMdRemoCD63B4BwBolNrmSR1+v:FcQ/q1agqkdcdRExu5Ny4y

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, 53, C9, FF, FF, E8, 9A, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, 24, CE, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, 24, CE...
 
[+]

Entropy:
7.8969

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file freefileviewersetup.exe has been seen being distributed by the following 50 URLs.

http://www.farmapplicationbits.com/c?x=wOxRO4i4VYQFnXhjc2RXJNdxZe/kXMkwjlippXOkPgQ=&c=1cQc0ka6kYtlgrTuMNErYQP6GOytp5kXrYApEMBXiyy3ayzdUG3Odz96C83IvSt5iZ3F82WxR4nmYHN3Y9L9NqcF5qJIgxnDzwtZ0Lp0YOTsm6pBimpW9r9pZHr9P42M&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.farmapplicationbits.com/c?x=SnJr8iBZCzYvcNijHypuEaCtGO5gOt4rTtl6vxnr4eU=&c=uU5CH63/2ugci4eha8d/bRiH42umw6GuA9gofN/z6Q Lv32uwDDG9otQgKztQqiCkI1RvAIPJaPzOo5//yvvytEkI5KxzjY Nhp9VvK Mpt6pCxxj6rkWJN7c542G/Vj&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.megaworldcycle.com/c?x=hCNHAVinfkXTJJtrYKkXIoYDHeJle3vXt5cOupBV/O8=&c=tzN zH2uAOIgY4eAmx8U0QE0lhxaUhCCNZc82R/P/E7ifjBUUZJsFkh5FwXnoGZlNey1bSznt0WlTSxeAfRQUc9vkUGbT5i8cc3NY6GMf3zx49EWwDE5VuYMsPgEYfCX&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.conceptsbitsvaults.com/c?x=a5eoAC12AUrUUVhw28hoRxcpisKuCkgof1Vm52N/fSM=&c=qQlp42II092IU3zUiLWMeEykmRBSWummej/7sCglKDtmer4CBhG83LKggpyIIbmWLHy9Gxy2ymWyE80Eq3m0pTOJVoQdGF1h 4DcTEBIp hMh6bo8pUcaLgWoyx3Yy98&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.binariesfarmsend.com/c?x=1GT/EG/uWaobs55nl6Nh HE KALn5R6B5bdpx3dy/dg=&c=u4nMizC9BlYHxrC51ngfIBOgRw8nsU7a8viZ9uvXiLtfk/ZFTnmHtUpnOPdgybCvhUN/fo4mOPmcOejhI1Rh UmGsyD6 4ijYe6SSOcRb47DsaKZq9mSVI/Z5Jpn5bVI&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.cleanbyteconecpt.com/c?x=rTQl9 0tGeczsalsDo8k02VSgZG9BiFKcW39TNDhAvU=&c=3v/NBHAH8uHH2iHTto60 se6 UNMj3FUZuRQasmtZFutQuGp1poD/EjVLZhUMsVJ7sHonv 8I1c74SYoI0X 3uqVGZ9FvOdY wFV4tOSpDwBw bxLYTgLHpuioelHsue&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.cleanbyteconecpt.com/c?x=PftQbXdnw6 ej4kPFsPG/2MxerSnCCX29ePgIq7m51Y=&c=T/uflchTUgQQGMygDOK7A6duOmYm1saeKw7NYKHqMG9hWPgNdq tfnkEcrJRD5uoRml QjhfBNdhcnlEwBOZ1KWCYZF Oj1orcThqRdEGboepFThhZfi2FQbfTr0XkGt&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.contentclearcurrent.com/c?x=qiRpRUHytM2fjhSPlYZahFRB2mYypXnZ/PPyMkWppQs=&c=zpJeV6Y/NE ugJzKGhf9szPz4yRywkWKCBjqjwcdS6jJbZY1nnMyInIavaBB6ajiSvI CEOPyhbxxHAlxJIQkOgPz8jFQil7AnO SYRrcagS SDuj2 CHPZ7shbaOQGL&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.contentclearcurrent.com/c?x=BeLE KOkk/AVyo6SAbKPITLCOYhYzIdcgjcLx3Bgex8=&c=wyIiJUvUyQQ//nmqk/RC/pvIBUJQDUgeQEGGFb0T3 CvnpcZaUc7ztV80XEHTRWsCnz3Rvs93rcJGZQtcvUcceCLmYZUeUm6E9dRAALFu7jj5 wJ4IbS7ViZ8H1V5rP9&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.giftbinariestowers.com/c?x=JuIsOoEJrDyRLQ49KhVATRtjR0Wft3hDUA5QnWhEHXA=&c=ipU3Wvy eTiGOyh EdF UMmOh43O8GtTGo3M n2j4CJ2ZkzscugQjoftBG2ddWpMHjVp1C7M8bXlpvcAnrFkTXG//wJuTXWCvEGyZDxP51vUCMXTYfoEdBVT7/F6w jq&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.farmapplicationbits.com/c?x=JZoLN O6ufA09GBCqwqLzOToyMmdDt109H9x9GtQWKU=&c=9JYnwE nZu/nfQ3Xd9t/MGMAOdFf0HWyXBpPLlSnUaBk7SLYFuLA9dPjt/vJWq0eZWnpm gJ9bwyN6R8JYtTfI2hEOXpMqXuNR9HIRGiy7DYicP1BmgvabvTO4dosJDl&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.giftbinariestowers.com/c?x=7Pdwvk5Jvb9a7jqmzeBROi7JesBlodYvBWEkWbH2yew=&c=yZk6kZoLTHqFJ7LUB4YLYkO2dSyhxtrM/yug67xWXg7p8NQEoNPIy 0uO02Mi1dg0zIRpqgYhougWoxFhzziIkQMrmfWem2FOU5o5oApxgzkdhiKqBpVn2cNPKjOo6 t&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.binariesupdatehead.com/c?x=Kd0bVPtUltUmVH4p1ljDbGbnAtFyp5J4GaLQfiysSqE=&c=0pNE3AeXYMqH4sw47NokSot781CyNhXEp5GsjlAd0aeNRI7yKdvZFfFClnLrTKK9jB28Dl2sCQKco7dfoOOjNcb5yX EDQXJHV9mR9XHGHq3ai Zlz7rAbgITR4qPFv5&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.applicationsharestock.com/c?x=P/No4T37fmsGGaY gELkNLYdqdvedJqrQDRh7lpIfSQ=&c=fTJ0qgTBGLaKfYsIxvVdV6q/SZjym/1aL1X58NeK4LDwzSgGr3w J1sAAx097m8diu5ciFSJbEZDdD6vGm0ifkGOBTykmVrOmj9l9wVCmG05QSWiTmR cEqREfvr7DDl&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.clearpackagedownload.com/c?x=HNEviMuUPPCwj64/7AbXSLjzAfCNCbvBfTdtSOX314U=&c=UNSRg6fH33 QKw UR466U7c3IF4fnKhGuiU6Q6LbsL5StVz7gJ8SBHft79m1jyue6QYd1yuKgWWlucDFt7J0TLKohlKJ1p9XAum0/OlTXfM7ESiWysiQkFzUgO1qjqsT&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.cleanbyteconecpt.com/c?x=bEOux8fA u8urqkKfFh/EtTDXUKWHewUcKJV/XlAkTA=&c=uQaXa5UjMP2EuU8 rqEcAtKJBcDZhCknfnWK cY1MlEvgi5abTtgSaHpXS65PgoNNQwoiDasYE9loMGND5dBxorZkJcfn/CANrXil/IHspF3xymeDhJfrRfk83L 00Q3&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.conceptsbitsvaults.com/c?x=xvlyDjuGFsVQJ7V5XbkFzoSKVhRVIusS6yeZAN/pWLY=&c=5Nz0M5/APFt vvI/hm4/5P/d1VhOdCnG3cGFW/FGhY q555uCjVXgAm0DGlgTl2Wu2liJlNZW93HFDlhSWdtCKdQCZbsO2djXxESmpWdGQzI4DoO1TK8Ckt1xpnRql 0&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.applicationsharestock.com/c?x=/NsXp2veBjMt6yvDb4O16sbz kyufHiBQh0QnacuMMU=&c=3jrtwPEOV2W48rnuq/pQKvZS7xrN6irUdkQI7l NTF391HcFye0ekLu PxNg04UzpZrcdCoNjAubv1iyMj78GfdvOCRmSaUQN1xtU1XEemMy69Q66cMf50DqlMX9tBj &downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.binariesfarmsend.com/c?x=8nW0YcSXiWv59NHTIacxhQAd PoxBY9JmP/BMphfRuE=&c=v8huJLQ4/ mUK PRiKHjGpJ9rNgpCHHNmeMIZb76pbVwb4g27wz c2i03Leiq7xowIzGyitQbQ69t2i6nNo5bMpRKl0SHuhpc0dSXzeoChbkw3EOhiGFBvawBXymHlwh&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.binariesfarmsend.com/c?x=sS/PFZNZNZzSGFhOoJ2hAs8sULj2NQhZOjXGPWEtFBM=&c=c6GD7ElJvEBu7h9FgBVXrkw/vuYAb2TBB3xowXpYnp0Zi7/ifDQVMILcXqOr0zpF5ULnql56rGwYFgYIy gDhmFgHemmU4lKLv2WL8uNAULHBB3BpuIj4OnS4lyUa/wf&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.binariesfarmsend.com/c?x=jLa5MTHBjvTKIL FDD5IXDHEhsh7saAt ss5Hj D0GM=&c=gFo3rL1DUA Q8QLag0goBL 1FbH/AuOwND0t5Inwor6F/uPDqJKw0QaGRS8ENPS n5ireZLFJyY5BEvZyfR3wIoSZB5Y1G/iM582dV1GgtzTOn/ZI93qiz/Kw0AXE9Hx&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.binariesfarmsend.com/c?x=md1W4XXIcvPyKQysQmK9yHuJ8eTF81KtC1gjGx JF3E=&c=wUBgjDjee2a69tWDmDlwf 6hcNta8u8KLFNtVrXitjkBuKgFmATVxbeBBwHph16YyJDD2qySFOC32Ejud/rFMvgNGAMvE4WWv9lGdVQB7zK1BCk5tSdLmTT2FlVGiC6s&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.cleanbyteconecpt.com/c?x=RkjIOb/iqMsCVAWo/jJRcL2O/bi2ya68EZwMiXYeWT8=&c=blZyBzwviNy5wEm3nf6W xkBS4w9osWXHw81yIkjGvIsbE1VnUT1MPpYMljwvUAkXQmMlcJxdeFgfeAMPc1OUrSjAfSAjtpkP9jebtgHciN6DfqdLbYgBh1kiSWTJ4kc&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.binariesfarmsend.com/c?x=OTBBqyJF8nd6j9bsUWKDB4UHXvDphRLEkg8CJ 7CVzM=&c=GQDrG//zTDuWSrxQCG7J9fHKEP ccJHy8agYcieS0nlLhzlA9bSI5x3ayGVDm8nrQFZi4cdXmV/IQkORvjfcu2C2DoLD9ONXODyhlXTIJCUNoHfgG5vY9rnSHEjTXba/&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.conceptsbitsvaults.com/c?x=EoJ0JfOUNWVwpnMKKTLcvdDgJNfXRrmFs8zGv5ieDLY=&c=lPw6fEm0vZ9tA3tmBSSH/BCCYTBOFeuFUKrWY3oV267pkrtFlAAueuhqfNcKonqCFXGI/MXiGMURBw9GzB3mIkLANUzj0IHw5MZoB7wozOonbnEnBtGZDcl8Hxl4fOhL&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.conecptbundlescity.com/c?x=DASn1ni6AJk2lh7N/L7xBrtIRI5NlocUpv8DtRg4XMU=&c=kpCO3gYiut7123sGNdQDLMbVajOLz/ZhPE70NIj3NvCl5NumV8mXaSHvTLLq5G7ov31ps6yPJDarNEgQGjiiET 9U5aOqNDdKx81uo2mhrKJuUB0OQgP6mHSCYW44C4ooqCAkM79T6zo1QVkbPvLoi2N4EyuWTQHzcD0AKIdpEGO/xVYf2rj7pTiz0JgHwHS&e=0&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.conceptsbitsvaults.com/c?x=cI8LLTxGmwu1q4BB8DbJEd25 wieeGEgUPPR3 lqWw=&c=VLSB I/sZyHpzQbRWp944V7tS/gD6XlzDMTnGYD0xYuPZvRnUdILke/HkSp I9rxLloiFqQrNN83Im28DBqZTMG2tN8xAu7IAPxYSuspN1riJ3ZeDwti0nLgGTtBCSis&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.conceptsbitsvaults.com/c?x=ALNL1HqJcxWO2sM39RgYyOh4FzpMfsSmLJD9qyj8kJc=&c=cQUIdwpsyF//tVJkko5Eplic8SLJlQ2ZVbIwcO5BSahOFTcpde8oKJG pw1e1iA0rxLPzkD6aPgXA8Q0I9/5Oxq0yH8GesbhjXlQBDj0o20SD1l28l1GIbXbZ7wK7G2S&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.applicationsharestock.com/c?x=bLn9mFVwekZelQhVP8 qvQiHItI7LBkO4UceIRG0DNI=&c=tp8ZXqKbiMK4Ja0SDtLj15ykNJ0pVV6ifQVZ0em4Qf2oSvmy4DBlKaU9 DKhaqV7PrCftBYSGmdykINpYak/zSKUkbDVkB0Iu9E/wTSZByb5/tuOGDL2/Tw62/Ns yls&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.binariesfarmsend.com/c?x=GrxRKm5ioJUoagQPPhj4vtD0hA0RrDpqX BoK3mC7ZA=&c=cA4vPRFpQjGu3IbGiNh24BYnBwJdM5BE6WJBbR7Xp2aqa0IjnaOZA9CjwZ9Z/Lp fuKzss81pdAaqHwRWVauaoAc W8EmTyvnNkMrFOiwRrvxTiK VAFsxdhP0eJ0Xwk&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

Latest 30 of 86 download URLs

Remove freefileviewersetup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.