home

freefileviewersetup.exe

Baromaroro

The application freefileviewersetup.exe, “Baromaroro Setup ” has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the Inno Setup installer, however the file is not signed with an authenticode signature from a trusted source. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions.
Product:
Baromaroro

Description:
Baromaroro Setup

MD5:
8167139266444ea92b5e1d0acc096602

SHA-1:
321faf4cc41a2f52976b2ea56f51e26537b47aea

SHA-256:
48c4c4f51b2c53216de411cb29ac2b8e6df1fca6fd5f5146be5f961c5b5b7aae

Scanner detections:
1 / 68

Status:
Potentially unwanted

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Analysis date:
11/15/2024 3:47:26 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCore.RE11 (M)
16.5.16.8

File size:
1 MB (1,052,999 bytes)

Product version:
2.5.8

Copyright:
Fast Wizard Software

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\freefileviewersetup.exe

File PE Metadata
Compilation timestamp:
6/20/1992 5:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:4HsXdMZjAomR9Ev5OusSFoaa9x1rk8+rzEv++0uacyC:4MtMZjAlHEvOSFodNrP+rZ+gG

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, BF, A9, FF, FF, E8, 5E, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, 24, CE, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, 24, CE...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file freefileviewersetup.exe has been seen being distributed by the following 25 URLs.

http://www.bulktodaypresent.com/c?x=xJ5Z6v7ElPWjrebqs3ci/L47KzkgZh4gkuUNoiJVpno=&c=dJwNVbCROjtKQJ WoR4bhS9b9N7SJc2P4bPKBLmmfLhQpnGa4MEV vlSonbkVX wvqeBiTAEY99qaRIVroOfQJmXq2ZKGvQlQ0859T9SLaprKM0t1iz8jyguuiV1hAso&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.hostgiftuniverse.com/c?x=bYIxS fJft2zED LQnnRt5ZpUsG9DPvaaGb7qkdDOZI=&c=EKkQvgb3O/nsZVVImniI8oZfzn7t4tTQWN CmvQI0U06/vTPFjIdN6ZM i8/erRq tkPtqMsu1pwVQbZ0e lwkjW0es0Jao3bNLtf6UtnVc7kqNjQcRhUH3wukoDIM09&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.capitalapplicationclear.com/c?x=uKuGlGnT7ExyuC/IcpHz7sB955Gaf FO62PcvjhYF6o=&c=EflO7M4H3mBvbs/wyaiFDzfTFpqWqIxoYtnc0SDOp0rgWYQwX0IsJFdh2YZa/pywQDKGSFyssn3 Y40ZM5zjt1SjGDIZcmJsQ9Fdl8xMC0hi3LvmoFx6u3o8pTSNBIuJ&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.bulktodaypresent.com/c?x=y9O2bXyE3qyPIpJbgWoASFl9Za46b7Y8C59W/10ttzM=&c=2fyNzibNuJFhZa/LPra9m4NgMQe31uP6lNmRwZXqDGtLNsO7FywGjakvKuoYcCY XVhJmbUuvB9KVWXpk6o5NZ9 YUw0ExLj6p2LhA6L4MHhWi59urxPfJAisgIzeru1&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.softwarecapitalfarm.com/c?x=WSSwKf4l1 zXk4OCA6e0L4ZAGT56CKwY n4rS/ YpMU=&c=D2KDywQpLNd0NcDfJ6dUHLK4mPIqQVr8MkTHxG9/OfNAFFF1yrYB0NMdkl/6T9Ecr5uxqG4TLdQfDDoV8u6tVMx7WgkPOdk06A7wz33Cc56 8f9F1EnhBrror R0Oe63&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.worldbundlegift.com/c?x=6zQN3kZCfRkyihRPGHaWVwMMb0U4bfVaWmwapKeLQ88=&c=bb72dHfmVm4yJMT2zzUoxe2Z/uMuK0XwrygiZGQcTB8s4q2S9twHmpeFja0UpGht4MKUMvGM8fapFk6fNsx9XdIeGjo0MU3B5NHAK815ub4cwId1tmq4lN5XMHnanIzw&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.worldbundlegift.com/c?x=f8NVugxUXge4gD2vUjnT VSXx lS5ituYa8hjMZfrpc=&c=LKnmiXNb9lpeVIqsD7jtOEiZnYDmnXBD9PnMjeC7dpzvAf/g UVRjqyqPpKp5uIBm LKPJp0X3vvJW23SsHe9/Dybf0bOvTbK56n8oE2haEdlQW5BEtRH5wcJdUYlAZp&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.quickchuckledl.com/c?x=e4Qik/yWamROuzt5YcSXLM8pTme5VUsnDRhgKkZ0F5Y=&c=zGPPM2AYo2MgRkvh4PR1r53tEB78CQQ9ftRdn0/4yOFiNQgH uPGnAuTEof5UjqjNQjQbZsDmMpXiD3Kufr0wHNrIeDsAGz/bp1YWpvYsMAD/C0ZGsaW2pkPN83vEyF9&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.townflashranch.com/c?x=6M8C9GLAg1ge1gVn1S9WqSdJuWNaC9GovLi4kSND/W0=&c=LApRgz cKU6Mi/BBdXRyD0FzKbZ7YoNJCxaib2VRL4oq60sbo6r646K7WM5LHIHlb7d75IzPPmoRlLXePD96pVn1Smydum7tO/rb87MA2T78f32Wmz3szuwwb0bSxP5o&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.applicationflashpresent.com/c?x=H4D5VghiiLPHm7jATR 4EE47a6SqPlDfHeWHVBu8qGU=&c=8tQ utRFRoPbKNQet6mbvbPGJmauLaLw0PSz/Khwmra6fie7p0kr8Y0EY8e9JlO/IFBt9dpvYvj1zqlh9WfD8g9Br7GVXXAWvpuauTlRUP/BfzzX2nmvounnGKQJPXPX&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.safeupdatenow.com/c?x=INhHDDpWxCKw41B7kl7bmT ChIpW7KWQe4FSmbeg2pg=&c=3dtI7qhYwJ8sK0WP GqFRFYGJK1fwGarPAQp FFVKJCFiTDhnTeL0mo5/Nz8FabWyxWnFD3n77 m85TXZxCjnAI55SayznUY33t7OysyIcPewCkryR9Qk BJEFP/Kk&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.flashtourbest.com/c?x=j0C8eIcPjMAedI5dyLBFv6TokeVjNg2EUUsLugfsQRM=&c=wfPy0tJz7M56XywULWNckliQZoRWVSQr1Oq5p OZzcuuzobc9gRJkXueU ltUDazt s91AQfRCflSXrmqQxv2Ql2TRkv2FekY4/Fz0fjE0OkbIC0OxUVkrrCYZ80ILM&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.dlpresenttours.com/c?x=kMLXYD3mAcyVo/iyykyq2C5wwqmn8PVJZ K16XzNFqU=&c=Jb8Mk64B14Kn4G4Wh59aPi BZHGA0LTu7WFpwN4ABvAIukHo72E9OMETfZ3XHiABICWSVyfC2/1j6y1uY5VC2BGdoqXsyo/AJXizYpuulCIYFwkmAfeZ2pYjn9lLAAU6&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.chucklebodybits.com/c?x=zDzKDW8kfK/oI/9UQH6KF25vCsnFScFMqe3QTjbQ6yo=&c=wesJFPd23R2a2MP77yEnEO7C5m nrn1uwLDGL/2OuZYJqAF9b0nDk2RO aW1LfMGjNlEiCZ32g3r9ih6BfCOA3nrqTHJ0ET9ZN Vns3Jvg5VooZZef7AlyJs9vBXJxXV&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.ranchtourhosting.com/c?x=zwTawlJ6hpzrzzTAJOLZybze5NvFZsBrGFvqV9IQW3M=&c=4tJMnOfujvUnKwptkP6w1gPCsrvWgt99w/w7RTjIg I6gYI5WAUFdGSb6lEf9RIcGzUPHFom8Ydsw9Vxs8 z78aQCTW43/ycO3NCKRimdqPKL ZiDICjTH84/0m2fCKm&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.appsapplicationshare.com/c?x=ziQjUD4kTKRMKqMOQQSo1/WiS5BroNrR5JDdkR4IYoU=&c=BoS7oNItTeHcOiHvJLwwkT b5LQ8koFNQ vzxnWzU9tBDlsKy300BgWYgfNKJE7TIA0Ge7brHW6WKyy Ltb BpJztB1cJY42vXNCjV0bxmrqjpcXw1tS5hbglhXRliK7&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.quickchuckledl.com/c?x=Uw9icAEclzrfAbTbWOBRcGlNfwVCC2awx3uzgC9z 5s=&c=Q0 d4MmmOBYrqHNKPygjrS8/1ct3uNWH5JD3FQVa8uo5QTsaz1V5jTu5752T6YfgJaHeuIgxL7p7O7APbaxY0hELdMq4XNvrNycOCeVmt8aaFo0jttXx/P/J147gnJho&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.softwarecapitalfarm.com/c?x=dH5Hr6bRsykaCKDUE03yAcb8WhczxY0PtUhmp2bFIJg=&c=pdY1VUXJa17gfTf97ta hDDh3J8POqdkdZKmy5HuDlhjRvKUxPISsbKaxg7CisW5yKLNCoovwM fRmlIUNG85I/ Dp6a ZjBa vkxB6/CB7dOokmT7g2Hud1f0LzemQ/&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.currentappdownloads.com/c?x=nVxpo4GIqroYFUShAYM/QWKYF7 X3yTILf2pDxj4fNw=&c=9GLNKomjKjiKCNZljBViHGw3c4t65OCzod2Y7r4dxUW5HCTzOTPgvFpKOSkGLnb18 X0Cxd7PP9vbQwEeMzrIaTVhDx6Uaqb7D3KjabCRAtjuuDGawpSfSLGwsP5UFgd&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.bestsharehead.com/c?x=MLDwLA4VzbKm1XyJmNcj ERkRcJXGVDp387w1OHvyKM=&c=s16aXl48TUg6y iQNtCvHAovmU4WDl hRDqTSuIQbcWJGOaTxXKjQMB/ DzqEKiDY0TFdCeabtQzrs1LkP8vCvjruO/lACDiyk3UfllStVRX0kSzwHA 3Nf0IYzIXziq&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.dlpresenttours.com/c?x=/lCQnPd WGxPzYvgevzN4SyS9jlaVwQ0plewnFx/k44=&c=T81cEHP1YhZjl5aHqT5pmVxDBxLdhKXG0vEyM1i4j5ppjOL/d3/9fl95rKjLRIOGoGQAfJRxyGBG6lFfHQ7rnPqBEgKx5WWIDLjNjKYY8VtUa45PMz7z2UoaVixBtvkD&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.apptownnow.com/c?x=0JHG/zsS fzqZeU7lJvY jSAVFk1eNZOxsnaSP9SAek=&c=M3/z2heTrL2ochWj7XOQ9nh4Fsw/jD/BdwErSgFK3uSH4KWZ128znBNiiul6MAAx5bIN56JaEqdU4qtvzLkmaxiusG FmfwLNLlE9EowG8qeN3xi6W3XXmdYPS7TYGEM&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.dlpresenttours.com/c?x=Cr8Wp/ZnhxqhsABhBmvS5MMP55OlK3Ey5KGEQqHEM80=&c=emE wC6lO2Dw13YqsBFKCpWCIUf /mT7LikfRYCmTuwZnW3AVqKHyIU6o8y67m1lJSWwARVRm2 35dSkyO9cPEecLk/sGzHQ iMnflMstwZKdfBoAjLHc9Vwu3H4rUnr&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.softwarecapitalfarm.com/c?x=9YaFZPp2Ne3Fq/4R4/rGifq2ejRKVEOZloHDWHbS2WA=&c=zSVH/wtkl35B3ii4moWYTw7BYD6ykSRkcTzHMhYYnDX00i uuTUr1FhYNDstOHFLdAGkdsRD6JeNCg8R3sJjQLTZVmKUxVhNxO8DTpAJs78fk0GGnWQiyeVsYNH0anv4&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.dlpresenttours.com/c?x=dxekFDrGHy48c7OWnJWTXdobZDRv6FeXJbrTCY2QZwU=&c=9m9EP/PRB1gWNNVgnrnxhlRcaeaN nmt1zBJ7CdmUAR/wxnVBkHgPrTCM8wzovJMLeTgoDbJg2XNWyiwNVFkPzhAFX/BbxwYc5V4DL6/0S3Njf8z4b6 d73Uy0ZOcLTm&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

Remove freefileviewersetup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.