home

freefileviewersetup.exe

Get

MaxSpeedy (Fried Cookie Ltd.)

The Fried Cookie installer utilizes the InstallCore download manager which may bundle additional offers for various ad-supported toolbars, extensions and utilities. The application freefileviewersetup.exe, “Get Setup ” by MaxSpeedy (Fried Cookie) has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions.
Publisher:
MaxSpeedy (Fried Cookie Ltd.)  (signed and verified)

Product:
Get

Description:
Get Setup

MD5:
3a2a988570d7f4c47935cea1fb561ddf

SHA-1:
6288ca780f93e3377f4a7b49b1755b693e859b0f

SHA-256:
be107197e4fa310f88403a13515c38f4a8fcda56b7ccfaa032ba813053c0fa52

Scanner detections:
1 / 68

Status:
Adware

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Description:
This is an installer which may bundle legitimate applications with offers for additional 3rd-party applications that may be unwanted by the user. While the installer contains an 'opt-out' feature this is not set be defult and is usually overlooked.

Analysis date:
12/28/2024 1:12:06 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCore.FC.Installer (M)
16.5.16.12

File size:
1011.4 KB (1,035,648 bytes)

Product version:
5.4.2

Copyright:
Wizard

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\freefileviewersetup.exe

Digital Signature
Signed by:
MaxSpeedy (Fried Cookie Ltd.)

Authority:
GlobalSign nv-sa

Valid from:
12/17/2015 9:11:09 PM

Valid to:
6/8/2016 11:06:58 PM

Subject:
CN=MaxSpeedy (Fried Cookie Ltd.), O=MaxSpeedy (Fried Cookie Ltd.), L=Tel Aviv, C=IL

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
112125C58A41E827F13C76AD2A1D648B8808

File PE Metadata
Compilation timestamp:
6/20/1992 6:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
12288:vXmo5nlb8i8Ofml9NKA84R4aAMK9nG+zlVvAl9bFAPbQjPpViLqCmwSYgD44dUmn:vXmynru9wA34aAxM+BV4nFdjxH9P44

Entry address:
0xA5F8

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, CE, 8A, FF, FF, E8, D5, 9C, FF, FF, E8, 64, 9F, FF, FF, E8, 07, A0, FF, FF, E8, A6, BF, FF, FF, E8, 11, E9, FF, FF, E8, 78, EA, FF, FF, 33, C0, 55, 68, C9, AC, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 92, AC, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 26, F5, FF, FF, E8, 11, F1, FF, FF, 80, 3D, 34, B2, 40, 00, 00, 74, 0C, E8, 23, F6, FF, FF, 33, C0, E8, C4, 97, FF, FF, 8D, 55, F0, 33, C0, E8, B6, C5, FF, FF, 8B, 55...
 
[+]

Entropy:
7.9173

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
39.5 KB (40,448 bytes)

The file freefileviewersetup.exe has been seen being distributed by the following 50 URLs.

http://www.appsapplicationshare.com/c?x=Urko7XUQKxGSiJt CTU6mU72XtTCS/VGMc23zECbyJY=&c=gtoIiz2p5B/8jdCC1bQt8Spqw0CpTVyam3zgRrQDjcR7NGMfuXuE/vuyZfnvwRqXzqnjoJUluhfWxORSXPtPVUVWxXV8MBodLtIqs kzKCqSOp2N3ZIofVnlbjBU8kGu&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.softwarecapitalfarm.com/c?x=tbwJGGxfsinVKMAG7nC45foYiy PgfsTAXShYBTOIPo=&c=RgAHSu0edRHwAKRDMUMcN7P/w/vg36BZFAlcj/E/kR7XXcRcVtDyat13UEGGqRIp8gMM2hZ OxtWC9kP bz2z1SalcN3iTDD35pEjWS4vtIqv4 DVboxNUraKg2tytCu&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.bodytowersquick.com/c?x=rxK0OSrg5MDhY8 k3LMGCXaPKs2jhqCDelOG2VyBeqs=&c=Dm7r0Wugs2BHayjwQ/jzYyYjXx44M5zM7Hj8exqWp/YJVUtafsxcS2hbOB534hTJI6fw5a wT84EFqI256cgSTJhARi2JZjM /dFMmzWxJTH4JQeE0Ed6L8frUlNGi2a&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.appsapplicationshare.com/c?x=S1EHAgGIPQ0Mlic BYh96Aax9xDDY0G0bDLgeTqOgRA=&c=EQ2fdWkyUHSv0HqvMrzA7gvczZaRN1wfNWwDML FPb7zCbYQGoP675AZHKOQvkP5Kg7vUsjtNaCmnA9Qo xFNTY2al417kSFN8Xi Yv1a6bP5v3Ijv0vIqskxw2lO/Kq&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.conecptmegadelivery.com/c?x=eqPefmSHkJ6uB 8Gk/WeKiLtaxsFZWcSGb5pKgejuW4=&c=briVMROV0DC3HhRCAb3kFlYzLWHa6GhDhIDtAvLH1dYuL0qwt zDGG1RVlAo79991w2r5yGGxhvolBQAT1uP0GIzAAdYyQF57Sz jT61s8/1XIJVK9/ FI nx2cGE3c&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.safeupdatenow.com/c?x=ZGK4s6D/JAUQ132ytRfjxdzh 9/2HtObCi0jbL1xffE=&c=ePOu350f8SOHVvICNUYNnp7mBj2Z0LJzLuQ9O5t8nSF7TUHwEnmGN/3zoteuYb7rntrGq9cZmiLpNb HzMJ93RBj6gAL2JCcWqPgtznVmwEmpxpaKr8 3/ CTps40lDD&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.dlpresenttours.com/c?x=Eu6t0dg6980N0i1JHn76nnMga9QRQzyYehQLHon1YEE=&c=Mi6QCGDF08HYByOo2i2H1mUzUZBNXJmNZsEW24Dyq4v/ J/KRjN3pG3RmwWo1ijq1p7sK4oqZ3HZvtTg0 JBSQoFXkMt6EDfxTkQ3TcjM0Hztn69y2Vw8hEk3JxXurbb&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.applicationflashpresent.com/c?x=uF BbZtQQtJuMnQG9gGtl8Vi66FjrsX1jJOIAubvl1c=&c=mXXLJahxXRXjTuLF68rKO/yCxdaJ9l1qIYQ/oueh39WChz6WmSROAyrNFQ1yT6AdqndCE3ioKiW3sPKCvH1/ZWOdS7CXlbJPvrMJymuslPujC8eTdB2tYKy7U712gTck&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.quickchuckledl.com/c?x=2JXozVT8ChZ5zwwAJDYqhOsg9zlQa9P742V7IgG3lkg=&c=KWc/fQChD73RHb90w5vn6GoBTm7USViR5XpRWMjuop3LL4waHm5I05PXP97Z4osvjCvvpIIywOWoxuXjvHqpATFxGsSfNJojnEopoUZDnnjDVisAIJZfqwBvkkXxa8Wc&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.softwarecapitalfarm.com/c?x=2IM8FlJOY36fwnYmtnfvbMw3um2tvDrylDi9Yojqagg=&c=5FPCixf5UabYEnS2iQVY43XPoDJeIn8W/VoDnKSPesWxzO/SsQWY 2PAk57l 9UqZRjpw6lSM9c1/4skn/8hu7vimQpQbABddC3i6sh0NIpovL36i8y YJBSuZbYqxeF&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.ranchtourhosting.com/c?x=3Ri L1WT/6BY5LE31cLAbVvxxxBqi7Z39PkwbiPgMCI=&c=cAxJYIzZRr2WNxU0imzQdeR9h5EdIaSv7gFOJBLTrLMmz97VCzSCdwdjKvYmoZUA/jsHVOuuzbRzQL5ybfb0ostOCwtvlaOPazvjYgNMVog3NSsOHe2RZwKqUUVn/POs&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.bulktodaypresent.com/c?x=Ky Ivt/HzONPgxkYxwMRUecAyH6e4 MCZrCa5A2x9jQ=&c=p3UefYY4elCp5su7s3iibfyGVok6wWAJBDPSAXQTwnl5e/ bSvpN0k8gRXwSRLfT2b4Da4etYkVOV9Epa2gRHB5BY4C9h6661Z9x7w/mvVwKH0nQ/f1w0zU3bGGj39Uz&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.flashtourbest.com/c?x=JvZDk/ftNzjzrBc8HmyL6MSQc4gsqX9LH/o5Am/aGMU=&c=HZ93KlvlgyMWhwDzxYhySmwBuwdZL1KT9V4bCYpE/4pOMCIDUk zL8yx7vcBEcEUBtD6afOS6zi8toojuvQTLozh6tZpPLY3lyNrqOO/QAutMxJ9aNstAsvdWQ3KVC66&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.hostgiftuniverse.com/c?x=o2zzaob22qkSfv HJgIRXwzt LT88dan5ldL9IGMKjA=&c=xwDqqK kI3igwkov2lwgPySB775LBi3zIPkwMzSVPUO5Qh7IEKqDUGPnvLgnz7czLj/zB 41LDqZj XmB3FU4 lcwsdr/e9ap954l8J/SJthyfyy9mmaUYLn3JkZal3G&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.townflashranch.com/c?x=XfGjHpwiuJ6RoCGNdSbFNKjynrh15AQ7p9xyYhhK3v4=&c=LgCfiB1/9N7aV/UtXYk8f6jgg3crn1G8efB9JEL5gVg8RvL4oL7VkiLMR2mRi/IOCy4vWkbLDoPsP1Nm7gainIQKa1jjw 9l0gnK87OXh/3sWWio9aqkh0dDjjGfcoj6&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.capitalapplicationclear.com/c?x=eM2Ma Lt/qiU2P8Zzw18vggu8SFwP5uYpUw63ghhcM=&c=JehNtHJ29GM1gqcTL05B/uA7PREY08K/0VPA47Mb8tVayqLY5AUh6ZsmF1Kyxcl7dHT8bej9xzXjasQ3u4/OhFdhnEhIyXDlvPdJ8GEds8CjxEn WHgu2O4ClM 7ChiB&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.flashtourslaboratory.com/c?x=6aWN5IeLXqXLT8GZqsbimWwqQZ6Ccw8pN 1xEXtG1v8=&c=T WZl2qYXPKmo/Hv1GT8Cv2OaQU6XE030R93cgTe sdoOihkBuJHavDFvUaM2C8INqG0Lvq kh2wMQq7NLaJWovf37POqN2swui1VmuYvsnp/JXe sqZ5TLDuGQHaMp&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.flashtourbest.com/c?x=GTj sRtvJaGMq1gFxE4FfKjtaHXhAWO2MHzKPWGt5Gg=&c=FfFFt63EsSXpNrOOw mQXcJQ76aj03rxpWs05oAl1KixvkZg1EhFWY z1x2s3b oUa7DtedIsmp9NCEA4AenX8IlgQHo08uFGgTuaII ccOvYObYmb99tvJ7tmMyTTQ&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.bitspackagelaboratory.com/c?x=D6TNuPvkeWTgK1najlVHOU0vn1 cZqasuK GzDmpMTo=&c=79ynoTMF70hkSXxJT0MV6QX28sFt3T/ KPs/yQn3R5X7RlireELelmyZEh9rs9jVTyFDUzUmUylk ogS4idA7E1p5h7QLGJwXZ5OtMm4QoWKdXNiWZu5wOwAEUfh3cxe&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.townflashranch.com/c?x=JczEpxAyg7iFZxYHzVbuaoDgzKJGCbfgsFUsZPeya7I=&c=PGiuMevc5E75lN/ADC6NO/peUbbxogFNvcF4gG7Dc3nDYhDROke3aELlsiiuu5JnDo3RWgh1JwwOTGHRcbXJXianIlK/oabbuM7cbdwRNOtpGEKAxK/c4X03hnjkNQEd&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.quickchuckledl.com/c?x=kVj1viRtOrgKkJ7VCI1p32esa1u7IJ5Uzdd42t1s5uM=&c=WMNcTlfSCKa9FlTuI 5vIzk7ZCGylfmX2ejpemHdiLSU37BixGtgsajNLwnKub9qlVlenwBfI6ADR PV6JSaBrWjZCQPbX/9NRcfz7ZPYs U5gnXKLTlGQuaQ5OibHme&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.flashtourslaboratory.com/c?x=6y6OdbPtzN 3I0f6wLJ8heZlnAr3DSIG9Vakr1i9M4Y=&c=YI4t2bmehtzUg4kMnWTd7k6411jnpkB3z8yAloh7uOS3amUCDzTt/t mc0xeOT3WmVeSgR/NqGa0tvxO89fZcaTyMarjgiUU4VfzYRTSgq6CyvxMDSQahsPNVQH0499k&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.chucklebodybits.com/c?x=HVo4ZwWHFlireE1u/ODE0IUKKj/RwvSfk1n0hQIa 2E=&c=0Niygpx0f iuRf8ralHU61ADGilxYewTa7613xt2c1t3EIMhT73qJKHip1FvKVYG94ed4aHBUoAtaOHLsG9142WEUme6usuraxjH0EIMmE1bsY0DQf3TsarMqvNVmYiK&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.flashtourslaboratory.com/c?x=QlEZT2Ter0RF9Fgig8ji8DJitbzn NQa45Dg0kTQIIA=&c=3RkTCj6dxzzihgHVIT CQWM3k4VNDqIMDBwYpNTM86Gmosh04h8yl6PN0sUL/A aGJo3LpJIbkTFfGYT3nPEMGpZOsQ7A13lQ0H2ANF2cWlKLT5y9HM5fwh0YoloI7j4&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.bitspackagelaboratory.com/c?x=r1GaUOkpjXAw4ko7WQ2 FHNVy4fzsIUz/WFi/DDQt5M=&c=7V1qJHeJFNiKdGjcTWDqK8E1xYWTPrhxbfP2HQFB0kMY33hOtdAtBIx23Ot2ib/E7ksM3O3C9c9xI7gNt4Modfr5fF86UMsI4EidMryC5xmS9/Wix Bztbt oRuHOwwX&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.dlpresenttours.com/c?x=PCerTPWpZbzOfKr4s1NYJ13pg6/1k5WI8rQG1VQ5oEs=&c=jdFDJU8t2dSsYKR7Z VLAhfPvS6mbS6j7EPXDA8eYceroSDq8 4IOgsgBtKxdo7RjiwqqXkntgfVxsSImcP32gAhTTb2mLAKz5gTwMPhJPtSRQ6NACut0eZZDEA7vhkQ&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.applicationflashpresent.com/c?x=8S3T2y/9M5gHBMPRc4YXuAl21HGvtxhwp7mnCbLM3KU=&c=xlWVZK8Kqhl918eAsDHyqTobaY2xEM6xTU7FEOD7Y7DlmBc/YgxjkfS/fZoZjDpuov2 NAQRGmeL8/E0Fwi5pmFwXTse2IM6BgHEiGi24Ug8pisg54vFhshDFLwApmGj&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.applicationflashpresent.com/c?x=BwQZsREa4dTblEvgWgle6gf7CbZeg8bNba8hTbmodyY=&c=/kl0heMX7NzRYOZHdukNNaRD933LpRs6S8gohUeRXDOz3SVaFqR/BA 3twqxDHXYWJ1jsZXkTqUEYzROO/QGv /g1rhleEB5l13C4CqEAIzudnw vS6fhohHurygwJqZ&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.bodytowersquick.com/c?x=YCpkYDj66q/9No4UlpzEq9pyfI3SDvYv4iIc3D/rFWI=&c=i3gnOnNYMh7LlZpgKyZnMwxkwAO6i9qr5bEuO25cDs91bAles1cUSEdEDyLlYDY9mM9ksdM tJbFyIVrTi VX7113srJYSq1CQsqL3 9ekZjQv/6mEaRz3JiZrnpQw6M&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.dlpresenttours.com/c?x=WWGYk 7RuKk6Sf69iVoH 9pwd3QIqO3OE qihPcSX6Q=&c=94z9vn68JcM/VI9puoa5jyRg2hxi/HTrbiLyozgulyRZ2/flImyoyCzPkiSjm tS9U4/RjfJrV1X/YkVvikBF2uKZ6NIvyDk7JR429RWN04j81AcU/gohiX/ONU2p VA&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

Latest 30 of 62 download URLs

Remove freefileviewersetup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.