home

freefileviewersetup.exe

Sokulecas

Quality Funnel (Fried Cookie Ltd.)

The Fried Cookie installer utilizes the InstallCore download manager which may bundle additional offers for various ad-supported toolbars, extensions and utilities. The application freefileviewersetup.exe, “Sokulecas Setup ” by Quality Funnel (Fried Cookie) has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions.
Publisher:
Quality Funnel (Fried Cookie Ltd.)  (signed and verified)

Product:
Sokulecas

Description:
Sokulecas Setup

MD5:
bb12f6c7c63afbe1281357fb3ae86a02

SHA-1:
7a360084117b3c518e14b03d9fe37bd63d10fb08

SHA-256:
29473ac9c56340cf088061c4925a3183790cef477271b7ed070a5b17220c04b6

Scanner detections:
1 / 68

Status:
Adware

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Description:
This is an installer which may bundle legitimate applications with offers for additional 3rd-party applications that may be unwanted by the user. While the installer contains an 'opt-out' feature this is not set be defult and is usually overlooked.

Analysis date:
11/15/2024 10:50:47 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCore.FC.Installer (M)
16.4.4.21

File size:
1 MB (1,097,824 bytes)

Product version:
2.1

Copyright:
Application

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\freefileviewersetup.exe

Digital Signature
Signed by:
Quality Funnel (Fried Cookie Ltd.)

Authority:
GlobalSign nv-sa

Valid from:
12/17/2015 3:54:27 AM

Valid to:
6/22/2016 8:12:52 AM

Subject:
CN=Quality Funnel (Fried Cookie Ltd.), O=Quality Funnel (Fried Cookie Ltd.), L=Tel Aviv, C=IL

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121771FCA92BA51266AB4B001FE1E840DDC

File PE Metadata
Compilation timestamp:
6/19/1992 3:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:fivXERu5CdeJoMKjsEjbDsQhzd3v4xnemq6w5tC5Efxu:f2gu8d/MKQNSpUer3Zu

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, 53, C9, FF, FF, E8, 9A, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, 24, CE, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, 24, CE...
 
[+]

Entropy:
7.9058

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file freefileviewersetup.exe has been seen being distributed by the following 50 URLs.

http://www.toursignscurrent.com/c?x=KpswU Ks5Oa1/1JEOPNaITBUQ7mFpW6DbTjfhxzTulY=&c=PZurKySPj CJD5El6IKr9Y33A i0BzLAQWetLcpNHv3XoRlxgfSQ4TSkA7KHy4rSsc3jwKhQInJ3ybRbUv6Tsef0kOxBaBbsbbAeWg833ivyVSfwmtj5WP0jiJbRpvBk&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.toursignscurrent.com/c?x=sOU/gnuSlAchjg2FRzLsEKIXZyTan2B1Aur1aR2j lU=&c=aYifliHs5EqpFmVZKZfqbfZQazUbH1eKPtcKBUBgJLAo2ehcmPCJcsUsvPMX/BWH0zhoCydKj28AjNRmGwb32kf6WauDbsZV6pWOPbK5gJ192534 2KRzst KcRXJtz/&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.tagpresentbody.com/c?x=ACgd2BXBY4kvgyXE7q290dhzDnRZZljIgPmRwJEG5bE=&c=xEwKw/6p5grbvWcFTxfEIo3zut6SXJ6ybh 9xHiv876ksy1JzXMX6KxiP9uNyGCdRidCEoSEVAw6CwuAcW6uWnURjkFzsz00NWau7SuIiquT8ly7NCBoRB4hJ2TbGo c&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.grabbinariesfun.com/c?x=QGw6G/ujdueA4Qe1N7D20So dbb6jFUOTSlBrvtoN8w=&c=AVoTOFsswGfOt94vo/e9Q/jEtRhN69y5yvqSXLuNk1xYg56ukg7VF9TSN dY1gSdAwRi 2enpogV19e pGSwginvIZM8v4AilEkGmTW 951uApLeNE2KCpKhPX7soICf&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.downloadsapptoday.com/c?x=ctrqSFHz7vWyHQ l0FpbniEAKZc6AxztNLWQdFnfJAE=&c=Z7t4TFJjJ0r2uOn2AT9k1QM1dDuqPjsJpCe0zvNGQqIqg aIdjM3SqKb9vuGJrYgBkcHWRypOko7LPVu0r6Ar 9n P/IEzr w997flbe4HB17fafqynd9mky1LszqOCf&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.downloadsapptoday.com/c?x=wKvXfGzeTEU502U29vYPfWQcWD6iFEYwmubfSu8CJv8=&c=azcuu8dxfewEzgPQYndm1hVAQAi0wccGfrl2mRzTtMn5em3qha8Kzf i0FzBX4ZSlMcIQWtQ5MW0emN//Lrk5eYnac5PXskEwNsKtsOCsKQbS76ZwFdMe8y40cK9aiyC&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.conceptsdownloadscontent.com/c?x=A5crrKG2Ywt1EGAcYKreNYtOMzRiF2R5XBtSXzosdGA=&c=HFqtnYOVaR9IuxQ3byrtTg2oejko6io/WKcKVNWETpy0OX775w25KdnIWYufRsX7rYhAll4f8zsLTUprjgOVMataAfm6uqDJ43AIgNUlSQD14XLLB5l0rCm5Bl4lIDQ5&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.conceptsdownloadscontent.com/c?x=SARqlCPRCtM xjIRbeVTS9RFQn10QvnliAtTzjvV5cc=&c=7AyfBu26Qz41NASsFMb3YGl3ujemLKgQ0 5Tn6f3PCRbj0/yfjhh9ICwJcRJpfZ2FPtM64c7qCmJNxl4AbPS5TVHcUbVynGUaGF9ITIWNwXA15Q3otbQTTT6v1QPvVfT&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.tourgiftheart.com/c?x=vF5PqTipbbgbrm9r4oVjgCNdpi9sZkuoIo9 6oMkrCk=&c=SwZ8PmqDmE/JhPEm2XyY7mU4en2zfGHooUp0zU3m2MdcN54TcJFQRhNM7zImpnE Rz0RzlF0PD/z1Hs bZrp4TCtP7tFC/KJYQvwgFo3OY7E3kd/XCTNRC5xKza9XEYG&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.taggiftapps.com/c?x=HLmGy zVE8cAa Fny Aq9dk0DR5OjPlFX1hSVwD2fb0=&c=dmjtOnQ7gW26mIHNkqssSLrK7B8WtSpET7QpCGMtn4EmgmgEBGCpwPLzwJ9zH/1ZzRZAxW940VhBo3LVIQOiy2BkyuvDjM4zQZEVgs3Ve K0DAVJgC1kMDgeBCpiKWnn&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.hostinguniverselaboratory.com/c?x=LK3qTzhZqpD8AWpyieNO4IfbC belwI/l89IV3jN5pI=&c=jx3PlwN3cRhY9/PsxxOsn7Zv6CL6xL4qwkP1Wcw8qVK2V 5kSKyIH2Spp2ju99I2AxC e7mIy1N8X3HU9FytR RYfGMNVRXM16V7WTftzdrB2mSQ1oVEPYtkN Wz liN&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.funtowersgift.com/c?x=TPLSr4zRkE52/l/a61eCtzValSK3Gj3sByQUxqPN3Ec=&c=6BsCp 2Vg7Bolg6FuKz99HcHchSwu/pqpI8bA9mTJzdRo YN1cqwPY D4dzNrZ4zK6cMr09RwD88VhLTe6wHg/WOFDW9cJWCu6Y4mfV1HPNRq9lzAU0XEjnt4KCwp0PT&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.conecptvaultsranch.com/c?x=dKaTjjCZ46nN4ojKBDa7 /sOCpsp6hJjLZaQIPPGmzY=&c=afo2jVkjYTHTfp8ueiU7/5pX/iCcXAzFasnRSqE X01ZZejIbhtNs5EBFjvcH8K8Wp76C/rx7IAh2eWSvLME2nmYyUEP31ole2ScHGwipbhYEj1U4CZ/mT 99th3Kv7u&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.universeranchupdate.com/c?x=ggKElCP7dWbIro6G8ttSIh0jFEfb7iTi5prftsCBoK4=&c=0F4O/RgbOKKs8k xT/Z2rvC1THw4ofrtYv5gmuB23fp3r6dWz3ddAR/ugoGGVyt2zc8nrR3aIMwmUxb1WN4HuIMqHguhaBBm9HbWBHRuMhR7kfO/g39quBrRWd6Po3NH&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.tagpresentbody.com/c?x=a1Rx4AmVmbEF0PQAYREEOpyQ7tquFXOjvP/ehmMvWXs=&c=44KHShc2g4BW7ISv9Z9ZUpK2JDssSiiN26CgMio JBkgwbfYqNE8lUV3YEKfq28rwLr8vXqZ7OYFWR7A0LJDCfTVAcpu2Vt3OX8 Wnbc9S4SXI3x6hc qF2uHJ0pMnjD&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.tourgiftheart.com/c?x=1AjEBIpfd0imYG9eS3EysSxIB6GZ4 cZVb/deT5FZEU=&c=K2t3vLc66Gu0hH/u5GYHwB4LfjT/QbQttbguhMU6h8SElu3dGJvMDcoFCU1O8UTNatDpP5CxJK63njvK869xZ6lqPRlSiTgIr7TObVmuegtnePbtZwqZ30IgmkysytfH&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.factorypackagehosting.com/c?x=YVUbTjlwbGTQT5oRye ptyeR 3xVOW39trRxVHExXmM=&c=aMUXhkGGlFImy5oxtaEtxcTlEaHOKKkPTny46dXMLohMkNPD4ptQoQhsH5Uqmzi7J0fC5EXKutSzjXCnVJv78xsSgwnQ4bbrWltNzR5z8XlNUlM E7WX9X4VOrmDRMpO&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.clearnewmega.com/c?x=ykWczvCu2hnYaxX9MjBC hGauR6IlH8hOWsa0idpwA8=&c=M1Ajj78XM8 lPBAb7QnzR7mdlSBFi/bKkCUDmp rdnB1 EXswGUKoUYk486ccoHG83469et5IF2u8w65DS6GCviMgJZFDVTNQqNJFdSLS o6iPrDWlrmY wr11JgBbuf&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.newvaultpackage.com/c?x=2RlEmjUNQTxeYZxU5YQHpwXGqdcLeR/X7k7jX4ad1rE=&c=FO03MKuKw0Vrbg1p28s9StFu/zwIKV8rqUkqTZH/owQeCSSVecL2cj8X4La h7KNUomDhEKnwKQUXV/giJBcPTcWaje7MBpYsDZiHxsZxyfiG1jJjjgMyaKHe0C0qBqy&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.applaboratoryhosting.com/c?x=L9qnSFvKs5QR3j8dJCmvDwiyHS9bgRTCfIjsu6LLjLs=&c=JVLGRv61COGI0eGM1JiGFXdKVhZhbzrJcwgp2L6Fpt55iDA3Izw8b5u2hDhi5NCc3Cl9WBpQvpUwOZ7zYISNEb3lAb7iaMwTL bMQMxeZuxLaNKBaVkIloyIf2hkDNrb&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.vaultgrabhead.com/c?x=I0/qAK2fOHGZFmMD5OIZnk0y8euSnnpbocpi5Vox4Fo=&c=TURp6pVPgiYzT2atC7IYl8ycnN9VFdNDIDGXAP3TYTiER8HxxpvK48JDMpxIAqqouQiuoynd0Qxz98mzwdRtYRLROoqh9wxWe92IRd79Gmpl9/SuoIJ8Wc5Kj2ZaN4qB&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.townhostbyte.com/c?x=u3lnAI8pan ecbqu1BY/bvMxltJy2wuM942fYmF8NJc=&c=jW3gcyuGRYTblVA81fYzX4b8XBseBe8RTSL35rnYsenJyokqyRI6r1DQZdzPTUszv2LeDG EfJiD7xObNrktYkuPVR/zS4j LuXNUphxtJDcddi0glp7esWg9CUEFL1r&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.funtowersgift.com/c?x=WSbMURrH fakZL8gC/lAgapGwf3r7t6v6wILNzQe/XQ=&c=oUn5LRKDp5vkOGGmDWe1hehxTR 58c0Q7uJYNh8W1Pmbz5T9ClVnK W8lqY38aQykg5qNZasR4y5DS0HlN1Uq0QBcEs3aOdJTRlkGr3SuaIChsiySknqC4WOWlKoKVgO&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.vaultsbodyvault.com/c?x=F4/3l3VXX5aBIcM7gF42H5xwrP7aVwRYfFxVmSDd9VI=&c=DVkdqC3RnSGfU7mG N1DVOyJnpvWjjLOB32ThDrKpchjGEklMybDVFuczkBaVOhgoHCcHH7bcONjlXd1zzkGLjCW6Qrnzh9kGNOrBYuhgjrP9LBNjYTe8a6r9xxR8ugz&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.worldappsfiles.com/c?x=PcQpmlQv1ZSDdrSMfHdS vUewUYRTdHlE1GVYDvp20Q=&c=Zu7czivdY22YPGiGaXhqgLWt3 jPOE7rpopaE2JkMS4YsRI8XxGtLwGUR2l1ROZ/o2Sj2T43lvfZujX/m2ykveBlaY/pdNiYrOoU2BJ5YEBfbz85KG/9cs3rwT8vmwQg&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.bytetowerbinaries.com/c?x=HcTO3VdjxFCJkC29ke7O73dLvzVqLcrrSak8nSMCyck=&c=80U8aSKpjckp IXJtCrdXr0/eEQdMtWg5kMmCx9BpolyWW 8Gl4HkhZFpoif9Xy/AQdPjPlXKUNcW8zTBzSOiHGgVcb7eXZ4UA5FKBhG9q5QkU0npVJF lbLcR2/mnxE&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.conceptsdownloadscontent.com/c?x=D/Jx5Av4pSZcDmlmHlJ6Em7t PoFUcxZvV5ZAjg02WA=&c=E1LWxGZcTP2jmt/o4LBOlTiKaSGQVAru 6Auqc61LH2BQ9poKRBgCAXdS4lg0lIwVxsNcJ 7 oLS8lsBcMyKGpKjkK8iaHKWPY5vIGoTIJDQYfIJhdKxxbok7qWXG/Ov&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.worldnowrepository.com/c?x=1zBpQ2qkiCFnI53jQ4 vWlU9y16O5xQjPGnvLqvMfo4=&c=X2gBVpW4/MJafNmJeVBiSloYJozOziEHPiOUlsspT3JbrEp9MgDTK15TL6YoO4opr0YE/CbASanWV8d9jWNa5YxMikCJEWOxszpD6abR/4qRGPkHZWC7QZnwYLQdqy O&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.clearnewmega.com/c?x=r84XHij4K6smYBk24qCrcVhKUr9ithEEaBmPiErXC78=&c=qABFWLhvPcYsiqX0iyahYgXmtSsFkxSq5R/A XTjUzBYF3Fo9sZG8J20jWExgp7isploU6Ozip7MabwGnDBHFslXvJLSSMdrezLx31FkZgVZDRP4tbXwMxYu1j6gRYkm&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.universeranchupdate.com/c?x=hrkW3nvNqjEroH4RAXhzlYe3jj/UdyWIN6slmVHUQGA=&c=LpwZZqfUXeGxzXUE/8UjkElIaYkv45i9lstjSHZF /kEPNhIZ86IcqKsAaJ2WrhpjOiWydPctldVEGJPuUCweIZMNHVcc1HAgiYdjUfrOpGns 9BCAcwHF2F3hIOaH8R&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

Latest 30 of 123 download URLs

Remove freefileviewersetup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.