home

freefileviewersetup.exe

application internet

Quality Funnel (Fried Cookie Ltd.)

The Fried Cookie installer utilizes the InstallCore download manager which may bundle additional offers for various ad-supported toolbars, extensions and utilities. The application freefileviewersetup.exe, “application internet Setup ” by Quality Funnel (Fried Cookie) has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions.
Publisher:
Internet   (signed by Quality Funnel (Fried Cookie Ltd.))

Product:
application internet

Description:
application internet Setup

Version:
2.4.4.5

MD5:
b3e25d226eb7cec942289468f350af3f

SHA-1:
d1f02c35d16279d1bccc47d2371431300e2b9323

SHA-256:
ffbdc2a70d4b1eafa945909a9304b2308e51140832371240094d2c513bd9b448

Scanner detections:
1 / 68

Status:
Adware

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Description:
This 'download manager' is also considered bundleware, a utility designed to download software (possibly legitimate or opensource) and bundle it with a number of optional offers including ad-supported utilities, toolbars, shopping comparison tools and browser extensions.

Analysis date:
11/16/2024 10:27:51 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCore.Installer.Installer (M)
16.1.12.3

File size:
1003.5 KB (1,027,584 bytes)

Product version:
1.5

Copyright:
Prog Lite

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\freefileviewersetup.exe

Digital Signature
Signed by:
Quality Funnel (Fried Cookie Ltd.)

Authority:
GlobalSign nv-sa

Valid from:
12/17/2015 5:54:27 AM

Valid to:
6/22/2016 10:12:52 AM

Subject:
CN=Quality Funnel (Fried Cookie Ltd.), O=Quality Funnel (Fried Cookie Ltd.), L=Tel Aviv, C=IL

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121771FCA92BA51266AB4B001FE1E840DDC

File PE Metadata
Compilation timestamp:
6/19/1992 5:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:dN5ntNWf+rS7dTCFwR1TRFZmZCIrfV07Ta6BmdomgUfxcmd35:dDtNJS7ZwOpr0rf6Xa6BmdRdj5

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, BF, A9, FF, FF, E8, 5E, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, 24, CE, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, 24, CE...
 
[+]

Entropy:
7.9047

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file freefileviewersetup.exe has been seen being distributed by the following 50 URLs.

http://www.farmbodybinaries.com/c?x=84EppkulxLEDipLCfIJfZEuCwy1VTHWEDzidwkPyOyg=&c=tJ4TWlrza0LDLjFCjsdNMcJblqPDKEhAbdnqbbMsMeyhN9h0lFUreahExNHubR3u6LQbFYSFD1pYyP4JMCeTExznMPmTyza7F5dU7/5lB9GNdnkW4L2PBZ8a4L84yCsy&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.hostcleandownloads.com/c?x=TI4EABMTDEqfFpNGNRoEQaoe7TcHOez1UP5NcDGrk s=&c=ya2S9/AUjn4w 1xSCEXap8 CWEZ9tyFUE x B3KiwAzFPB3e Gd16d2AsafJDpESFOzJyDFVvdjhzjKBjswwPOYdLjnXTO2uCj Ag6/ tuJttolT44AgRMI93WGxILFJ&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.capitalhostingrepository.com/c?x=ILFVaNK1vSKFKG2WIqcR8nzRRKGw53jJfJHcOCmglJo=&c=mTenPE8/JZcet/L7dQaXdQ iT8PTxYCzC2hG78NBXdhBj30Du9nux bC/fNzrAOVOXTlv5bajHq5TnpuZYcU9wt2JL9g4ZilIcSxPbtSn3lZccFdhuD8txTVapuEdqzf&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.farmbodybinaries.com/c?x=qRDfChvsXVwkCQKFYpCpT8S6J0jIZm3aNnX4lQTteZ4=&c=Luu1jJmqMb3xU AqJsWksfWJmDH0yanOV889MCOSvnXhDtr9iuJWOW3VAEVxohx9MiLmSY nZohxldiD6ae3zNHPaH2pJhx/HLohzG/K4nFpD4RH703SGVyfj CUtSPk&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.farmbodybinaries.com/c?x=8fhnG gwYAjKCZswPbvLxUeLMVbxmi4BjjmSa5kNkzU=&c=wdEiGMoMgzTmNrHOzE9NcwTFNmff06ZiXS20y7L 4wRL1F8ggXbuV0fZyYGOw WJ6WF4laQ8Avv0sV/QQVCuVafuufiDaMLZucq iEQ32MVS3quoQSk0IEFCz ZE/xqC&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.centersignscapital.com/c?x=VP04HQnvWR0vo2f vuSfMHsN7H55cq6TteAKv27jiCs=&c=p3WDpz3BW1w8ifjJzgADs/no/U1fHyhtHc6bTj6NUE7HbS73YzViOxcMUu7vm8zD0gifLL94Q51uDFbvuWBxkxMKKCaHrrAFC2NPGbu773Lf3fyEAEqfhUxb1UFrCEFG&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.bundleapplicationsbyte.com/c?x=tJBrtKgS3CKUfwt8cS/SCZbWfqxpsli0wAanhAdJlFY=&c=dQwJHmLdfI4SJnecRnBKyJI1mg1Ha21aMq8fn0D/nOWDqWXkXyOq3sAdue4TH0MMgBAUWInFS8iLWz4w PYWOpYO Vf9hxNxp7rCf55gRwYdGKxiXBoXzt3A6rofU5aa&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.capitalhostingrepository.com/c?x=8huP/BZPFSDvhuMZTo8foj0IyltWZwVgLGtiO6JMGkM=&c=ywrObZ031ilFZxNEfbHrKyblNdxSd7NMfSLX28FZMBb u3jiXXocNtttR7VdEOqkcaLtcskDEGLN5h9FdBL0g1BnpgCzzr0PnO5ncIsIrMPEghAVCrhHbPFgK cyisFO&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.hostcleandownloads.com/c?x=b0HZifuotwES5VMf4915REUK9osrCncGB4Dpqk7hQdw=&c=2f7OAimI1071eWqgXU3RkHx2V6wk0Snn58bQATjBA9QUEZxNXVVythCOi7V7KQ7cjDAgOZlZp3SSYs1KXU0kKB Cgn5yg1KNHbL8xc1wczqPno6zqUqNV616HgiIates&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.updatedownloadsclean.com/c?x=IWYzSOrX/uKH78EAP0dB2OU21SJZ9YLgul3nN9BFMIw=&c=WjE i9aIHWasZTgL3nRyWekq5pBqf8 DPFKVQVASO6eVMqqyXKozkQaoZ0phytsKhZq0IHoQny5jNkam8RGGCqdb6HTqAPDU3JDTJ3NQnV9LCDnz jMj5xi14TdbtV35&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.centersignscapital.com/c?x=i2ZR0JFYn4CZaKY73tH d1CzcnG/knLs7W3KIjPemc=&c=NqHIRBM 2aJYKGOMG8gFPKiye6TaDdUFSDqewrpJI91ZTvj6bnfy8ANOD/fC2/j6CzAkRE7laq EB/j1BMPklKob1UuxG iEQGA6HJlVu28uBKr4OELJDSfCh3g39uC&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.ranchconceptsbundle.com/c?x=HxqUN50K6kHRXdgTg4XjiOtroYB6eKxXPJS4O3DK5fM=&c=/HsCH25jyQTyBQOdVlEhgy6K1al2mGPtM8MSR51yfDDLAsmMlh46eauyCSYcr8d78Q /sMsCd1PDCl0Nne6f1Ys2ramsB7ZZA7pEhm4x0vl/G1GCkm1hMMz7hFlN7ao4&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.hostcleandownloads.com/c?x=JdmHEoRfLtG7EmGtMvjXaXiN8lW9dkJAEKEUBPgm 2A=&c=QAJrsRjXmF5wXT1xO65bhcPraYduJPomOs2YF m38ENVR9g77tCrZw08kmK ry5fRpmANt12M23LEaDfj60LV81swunZiPOA2mv4B6b6fC3 sC9 5/ob66F7ezSW3Q5N&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.cleanpresenthosting.com/c?x=/XCr YyA63Ko1WTXGbK 2qJRk7awc lqFEcjWwiU/8=&c=ZKWDl9u901iJ3knsQvu3ItX3dbpfpKPMN tduzvNEM7OhpyUbDmapmvdHtqlKdkTuYgsyX1mO5YdkXdK3dLs6 W K25VfNMWTmXqJt mFHUfu/ooZvlHohTlC9ha18v8&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.ranchconceptsbundle.com/c?x=0Is8bS6teq0QdY1T70r32aYIiT7VieZOlo5zWxjoQvM=&c=4T5qk5ioaF0kXMejlR7nibLg8U77FS2AbxC0f1yQm8fgQS4mNVIBeGsLLcuiUXYu34dEqBjVSdI2JAztcKeEWxEbVMkrTmjN/4DTJlbxJH/hvSKf3USugv0A0FNQOOWF&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.hostcleandownloads.com/c?x=OETrrv1KKQWVlKu3hOucc55EFWT1pHSsKhjJzXtKpNw=&c=kMqF9w7r/c csAyb/3NT1gY Obh7YT7ro3znrLhW1T3rsTa/16ekcpLvGfIn3clSeIzP2U475f4LPkBbpHJxc9PFY6TJYEdcysqET5UUWF79b7H1Mr3H61qL0lNX/CbB&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.bundleapplicationstower.com/c?x=atRqIZlhkiHtCQ93w9hmXCxUiP6humxlDrT4AkgLR28=&c=aSaTI/kR/rQ peGtAqW34ou8R/SSqdzLrpd2tF/x5RcYbL8MSbB45cOjwjx7 M/6sSIs7qlU3UOuYdQePZgP3yAi4kaEvIMRHFk7KoKi13CzEGo1iKC2F7my6Dgn7CEq&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.centersignscapital.com/c?x=3L2DTm3/Q/SKRO7RgZdbvxf3xItgxoQ/GgsVzjLohhw=&c=hgcuB jSlVSBMdxLgybi8z944v0YkLd/HkmfdcYcEw6Yu1nbCC8xHcOkQNZMkRTIhSKtDRwcTcQX/zBN4cBCYVPKQu3LB9iaF/ZoqbTs0M9z7eDwEu4uIHent/XyWvHm&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.updatedownloadsclean.com/c?x=FCx01ifO9/58S GAHDodt7IYSk58zQXi8MfXXAaBL44=&c=nGWZgdnWKdk5iUyHW4ztAcZEwcJLn4u52Njnse0ZRmJiFoLPMLEwPtJPpuxCbuYoFakYu/0qPQfaJA1Rs2X5RL9/Dcem 4eVhyOoC FJFTofI30VmkQzVu TlTsi9S7&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.bestgiftshare.com/c?x=IOO0yyFWq1IOxy4RFAUoLN3 H6lh4QADvW9OMx452hY=&c=E6 hegRgOmHSkObOODBT/i3AJ27Djp3eeLS DjSAhvQhJ8PMVYA 64LZUZsys7VleygN62I771hczjReopwhZKJ84dIU2Kd6PhgzW3hkzIaselBTTHa41rBkxCVWQ4yd&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.updatedownloadsclean.com/c?x=DMWVC 3W0oLtxML0McOyiFLW7Q5n zHFsgxjxVaK5Qk=&c=patK7YtQCQMtovVM vHQghVEN4ueVQmaTYt8P6FQVrV3Fm01lsDRR TQgKvo3jf22t3o6Ea0vCYuAvTyOsWkZo WjdqLBd4zAQb8CVmQuFSIniFuPn40mMHFYrFjH5lU&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.hostcleandownloads.com/c?x=xQX21/BXN4up QX3DRULcauRV3oTt7huMzBKZJNCUhg=&c=8E tFrXJTxkX2lr6K5P1tBVa/VvD1F9XKU2Pc/uwhsZB3J6RsksF0Y1MrXBrdOpYclEoqBt346iUQHrv2JqnwX55wExK/oV4vPzaBRGGALrHAcjGd5JMbiXDB/8GoC6K&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.bundleapplicationsbyte.com/c?x=7F5oFz8S LZxSf0fTjNVHVJIyUa32wT2txZc2EbXk38=&c=IFYxIfILs/dsd2fFqUvaTE6Dze 2XjGzFLXWr3aHy GGecvGjvOn1dQvT9718tnVhymVlVI19hXVilGsodAtg 5lc3WQsDHK/Xb53MSHNyHqifGu4G17d2YSTn5jXJ3l&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.ranchconceptsbundle.com/c?x=dddYEvBPVRw1qoFdOTFrPgeeer1uAz9T5qM cWJ1x9Q=&c=bfpu28bIBAIy2I0jhKA UmWaVomhzMKaxz9/isjg4MGvIbRlGI4ISyd2aevewNkOXDonc/Liq8egMqSmNSxlrPriDzDU0QDwocRTG4kQ9nZqdYsgFEOtbKKQ6ONwrzAR&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.bundleapplicationstower.com/c?x=FiUy3oZFPg2clloJi 6Nh rFU9kYxlxJMyb2 YkcHFM=&c=lBUh63i56cVwbeXl6r92i hf1hOSDNe3h9muPxtzPwbEOvW4rLsavj09ap/UD/6X6aPmdvfKh/fJc/XYLgVZmO8UjfXUV6QXq/ReBeeJBW5GZ03YlhWYUyjFmBy38Yhm&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.bundleapplicationsbyte.com/c?x=bRWH6PHItbTBCHSH knYtWtPKdD1fc1H8pB1Wp7u5uI=&c=4Hi3DXZqiP VMsxveg9cmnADKzOVeCt412YSnNZ3U0eZZwFjMEiwPsmCQOIPMqlDnrQHTTj560ik26JnZAGLgd/zH5d6wVd7GdhjqOmPNiW87Kx/Dnj7aPaDNw AItE7&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.centersignscapital.com/c?x=gUBe/uF/sgWSy74STy2GhRfjLO2/2qiB6sPwQGeWdRo=&c=jbn7ypHCnuopAlXfsKNyfsj /SMEfj9PeTnTMCG92UoHkCUuVAUx4q9vY7hTmpzDNFMhcYmne20w3AV1aDKvzJ0iveZLwbwxljk0fyXBnEBTxJGfoN95Ayfzx5lTnQ/2&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.bundlesfarmsoftware.com/c?x=v2oEpZXg9yCCpzYNONewnp5SAkVUwAVS8d5iGwmSBsw=&c=qDgKP9uTPpxbV6lf3QZc3pstPggM/uLdo8tC48Rxlr1daTbH2o7bORWRJz4RGFxFXDAfxM5Ktanu1zwVj3am7Ad7oxrtPjRpjJki3J5TxT iEcfYVGL4wUaFarfLbz6e&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.bundleapplicationsbyte.com/c?x=8EYVtRm4SSpyNhqE5UiM4Nf2ZbtY2k28kfDz6/xDkPA=&c=1c3n9J5XH1ZTXm7wa8vXl0x9HjI6Mp 2gRMANCjWfCBbzsKpY1GArMEDJ0zGTFlZ8vPYmY2gI9 0wXElC1375MOyo1Tb0lwif357WxnZ09GXIQw2VD4c81nytwImBR1j&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.farmbodybinaries.com/c?x=y5z8vj s1rLVPtj0EtRPtYer8/7v9 kV0fRyAjOeYo8=&c=dYTjeFYmCvY3r70Cu5APVf2lCPEHib3YQmTTBWl72PAHZDUrdqAw/jtG85McGqmueKVixxWPlB/ MPPrREwkmNfZkD7l1fsYXL4fIluu3Iu6X1grkyYaVchgX8GYAjAQ&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

Latest 30 of 88 download URLs

Remove freefileviewersetup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.