home

freefileviewersetup.exe

Internet Lite

Quality Funnel (Fried Cookie Ltd.)

The Fried Cookie installer utilizes the InstallCore download manager which may bundle additional offers for various ad-supported toolbars, extensions and utilities. The application freefileviewersetup.exe, “Internet Lite Setup ” by Quality Funnel (Fried Cookie) has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions.
Publisher:
Quality Funnel (Fried Cookie Ltd.)  (signed and verified)

Product:
Internet Lite

Description:
Internet Lite Setup

MD5:
cd0e00612b527b30522b158b27ac9d49

SHA-1:
f68e0fd8f926866bb30a17994f2d973907c21fb5

SHA-256:
78e3b49f79dbd5f20c489fb8013c935238110fd1c0192ec43d7f928321afe3d8

Scanner detections:
1 / 68

Status:
Adware

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Description:
This is also known as bundleware, or downloadware, which is an downloader designed to simply deliver ad-supported offers in the setup routine of an otherwise legitimate software.

Analysis date:
11/16/2024 5:21:01 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCore.Installer.Installer (M)
16.1.24.22

File size:
1002 KB (1,026,032 bytes)

Product version:
4.2

Copyright:
Prog Installer

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\freefileviewersetup.exe

Digital Signature
Signed by:
Quality Funnel (Fried Cookie Ltd.)

Authority:
GlobalSign nv-sa

Valid from:
12/17/2015 5:54:27 AM

Valid to:
6/22/2016 10:12:52 AM

Subject:
CN=Quality Funnel (Fried Cookie Ltd.), O=Quality Funnel (Fried Cookie Ltd.), L=Tel Aviv, C=IL

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121771FCA92BA51266AB4B001FE1E840DDC

File PE Metadata
Compilation timestamp:
6/19/1992 5:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:0EtjPF8gLTG58I2b3kDQ7DEIGL+xAYqZY3ddA0SmTAbzkv/wf:0ij98gm5+bUDQHEIPzqZYdmLgwf

Entry address:
0xA5F8

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, CE, 8A, FF, FF, E8, D5, 9C, FF, FF, E8, 64, 9F, FF, FF, E8, 07, A0, FF, FF, E8, A6, BF, FF, FF, E8, 11, E9, FF, FF, E8, 78, EA, FF, FF, 33, C0, 55, 68, C9, AC, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 92, AC, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 26, F5, FF, FF, E8, 11, F1, FF, FF, 80, 3D, 34, B2, 40, 00, 00, 74, 0C, E8, 23, F6, FF, FF, 33, C0, E8, C4, 97, FF, FF, 8D, 55, F0, 33, C0, E8, B6, C5, FF, FF, 8B, 55...
 
[+]

Entropy:
7.9180

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
39.5 KB (40,448 bytes)

The file freefileviewersetup.exe has been seen being distributed by the following 50 URLs.

http://www.cycleclearcontent.com/c?x=zEDRLwQIDiVB0ZVgPQPcioS WVGrZXPWURbsgnOS iA=&c=ZRWxtor5GwS4C7heeXxSpYQ70EoRu78XEeIslDLuTB9x5tt2HeZynCU03uhGBgbnkPG3xi eX/ss2ZmeFJJPstQ1yvhTbKrfgsbW9L2hP8Ko16L3NdzxS7m0NBcBbmFG&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.cityapplicationworld.com/c?x=ehguh6VoeC1y6aLMih/1q tEtZo3d7yAr wPFGjCC7E=&c=FWp3goZNTBQ6vC8hlf6bIw W1uvCd9RBjFs8NBGyQJU/mxp5JBGA4vob76L8dzrmqVTORmljWCfZrRYJ5GF7EfmQRC2NeHtsL7gicrJBI8kH76Eq1S7YOmNy2FA6OoBk&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.towerbulkapplications.com/c?x=Pl9FVgNXuWvDUpsSCXldNnOeLd zVCnGsvzkRnuxoDM=&c=BsaGlhtde4rSBJ1/btlc0MgTKcBH4vHosbcFt23/1Ldjo6/a fqm0rzd4V6C93AOr/8P9avo/7EwnspDKfxJDZgpt/0OLnB6cjBUs2mUvMzDvQ6f5Ch yR5qgoxWYN8r&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.presenthostlaboratory.com/c?x=WR4sxE28puGHRI4ApkUvkomj0SbpOoL0WTKvK1z83Ig=&c=tU4OOXrvRHfr1iGaTrcgdDDwlIOKec5WfTdNTFaYVmCialGz5b/ngitsIEEGJCxBxiJijKWw2nHeKAFfwndx6Sk24S6jJXsYweVjQhV3an/0trGHZp1RQVzeX8ZMUlhy&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.binariesbodytoday.com/c?x=GGFtCrgRnq twuZgylkFQLuzIsmopul0J5X/G1NIt84=&c=V n9x99Es3zetmLyvCu/zYZhyvJ/pq6rftfOGvylyBN03nNr82uVSzUaHHYrZu5Rp2B9UPOZ8wJwEAmlQ4iwuW43kkjxdE BiteFRsjqOdiz7keF61K7pItlwiWj7JTV&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.tourcentralstock.com/c?x=bESi3fMC4c27ykji/04WgYsGjp/BrYIMriHMWeQBW8w=&c=7CUxz4Lh akGtqnjse1y13tb73gcd9mTkxsNMxkz3AuwIFlkqTXwVksVqbJQMwsoHtVXkpxNvBw5WDXxgBeL5VTE71bZQjnzwizYMJlXIZct/2Sh1eiVyu80aq9D3acI&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.farmcenterupdate.com/c?x=9N/9nTeUfWflSniIKt4435Ulz3JbsNe2rs3hADn7cSk=&c=LwCuo1BdBLGe/OV3ZR/hhgMy78Umz7PJTdDqQzP/9JfT3oL0CTW1VPe1HlSk9qZdMFXKrEFT9L5epU2TV0tqe454dw7Aado01XrtScVwWdrvyEPicJzz93Zcv36zQQLx&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.tourcentralstock.com/c?x=8WBVMfVR29aJqv4c/eNKqnwrEg5jxDoxTfZxEeG2m/c=&c=zk3BF0wmazwKf9ldy2Z0Qhjs3cDj6orj6iKQ5VbmKM6Lzkxy2u7KBljLjU3yI0PYl7N441zBgcRfbmbukpeIF29Ka9at9ax3U32TnvXt8Or0D4VohV2RhoDqlaIBzV/M&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.safeappgift.com/c?x=lTiovC36s7WGQdgeO7HGsFgw8ajeOeCp5zEehf/L5ho=&c=KPMctv9ja8OVk46CTolvfVp8BKFe6xZY9m8lyGAOFc3jUtiqK2hf5u3l5yRFQakKEHPIc8C5hhevVQmiJdkr87u4s/QqjoVTYisxm4gQH6hBSKKivK2XjuzK8/rwJtGt&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.deliveryappscurrent.com/c?x=xLy1UcbcmtBESvtNLcXPDusVTKWL1gBe8YIRZuRlFmQ=&c=tkH6cMvYX3mNPIgYEPy4ArKv9s9eMExXC6BNC8eskgFI7vpZtRT4LyRd5Vr ogSWLi7EntX5EqAt6JWp7Nx4nXJ8PTgfMGrf2BD2QSIdJJRcpr2SYvAXAvoTeh/YfjEG&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.citytodayvault.com/c?x=Re9BHxtSTRu01c7tVSpfx2ZpYzTiktFVk5SMf RGmiM=&c=z0MVVU49wwE/aTSI8fPJSwzgzAGdjkPPKIF 5Hm/cv7o31rQHjIxC0dKMNOVkAG1YokXrajjQj05lEC OB95Pz/p9IsE6h6W413pHmkJZcyVz3KBifnq3RC2uyjvO3rZ&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.tagbulkhost.com/c?x=GQjs8LPVQQux33porL1cY2pIvZU0nqE0S2qBXYkIj7k=&c=C7XJV cbcwwZEdpEs5msMg857R4QSEilYQ8QCTWVFMlc4A4FksGoQG6yZWubEw5uF6jfFQ5zNr9EbK j8EZcx6C8fE3OEFPSP1X2d97bTMUOTfczH1bRa1PAIRCXsoS5&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.applicationscitybits.com/c?x=mSRcEclvfmKIhU h3mlpzX/QAA4pEJpsCWhTrF6pd64=&c=HT9aksIVFkP4yDbbc2hub69KDNvQnl19mjK4Z1HL3FQ8Fzj/bTLrPsa7IF1uv0kCPnAqfzhOx4KsJ3rPY5JN8cwLiYM3WfDzINmpVe3pXVD5IxUKP98KZcS iZXk0WzL&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.applicationscitybits.com/c?x=UqIRfgFr0mPIzzFtYZcfvH6GPlVtyhw01EOM9Zn0m0U=&c=0Mg3dWajkRU6AVtUdcFnNzxY7chZ2uGHxlqzP7ZmsFH05qRDglCbBdO7pbBzNagP 2T3EIcKV0H2XGz8PfI94rHuShp3RZsfPZs4qIAIxwJ RFNTn2tbXSO1YKryXEYP&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.grabbodytours.com/c?x=Sbh4sv2EBlImWt7Vp1/o7fCC55V dmUUGPHod7Vn1ME=&c=Jw8p2//OIZQEoBnTzyYI2NT29gUYhLeEv52vfQW/XuZOpvCiRnR9ja9syWvKfm5DHxDGAgau4NwYMdhax7gxr05LaC8wF6qtCiwbvCnHTIn TmHoo9piw8odRZ4wQaZ1&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.quickfunmeta.com/c?x=IxW38eV/bIVLlFh4vALJnkc3Y04Gy4acSzqgi2mp6dQ=&c=VqiNXyjDMVD6GItMN22RW TovTIAaMAk0jdIWnj4HgiHib18r5JLdkmrYR8cMnTNNx1FbNElvBHHPfFUGNA8Db76cKduqUnD0ggoQD2HdAizwWg2XKriUX2as7 YbhQl&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.cycletodayhost.com/c?x=4IKTMiOH0ZyhAJE9M C1ehPNBSqMPdNEnwf/PccUJB0=&c=7bepUpmrYP8wsEKun6tc9ipc rHPtJfKslsvGLIbzVisJ63day2eDlZptmzTHeNGuWdGmui TXubnKMSjdan6Hnn5J2u/hyE/0 14OWXDWh1n4V9cdaFFpzsnN zwpTb&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.hostpresentrepository.com/c?x=CC/rj5jD67Z8iuLoPlNV7KEmTEaeSlqLUZ6AiWloVK0=&c=F9wwss/cG/YwbSlar6WYUVNK0BfpGk9VFBWNeZ1ocQ2N/yqSxmGE9BJmMYjvpBvclrfxXhDVw0KtQmcCE/X5Hupf4f/JcunOjpqut4jCdPWCohvRisBLsvnTY8JGm49R&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.contentvaultscapital.com/c?x=iWsy3Y1eoxvZBPTwCbMGrCDAbRka3kHAej281hezC2E=&c=UTsBqIrEyOpHmw4UHFUwiXRnwTEELev8Jy2ms1VXBZGORoiQA 0YQL9W/Dz5W/9rpvkoxsKNxI45YHhIj9sAmfnlfmEXYRyQ80y6v8lPhh7Y5cST3r7aQYreXfIUX7J5&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.stocksignsfarm.com/c?x=ECLjTgDGhbhkntykVxku/lgMGq5HmegZzLR0bHBGK/s=&c=oDF4yyMbaH2SjP8manigJ3gnNSBZj7G/1TNnNNDkburobQOPNJPj3DBRw19lQg6nMZIJV AWJMj00JstTPQPj80zvQo4tBooR9R020ehTQ2jbTht3uNCvTrc8wBdg60g&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.tourcentralstock.com/c?x=2nAALUadNHzfFHnmpKjBoITqj4pCDQ2QRQCsPR/JwkU=&c=oAPNzxrvByZfWsxBxUHmvCOAy4O1XSomqP7Vj08BRIUp7AVP5d8CkCa1saWXCv3KUFJP1cTfh2xOVb3wR0Qo0JkY9ERDk3tj4ej l5uSxFcQlr2gOuCiH3prKIXP4KvS&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.bitsfarmbody.com/c?x=bcjk4TCIHoQ9Oipg0HFoxHbsEps2z8pmeXLp5JDyN3M=&c=4ffZGVk9SyMQ6Eodmb4eT9gHBTnkPvxD FWnJ0 GmHo7SBnimuGHi7Vi6GdYmADbnRXjmguj9DF2MYDktbz4DhXOfAW0JTW3Y3a1Aka5Vc6U3fSFbNzREWt6RjJokyiK&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.cycletodaygrab.com/c?x=O2Z9vv3c9AcOmmmZMalPoYWfSgWT1Kagrao5QqLjs0o=&c= LyxWXjZtT/MwCghl9HmGOC8iQ 1bG/vK3/is0hK7UiLt4m1H22nWvV2 g26CgzictBbA0eG3PsLVQqn6RmbVDIzvw1La1gGlvSVQbXlyX4GM6Jf295cAFWfATVuGFQM&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.quicktowercontent.com/c?x=aDfZgGlKE0Z0/IqZWKJHLuBzce 1IaSf0Rye8ARu4MM=&c=EeR7DzvrZQbHGHJgLvoAenkTC/M8ZhbuD0xM3lBmOe/5u6UTdnoCuczDf7Y3i5KnUth4a3/iWGocy1nDjYIFVwoKXaRF/YwRWTSpljeYsm vawk8B xch0leVpIXGho4&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.toursheartbundle.com/c?x=bvO7jBSSgzy9/LzPUIlDtijKZYsqTc9q3eH3WVwlTak=&c=/MGDgEZjv4AOe67M5jkURODyg2Hdv2vJfzFexGbW9D9u7MpCIzPE9SUH KvwgiEhWHLyfllRB5UaOwuSPkqiuGTbgV1ljjy1BVrxSg9Z/Z76TXBms4sbmKxcu/lYsX6l&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.giftfungrab.com/c?x=6Q1ac1TMb4nYqV OK2Vg3LORxNJdExWieb6NFyxWzZA=&c=gw30izuYBewBGvAt1k3yEuiYbpkiP3xqLx1ctxj6WYYE29zfl4/hIwBvDjxr80aD9Czk48dUSFAV36FOp gzSz5WZRsP4Jz20IVXBKXBOBf18M98VduUQI7P1uhr510u&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.vaultbitscapital.com/c?x=WKj H60Gb7pJOxRUjGPBsaiFY o9MY0DBEzTS/1lPa4=&c=/3uuWEJ/ CCsyHjeDOIxqXALIrhX/IiErv2qcXL7p/jWAKijIcTk38neAeMmJ7wBRnKhuyBqJh6T50lbA7z8OC9f8BGN4F1ORL0d wvjAEBMsv0Fx6kmuEWLcg2EM5Xb&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.stocksignsfarm.com/c?x=2BL9ImT3S6JOEMcb2QDlH7SaO32Vda6yUUBzZ7yY2cY=&c=SpE I0zxMQchpQ2Rd5A3bFsPFICrvqYVgCwK4hZics4esEnS7FUqQ0PcT8n/mODEZswzP37A2Pc5ci9YyFsZzW 4H0hq2mTpr4BLqyt4/tH4csi3jNIjCiZNRMRDdnQj&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.tourcentralstock.com/c?x=McbzAaucqZQaOY652JjiwVq/hc49Yh4YOProRWvuxy4=&c=d3kLpig1hZKPSmGZnQmS8nXFifNB6xCav4CuvcmZLQqzxeUhsN50iQ5SLZ2wyIhLNFZvt74l24gVEWo9lsH1Bq4Xu 5aIFrCXOT7xVAsIrWpled2kHwE8mGBB8bR4aSh&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.sharesoftwarebest.com/c?x=gfMZiad64skI3jxuc2Mv//Wm1WxhcY0EsMFU0fXXCOM=&c=Al9tA7AM1NHzw4d8DllxMB hiLGElAwcTfcPPHOTkFDgg8EQr8S8V/ef7BFlF/6FUc6ZqQj4VqUFFC/KvmBhFE63RtNkVhxHXai8d8Fh6g2mKXzmnZmHGG91 htFTvCM&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

Latest 30 of 545 download URLs

Remove freefileviewersetup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.