home

freefileviewerupdatesetup.exe

Cima

MaxSpeedy (Fried Cookie Ltd.)

The Fried Cookie installer utilizes the InstallCore download manager which may bundle additional offers for various ad-supported toolbars, extensions and utilities. The application freefileviewerupdatesetup.exe, “Cima Setup ” by MaxSpeedy (Fried Cookie) has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions.
Publisher:
MaxSpeedy (Fried Cookie Ltd.)  (signed and verified)

Product:
Cima

Description:
Cima Setup

MD5:
11a6911731d40be94c9782c05a5431d7

SHA-1:
82235bc66487dc66e45e489402f164d0bee22e8d

SHA-256:
5c49fc9eca91280ac5b9678538963896effce708ab3bae913a50cee865279bde

Scanner detections:
1 / 68

Status:
Adware

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Description:
This is also known as bundleware, or downloadware, which is an downloader designed to simply deliver ad-supported offers in the setup routine of an otherwise legitimate software.

Analysis date:
11/15/2024 2:51:50 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCore.FC.Installer (M)
16.4.5.16

File size:
1 MB (1,094,904 bytes)

Product version:
3.2

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\temp\freefileviewerupdatesetup.exe

Digital Signature
Signed by:
MaxSpeedy (Fried Cookie Ltd.)

Authority:
GlobalSign nv-sa

Valid from:
12/17/2015 2:11:09 PM

Valid to:
6/8/2016 5:06:58 PM

Subject:
CN=MaxSpeedy (Fried Cookie Ltd.), O=MaxSpeedy (Fried Cookie Ltd.), L=Tel Aviv, C=IL

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
112125C58A41E827F13C76AD2A1D648B8808

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:Ip1CHYeefisG65UfjqbPmdk681rpUQ6ZFXjwC0POr3s7Oy:I7vzfzh22rMk6xQOTwCLSO

Entry address:
0xA5F8

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, CE, 8A, FF, FF, E8, D5, 9C, FF, FF, E8, 64, 9F, FF, FF, E8, 07, A0, FF, FF, E8, A6, BF, FF, FF, E8, 11, E9, FF, FF, E8, 78, EA, FF, FF, 33, C0, 55, 68, C9, AC, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 92, AC, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 26, F5, FF, FF, E8, 11, F1, FF, FF, 80, 3D, 34, B2, 40, 00, 00, 74, 0C, E8, 23, F6, FF, FF, 33, C0, E8, C4, 97, FF, FF, 8D, 55, F0, 33, C0, E8, B6, C5, FF, FF, 8B, 55...
 
[+]

Entropy:
7.8975

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
39.5 KB (40,448 bytes)

The file freefileviewerupdatesetup.exe has been seen being distributed by the following 50 URLs.

http://www.worldappsfiles.com/c?x=pBFWEz l5J6foXikCRC9oRzvJoz1yU5k MtC5cAW7d0=&c=NEu4xpWLVV9FdX4MFUqK80QGPBiCUvwqn5UaaUeZlSkEqL0djpfOm0TAhci6qp8v O0tECIbCQ6OxIxOJbBbGifkjTwDReUunkhzrpCGqsoQq2UwHyGAdRASEnYQJ cd&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.conecptvaultsranch.com/c?x=94/AmeFUTIvpg1BzcsBRtNuyiZsVzyUgL3udZZbSk3E=&c=AId9lwYMbCVV nc1blalb1xPErageKlonVjLU7QPjiMGiCl0nvzc0STLYO0K9rNaKgNRUd7URzIAUGQhGm52QVcX5OZ0stH948YbGbP0dhlb8osCKstHpx2gTe32a5im&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.megabitscity.com/c?x=kfRAbaH4Rn4XDQXkL5s4SjIjjLSbdJWC9Qe2J33jrE0=&c=r4551 ALq KWBEMmEAbxTFw8ozTieB1JO16Dr0NupWdMRMIOHJ9WtQK5eR8ULxAhGCF3HiAUxo3fo JMB7FlYdyHBj6g0VjhwgY5SNMQhjJ2e3sPgloxSYbXqv9QXoSK&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.safestockconcepts.com/c?x=3bVxO5lNvpt 6i4V9bDvFMBe1DEH4WB2gENeZnGWvyY=&c=Ng/WQ1JiMKa/qmqxnVc03D6E3KhjhqkKhWcXzYx67dx/ikvarvIaaOnOYbnvFFKbyW9WhqrEfp621QGBFpJQqxoH58YTDB4XK3Z2g2p6GKFC8DdKBiIOIZIDQequESRk&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.hostinguniverselaboratory.com/c?x=cTmQuAOp1dYXcgnqqKG1r9dZP7vmsiN3cIefGOOlg3w=&c=82YrEuZk9Z0klMWD6thXHHSUD2R0B Bkynz4ehUCrbTgGegVDFbkcX7/Ej9475NlN4LoRIg2CvSfT5/wx1TdyT6AwolThUSK7LBXAXJ56CHq5zAinwPn Ptx14b415OM&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.grabbinariesfun.com/c?x=cepRbcHOs1u9bVtHnHFCil67sJznzOd78Mnd 2kBGp4=&c=bPQMvz9Qd0Q1x0YUSfj87vBza2aQrkyB09e4WAPBPHIFXtbdb8xTfhqaGPdLhcnD2K7JDiu0iT lQq4jRf6/vsaZpbhv2Um0ElijVgkvqXgzeJes/Aqdb7zTd7amV/XX&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.tagpresentbody.com/c?x=N7oEdQ2ylfF9juv7DPJdBTLG5edbaLBtc/3MsHlIfwk=&c=iJ5hpiz4DVouEO8SWM2vWWfLwecNnZNImtsA9FRGSAr/ncOdRtqCvrAc4Lcu1 jApDgAuEWtwgNdHuW7lG7BnJOjbqSqAvBaymHjGrL20MCQ/RxhUSM5iDY5ZDZ0u g3&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.funtowersgift.com/c?x=Bsi4xvetqsR9/yUreWafSYb8MZIdNJ8ChyfzuvrAwn4=&c=Aan5ImBXp4Pjd3xFzsVq03cD1IEVFsfWh3w/DCmuhi4GTPjVGE FKLcrNC ulIIMMmuQTrMhEgNG/tPF2I/CyoLIwCHMytpLrT2IahBbLUGHQ53f/y4MiCRPJD8akcdP&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.tagpresentbody.com/c?x=IQnhLvY8SgWY6d3sUsfoKSOM/qiXfE2GZXMd7jsu2GY=&c=FqOzdKstbqvph6mN3bG1BhhE8AIz/p9lopynun4Yhbgqa7xCnZ0BuuH7P5BK 5hjikEyPk99roWRdiImdCvRIbngDtM0ORPUfDU0qBABZn KfqkGzLyS9DLonpIiVY0G&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.conecptvaultsranch.com/c?x=KtUiVM/1VoHkEJzwITD z779N5rptLRerYcblPztJIY=&c=ZDU9GqDuru6SrEXlai8buiaHH/CY2Oc8OuWYYOznDR0lHAJ IEJRWXNFE7ez/ony8azoOrTHYihEovFxVFZaKnctRczmniMI87y3jcI782Oy EzTx bxH3ZTTpoE4eYX&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.tagpresentbody.com/c?x=10F tspIHOoDWv17qB/dG0bOpCrG7zYp0l8DQCpVE5o=&c=kggSjTbTEdXLzpsTXNFT81aTYgUUvle4vPl2BAFFvbBWx1xkHc5SJC6/C6RiT8D3tc6Et18ryq2OmPqGTyfviUS7Cm1XL/r1XD7i8ozvHYu6x7d5MZVogsVC/itq qcz&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.chucklevaultsdl.com/c?x=tjF 9a2fy6R MNXggAw nTE6KcGAHsGeEd2d8z0igp4=&c=GoC5DHabK0GrECu5r9rZb5dRzEAsKMQmm7At2V9X18En0zkbMCIn9y8J08SynnciYOihvNsU2LxjZ/rtqch5Hn8nAp0mbeljK7p60dP62jGMJYOOohmrE0fkLba4uRLi&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.clearnewmega.com/c?x=f8EUj9WLu1PBkIWNhDZOWG4W1yNrWCtfWq2UvkMtiaM=&c=LNHNkoLzOsq3s9u5x6GgIhI4EOPBziwEGrwMKrNTjLKyVbnLtOPYK5reqNpi9mo4e/9xVuorrqOv HGW2MscBbKaEehiwdu9EVx4E0 63aYDdPI90vdEf uduEHbo8C3&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.bytetowerbinaries.com/c?x=E7Sn7kf fdoD4WJlFBbvqnQk gCSaYWQQRDV/EXtfbo=&c=Qw0GaQtOjvFLjpdutnGp/8uGpbv2WBA2MOr4AKR6lzmqBKbLX21QAVzd6s2ianSqWiK2rA3jS5I6x8ICHzv99LaJefWdAhhH6/W2oWbqajO3OKNlcL8e5QQfQHGOpOcX&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.vaultsbodyvault.com/c?x=4y6Vmd4qWQAKFB92GUANL6s4CbUtR6npVrKlSXRb5rE=&c=ybzSx6irsuPO2ZdjxlljDZsgm6A6TKBFBcxHc9YNWEwCs89dTanDMeUak6Bb1pOW/0W0lhkTHqJhI5 jbvLj7QIGlSLptZtbeQOzayn34V/mysMtZ cGbm750 56h8tF&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.tagbundlespresent.com/c?x=EE7bEFIH/EI0NZ3wyCPWpOkquGijM2OLYZBNUVfW8yk=&c=W7hP4bjXIA MrflvYiZuXgSnrtK U8/AUUjBUuhADdsmT3GhGbecRF9AjULSbeshR4fATMleeO9KxP1FDpDBN4ITsxwJWQJDiBGbO7olcBA/OxZi48ZBoxJUCs1dxfQB&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.clearnewmega.com/c?x=GIOtAbOpNMzk9pixRTSdRqibYk/6TuiESaX5tua/5M4=&c= qo6ptVhhC2hFy7ciQ6HSN6q/qVskwK5pR9aG8p7aA5wwkTafCujirx5a8hR2VPxDhsSnN2XSJrZzoJfLNANgAv6 NJFnrLvAh0FDgw9ODTWkiAgrTCYB3mTmHe4aDXs&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.clearnewmega.com/c?x=YJ2rjaNZeC4aQahzf9Kz3YU577dmjp/Q5r0LOFUdE0Q=&c=Bdna 5SXqEJYJtuQTxFSbStPJwGO mYKMnMC7XErrA 7h7YYxMlrjr08jC1jZMciGw2IDuGPpA6swcFE4MNBD4q9HyJf7KBg7cfB96Y/QFD2b qxU6NOefoc3IW9iulP&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.downloadssendfactory.com/c?x=pvg/TnGiUpjldUDsBgkjcyEe50CE5jsBc6v2n88u6cg=&c=rJUKUP94Vge72JHYDn2 /BlG0Vd8cBYhg8l/VSDQc4N26BjdY7MwODAFUpQ/FoDc4pvs4CYK7s42QWy3wXaPwRGJbvQloo1vhAiMJqbjKxnd8UQCQzmNADNAduAgrx0A&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.tourgiftheart.com/c?x=ULAkRTN2Z/uzyk7uNIVx0DIMeiA2swk1 vdeluztnrU=&c=6iphwvRdWZgxvRz seCh1G9ll0G88AgUxMWXGTZvhiMyuNhL1clhutmUhA0O75bOvwGmIySfORokcabEygHWOd5oOS8HjUBi/V6Pv3KDbs7KSck6QubG9Z3YTwE4Sc8Z&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.applaboratoryhosting.com/c?x=uXlyWAygSoxxG7eMQkgGj6NOFU8oHdYW8yc9UxYHyPA=&c=b gnWQVu6F9Nwx6KyTYGHm7pCxlzQm3iS4OiAvooyfq2/g1 JmVleKSI2WXtl59k NKgIk7it6lEJQOHpvhjuMBDcDAR0f9E4RBzPScemyPiQYV/siWGiwIvbTxh25tz&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.funtowersgift.com/c?x=uLXk2/YwVwyqoyXI1nKi5uD7CbGhzzAPi IF1DMA0gw=&c=aMWBpoM1GHS8/N3jjphC/XpMl/IfmTHLCZZ1xyjzyqZkgSUCQXZlkEXA/2R9wELBbSPWeCv4aDnD8u1ljCvAhBzp9bL9Xiogzz2uxuGhDfxHqUuRgAdIZwrFIP67QTHN&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.downloadssendfactory.com/c?x=LM7a8c0kFQCB9b8jV2ohWp3WHDhSDiSa9q/oMcQbG20=&c=NO9aNV/W1U5TI1rlDjGGUHAtNSgv1lheOlhp1c77B5JD cSxaOTJQRvcfnoV4qvEIys2d1E9sS8tX5dbdukPo68 wPFQxjbZipwSpfZoZng0SvrTml5pJNaSfnQ0tc6t&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.hostinguniverselaboratory.com/c?x=Rova22CHX0aN2R3eCnFvqY BoHgvdepj1b9O61ouprA=&c=0ATAvC1GEbpR2vVcdCnaIH2VmCXrzJoMGFThENDQEDtgXCf5FAUsmACYBXI2FWZr5KWeHByvmr0C P43VIrALVCX6LJyONNSaUgw17iv6lxBRwYq8FWgfnAyMVpc00dn&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.factorypackagehosting.com/c?x=uikzgknI240htnWVsuJogkHJpuS4RdEyyUHWEDAI6yw=&c=ZBzjTvojEMTQdng17YME5OvTvQKGPMqoeKz9eYo8/YQSafeyt7cFrTO XKOg9 ln2ScussWulBQIQm3P4nTA8K7bUVUfgoxm59PR9Mp3R KQ1JP btjcVr3fquS46VBs&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.downloadsapptoday.com/c?x=eagwtQX9 KxPm ZBU3swYu Wu9xVVoJJFblodTvT494=&c=fCs u22o 8qKuYiHEIZOrbqWRHzPA7FVUROXVs7WytqhchjNbIHIx6JlHGT6HJ1EajMw5vqo 7Ys7XAihgZpMKtCpY3nEDDuKGxF1CvDvr2yVTiBWUWHTn2ixEsuLTpn&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.conecptvaultsranch.com/c?x=DsKPRG95xQV8cDvF4BsLnXl0AbyIPV7SRd7jQXtNlws=&c=TCbfyF33tVxSRepqcRgJRPv/ffIO6d fmxNM0svrUUjm77Cwpa/yjDN1RE7Q0c/oZ1TFv7tvcE5vFBvoBhgPHbV6 ML0DWp7jme/lOvg0 5qKIHApqjmyVYhZZzuv3CU&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.tagbundlespresent.com/c?x=BSxQtZvC84uLLl2W4LJrpRDNEMYDLo291xpF Lkchik=&c=7ywSEou/WxwDrpEGBpnsaZ/7Unxz3b7H/BHDCBpiL2 WH7ItbKccvz6AkDkgCD9ehZT1tGXOnVUwPqL2f82EDflKLaKkP5GuWKOAhL8mkwMPmTlruzYWmv9atHrGp6MD&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.hostinguniverselaboratory.com/c?x=5 NigjccDlDsZwrK4JcYjGtvgtWRRgCx1R/xfS9BjxI=&c=eiY93qqosbRGX4cw1YPpDWA0ZAT IHBt6h4CkLBX9oTh44EwP4YWOmjT/xY 4Xl3HwzlpDpnfTrSkJyKpdc4uHFpvvD/ZHT50qshbD48awMIXZekhCqNWl m8TdSZT0X&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

http://www.giftvaultupdate.com/c?x=NdlYoXKBi0DGsV8XnMu2V1C Xbf 514mvKQ055Tmk5M=&c=HzAnLHuC3Xe7nm WnqoQ8WP2wV5y4aQtCMTaJkRiOrOi5Ibl8wiKZ60mHxiNKRGw6dXhtyfZjWjBWzu79mvng/OQ2aGqDWA6nwBS0XZ4rY8OmYEiRNNwS 1lZdZRCRGR&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe

Latest 30 of 60 download URLs

Remove freefileviewerupdatesetup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.