home

frostwire setup.exe

Application Installer

Criteria Quality (Fried Cookie Ltd.)

The Fried Cookie installer utilizes the InstallCore download manager which may bundle additional offers for various ad-supported toolbars, extensions and utilities. The application frostwire setup.exe, “Application Installer Setup ” by Criteria Quality (Fried Cookie) has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions.
Publisher:
Installer   (signed by Criteria Quality (Fried Cookie Ltd.))

Product:
Application Installer

Description:
Application Installer Setup

MD5:
e1006dade847dac54170cfd790c771b2

SHA-1:
322ac9eece70149a63c558a32f6d81cda49571c7

SHA-256:
5788be33b5fa6a2214564760bc91f656ba5aeb34ad7b088e2735ff88fbc0f8fc

Scanner detections:
1 / 68

Status:
Adware

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Description:
This is an installer which may bundle legitimate applications with offers for additional 3rd-party applications that may be unwanted by the user. While the installer contains an 'opt-out' feature this is not set be defult and is usually overlooked.

Analysis date:
11/29/2024 3:29:59 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCore.Installer.Installer (M)
16.1.24.20

File size:
969.4 KB (992,656 bytes)

Product version:
1.2.7

Copyright:
Internet

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\frostwire setup.exe

Digital Signature
Signed by:
Criteria Quality (Fried Cookie Ltd.)

Authority:
GlobalSign nv-sa

Valid from:
12/16/2015 9:21:34 AM

Valid to:
6/29/2016 10:39:55 AM

Subject:
CN=Criteria Quality (Fried Cookie Ltd.), O=Criteria Quality (Fried Cookie Ltd.), L=Tel Aviv, C=IL

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
11216ABCF20419312093F809F0E003C850D7

File PE Metadata
Compilation timestamp:
6/19/1992 6:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:GN7LKXirSl5g5MYuHz9GNh6zCaWM4UEIBtot+k2G:GR2XirSXXYuT9GrMDE6Rk2G

Entry address:
0xA5F8

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, CE, 8A, FF, FF, E8, D5, 9C, FF, FF, E8, 64, 9F, FF, FF, E8, 07, A0, FF, FF, E8, A6, BF, FF, FF, E8, 11, E9, FF, FF, E8, 78, EA, FF, FF, 33, C0, 55, 68, C9, AC, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 92, AC, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 26, F5, FF, FF, E8, 11, F1, FF, FF, 80, 3D, 34, B2, 40, 00, 00, 74, 0C, E8, 23, F6, FF, FF, 33, C0, E8, C4, 97, FF, FF, 8D, 55, F0, 33, C0, E8, B6, C5, FF, FF, 8B, 55...
 
[+]

Entropy:
7.9325

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
39.5 KB (40,448 bytes)

The file frostwire setup.exe has been seen being distributed by the following 22 URLs.

http://www.tourworldmeta.com/c?x=BQUKMfA7x4PKhzyYa08vD772g61nxL2kjIEEoZLOptE=&c=IepWrkSeTQfEK9lBDq8ujepJI7mGYP6p ZGGd3tAw4U4gCK6tKQ4wAN4FoRLp4yKuiq86PA0YJgAN ELF13DN0Aq9SFLQG1K/q0tTb72D5qZJulHggkGz8EKZ7LJ0MxN&downloadAs=FrostWire Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.giftbestsafe.com/c?x=bTu9YJIp2NbGwQKTXKKa4Xa6X6by24z/9/FViJ4n8FY=&c=WwzIKfQZnoB6wqQUBCz0Z39SZmgZTYM7PMYP0HwMZnFEVf67HtR17/SG0utfuOduchABckrezbbIhrJbVFQhEKHBmeRh48ddHr/vtfhvbYhh18VrafJWtbPW6xABt8eD&downloadAs=FrostWire Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.vaultranchbyte.com/c?x=1azKvSCt8S6TNcFbik0JJAE40uzCPrgYIFhSE0DZDkE=&c=98O2j0pIK1IFf0Slw iunfbgGU9xWqdSbYXNfIKg1JU x0q7cIjIgNKQbLB9kGCm9f99xrKYgyLUqh50jj/ UQkMUIBnwtcQMBUGg1xf1pW6JnKkxgqsLrgt RqRJPxy&downloadAs=FrostWire Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.tourworldmeta.com/c?x=JCx7Xp22i5xLDLeREJAWd9rgR3C9cprUuzOIndBJ6l0=&c=qTr8G9IwfMHFjiKonHDsu7s8p9UydmZraEKTXWAIWCzy3aCCX0jOyFxckqLHte0WLSMRH vaazMzwJH60oNbFkh7FOFAvdyvv/WNgilTIb962OA557r0wApKOpdODNZq&downloadAs=FrostWire Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.giftbestsafe.com/c?x=XO2gVlKhFVEhTk8lwAJYbOr6 nUai/yLTsjR3c05ipU=&c=HgllQ84HNsEqqdI677L9iIgbRcRBBqLGiArPLftAnkXUfkFbnn45qxgfYuXOSSYa0AVs RegYlxDNE8qQ/XzTMzt90xKMDRNKhciQ6akc8jwxUjyQIeH9PUEvdR91RF8&downloadAs=FrostWire Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.giftbestsafe.com/c?x=3YMIQ91uzo6HjD1jI2xAxiOfAemhOtOx6/bfKekFhfM=&c=6ChUAWiYM3 XcfUvDQB8NBFd4Tsae7FV9XnRAWB9bkfQhWlYoFWATjr3nzTfhpM1JYOrMRDmddnnzSZctWsQmZ79662npeZlaILCjC2GX493cH2d4K9VU 7/gF/icPHb&downloadAs=FrostWire Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.filestomes.com/c?x= V5/aCf CiLBB/TyRNtxCb8rBXx4Xw8tLL5U5Y84LoQ=&c=WdRqBkr593 mtTyDl055YHmtHTiF36omB0H6sCJD0f8IqTJLkNB56vb9AxaLbWFE46UERj/5W4AS710zf/5rxsFxP BiqPrAORK9 DUoMG0ZrWd8teD eJWGzq57LgQC&downloadAs=FrostWire Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.tourworldmeta.com/c?x=KUVxD0FVelVOee6LyGkFebMBbKrTI4XJcLhQqy44LEY=&c=llq8M6eu6UBEYcK4Eb6M8JuB504f3rHZHhnfjgArSZioV6UjaqNVL1NcrPRxpHlBE h4LciX1K9pZXZnHeA1D57J4rABa zjq 3Gx5HTxCFSR AMoYmq6FWBXhfgH0I0&downloadAs=FrostWire Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.filestomes.com/c?x=gbVgK9xPvdUqdTnoXTyE4yyKH0ynk8ucb8/lfMFa6Nw=&c=twtU8K0JwGsKV4wRnDpgwyuYESdwvHleztamoho5oTBQ403BcSZXNtaciePozV4sPBSsyfNdZq0Q 9q9ohGvNQ02js4MKbvKxf3ywByr/4qsy03ytM1ioDwpAAX/ZmPj&downloadAs=FrostWire Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.vaultranchbyte.com/c?x=Rm3t T atk8zeNKV7UIxV6YDIkrSuwNocO5gqqiqjk4=&c=SeZT5 h1JX3gG9s48GUgF30hd6txuYK44XKho15wqtNYRhLdAD/0uTsEuJp6HvCpziMjB2hbCZGeKweShCGfR2pJBaZ3hWtM9x6E3LVUi VzzEGFdd4Usy10cjq8HVKA&downloadAs=FrostWire Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.vaultranchbyte.com/c?x=V5TRFDPmLq8Y s7hVT5ZFg2W6/6E33KPEWqlNrl55Vg=&c=ErnGE7NUv/ibxE60ZKgTCN1MqJ5C1bIqFxsRdcUBAl d6YSA4XeRORsIJnE8v5zueso8zVjckgZ3Gp/gEsMNioyTc3sV8iUbe80hLwqK1mLMYgbayUoG3VWSYJZfOgAF&downloadAs=FrostWire Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.nowappclear.com/c?x=fWD3dgNRxivEpmikRvgFP3ph64FvIDxFi/39i6kkb1g=&c=ua8lrVAKLhWYrE72vyzAnpqZrZxUUl2l61ESNXhnNneUTCxn9zFj3hgE/QrPDnBx0QVXWlJQrOtwIvgrF71 rgMuQpUppiLg6lx O/KAY/rFiqwOsInvKvh5kY4wHskh&downloadAs=FrostWire Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.updatevaultsshare.com/c?x=6KnXYrZ/CtwlP5xzZfWVpmAvkFXQM0V8JbirXimZq w=&c=q/Mqt5N8LnNDGtlyckH9xFoQFUMQh KLxKL2E1wXW8R1S5BUoZJ1VL 0jpQNMrsjhB/4MK V8FcSpz7odBLOMvnTmL1cL7RSO1mx 4jzrSv/qTHG33cDAknPA/eTXi5Q&downloadAs=FrostWire Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.giftbestsafe.com/c?x=i64/gJ00ZEubSfowoHypD4NPtTqBmXy4IEzVhbZrgFs=&c=Or0n37 piyieuLspNkJnhwIOoUdyoY1GIfm9erDxzXdPgDwyHFGpip6WMht/AHBVpUHoyvdmPB3wJyNXbBZPHtzoX6kGo8e5knvumUsdBfGsHBX5G6ozWLkhhwXOHDlG&downloadAs=FrostWire Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.filestomes.com/c?x=HlAvaHwzkI6cLT4gl1Whq4tTJr33F8Q8SYSAkawJ6yY=&c=Uc2EgXs2ymRuwtGnwxWFwmz QVc99PmfAgcT4VZFC/cC5v6cyWT8dXdxyyHOdNYk38AmLqkHn8UHCgC3X9VVo7wyUhEFgP/AtXzFq6n2nb Lut7OxuXNR9hRSCQlV3Tk&downloadAs=FrostWire Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.giftbestsafe.com/c?x=oxnwvCNlK8bJIWL1UhsqwXVTPhIjH/l71F8uKavgOLg=&c=09y06n3SwOJaPG0VD9ei89w1/wDNosjHGZ98vlKD3ALFo/qeoSGp3AqEuK0kIjKez30JUsL2xWJ4sdGaoyoqJPK2unsUChckktemC5bgh6ujWVjP34M02zgsOXF6WMD8&downloadAs=FrostWire Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.filestomes.com/c?x=sTiV5iGxNy5T/AejzcFmFEo UiJyDq3SlTjW3EZ7/Cw=&c=4NLUhzJynmZo0SJ6EMB8BdAfJMKVYmPMCdFZUzW5LIPPTiRShrJ8DipZOYgNh6dGckEwtpHtvwldJdyv5/SAUKx86Fh5n KNfeV5 XpVI/P2mqfYtJrTp2Tv Aule5VD&downloadAs=FrostWire Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.nowappclear.com/c?x=U/554o95HQkR7P0Ir8/NlhPVoleZY4X3UOXayAH BY0=&c=ytd6of86fSYva QgPwFN4xp7ibtnZ/FDFYlScpKlFmExjINubShPzJP/YWAScwnijgmRRumD32/zFTDikxxzwM0nGTuHBK5qitJr6zrFAantjgOlPb8td7RLM8ul8H68&downloadAs=FrostWire Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.tourworldmeta.com/c?x=8N/80w16b3dKCfg5rVsja0Gf16jzkjoghMED8PQFirM=&c=iLyHJ0ZT6EU9F1TMfvkS6xI8ICxdq5gKa31nD jrsOQC7aw4lgVK1IJMrESL DjkKWRhfsFubDC6JAUsLVsvjWw9r9gToVrEMEPSvQtC7XdTLbI64XGGFVLICmvkuxC4&downloadAs=FrostWire Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.giftbestsafe.com/c?x=M Awf4YzaAt WfKVI8zwyjLa3YFOSW91uJJxIcnCgKw=&c=7x83PyA2391B9S /Bk49f9CaBHzC1F en9XC1yj0BfhBd5684gX7Yk2ygmkdn/kayLZkrLeRmy1nvls C9q5fJ29mBOdvUHrnGhZpEHJvBbpsAT4jB8XXNTFQo7HBm45&downloadAs=FrostWire Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.filestomes.com/c?x=uXdFwj0z9rh89r n7THggaHJ2SXGyfd3jeD7962CbcM=&c=ow4QLSPPxmH0G25dpblqXCptBDhFZY9t/6W8YOg1Urs1tK7R8/VcCIWKXxamklr4N1tpO0nYPj1uWw2vAFQEgwJXoMWxbjEDpgf3HPAUhfQmCF O7qBgzwrXbiO/fHOt&downloadAs=FrostWire Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.giftbestsafe.com/c?x=KPEW8it1uQgzkdQ93giQfHpBgMINQIEUIZ X9l4FVtE=&c=aMmo9lkQsjsiEwKMojHX6fFQSzZmkejvVJZHtD3ks/FwVAYBD5Jx6llZX3bb4NP4h4BjpNBjojTw0tBXWX26Zk7tuCiHN02783TX26smPc8NopDzU9IMWrl592a0cjcd&downloadAs=FrostWire Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

Remove frostwire setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.