home

gimpshop.exe

Faluc

Prompt Setup (Fried Cookie Ltd)

The Fried Cookie installer utilizes the InstallCore download manager which may bundle additional offers for various ad-supported toolbars, extensions and utilities. The application gimpshop.exe, “Faluc Setup ” by Prompt Setup (Fried Cookie) has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions.
Publisher:
Prompt Setup (Fried Cookie Ltd)  (signed and verified)

Product:
Faluc

Description:
Faluc Setup

Version:
3.1.3.8

MD5:
42f18edfb22eb888fcf34bebfe11a02b

SHA-1:
a6e39dee4bc55bd631b1fd4ef5e50105a0d6ca74

SHA-256:
0cfa2d54bf23ded359be4130a2f5ec904d285d3fc9a4c93aba051f3f2f87b970

Scanner detections:
1 / 68

Status:
Adware

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Description:
This 'download manager' is also considered bundleware, a utility designed to download software (possibly legitimate or opensource) and bundle it with a number of optional offers including ad-supported utilities, toolbars, shopping comparison tools and browser extensions.

Analysis date:
11/18/2024 6:35:07 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCore.FC.Installer (M)
16.4.18.21

File size:
1 MB (1,055,888 bytes)

Product version:
1.3.8

Copyright:
Installer

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\gimpshop.exe

Digital Signature
Signed by:
Prompt Setup (Fried Cookie Ltd)

Authority:
GlobalSign nv-sa

Valid from:
12/17/2015 3:10:36 PM

Valid to:
5/4/2016 12:49:04 PM

Subject:
CN=Prompt Setup (Fried Cookie Ltd), O=Prompt Setup (Fried Cookie Ltd), L=Tel Aviv, C=IL

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121DC42A7CB07A5DBC4E8F275C342E964B9

File PE Metadata
Compilation timestamp:
6/19/1992 11:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:3bd+L14vUnWcY2jqOrVQl7IdNpvak0Xz42i3:3ZoqvGWQnrVUIdqk0Fi3

Entry address:
0xA5F8

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, CE, 8A, FF, FF, E8, D5, 9C, FF, FF, E8, 64, 9F, FF, FF, E8, 07, A0, FF, FF, E8, A6, BF, FF, FF, E8, 11, E9, FF, FF, E8, 78, EA, FF, FF, 33, C0, 55, 68, C9, AC, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 92, AC, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 26, F5, FF, FF, E8, 11, F1, FF, FF, 80, 3D, 34, B2, 40, 00, 00, 74, 0C, E8, 23, F6, FF, FF, 33, C0, E8, C4, 97, FF, FF, 8D, 55, F0, 33, C0, E8, B6, C5, FF, FF, 8B, 55...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
39.5 KB (40,448 bytes)

The file gimpshop.exe has been seen being distributed by the following 29 URLs.

http://www.gimpshopdownloadfiles.com/c?x=/Ur63LmmRN143NDXoT f5fub12OkRut1gUZxJJWG/xQ=&c=gvrFSGsj4IAL67YVy5N eIVcdp2oef3c6UiQZeiGZIxqk/w5vbFevg9oqOORB554iT1bHiR3giUfma9zhOZmj g0vxPOGduRPmrs9iQ/m2OrPPsQnsOeKBRV0C8CAQdeSOKaNgkFbTl90nBaASDqpI112xF9IhUQk xMqSSQ367dZiuFPHsmqsmoqACPtbOl&e=0&downloadAs=Gimpshop.exe&fallback_url=http://.../dl?bc=1195319

http://www.gimpshopdownloadfiles.com/c?x=fMmtBNBegtkKOEXByzHDxAdgIezZv d/hSyg/OIbTSQ=&c=OBw7PHHCRDTSA wAg uR3i6eXigYQTiU9l6F0W3bQQzls5 IvA76j3eJjleq1sKXOLwXWs78JKa1gXS WIrEHAqkdsn8vaAPaxp1sLODSQ0OohOKCTy4hj51rWbZO4qlSfn eDwxPbkVD/D/rcK67KgmrhsPUbRVqkY4c5gcCfI=&e=0&downloadAs=Gimpshop.exe&fallback_url=http://.../dl?bc=1195319

http://www.gimpshopdownloadfiles.com/c?x=q5QFFH /VhnDTQfGbCiadman9vqUoQg/BBFKcB6vIBE=&c= Kp/yEYzcXLdrNYAufZCWZWEMqVTUm/SFc/3StC7vPNqp4Lz4xirKk hAzej Kseo5BpqWHohs2MTlDd9kDAN5puk6LaWFKyzejLLjpxK9WzLxQTW6aHv1XPMF9LkKVNaIcSjxAZl5SLvZh25ldL0P9hc/dgxRA/2f4aQeeeyjk=&e=0&downloadAs=Gimpshop.exe&fallback_url=http://.../dl?bc=1195319

http://www.gimpshopdownloadfiles.com/c?x=e9CO56owHJRWLXqsh4GzjM o8N9/EtEqHHvZ/ lXj6I=&c=XPTEBRX0i3YHYXb8GxfgX3bfB6UTw/CoqYlTf7vRyJctaS2aRhu 5Ws1nPp6/eBg2am0zgQuOfmnsi0mifnay4AV2l3kDLycnrVaIcz8x8mK6lJFCHfSv9ZRMG3NfUn0sTKokAdkK1Rmv8gxaGuI3glfWsjkJg36hBAINNgHcJw=&e=0&downloadAs=Gimpshop.exe&fallback_url=http://.../dl?bc=1195319

http://www.gimpshopdownloadfiles.com/c?x=Xh9dtIaZOOmyM vCH/A66RZuatlYLSf9dv2mgbFy7xg=&c=u3aK KV7ZhuBGUEorTqxiwnbUY2WBwBSAfTVoaFbyT O fAQtgWAHkZgEcXvVIVHDGeEMC DA8TbxLZa8fwvjlkVneVsOBnhrGOJ2lh0EriFJj6DfVBplCL2E1IXLBxZ3nvjCWs1d2QM427eRUOyIzZJN/voKR2 7VpKnFzz8Pk=&e=0&downloadAs=Gimpshop.exe&fallback_url=http://.../dl?bc=1195319

http://www.gimpshopdownloadfiles.com/c?x=sekapFSIh6McpITd7HdIMS0IGgDyBbtFyA1SkkHvAhs=&c=9ZzidX/8K2pyJp/qfihFq rO4U8pqTtrLuhrB2SnI8umqT2L6BJS5N/ipun5S1RyFje5hDyFM/nQkVGdlWaG OZg P0hT/5JWq5t7CGhdpvBkLEhOxHOzKXhka3 Jk6H2sVQA/stZ8m2TX5fs985jK9eVM8BWlDZozNfivK7jjY=&e=0&downloadAs=Gimpshop.exe&fallback_url=http://.../dl?bc=1195319

http://www.gimpshopdownloadfiles.com/c?x=dGYHY4LtaA ebus26Plvqg9LZmyV3CVtvEO0kIgjao4=&c=3Z1YAkzKsBpx0DrZ6wRNJQOMw5tAD6F jBYaarUf5Rc73myYSIOFePpmmlxLDyanJsVaAwJDO2UUUSG/yPVRO rI3vIL4PTsEvpolXVPd5iqs1IoCoTb9jZidz3NXbkatK6z6uMZnzcKg3ZEcOnO6QOQGyYE4eQSIOlmgMCx0K0=&e=0&downloadAs=Gimpshop.exe&fallback_url=http://.../dl?bc=1195319

http://www.gimpshopdownloadfiles.com/c?x=XaWXJ4UZRjgdJg3lSgD4RIUJ37B2pmxspy43lxXmAwc=&c=HTWa9dpX7w2aHnmHz009Agll0 /6OXHq43E8rJUsL8mU9wdy38GxUNrfRrVik5oEcTn6RZVk62MDbhUrwOZTJkVZFl3VKi c1CobzO gFRLLeB8zFiHiboDOBDfUeya6nkbooK26pcd6JMF5hqRlOJrQcXRwqJlsuz2yJjTSnI=&e=0&downloadAs=Gimpshop.exe&fallback_url=http://.../dl?bc=1195319

http://www.gimpshopdownloadfiles.com/c?x=lPVQftFeYEwvRZ4D5aA1HlCx4vEk4rFt4ydPg0PRy5M=&c=whwW4jwRG04/NnB7Yc8sQUxx51xVwqR2lrcdCZXWKo6iC64k4XjH2oLqYA4kF2kMDrKUmcH cO0b44T4pKhgkgz3TVvwzgcI j1rUsJatsth3oVgeIrwLb7qdM43p/HXL /Mt54kI9yg3jW21piQo1ZciSyci1L6ivo5c3qfV4U=&e=0&downloadAs=Gimpshop.exe&fallback_url=http://.../dl?bc=1195319

http://www.gimpshopdownloadfiles.com/c?x=vRUTKQekC7 TSFsCeqjMUTbGpD8Wv6y1i52vS5253jk=&c=uyL644iJYTpUjl3JoKGBOULh1qhsvBR8ReObLgF51KKfsa9fjVDXAPUYQuusfZ909nMzkM94d5fRKx/uMS 2p1vMqbJvzGkRBcN81iFjD2DobMX0m4V3lkzZfqkGtq Ajbc8C b8obQvNDo f27UFaxaACa1O Xmfd6gBXaIRes=&e=0&downloadAs=Gimpshop.exe&fallback_url=http://.../dl?bc=1195319

http://www.gimpshopdownloadfiles.com/c?x=m/PWfoFHeNm9BPv8FqT121fid2xwJ B4f KVQcgqHgI=&c=momaWly3m4Bh3oj1YD5tME96cNiZxlcrguB7n0FkU2oalFhD8BZAjja3NhUmi1CGck7zY6BeMSnc4XhYfj YRV57KoFXVB47mvXZLVrY/ajtt25oOYm4FgxEGjjFA1RR7uPzv8zwGmCAxwMZGcvYcqTZSKYtwpVDuMuKmOqVs2b5/hP3RD7L83KCd jzuyGy&e=0&downloadAs=Gimpshop.exe&fallback_url=http://.../dl?bc=1195319

http://www.gimpshopdownloadfiles.com/c?x=Ev38SGkbUB2Rfo9ZeMZFV9WU6rG0HYL9EGgQrNg4lno=&c=cpVKFZwuETptyybYbXsojMyQnGrahiXIaXP59CijK9z/d8LX5O6wcKm9jdriR0qTNZBuJ5bJGHVUolhNFyoZStACMeyGi3EnDZESYLmO02GNFOnvWSOlA3r8TZg9/mqV04Rzd6qUntwWldfHGHhk37fvKwdpeP2olgWE26fk7wQ=&e=0&downloadAs=Gimpshop.exe&fallback_url=http://.../dl?bc=1195319

http://www.gimpshopdownloadfiles.com/c?x=01jsJ8X6XIYhDEalYsKAk4j/0qTJU2WXTvDifp0/Llk=&c=Y6K HRqUO8MXTjlIhXjotS3luLnjV/b3HFDXAtptLtl/2zfehVUusMG53M6KE8svUB231MnW0fXqdeoZMwvQPAwy3s3hVPO7hwzvXAqCV4yuV VlpUiil6upbiF7j3J41hnuWfxJjDzVKY7ETRUHZIRtoqhipcvI/x41D0WczO0=&e=0&downloadAs=Gimpshop.exe&fallback_url=http://.../dl?bc=1195319

http://www.gimpshopdownloadfiles.com/c?x=4jVgHaor3aiFVDD8iWxpqYPk4gLb7VDJpWK38xyYUk8=&c=m96Wyj/ PvuFlp3c6ICk FqsTk/9Q4wd Y3FdWTqOICsi4IZrL2kSX2S/xRVFsNPnjOCGNyVMcuO1Z4edxIym0CrAg7I9o3cOWxlt7MIrWDN6AAcWilngoCH5wB/KOa2uV/6nXvaSFwGNBK7nJRAuzRIwD65anYrFBWHya3d6b0=&e=0&downloadAs=Gimpshop.exe&fallback_url=http://.../dl?bc=1195319

http://www.gimpshopdownloadfiles.com/c?x=0EZyD/3Ty3Uv4ZLxmjr9UZNqBnJKED adOhzKw7jwdA=&c=9J tdQsOVXTnuEyCCaQ8dLrbGufdrUzvd23PMF2/Mdytp8qZjnVR5rwO3xS1pvc3aIx720iwkwxJHer1Ix3ivy2uI0kdOrfs7e3PvAJNQ4QdjH3a3INNN31OhpWB2CLrsrwXxmkEuwm6Hw6eTv0p SOIDZQqE6eEyK3f2GviJBw=&e=0&downloadAs=Gimpshop.exe&fallback_url=http://.../dl?bc=1195319

http://www.gimpshopdownloadfiles.com/c?x=gocxDNj jDr8yJEbYJdcR bFIfwRc2Fqhs05RwgdQUg=&c=u3jgBo2aFijgGMejT31DQB8P29ohv9u b32ieqd4Ffl1/1rLWkAVzAosOpbMGZ8cF7KyK0UiVvFLsxBJab1mpJXdNPbX1l0TXQ3ejdAMo/0VdPzJeEpaN EdytI/69kN&downloadAs=Gimpshop.exe&fallback_url=http://.../dl?bc=1195319

http://www.gimpshopdownloadfiles.com/c?x=ZM4wdxizc/KaVmzs3DvjopTowqzTwiKkUbl wmoaIfY=&c=KX/EFBZnSC6aGlRPP1RkPIKLs04YPZ7Fzr9XsdN4E4jiMDSsnA7qwBUXQxYjky6YUlqjUck1kjRRoal0e6CSzM 2glDgy54OVTmw4UT9DbM 9 8/Qn8P70g90 3QC9eZRjO49hY hlQAzRhRa1Z4JHr6BCR8FjbgTxH1JMRDwyg=&e=0&downloadAs=Gimpshop.exe&fallback_url=http://.../dl?bc=1195319

http://www.gimpshopdownloadfiles.com/c?x=t19K4MswRo4jCf99fxytXvHrKCt1dLcCBl1yAuUgbBs=&c=xeGJzzKF4AV6x/aAE8Zt1Umyzf/kFu71 N9I1NMRhsAGIbUb0NrHqEjNjwjYrr/lyMipqaCGYYurjdZdITidXZV2XSmSWoqbXnvtrg2xeRqUgX7yL8f4dpbjbrF94wWMo 7ZxKP1UG8NmsyUV3kAOSroagAsE6 bV3OYQS7CnUO5DNiC2mfTjjWAD2xkrtPz&e=0&downloadAs=Gimpshop.exe&fallback_url=http://.../dl?bc=1195319

http://www.gimpshopdownloadfiles.com/c?x=pH1ut4XQTZXzG kK7iTY8kQu0UGMhcQzZTbu3BseJPQ=&c=LKa5YtRhS7KDS7lXkJjR mHrbJE LpwU1S gFiwila/QL/n8IHkldHKIL3wPLQNrhg6sVNlH7ASY1s0MAiXboKpwjAQrjS55cXD sCd8FpGZ67ieajjm5EXmYoS0i4VwPPkYDdUyLUSRQ yK1uL6LyiMhOKa0umkJVbS0MH1vo/Qj9zRhoiTE9Vd6DmOQQqg&e=0&downloadAs=Gimpshop.exe&fallback_url=http://.../dl?bc=1195319

http://www.gimpshopdownloadfiles.com/c?x=eJN N4oVkrBYYkXxkguuLONkNGM3P2xRRjmtkPoWCVQ=&c=dVcWVF58jPJNe69lVIUdr/lTHimo6WYZX/2WWzyRzVB0IZK5iQ9Hc5Nntz3efj5nSsBlmeT5lh0vy06ZFi9Wt24CZY0XZCG5sWQfR58vJoUG3Hft7lFuRzQu6lsqCSpJaPzkvkU4vds6tPpSXyYr2HmqXh kYCNA kug8xAjnPQYVGfO3xoscMZ4pokuF4Nd&e=0&downloadAs=Gimpshop.exe&fallback_url=http://.../dl?bc=1195319

http://www.gimpshopdownloadfiles.com/c?x= I4 A0R/9WOvq2LuXjagZ4gAcXxmhRmDTydYeuHnPEc=&c=VouTbN58MgqYl zfhaNdtS3hnsTz1DgM4czzqo6 MVn5apN/or2N/tO6bjq62 SKgi3qi8mRw3Hf2Mj12U1Elz9YajpnRSrX6M9UfOxReRBjyGDd932rX7xv3v70ohRXCo6E6nNVASzq32bm6ZhAytm9YmQq4wr1 V4gSHFQ2 4=&e=0&downloadAs=Gimpshop.exe&fallback_url=http://.../dl?bc=1195319

http://www.gimpshopdownloadfiles.com/c?x=6uHxpqbjnZ8kPdIlwjrzLQuvvHCaP0ZZc1Y1/NMWFY4=&c=Lxh6pkLLGHBAwjHcRvalej/5diiqUu4/Q0o1eWS63DU7WF8fo0LA0VlPQ6ojjCESzLEMk4H8wmgaeBbuRHQ3zqVbvLbreejdH8HbkebcCRvmW2T UoSftVMSuzAQqGY52JRZ8zf7NNcEOXdq4MQqDUM9vHWmvr4feulTZu4ORkysoCNTYWbXDo13 HYOMxFo&e=0&downloadAs=Gimpshop.exe&fallback_url=http://.../dl?bc=1195319

http://www.gimpshopdownloadfiles.com/c?x=fZTX6Olww4ICKd5Q31kD7hKwec1rmrXOv0xFEw3B8IE=&c=j XWZqvRMpzbc8TgoUoMRw56wsElqCFQ5nGc4PJro6DLgvc1jUNjOMMj4XkB5EsX2od 0xYLgDSNeCj4AyZ7t5LgnHYPRJeZJW q/iTtwYSCm8Zeac0K1e5fMyv3PQFKfyidbatZ0qf2gbZJ/PEuMgmrRzRE1JG3Sk9z0kBdr70=&e=0&downloadAs=Gimpshop.exe&fallback_url=http://.../dl?bc=1195319

http://www.gimpshopdownloadfiles.com/c?x=btT8jPFhh1Tbj2xRajK6vA0n9P5g91oJyD6TGUUdNyI=&c=RsqrQG1/yGkjlE/lQIsnfa6SV0g0FVQ9RlRHwZ95VKUVWaJvNgP7h7VVa7i6A/uNaIi0X5 d3pqj0cwL8lUdhJn3F KJZG 42jUbxYU4mYSUqQMJV8jzDXOwwc C6UFvWn94B3JzVFhfwMxjQ RQ/auAi BZnZupOrDFtf12p58kH6kdwv1RsHdWpbs3NgBm&e=0&downloadAs=Gimpshop.exe&fallback_url=http://.../dl?bc=1195319

http://www.gimpshopdownloadfiles.com/c?x=dgC0Ym5QMxoT8GNVVbgsDUju33JLAKTz PgtRra/Kdw=&c=Cq0G5Is2u T9VG56IU332Dj21TZ5gl zbUfX Ws4ZEvp0X8sOguMTAIDl1qmotJe1K8xgmLSqRYdI6GZuWBL8/1TqlmZpWNoBbobywW4VUM4PvktA8CPVcbE IEZp0e5YTtT7GKUBXpgvB0nf/S9zOrmMdCe/brMHZvaHHDsanxd7XJtfykLQw06a4hGdZKZ&e=0&downloadAs=Gimpshop.exe&fallback_url=http://.../dl?bc=1195319

http://www.gimpshopdownloadfiles.com/c?x=d4DUm7LjpNVaNsQ/ziZe5mrwDjQgXokv0lUoq6300kU=&c=75m01IoBhlDXnNPktxAaPhpyvbjHkB3DCkdeUjdyJIp9/7mDnmJ hxrONP4q0gd1Jr38FG jAqw7cRbYX1p/6/tTak/0nx61dAF7eo3WZaXlmTuTvYvf8qnLCr3DrWtnmsMn px0V1Gmhhhr/5VBqTeq5DBqAzdamBLgt9NAqYLktXPX377APv1T/5OVFvlQ&e=0&downloadAs=Gimpshop.exe&fallback_url=http://.../dl?bc=1195319

http://www.gimpshopdownloadfiles.com/c?x=BCXW2sHFc4tE5oHx3RpIYcL3Hz/VYWWVPGNGiEpdvpU=&c=bcDxzDfDvVZqII5MepU/eildgzHDwx5l4V1/mJysm9qXZEXiFgeEDAtX4tfXNjkKGYQmhcNSwTMql7l2Vu5kQ6mcKcyN0/N5nMjjrDt5Mci9qA8f8QaK9WkrULrEHcG/KZ2J5DxiuzjhDPA7VNwaBA==&e=0&downloadAs=Gimpshop.exe&fallback_url=http://.../dl?bc=1195319

http://www.gimpshopdownloadfiles.com/c?x=2asTsIt3U7L0dzAgPWYUDS55FJruQB7tCc2wHGNwOlA=&c=s2LJjjc/Jfy/DZJTd9RZrAQ8HY6v89RS61SzsQlcH2ZvzJWjzITSjoxdWx6BhAPZ09OjAz5mVqRiuatlJ5PtEdzMUWvNLvDR9VsNR6DWpIa8C2tvi1SKDdARmIV2vMqJM YkkSbEdIlfHMp23PowOVM8lIt8CCHnnyCfatRg1BW UnEDN9oE5g LLXIv0BrA&e=0&downloadAs=Gimpshop.exe&fallback_url=http://.../dl?bc=1195319

http://www.gimpshopdownloadfiles.com/c?x=gexq5Y4AKPVmjXhujQApuSIQtwFGEEqnXzopT3VRyeE=&c=QIWeeQunr0nPPtLeadldxFAc7/jQo dCa0AB5AWsnwZbapFsGxfP6i2R0zNlWfLmGkEeigoPqIjdqBWzxl5jkBTpEUpOZ2vANsoA3ewKMJtOswU VVEKWm4wbUM0oJr/hxL1ACipVNHa1TuCc4a9cw==&e=0&downloadAs=Gimpshop.exe&fallback_url=http://.../dl?bc=1195319

Remove gimpshop.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.