home

mozilla firefox 40.0.3.exe

App

Platform Beta (Fried Cookie Ltd)

The Fried Cookie installer utilizes the InstallCore download manager which may bundle additional offers for various ad-supported toolbars, extensions and utilities. The application mozilla firefox 40.0.3.exe, “App Setup ” by Platform Beta (Fried Cookie) has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions. The installer is marketed through download protals and search ads as the free Mozilla Firefox web browser but will also install additional software offers which include adware, PUPs and browser toolbars.
Publisher:
Software Lite   (signed by Platform Beta (Fried Cookie Ltd))

Product:
App

Description:
App Setup

Version:
4.8.2.3

MD5:
151af4e08bc7f717bf501092721c2d2e

SHA-1:
4811aedcf162f2b056ee44a5aafa86c42ccf15b0

SHA-256:
54e2fefdd05ac98d52ea5ac5a2ee9f0587b795ea064a0c9121da0a95c9e1c54f

Scanner detections:
1 / 68

Status:
Adware

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Description:
This 'download manager' is also considered bundleware, a utility designed to download software (possibly legitimate or opensource) and bundle it with a number of optional offers including ad-supported utilities, toolbars, shopping comparison tools and browser extensions.

Analysis date:
11/15/2024 6:21:16 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCore.Installer.Installer (M)
16.2.2.9

File size:
980.6 KB (1,004,160 bytes)

Product version:
2.6

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Common path:
C:\users\{user}\downloads\mozilla firefox 40.0.3.exe

Digital Signature
Signed by:
Platform Beta (Fried Cookie Ltd)

Authority:
GlobalSign nv-sa

Valid from:
12/16/2015 2:41:12 PM

Valid to:
7/7/2016 5:55:56 PM

Subject:
CN=Platform Beta (Fried Cookie Ltd), O=Platform Beta (Fried Cookie Ltd), L=Tel Aviv, C=IL

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121C446C50C8915C47DFD619121C2806B7E

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:ObQCQ5wyt+G3zJpYxe2k2SorL5Bw72HhwX2qIZE4A9:Ocr5wyDYx2POM7zIeD9

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, BF, A9, FF, FF, E8, 5E, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, 24, CE, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, 24, CE...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file mozilla firefox 40.0.3.exe has been seen being distributed by the following 13 URLs.

http://www.sendcurrentapp.com/c?x=R5EN7jCMQ/ZKLhh1a5wMJJWU1ut96OLlH0x5phHcyvs=&c=LmUn/sZJoaPwNVU7UCyxiy7D gJ8T1LMMaAbqEd3yBKpERH1AyKFKhg8Lea8uOWPFt/xAMCiThyN1GqsN3jcerEtcdRIAV9suo5kOyne1bQkHNW8q1lgmvUwaC5ekZMY&fallback_url=https://download-installer.cdn.mozilla.net/pub/firefox/releases/40.0.3/win32/.../Firefox Setup 40.0.3.exe

http://www.quickquickhosthostonctnent.com/c?x=y5kwg/YPVozmTa9Bu/rUzbv9XkAalYrPs7EHc1pFJfc=&c=AM1K0b6gSO3RxNgIkD7ZIcngoQQdVc pX8CerKr04J075CU1FPszhBUgYe/dTjxYXg5CKPvYTJqE3UBN245YG/iIq5VP8cooWgerKIK4MYNBhyVtuZeZ1mSKpopzZBeI&fallback_url=https://download-installer.cdn.mozilla.net/pub/firefox/releases/40.0.3/win32/.../Firefox Setup 40.0.3.exe

http://www.signingidomain.com/c?x=I5jwNvPqeL54KHQAxw1WuBgQEE5jJlo33EnGrzgy01A=&c=IqVBTojYV5Rkz82iZ6FaZLKP/dXb4pACEKIXHTe1VFiXDuniBR/Wh04w60 dGMBzbwVyXKtHYNBekL/rV93A6aDkjUZLG09NTnUbL TSzoKki3t7rdyGriR1araNGrEi&fallback_url=https://download-installer.cdn.mozilla.net/pub/firefox/releases/40.0.3/win32/.../Firefox Setup 40.0.3.exe

http://www.quickquickhosthostonctnent.com/c?x=tsWQJuv836lAdrlg/81GlhZCNR30ubjWFaKSRqiXkQg=&c=UHcJ5i3TUK d1xCgggw2f0CQ94zwbAdt8B5fEG3nqo3qxX6UcT2mugi4d3eqB6i3nYSe/qPd5J5zRgV9I5inlLUmAzlMXVXFYgASVvpF4TSQ9alQLaue4HjhM1ggZ7n0&fallback_url=https://download-installer.cdn.mozilla.net/pub/firefox/releases/40.0.3/win32/.../Firefox Setup 40.0.3.exe

http://www.quickquickhosthostonctnent.com/c?x=3QzPn109U3OBcc3BDXvk 70aQkXx17kJ6m/WTVuZuIA=&c=B0xGulbdlMA6dE4USP97/x1Eexb6NjI48tOl2c9hXUkJeF8AYDeRI1QUNIqEmWh4UjNBtieaeyH2xqyA6FQqalXAW/ba1dF7QlvcgylaPrJt7MZGOQQAQ1jY5GkZE0YS&fallback_url=https://download-installer.cdn.mozilla.net/pub/firefox/releases/40.0.3/win32/.../Firefox Setup 40.0.3.exe

http://www.cleartowersgift.com/c?x=lMqfH4JjgqjCvUrMZScfuelKubnm0ORpSzlR8qJnRB8=&c=evIeiHOQq06YDIk6azflb7Nc1qXvOLEHJVPvw19ety5Es8MRKUb2ihzv3dK58MXXB2 DPxDDVxCwdL9avSVvk3RVZkbI6nuhwVy ignzY4ngQKVvAdCgjfvs2Sd/u9C&fallback_url=https://download-installer.cdn.mozilla.net/pub/firefox/releases/40.0.3/win32/.../Firefox Setup 40.0.3.exe

http://www.signingidomain.com/c?x=zG3BwNqYtx7GNiJ10fSENp9qJMF/R6uKixWjMid58lY=&c=PqZE4hRA5fAoWCwYTvQTZ0hXLgI3YobV0B8LZ5U5sfL9LkRSaKbJ5WDdPwnqcKOhIO56byoOgo2GqU3QCzdDLQinufm7rFScOSKZPhvYU1ilfGcM XNcRYq33BLVwH5u&fallback_url=https://download-installer.cdn.mozilla.net/pub/firefox/releases/40.0.3/win32/.../Firefox Setup 40.0.3.exe

http://www.bestappshead.com/c?x=8nLW6dbE0dcNWTjKAPM10GJK 3MZqz6Jfl57K8GAc5Q=&c=CBUKuMiYh5o7CWwDSrjBOaqS/eS4AjzBpj0fS9WEmld99SZ5zp5YVKtazY6oQ9qhOhCXMxiKqluTzOV3EHq2Qi6Zd1iW 6d/ePy0uAb TKKE/LMPkTOyPk qcCZdy/b6&fallback_url=https://download-installer.cdn.mozilla.net/pub/firefox/releases/40.0.3/win32/.../Firefox Setup 40.0.3.exe

http://www.bestappshead.com/c?x=pHWegdu/f2h11FnRnCsq7WKlx0ga8NeqASosUZZr/jE=&c=p/8koOtPTCqL5KK mizIaUzQ6gsiEetEKdUjycyo9OPk GSe16GAOqrawC/BurIyp/fevD3DTop7YzjRqxYZ5cTooyiuPwwIeqPETwWqI7CJxyf6eDq9IFDxoujTPzw4&fallback_url=https://download-installer.cdn.mozilla.net/pub/firefox/releases/40.0.3/win32/.../Firefox Setup 40.0.3.exe

http://www.bestappshead.com/c?x=iPzFSCqFnknj0Ux6mbqnjFXl5VCLw/lSZWRfUcU9lCY=&c=nYx30Q/oqQm28rFd56fbDaaPI8eEfOvZkUZPUkA2WLbU 25 Fm5e5LRg9a5GRkM5RNIcDm0zsDvQHtYMeHPBLQtFgDwlLhJWELZrYiWlKuEeBofdrcmgK/EgQDxT54tb&fallback_url=https://download-installer.cdn.mozilla.net/pub/firefox/releases/40.0.3/win32/.../Firefox Setup 40.0.3.exe

http://www.megasharetowers.com/c?x=LoVLT2OPJXtCiN2ZfvLlW60Xy7tEIZDVxG5/zpuubgU=&c=YumvBm5c3Dlde98Fp oNnFw4mZakNsBnxg5fQO5l5GWhpfz3YxTT8jYALAlsRhpY5M5SD wG8/Fc/HgBteQ3EP23dDcbEbiCyauzlpZXV/Ld OpT7P36w2pbUx8okx5f&fallback_url=https://download-installer.cdn.mozilla.net/pub/firefox/releases/40.0.3/win32/.../Firefox Setup 40.0.3.exe

http://www.megasharetowers.com/c?x=y2OsJlXOS04vCizyVJWpkUqG/ AnXJxlEpFJTnK5Jms=&c=6Ahkpn99FvsOWQMZtsPVnfyipqk5y6Pc9eWjgHU0W2RConfDFyrVk66zA3TsAwHHJpQdW/yRz372C0QsDHB3e77AGBh NbKTqWlXZ/P9sFidD5KhBMZsnYS4cdw8c8Xf&fallback_url=https://download-installer.cdn.mozilla.net/pub/firefox/releases/40.0.3/win32/.../Firefox Setup 40.0.3.exe

http://www.centerpresentgift.com/c?x=KWTKpnQfSLLgZydkWGAvRTzhRv UN3Z4p0Xc9swUIzQ=&c=V497VIOpQQPJ DKFlhNIw/Es6ypp5U2q2ZEL8FOUjzKSS5zITAWqLJAiMeYn Bpp30ELtiCmX8MKOmk9A8CIzQ0K3E3DWrKJ1TaFU2ONyudkHvKPkvYycYh7TtfTbWCq&fallback_url=https://download-installer.cdn.mozilla.net/pub/firefox/releases/40.0.3/win32/.../Firefox Setup 40.0.3.exe

Remove mozilla firefox 40.0.3.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.