» qlsetup-ie.exe
Overview
Analysis
File Details
Programs (1)

qlsetup-ie.exe

Qwiklinx

Quiklinx, Inc

The application qlsetup-ie.exe, “Qwiklinx Setup ” by Quiklinx, Inc has been detected as adware by 3 anti-malware scanners. The program is a setup application that uses the Inno Setup installer. This file is typically installed with the program Cartwheel Qwiklink Combo Installer by Cartwheel, Inc. which is a potentially unwanted software program.

File name:

qlsetup-ie.exe

Publisher:

Qwiklinx, Inc. (signed by Quiklinx, Inc)

Product:

Qwiklinx

Description:

Qwiklinx Setup

Version:

1.6.0.1904

MD5:

8064b1c1d5ed370c93de54c340674515

SHA-1:

0abf36759da3fb9f78372ac824d1a2031874d480

SHA-256:

faf4912904107ac93405c51cb335762225fd5fa9afa3159190dd7ede6b6ba816

Scanner detections:

3 / 68

Status:

Adware

Analysis date:

12/27/2024 10:27:10 AM UTC (today)

Scan engine

Detection

Engine version

Malwarebytes

PUP.Optional.Qwiklinx.A

v2015.11.13.08

Reason Heuristics

PUP.Quiklinx.Qwiklinx.Installer (M)

15.11.13.20

VIPRE Antivirus

Quiklinx

28994

File size:

7.5 MB (7,883,032 bytes)

Product version:

1.6.0.1904

File type:

Executable application (Win32 EXE)

Installer:

Inno Setup

Language:

Language Neutral

Common path:

C:\users\{user}\appdata\roaming\cartwheel qwiklinx combo installer\qlsetup-ie.exe

Digital Signature

Signed by:

Quiklinx, Inc

Authority:

Thawte, Inc.

Valid from:

12/21/2011 7:00:00 PM

Valid to:

12/21/2013 6:59:59 PM

Subject:

CN="Quiklinx, Inc", O="Quiklinx, Inc", L=Waltham, S=Massachusetts, C=US

Issuer:

CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:

0B1D774C76A82461AAEA3BBB3E52D63A

File PE Metadata

Compilation timestamp:

10/30/2010 4:54:54 PM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

196608:RHzoGIcQgOzK9rseJOYY2notiI6D2PUegARnf3XQZhShq:RH9DlPJhY2nqipD2PUQf3A4q

Entry address:

0x16478

Entry point:

55, 8B, EC, 83, C4, A4, 53, 56, 57, 33, C0, 89, 45, C4, 89, 45, C0, 89, 45, A4, 89, 45, D0, 89, 45, C8, 89, 45, CC, 89, 45, D4, 89, 45, D8, 89, 45, EC, B8, B0, 52, 41, 00, E8, AC, 03, FF, FF, 33, C0, 55, 68, 45, 6B, 41, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 01, 6B, 41, 00, 64, FF, 32, 64, 89, 22, A1, 48, AB, 41, 00, E8, 4E, EC, FF, FF, E8, F5, E7, FF, FF, 8D, 55, EC, 33, C0, E8, 7F, 84, FF, FF, 8B, 55, EC, B8, AC, D6, 41, 00, E8, E2, E9, FE, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, AC, D6, 41, 00, B2, 01... 
[+]

Entropy:

7.9968

Developed / compiled with:

Microsoft Visual C++

Code size:

84 KB (86,016 bytes)

The file qlsetup-ie.exe has been discovered within the following program.

Cartwheel Qwiklink Combo Installer by Cartwheel, Inc.

The Cartwheel Qwiklink Combo Installer installs both the Cartwheel Shopping and Qwiklink web browser extensions.

www.cartwheelshopping.com

86% remove it

Remove qlsetup-ie.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.