home

InstallFlash (Fried Cookie Ltd)

Publisher Information

InstallFlash (Fried Cookie Ltd) is a software developer located in Tel Aviv, Israel*. The company is a primary distributor of unwanted software. There is one additional code signing certificate issued to this publisher.
Authority:
GlobalSign nv-sa

Valid from:
12/17/2015 8:18:16 AM

Valid to:
6/2/2016 8:24:43 AM

Subject:
CN=InstallFlash (Fried Cookie Ltd), O=InstallFlash (Fried Cookie Ltd), L=Tel Aviv, C=IL

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121ace394f39efb26d753579a412465cb79

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.InstallCore.FC (M)
100.00%

1 / 68      (Adware)
winamp setup.exe (Nobotares by Tok)  (e1f20accf3eb6177704b108594a241da)

1 / 68      (Adware)
bluestacks app player setup.exe (Lacuf by Robu)  (120b94c11b7f0bcd3be07a5cbdf7f005)

1 / 68      (Adware)
adwcleaner setup.exe (Nobotares by Tok)  (e781c170c07ba8d3747c92fc2dab2711)

1 / 68      (Adware)
reaper.exe (Lacuf by Robu)  (75600e84346613bf53ecadc95f759a39)

1 / 68      (Adware)
filezilla setup.exe (Lacuf by Robu)  (a47811483f5c9e7211f7e6f57dbfaaf1)

1 / 68      (Adware)
bitlord setup.exe (Nobotares by Tok)  (ca92b43a8641c88c7c1e2053bd7ba000)

1 / 68      (Adware)
winrar setup.exe (Lacuf by Robu)  (c39d95f93ff0724c53d63bf83236a59f)

1 / 68      (Adware)
tango setup.exe (Lacuf by Robu)  (1318cf713c08501807e02ac2d8618afe)

1 / 68      (Adware)
teamviewer setup.exe (Nobotares by Tok)  (cc48a4b69b2ee68ba34ff7626f87b120)

1 / 68      (Adware)
utorrent setup.exe (Nobotares by Tok)  (f7c2a2c514768f4285a80d644a4b1b6f)

1 / 68      (Adware)
google_chrome.exe (Nobotares by Tok)  (3784e5e23b4dfd6731924405cb32c7e1)

1 / 68      (Adware)
libreoffice setup.exe (Nobotares by Tok)  (c8b8a32c85d084dc6bed8fe429192efd)

1 / 68      (Adware)
openoffice.exe (Lacuf by Robu)  (459b077e31abd18f1f6299274e2345b1)

1 / 68      (Adware)
xnview setup.exe (Lacuf by Robu)  (a7f1d5e8847782a2a8bcc5787f5a071e)

1 / 68      (Adware)
bitcomet setup.exe (Lacuf by Robu)  (f9a74ce5152c7ecbe5f2aafc8900c061)

1 / 68      (Adware)
google chrome setup.exe (Nobotares by Tok)  (1edcebec42fe096af067c17383389c59)

1 / 68      (Adware)
winrar setup.exe (Lacuf by Robu)  (bf76d324a3d8926dea5a7e11851648b9)

1 / 68      (Adware)
virtual dj setup.exe (Nobotares by Tok)  (95a2720961553d5bfae7f3b2c58276b7)

1 / 68      (Adware)
c.exe (Lacuf by Robu)  (d7a7f6b26ba2b8194d42c4bcc70254a0)

1 / 68      (Adware)
clipgrab setup.exe (Lacuf by Robu)  (c6c5ee87d8570fab9fce21ce1b45cb80)

1 / 68      (Adware)
any video converter setup.exe (Nobotares by Tok)  (55a43095e7be4b61dede6a5219dbee16)

1 / 68      (Adware)
weather bug setup.exe (Lacuf by Robu)  (3167a7226a09c9d316a3edfac8d2e5f4)

1 / 68      (Adware)
winrar_setup.exe (Nobotares by Tok)  (75f1aeeee1f91afddf976aaaa5ab5b7d)

1 / 68      (Adware)
tango setup.exe (Lacuf by Robu)  (bcf9121dd8edc14ca119e2683f02e9cb)

1 / 68      (Adware)
system mechanic setup.exe (Nobotares by Tok)  (9117902ca40ba7132095a8c799693260)

1 / 68      (Adware)
daemon tools setup.exe (Nobotares by Tok)  (cec4b2494470838e840ef66f2a9f8903)

1 / 68      (Adware)
icreinstall_fraps setup.exe (Nobotares by Tok)  (b6a2e458209fc179eff597b1eb00fc3b)

1 / 68      (Adware)
opera setup.exe (Nobotares by Tok)  (67c3b9702b59e8a224016b8d141d5704)

1 / 68      (Adware)
avant browser setup.exe (Nobotares by Tok)  (81b2f03d321d1ba3a7c557b4edcee781)

1 / 68      (Adware)
advanced systemcare setup.exe (Nobotares by Tok)  (6d8e0d8030473c8df23c6ce0568d7927)

 
Latest 30 of 1,344 files

Downloads URLs for files signed by InstallFlash (Fried Cookie Ltd).

1 / 68      (Adware)
http://www.sharetownworld.com/c?x=ED2Ldbf/EtIyMOPpzfeAhJ4N89AFiQIxDdJA8rvjYU0=&c=bW9DVPwcYPsCAkUN43hpDIZPJV8HIqAchc08DjC3CgoSsZ2ZyNlNyLGCgdmjju8jvboG0nh8Nu7kcT6a3UtUzaY/rwEfD3wVVOS vUz46WdeBLOh9urnhXRgO 5ZnuHC&downloadAs=Filezilla Setup.exe&fallback_url=http://www.downloadfree9.com/landers/.../download.php  (a47811483f5c9e7211f7e6f57dbfaaf1)

1 / 68      (Adware)
http://www.presentfuncity.com/c?x=Bkcc5XjvIkpPaq RpymEW31bNoefWJBD/QlH3E9Q6BE=&c=m5kA NJuzCl81b3uvmqTFuQnE66 E3IgxRtF/zMeJvqm24XxdLZaXVOEescUi4ipJlkbNGoI46GInm Z362QWmwDzgKLNG214r0hyi/rLb4voaPmB/zlEYpqFU0BwdBW&downloadAs=WinRAR Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php  (bf76d324a3d8926dea5a7e11851648b9)

1 / 68      (Adware)
http://www.bundleworlddl.com/c?x=34TAQ lUP5ncFyp0 JcTMi4zfuAcd0 ai3ck EGZMno=&c=6S3qERfLMqrr5L0iv/ Xp0800YfzlO7DnkUNE073h7zFShRiqVpNS0/IukfPxgvMer6gYC4 NMv7M/lcXBeFJW0xEibZ8Lxw5wJc9vGdZEUQGIxurHMOmISzQjpuNiad&downloadAs=Tango Setup.exe&fallback_url=http://www.onlyfreedownloads.com/landing/bing3/.../download.php  (bcf9121dd8edc14ca119e2683f02e9cb)

The following certificate is also signed by InstallFlash (Fried Cookie Ltd).

1121BD15145F44428215610BEF218BD6FF7B  (Jun 02, 2015 to Jun 02, 2016)

* Note, the details and description above are based on the code signing digital signature issued to InstallFlash (Fried Cookie Ltd) by GlobalSign nv-sa on December 17, 2015 with the serial number '1121ace394f39efb26d753579a412465cb79'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.