home

winrar setup.exe

Internet

Silver Setup (Fried Cookie Ltd.)

The Fried Cookie installer utilizes the InstallCore download manager which may bundle additional offers for various ad-supported toolbars, extensions and utilities. The application winrar setup.exe, “Internet Setup ” by Silver Setup (Fried Cookie) has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions. The installer is marketed through download protals and search ads as WinRAR archiver but will also install additional software offers which include adware, PUPs and browser toolbars.
Publisher:
Silver Setup (Fried Cookie Ltd.)  (signed and verified)

Product:
Internet

Description:
Internet Setup

Version:
1.2.3.8

MD5:
5009f5c224f5b5c6ecbbc9f55f42e3a1

SHA-1:
d28484da4e6aed8eaf7e04ade4f310aa55d9c42f

SHA-256:
7df8abffb1340a9fb6a467bed6f7fd48c9ba9146c11be6cf4ad0f46d54f09f9f

Scanner detections:
1 / 68

Status:
Adware

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Description:
This 'download manager' is also considered bundleware, a utility designed to download software (possibly legitimate or opensource) and bundle it with a number of optional offers including ad-supported utilities, toolbars, shopping comparison tools and browser extensions.

Analysis date:
11/2/2024 4:17:31 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCore.Installer.Installer (M)
16.2.4.20

File size:
963.4 KB (986,472 bytes)

Product version:
3.3

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\microsoft\windows\inetcache\ie\{random}\winrar setup.exe

Digital Signature
Signed by:
Silver Setup (Fried Cookie Ltd.)

Authority:
GlobalSign nv-sa

Valid from:
12/16/2015 11:13:58 AM

Valid to:
7/24/2016 11:33:54 AM

Subject:
CN=Silver Setup (Fried Cookie Ltd.), O=Silver Setup (Fried Cookie Ltd.), L=Tel Aviv, C=IL

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
112140334915ED026A82D6160FD4F0BAD4D4

File PE Metadata
Compilation timestamp:
6/19/1992 7:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:KevQdNB1+F3tA5IWFJVxYRDRGkvUM0R/JZNs3:KRPB1+dtAJYRDRrvBC/JZw

Entry address:
0xA5F8

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, CE, 8A, FF, FF, E8, D5, 9C, FF, FF, E8, 64, 9F, FF, FF, E8, 07, A0, FF, FF, E8, A6, BF, FF, FF, E8, 11, E9, FF, FF, E8, 78, EA, FF, FF, 33, C0, 55, 68, C9, AC, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 92, AC, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 26, F5, FF, FF, E8, 11, F1, FF, FF, 80, 3D, 34, B2, 40, 00, 00, 74, 0C, E8, 23, F6, FF, FF, 33, C0, E8, C4, 97, FF, FF, 8D, 55, F0, 33, C0, E8, B6, C5, FF, FF, 8B, 55...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
39.5 KB (40,448 bytes)

The file winrar setup.exe has been seen being distributed by the following 38 URLs.

http://www.bundlesbytetown.com/c?x= wKyA8CVEU18OpUrEAM if6lknrpkh5NG AevYhVxo4=&c=Zt/pikMVGRSPNOZ0aYjmG1eZv58wjOezfBFsGTz/.../0bohM4XcPnvp0pJgJk2P37H DKZHAQSfl&downloadAs=WinRAR Setup.exe

http://www.bundlesbytetown.com/.../EMKmuEwssGxoUtMwldiVaiDtLCwcwAlCW4JOp6H1SMRC03N3z5jI8sbt&downloadAs=WinRAR Setup.exe

http://www.hostheadflash.com/c?x=OcfGpArXXufx/Vu5WsSXRbDKJ yPMKnPE6EdOklnsSY=&c=nsbhG8aAeAx2DjED9/MP1c5iNHi grgkoFL6JmgBtrDElJs9eO4PrEMaZKwELXzajOr0f/.../cEXnQeESplJOIpwYB9gzvseh78L4S ABejkHmx&downloadAs=WinRAR Setup.exe

http://www.stockfactorytower.com/c?x=TUordcyZMs8/FqGfqHX9Bg4oGjHJu6PgP3rqV6bPMpk=&c=95tkYlffpMY7vqKF96nl1UGb e9IhzVKq R1fH4SbpF3unj4oPOeJdwdhTyqcv21kOPdzCyA4vlPz32SndStksBfZrzo4oc4RtdWASTE/9TQt/.../e&downloadAs=WinRAR Setup.exe

http://www.stockfactorytower.com/c?x=ZG0y1PVLMHsyop OOPUQtISSz/myR1suOXpS6slTVLo=&c=KZ733LwFI O/JTTh4WN/jVJG0vXvGMwIygY7kQoEbiICxsGFGUbK45yte7DUSxGcHSTa/1Aamrh sM1clGS/90aUnYlFnCM Ikm/.../ZvdI7M2V K2GZ PZoVIehd&downloadAs=WinRAR Setup.exe

http://www.applicationschuckledownload.com/c?x=it4T51YdFoSCohjOKeUhjHrnKYIA8Rea1ouH606w c8=&c=oh6AGT/.../HcNGvIJmyX9tNFiFAEVr&downloadAs=WinRAR Setup.exe

http://www.appsgiftgrab.com/c?x=YPlN5NAJ991W94g/LFQEIid29XUpF3XtTKw4k4RxJpk=&c=y6 jnaiyjInsBd/.../ISY0Et4uCar2xUbv82voFdXzktukx472DZX7GnWK6JogSa6BVBdXrQunmN0cqMGTmMxzN2UNB9BM1RhZGGVhssct3FvnXXd25Mq6y7YhQJ&downloadAs=WinRAR Setup.exe

http://www.repositoryheartbundle.com/c?x=ziTOG0fHSOLscON7NkhBp5V0wLoMnDPZkjRuLgQI9dM=&c=5X6rMRqbJyiFb9Vbs Sx6tzw0S/.../QoRFETP7lDjsGrdGPbb NAQ5v7zhSr4rJZhIviEji6GV&downloadAs=WinRAR Setup.exe

http://www.stockfactorytower.com/c?x=sQP/FOEvxX77y7/sXOtZwsaSVAmSGwuvFiWUzi0weBk=&c=Q1IrsDe6Hx3fLHfAcTZJXHo6qq/.../aDwImb42BEmor4ygzTcA6pJZ7aE5NsJPcC9&downloadAs=WinRAR Setup.exe

http://www.hostheadflash.com/c?x= ZpxI2XOmlEil3MRTcGzZRxiHZZS7B7NZOXmwUS1Cuc=&c=5AX6NMavyErazdZVBq gvslPEUGFAl60NbwgjMYfYbJx0shtYxJZN62EJ017HkAt2plyKPNNUoqCCH0HTlxNdpDy23NmhCofZdoGXAuRKrz9QWp3umrGOFij/.../9&downloadAs=WinRAR Setup.exe

http://www.bundlesbytetown.com/c?x=iVRu4c5hrFIgScYX/dZVbJI wRQlJtFvsJkZaLEC 30=&c=b5DlB9NQw6u2GPO/.../bXKuGnNA19dXO5Mc3HZWGzs&downloadAs=WinRAR Setup.exe

http://www.stockfactorytower.com/.../5uH31WbGi2ifWg8E TD IpOPZ2mRdM7V3IFoHLoGm trj5Te9Q73eJ6xosu&downloadAs=WinRAR Setup.exe

http://www.hostheadflash.com/c?x=/wksXQ58A8P7pwZYW0pPfg vu12ACD8vy6L4L1z ep8=&c=SnS/KvneRkA6 W0YNwXISC8WEn3uwlldUgeBZXm0rKoK9QBObay6Va/.../Lr L0RJyvcSzKca2O&downloadAs=WinRAR Setup.exe

http://www.repositoryheartbundle.com/.../nH1684VipPAl4=&c=KASGvuBSwvOftZ8uFgBLYte9npZzuVvljJCYWXr21ZGbyPlXXZxXS9Sd3j2ddRVJVvN9bauENq0l9QTJs9ukHVe7BMVY1IUwr3ZjJGnUGl6Jfg8neCE779F02BFe64Qk&downloadAs=WinRAR Setup.exe

http://www.vaultsapptown.com/c?x=P94QCUzw/N/1HKSUTp9ncwNUtskT j6eJ 2euNaXKac=&c=pYVblBaOLbx14sOdvn4ZEHzds0XldunB1oblID/oAqR4b yd EYh/55JNETRIXCjFZiWkTOB/.../WYLe58INg7r24uBjys&downloadAs=WinRAR Setup.exe

http://www.signsquickbits.com/.../B5vCsSEz&downloadAs=WinRAR Setup.exe

http://www.hostheadflash.com/c?x=5IlMXA3/c5KB7m1VlGwlaeTxp5Py/ x6748dIaHU7ls=&c=hAEst9W0GttbG7ewdvS10ADIG3DNrpnVgPm4lhX9/7/mEoGMLeJww/n8V8XJ0m6dMnV7zpmsKYzxbSZ/.../ l&downloadAs=WinRAR Setup.exe

http://www.repositoryheartbundle.com/.../B U9oa4139uksLa28PxbdtTNv55KDvfUOGVE4Oz5oO6VlfUxCmnjXRygAZZjl2Ahu1rYnlHeZV2oqcqwp1c6nySscGxa4ynBN4lsgnMs GZkKDKr00U02Qsn&downloadAs=WinRAR Setup.exe

http://www.applicationschuckledownload.com/c?x=20CgSOjjJnXBBOBkBCedC4nrn5vPCNXXv57UitPd4zc=&c=HIxJMre5MKqrMthHxqOYxuy6fxpJ78cXNsXUskbV3i2XJIQLe8ugs9WWNYLiC7bryflHQyamwtc2tnquaSck0u1CX8SlyazTAppOqRfS41lG9IG ogo9r4Ji7Yt0LFjd&downloadAs=WinRAR Setup.exe

http://www.signsquickbits.com/c?x=e7hczB2U4s FNCfggAjLxA2vLsXe eFphMrfLu/XuOY=&c=py6blH0yVDw5VzjK5bJmmRYvG6SUm5OTsSWaCTYC9No9ew R0nStu93UGyFb3CSRbxCo5Ybj4NI/.../gyNEUkh5PAJDut&downloadAs=WinRAR Setup.exe

http://www.repositoryheartbundle.com/c?x=/CyJkVuou7A2goxtb8TxjVFU/scGRdbA4e9VjJwcEMI=&c=56BPulTyF7kexe8fM49zqGEbXJbOxNto/2MruFwDlDogHXwRtOrGUkCXskhBAig00HgSm4x4J9WP6Ozrgr7 aa9pI9LxF6m1cJ4LSmTzw/.../f029h7&downloadAs=WinRAR Setup.exe

http://www.bundlesbytetown.com/c?x=aC5wKrgmlhpbKUGIzd6CLWu2rRAHvM8IgV3a9UpRNHg=&c=QbWMbn9p05nA/Oxm7GwEZLd5Xrg 2YEQH7K/.../SdR&downloadAs=WinRAR Setup.exe

http://www.hostheadflash.com/c?x=nyPHdMcvIOBRuUlaPMvyAuiQIsZJ98 6v8M8HXzzeqg=&c=wfFuzAhLwA2J92P80piKWbMlUMX5I/d4jCa27lao9mRitFfSuobl eEtMT39VRH/tyNzgSb9waFhUhy5kIFXEjS1i79wuzRl0NX7TKaut1//avwWOjHxFBZDCr8vvo04&downloadAs=WinRAR Setup.exe

http://www.stockfactorytower.com/c?x=Dpsj/.../0c3jT1FReuQ=&c=9Zw8SNuiX6QlMH5fWYb20y2EK bOQAiLv0ccDBUvkqx Vb3TRCSRm9HXwAxh0ADBdwGulvGYTz161aQUyL2RKBVoaWtqR67zDAvYw8dcZRUkiImsj3GF0jXzOmA gGxc&downloadAs=WinRAR Setup.exe

http://www.repositoryheartbundle.com/.../QcyEvoAJGJvYjh49Cj4e4m1SEPSx9UkSLMyWDLoPuS0MHyViQngg6ScJ7eALOUeEmTjHSaU kJQ5ryw9ECH&downloadAs=WinRAR Setup.exe

http://www.repositoryheartbundle.com/c?x=6sdUSwFQWxLuZq7RqfPssedIBwnn4Rr/sAs1krloCUM=&c=bjkcT/6SUmBHUt Ab44B6fdHZzm70/.../o16cLMqrIIVn&downloadAs=WinRAR Setup.exe

http://www.vaultsapptown.com/.../JQYBObUY4UxlmPrEU5PPEi9uOqkslHLGLTHxb5rxu12ZptvjV0rXrxSR JjcnsCQb2ZbKFSzrwqJ6DAdQWHWy7CIJ9YSP8m2K1qL9SkzkGaM8h 92Jv6N5z8nZFlo&downloadAs=WinRAR Setup.exe

http://www.applicationbytecenter.com/.../9daJN0Zy849rW0woVG9gU0aAAHO4 V87GI=&c=igNyyu5veXVxapxHvRdVCqOwZKnK302BLVhUzsIYiS9Z7Xl0mc6LrbSALWTvq4pfZsAKosVtQ3MkkrigVOcCyR8z2A0qU1F2joHtbVQeK JQ7lP7YVRY89sQIldfpKu1&downloadAs=WinRAR Setup.exe

http://www.repositorycurrentflash.com/c?x=7CWufdc BR8qWXlEgMOp5UrcYgI CBetMN9KoyrNf1Q=&c=6Y bJ43aGmKQGsJB/.../VdbVXgw8ANDMuyN1fk1fXbgMOT3Br1hi&downloadAs=WinRAR Setup.exe

http://www.repositoryheartbundle.com/c?x=y Sz2I5uvWt4 Cwt91j6YBkuD iMlHr/IVuu4iNOIrQ=&c=to5eXh097LFENkL QzwGzA4Kzm1aaQSE73KSlOM5bZ5J1mjbEPf/yIdnRctZYkGarKKX/.../4I2DbDBJD8oFUyaupyX0hObPpeBOi&downloadAs=WinRAR Setup.exe

Latest 30 of 38 download URLs

Remove winrar setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.