setupimgburn_2_5_8_0.exe

Nof

Prompt Funnel (Fried Cookie Ltd)

The Fried Cookie installer utilizes the InstallCore download manager which may bundle additional offers for various ad-supported toolbars, extensions and utilities. The application setupimgburn_2_5_8_0.exe, “Nof Setup ” by Prompt Funnel (Fried Cookie) has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions.
Publisher:
Mimo   (signed by Prompt Funnel (Fried Cookie Ltd))

Product:
Nof

Description:
Nof Setup

Version:
3.2.5.5

MD5:
fade37017243baa96aee7ec471e86af2

SHA-1:
222818d7eb148f5c52268388cc1bab8d0db591bc

SHA-256:
3d0eaa301a841d1118084059b46d57c56329f466b255543f132b4f1f3af87fb1

Scanner detections:
1 / 68

Status:
Adware

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Description:
This 'download manager' is also considered bundleware, a utility designed to download software (possibly legitimate or opensource) and bundle it with a number of optional offers including ad-supported utilities, toolbars, shopping comparison tools and browser extensions.

Analysis date:
8/5/2025 12:52:39 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCore.FC.Installer (M)
16.4.20.0

File size:
958.8 KB (981,856 bytes)

Product version:
5.1

Copyright:
Lite web

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Common path:
C:\users\{user}\downloads\setupimgburn_2_5_8_0.exe

Digital Signature
Authority:
GlobalSign nv-sa

Valid from:
12/17/2015 4:07:46 PM

Valid to:
5/4/2016 2:27:49 PM

Subject:
CN=Prompt Funnel (Fried Cookie Ltd), O=Prompt Funnel (Fried Cookie Ltd), L=Tel Aviv, C=IL

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
11219770E5FF2BA80CECD3514AF9CE966758

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:TYbUGa2/HaxL5hLk61i8GjBosouQbUnckP6qcMViNAQ:TLdhLfLXo8sosBncknriNA

Entry address:
0xA5F8

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, CE, 8A, FF, FF, E8, D5, 9C, FF, FF, E8, 64, 9F, FF, FF, E8, 07, A0, FF, FF, E8, A6, BF, FF, FF, E8, 11, E9, FF, FF, E8, 78, EA, FF, FF, 33, C0, 55, 68, C9, AC, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 92, AC, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 26, F5, FF, FF, E8, 11, F1, FF, FF, 80, 3D, 34, B2, 40, 00, 00, 74, 0C, E8, 23, F6, FF, FF, 33, C0, E8, C4, 97, FF, FF, 8D, 55, F0, 33, C0, E8, B6, C5, FF, FF, 8B, 55...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
39.5 KB (40,448 bytes)

The file setupimgburn_2_5_8_0.exe has been seen being distributed by the following 50 URLs.

http://www.worldrepositoryclear.com/c?x=0z wkTVa4RISFt6DwengTQJSiLHQSeRtPifzMET1Puc=&c=6xhorqey5blZUiyWWgBM3IWEEqAYnnrs/63mhnnLqRsr/x0tdxgpcj1xi5OQAXFdX10hOOGU3qVnSXrNRy/88JHKjSJJecgBGQSdggK9QiGOpFadF wGYth1ZTA89Y4t&downloadAs=SetupImgBurn_2_5_8_0.exe&fallback_url=http://.../download.php?file=imgburn

http://www.worldrepositoryclear.com/c?x=ngadQxSv3NQgW8kpC2cj3lOaa mqXfqT3G269PqbMoA=&c=fOVZs0PCGcFS4Mgp UGCVkkzQTtXCklvcLvshFkw4YwMMENVaufaZjVVucllF9yl/j8fpNfm8QoVmBDAAOxSGXvxXzkSpbrZwC0K4UAUTlOaxn5e3tJ8QX3RTJ73Zlaa&downloadAs=SetupImgBurn_2_5_8_0.exe&fallback_url=http://.../download.php?file=imgburn

http://www.worldrepositoryclear.com/c?x=2uJnBohddAsP1HqxHt3STdqEeEFZxOqtY T4M/M0iFo=&c=qPTbAWhqoB3jZEFrnuNU334GYXZ/s4mwbux2MWNrbql4RMY6YC0RQx4KAxezTbrTEjmpb7wuN3bFWQL5UK68xYx8utabO/x4aP3QvJITK8cDAi5i2gqcsAJSSg4nWPwI&downloadAs=SetupImgBurn_2_5_8_0.exe&fallback_url=http://.../download.php?file=imgburn

http://www.worldrepositoryclear.com/c?x=2UN2cBsSPI67nusbM7kupTGKPOlFKgUICzlG6lf Jds=&c=amplgE4HBrXR1k1CjITz/uL0ir1VgTH2WhsjTul/3RBYLlhax4sGNnqF8mU1bPXn94cFVTX 5r8xVqWqJ4aLuvfIzQyXDgvzpg0ogNTyzwAs4qYPspbThhF5CV4iKTds&downloadAs=SetupImgBurn_2_5_8_0.exe&fallback_url=http://.../download.php?file=imgburn

http://www.worldrepositoryclear.com/c?x=lgIGLVXbFdBcD3 24AXOo6c18RDxPV tDGQxZHhJMtQ=&c=w/8/ewy GRbsGAGhXKqu0lXbJz Imgz/F3qNenydsyEH3Er/NGkXtsxcQlAZEqMhharTTN/lDVrOv6fEqFmIJPC4N/hBiSpDASfcFWUdaeFwTj1BonIrElN8y0FRogRW&downloadAs=SetupImgBurn_2_5_8_0.exe&fallback_url=http://.../download.php?file=imgburn

http://www.worldrepositoryclear.com/c?x=h2G2c40BDBYlKlEoMoE1ypYGw1NDMGGYWZ5q1sXI1Pw=&c=LW5gGi1EOCg3Zqc68L25X7jUbfgbTq3AyEgtjtYezyZ3mcZwuX8czj5FJSlPsoGD/wpdEJO 5DHcTiGdBvqnAGkR/Gk5Sdih4nbYu/xx8qYNicf WOchRfMeSjSagR7l&downloadAs=SetupImgBurn_2_5_8_0.exe&fallback_url=http://.../download.php?file=imgburn

http://www.worldrepositoryclear.com/c?x=ZvsXBpBrrRU32tQFQWBmsusvA8Dq/1vJfgawB/3 8zA=&c=hjSFsweLTrZGrE2jNYrze3HoHpcVtG2TJlafwYXfEHvzF1m/PJ7SrKWv4X9e 6oOb1efPq/7c 9ouLznw2giphBI2rABEiuRQuBnK9Nfj3Z/mexwSuX4boQRCehOqQiE&downloadAs=SetupImgBurn_2_5_8_0.exe&fallback_url=http://.../download.php?file=imgburn

http://www.worldrepositoryclear.com/c?x=z4NehHWu04yfGQKVjQxZ WHF0Rfl5 3U mZ0Gsxp84o=&c=Hu2f5q/FpL/ILw/9Plhige3pvL8zCIdxk6czMQ/72dq1hgCB8peeEgkVtgTXBWsSZReP2oGZbi4WwXxjc1kVNsZ0AtQ8wr25PuXCwQS/NIhgn7R5pnO4gLBVYS63DZNu&downloadAs=SetupImgBurn_2_5_8_0.exe&fallback_url=http://.../download.php?file=imgburn

http://www.worldrepositoryclear.com/c?x=cPLIrwJj7GoVKYrg7Gi2g2XkM AEvTAPw34Tl8JfBpo=&c=VvfnjpqFFAK0iEAHKixranTKkUDMUxlbJvmn4e/9SD9l82aMoMN3iMKEP2mRELPqLTZXxLnId5j1HVkBAR8BLePkvpPJ5HIpWXhAOrv1bGfwaabvcHTZckDVfFnaSQ1h&downloadAs=SetupImgBurn_2_5_8_0.exe&fallback_url=http://.../download.php?file=imgburn

http://www.worldrepositoryclear.com/c?x=5/ltkGoSafUuz98fDRW87vlFFDx6OVVeRmWZGeTnmeY=&c=AppQHmm lY7Khdlx8BP 1VcUGifZw6iWTLUQ7vCi70lx7KMENF074MXGlmYRDHCMufysrAuJconLI98QogA4GURcvzLEm9Vpp2flkQjoKcfGBujEQpnxwjt6xCDU934T&downloadAs=SetupImgBurn_2_5_8_0.exe&fallback_url=http://.../download.php?file=imgburn

http://www.worldrepositoryclear.com/c?x=5tg0FoGs5mX7lPxWqVh0/jGEqiUjMWoZd9/b09FgLwY=&c=OM0zse5KhA OPXUPVDOgWkq/nfFzjNV4GqUgqOPsh/DAPGEXxkRVBAwYNnwrS6I8lmhwUbYahY4gEKYmwy36jbba1tu9vPfLHxYDUVW2rkCP5rWXAL4q4dyq9nWC9J6f&downloadAs=SetupImgBurn_2_5_8_0.exe&fallback_url=http://.../download.php?file=imgburn

http://www.worldrepositoryclear.com/c?x=ezdtXahIpsTTLcUNLwqgcHC1NRnOEW2ny6PulidNPg8=&c=62snuftBOrG9AaabOtuPB2Q8Qt90xjZgCC20htyQTIdPgwK/heTLFqqLUJA7yMvL4c9SzsUqDTcHbaLbcRUNkfuj70vB69Xrqnmsc1Yt tODRZRu042pxaNEme9dC0g/&downloadAs=SetupImgBurn_2_5_8_0.exe&fallback_url=http://.../download.php?file=imgburn

http://www.worldrepositoryclear.com/c?x=lNCvatr6LC7yHiIyEGUZHPZmvbadztIdAncf4etyqoE=&c=MlCQ8Mm7D1/fOz en96TGRUWlqy4raXOBIexFCJpjbH7fYt4oqK99LBAhln5debBpI Mkl2Cbr2FnurPO7SYER9hesKt05xsRYkYJxBOL1 r2MuYQec0CDJwOf1MsmWc&downloadAs=SetupImgBurn_2_5_8_0.exe&fallback_url=http://.../download.php?file=imgburn

http://www.worldrepositoryclear.com/c?x=0JHOk8YNM5mH31Vd8Dc77oKgAOCI1apPkECNToAnK 8=&c=s4cHu3buwafl9A4cfFcffJgfE0ys DuUy91k5JiPk7qptPwMXYk8PEkR5qrXHPPkUWg6MpnxOrMclKhfAl8MYqolTmScKFLU0IbOiyn0h6IRvjP6WyR3zGNcUtRoZve&downloadAs=SetupImgBurn_2_5_8_0.exe&fallback_url=http://.../download.php?file=imgburn

http://www.worldrepositoryclear.com/c?x=MUE33L6TD08qEcZq 9KAOcpXtfIF1mCC841YuAvnkAE=&c=CcatnI0ABCbZ8tUD gwVoh04/PQ62CjwFb7sbi8crvoUIS5eCvZbAKDevjg560v6JdQkL1FRTlulxhc4TMhHJqllwiWo9giXJmkFuF6fdE JTdvxfQb6np/22Q03u2K&downloadAs=SetupImgBurn_2_5_8_0.exe&fallback_url=http://.../download.php?file=imgburn

http://www.worldrepositoryclear.com/c?x=IHtgMlWBI55ZQwhEi1tLC6xA/a61dIjVzkS0KmtFMM4=&c=cWyHdjavTQI0eHXR0przUsDk3d3gOYnBpb3L4SgaAmiYEmLV3RYq8sgPsalP0z0wTSKvA3YfQhpA1lW29p2Vq2ucid2D6dMirQdH0ervGhn1vLCYVqurDOZL3JSfWL5w&downloadAs=SetupImgBurn_2_5_8_0.exe&fallback_url=http://.../download.php?file=imgburn

http://www.worldrepositoryclear.com/c?x=H6bLM5EEcM2mJnTOInSwfAhWAvHzqxe73OVGKNGJVuY=&c=8 xbbTIMpro4F3tH0q7i6PhV4iwSeKGHXfJ3a6eXZNyGQIWp8Dzg co/tgxmhd0dYsjUYK1fRac6YHpI0BQUnFnm U5 S6mRou2zyjBReQhnk49TxrrEPi5o8rG qhR1&downloadAs=SetupImgBurn_2_5_8_0.exe&fallback_url=http://.../download.php?file=imgburn

http://www.worldrepositoryclear.com/c?x=aRoLVouOBBYVyDzvDhwlzIU2xZL6fld84GoDKhUclpE=&c=KW0lhY6XT4uKoANIt23pvyHUJV2MScmQ2u8eRDdU2EgM4T0LFeGb9Fchq2ZudSh72zu2AgfNbLw0cFMicrhqaFG/7WsViMjFHUEf0ItqTFh40XcZoLLAtTgDWhBmRFNk&downloadAs=SetupImgBurn_2_5_8_0.exe&fallback_url=http://.../download.php?file=imgburn

Latest 30 of 139 download URLs

Remove setupimgburn_2_5_8_0.exe - Powered by Reason Core Security