» Installer Setup
Digital Signature
Analysis
Files (15)
Downloads (7,432)
Distribution (130)
Related (77)

Installer Setup

Publisher Information

Installer Setup is a software developer located in Vancouver, British Columbia in Canada*. The company is a primary distributor of unwanted software. Thre are 4 additional code signing certificates issued to this publisher.

Authority:

thawte, Inc.

Valid from:

9/8/2015 5:00:00 PM

Valid to:

9/8/2016 4:59:59 PM

Subject:

CN=Installer Setup, O=Installer Setup, L=Vancouver, S=British Columbia, C=CA

Issuer:

CN=thawte SHA256 Code Signing CA, O="thawte, Inc.", C=US

Serial number:

1021e089a110c6095910fa179448796c

Scanner detections:

Detections (100% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.Air Software.Installe.Installer (M), PUP.Air Software.InstallerSetup.Installer (M), PUP.Air Software.Installe (M), PUP.Air Software (M)

100.00%

Dr.Web

Adware.Downware.13038

20.00%

Vba32 AntiVirus

suspected of Trojan.Downloader.gen.h

13.33%

1 / 68 (Adware)

whatsapp-6b64883f5666e05b.exe (4b4176e120e82e66f2996aad32d62442)

1 / 68 (Adware)

league of legends setup-87dff4de56b3c1c3.exe (cf28b87c1fa48b79ad5370475b344924)

1 / 68 (Adware)

setupimgburn_2.5.8.0-4dec12635770fec1.exe (2ba19dc25062b8fe9e86498f14f61877)

1 / 68 (Adware)

color-switch-a95c8e7d5752a489.exe (d7b5c560ef384f42376d8dd7bb3cad1f)

1 / 68 (Adware)

minecraft setup-c70ba5235721010c.exe (8f73c874de46791278e0a4d4a765ddf9)

1 / 68 (Adware)

daemon-tools-6d7c3a70567353a3.exe (8cbb6c83a84a3d5a506765b57fad8e29)

1 / 68 (Adware)

chrome_install-69e64bab570a1032.exe (ff666f735887a7e4778e5f95aa0aba27)

1 / 68 (Adware)

chrome_install-53842cc4570a1042.exe (fa73c0c7b0e5692e134092002b58f150)

1 / 68 (Adware)

tmp000000462f2f08a039524f05 (b7a5d41c42879cd1cf4e80e2c4ad51c3)

1 / 68 (Adware)

google_chrome_setup-0357604757086e0e.exe (dd1795a6c048ef06b8ee0aaa627da99d)

2 / 68 (Adware)

tmp0000000a53798cb23dfcdf44 (d546e0f676907c860e4102df74c91e97)

1 / 68 (Adware)

java_setup-f41d22dd56d0be02.exe (f22fff91dc767a44f31c486341e67247)

1 / 68 (Adware)

firefoxsetup-c0ce471f56b74be4.exe (bff1cddf657207ed2d1c6cb4d67dea73)

3 / 68 (Adware)

snapchat for computer setup-fb878c2e56024348.exe (8151ec8f994ca79e5dea400465ad829e)

3 / 68 (Adware)

kik for computer setup-efb5180a561c2ec1.exe (cf28b87c1fa48b79ad5370475b344924)

Downloads URLs for files signed by Installer Setup.

3 / 68 (Adware)

http://everydownload.net/download/us/realplayer/windows/.../?sid=9961362 (kik for computer setup-efb5180a561c2ec1.exe)

3 / 68 (Adware)

http://everydownload.net/download/gem/us/roblox/windows/.../?sid=10824999 (kik for computer setup-efb5180a561c2ec1.exe)

3 / 68 (Adware)

http://everydownload.net/download/gem/us/mp3-rocket/windows/.../?sid=8812114 (kik for computer setup-efb5180a561c2ec1.exe)

3 / 68 (Adware)

http://everydownload.net/download/gem/us/roblox/windows/.../?sid=9079284 (kik for computer setup-efb5180a561c2ec1.exe)

3 / 68 (Adware)

http://everydownload.net/downloads/us/showbox/windows/.../?post_id=6201&sid=11607197 (kik for computer setup-efb5180a561c2ec1.exe)

3 / 68 (Adware)

http://everydownload.net/downloads/us/snapchat-for-computer/windows/.../?post_id=5968&sid=10213008 (kik for computer setup-efb5180a561c2ec1.exe)

3 / 68 (Adware)

http://everydownload.net/downloads/us/showbox/windows/.../?post_id=6201&sid=8432424 (kik for computer setup-efb5180a561c2ec1.exe)

3 / 68 (Adware)

http://everydownload.net/download/gem/us/pdf-reader/windows/.../?sid=10915149 (kik for computer setup-efb5180a561c2ec1.exe)

3 / 68 (Adware)

http://everydownload.net/download/gem/us/avast/windows/.../?sid=6532943 (kik for computer setup-efb5180a561c2ec1.exe)

3 / 68 (Adware)

http://everydownload.net/downloads/us/frostwire/windows/.../?post_id=6531&sid=9581277 (kik for computer setup-efb5180a561c2ec1.exe)

3 / 68 (Adware)

http://everydownload.net/download/gem/us/safari/windows/.../?sid=7067916 (kik for computer setup-efb5180a561c2ec1.exe)

3 / 68 (Adware)

http://everydownload.net/downloads/us/kik-for-computer/windows/.../?post_id=5879&sid=11810543 (kik for computer setup-efb5180a561c2ec1.exe)

3 / 68 (Adware)

http://everydownload.net/downloads/us/kik-for-computer/windows/.../?post_id=5879&sid=7327397 (kik for computer setup-efb5180a561c2ec1.exe)

3 / 68 (Adware)

http://everydownload.net/downloads/us/frostwire/windows/.../?post_id=6531&sid=10557732 (kik for computer setup-efb5180a561c2ec1.exe)

3 / 68 (Adware)

http://everydownload.net/download/us/picasa/windows/.../?sid=10580779 (kik for computer setup-efb5180a561c2ec1.exe)

3 / 68 (Adware)

http://everydownload.net/download/gem/us/gmod/windows/.../?sid=12025315 (kik for computer setup-efb5180a561c2ec1.exe)

3 / 68 (Adware)

http://everydownload.net/downloads/us/minecraft/windows/.../?post_id=6554&sid=7540245 (kik for computer setup-efb5180a561c2ec1.exe)

3 / 68 (Adware)

http://everydownload.net/download/gem/us/roblox/windows/.../?sid=10324641 (kik for computer setup-efb5180a561c2ec1.exe)

3 / 68 (Adware)

http://ffpixelgun4.downloadworlds10.space/download.php (kik for computer setup-efb5180a561c2ec1.exe)

3 / 68 (Adware)

http://repodepo6.com/setupf.php?uri=counter-strike&bundle=o0rkkjbx&sub_uid=8681&sub_id=8681&exetype=exe&name=Counter (kik for computer setup-efb5180a561c2ec1.exe)

3 / 68 (Adware)

http://everydownload.net/downloads/us/minecraft/windows/.../?post_id=6554&sid=11463248 (kik for computer setup-efb5180a561c2ec1.exe)

3 / 68 (Adware)

http://everydownload.net/download/gem/us/office/windows/.../?sid=8675059 (kik for computer setup-efb5180a561c2ec1.exe)

3 / 68 (Adware)

http://everydownload.net/download/us/magellan/windows/.../?sid=8573102 (kik for computer setup-efb5180a561c2ec1.exe)

3 / 68 (Adware)

http://everydownload.net/download/gem/us/.../windows/.../?sid=12188280 (kik for computer setup-efb5180a561c2ec1.exe)

3 / 68 (Adware)

http://everydownload.net/download/us/movie-maker/windows/.../?sid=9198005 (kik for computer setup-efb5180a561c2ec1.exe)

3 / 68 (Adware)

http://everydownload.net/downloads/us/minecraft/windows/.../?post_id=6554&sid=12115793 (kik for computer setup-efb5180a561c2ec1.exe)

3 / 68 (Adware)

http://everydownload.net/download/gem/us/steam/windows/.../?sid=12135913 (kik for computer setup-efb5180a561c2ec1.exe)

3 / 68 (Adware)

http://everydownload.net/download/us/garmin/windows/.../?lpab=a&sid=11994689 (kik for computer setup-efb5180a561c2ec1.exe)

3 / 68 (Adware)

http://everydownload.net/download/us/garmin/windows/.../?sid=7149410 (kik for computer setup-efb5180a561c2ec1.exe)

3 / 68 (Adware)

http://everydownload.net/downloads/us/frostwire/windows/.../?post_id=6531&sid=9785195 (kik for computer setup-efb5180a561c2ec1.exe)

Latest 30 of 7,432 download URLs

Distribution

The following websites host and distribute files published by Installer Setup.

safedownloads20.online

mspffr.softesm.xyz

safedownloads17.online

ffextreme11.downloadworlds11.space

ffpixelgun.downloadworld.space

safedownloads15.online

fftoolkit13.downloadworlds13.space

codecking-down.com

fftoolkit11.downloadworlds11.space

ffmovie2.virtual7.space

ffrobux.virtual3.space

ffrobux.virtual8.space

files.downloadme.co

ffpixelgun2.downloadworlds6.space

fftoolkit7.downloadworlds7.space

securedownloads19.online

fftoolkit2.downloadworlds2.space

downloadem2016.com

www.extreme-injector.space

files.storagefreedomnload.com

securedownloads11.online

securedownloads15.online

www.wedownload.net

extreme-injector.space

fftoolkit5.downloadworlds5.space

download9.chromeworlds9.space

ffextreme7.downloadworlds7.space

go.pivot-veer.com

www.apponpc.net

safedownloads9.online

30 of 130 domains

The certificates below are also signed by Installer Setup.

4BF62F5F26CB76241FBB68935686CB (Jul 12, 2016 to Sep 09, 2017)

114A4CD0F4776DC50DF11F7D51696678 (Oct 23, 2014 to Oct 23, 2016)

188C75106A329415713A40BD52985D5C (Mar 23, 2015 to Mar 23, 2016)

07A1307B10CFA227F3AF56F353208204 (Feb 09, 2015 to Feb 10, 2016)

The following publishers (by Authenticode signature organization name) are related.

30 of 77 publishers

* Note, the details and description above are based on the code signing digital signature issued to Installer Setup by thawte, Inc. on September 08, 2015 with the serial number '1021e089a110c6095910fa179448796c'.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.