home

bittorrent_setup.exe

Internet program

Agile Funnel (Alpha Criteria Ltd.)

The application bittorrent_setup.exe, “Internet program Setup ” by Agile Funnel (Alpha Criteria) has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions. The file has been seen being downloaded from www.signssafebulk.com and multiple other hosts.
Publisher:
Web Program   (signed by Agile Funnel (Alpha Criteria Ltd.))

Product:
Internet program

Description:
Internet program Setup

Version:
4.3.5.8

MD5:
853771c666d1ade4370232c0e949651b

SHA-1:
9aa02f1160f118b4d8dd0284754ea2f664fbc2de

SHA-256:
b3458ec6536f1b5b41cb8f79892c61fa58000b3e3d053e5724fa08c85b747e3e

Scanner detections:
1 / 68

Status:
Adware

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Description:
This 'download manager' is also considered bundleware, a utility designed to download software (possibly legitimate or opensource) and bundle it with a number of optional offers including ad-supported utilities, toolbars, shopping comparison tools and browser extensions.

Analysis date:
11/6/2024 2:26:32 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCore.Installer.Installer (M)
15.12.29.15

File size:
943.7 KB (966,376 bytes)

Product version:
5.7

Copyright:
Application Web installer

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\microsoft\windows\inetcache\ie\{random}\bittorrent_setup.exe

Digital Signature
Signed by:
Agile Funnel (Alpha Criteria Ltd.)

Authority:
GlobalSign nv-sa

Valid from:
12/16/2015 7:25:15 AM

Valid to:
9/2/2016 6:10:29 AM

Subject:
CN=Agile Funnel (Alpha Criteria Ltd.), O=Agile Funnel (Alpha Criteria Ltd.), L=Tel Aviv, C=IL

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121703663FFB88F568A112BD801328BD38D

File PE Metadata
Compilation timestamp:
6/19/1992 6:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:o5PtGKT3T947xcWA3V9qAS98gFN4fDjibF1vS:odlTa9hAl9pSbF48

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, 53, C9, FF, FF, E8, 9A, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, 24, CE, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, 24, CE...
 
[+]

Entropy:
7.9273

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file bittorrent_setup.exe has been seen being distributed by the following 23 URLs.

http://www.signssafebulk.com/c?x=f2UAWcP5OFpUgpbz 3VU3TSgAuBV39/KZ7hNHzckz7U=&c=uXRRXYPqqH3VQ5VL8fYx8BfYip3WHAPHcfx2/BGsgD50vPj0uAT4X SyeOlYlCNC9 98aTpgfD 3KpQ49ZFneFSJav/PUxK5UqV6wz704AU2HAcdNdkbk01iohoU1rFVtM2RGR7Oa2BNNXtTZqr0w==&downloadAs=BitTorrent Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.vaulttowerssigns.com/c?x=vQ1QHlgcXfXmexf16v68p1IMm5RNmu4DiXXXXuduIvg=&c=QUJ5UR4tZsuB/8ZlKgYeV9ZY4Mm6q1Ic88l4bjN yaPJfu629A0kWyhRFRC4UUThojjBmxizzMGHmTSixVDNbKnl4axVi9rhfTWdtrd7sNaxtDTx1Q60TELMK8611ZUi7A1HQVNl8IVnrYpHECWe7Q==&downloadAs=BitTorrent Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.centertowernow.com/c?x=9T1tePYY00g2BTkW0Nlb8av7I0anlOH3gG/zUjtzLu8=&c=1g5ThIOi29z04AxDvmxX98Pk2DSQDqkkXa6WCSlyNt0Zy/TQ4XZRI9piyY1 AQTtQwoIbmkY7vTHaCKEHWWiZ0oANei3 5lbDEzx WKHVOR3dDiaJdgzVbZFektOUZKquwUVwgQaKVWlQoa0892Xpw==&downloadAs=BitTorrent Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.chuckledownloadstag.com/c?x=VFXpp8gtiWmHjqfX/4w3FQkVXHLnF8H0G0NK4 ryl5o=&c=w9hXtnYyuCNEEF4fO2onqsgbdmrJVTyIVe53b/6hak0G261//6VF4JRkAbywjm/Y3rTolBHpD8cXwKrjWlrBpQg9fpoinMHh55p 7JEF2T1gbLMJwKE8JZCrNBLXPsex7KP/eeUPUA3327wh7nFbPA==&downloadAs=BitTorrent Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.universecontentvault.com/c?x=cLeQP2bygx16qMrgBgpp4 S1n5VVAUXE3abv1hb9sLc=&c=gFRPHA39j0wtGShHujSSpHmSgDLGh0f4midwxr/18R11T5lhhL5eqGMuvhf2c0RYk7UE3jLOgBc6OnZPHNhG7VyWGgDIuRaI/CBQ 3wAlbXSn2cW5PZGsZEP5cvtW4TBbvC03xsz0bbFzo5fQlgUpQ==&downloadAs=BitTorrent Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.vaultsfilespackage.com/c?x=roK5gufDumc2uRGq1buCxhhquglNFqWwj0KpYWzdf6A=&c=nzjQWG40UjzgRDwudJXYC0LqKLIvsMJ6WEE3BN2E9OgfW7f7BGpPzTXnN81W4PKntZZ08N1lMpomsjy6Xc3D9cqQpwB4mVIio4IrtJLelgOag7Nh68RGLhvLpXoe44EO2UGOgFHEvb3AIqZKQzBa8A==&downloadAs=BitTorrent Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.vaultsfilespackage.com/c?x=c4YSaqn87y4GS9tdsrIaC3K9rt0rpq85bL5Es4W3YSY=&c=SPO8CT7OiCLmfELPhk3 F8lIVAdaJK2hvTcG8ZFcBxE3f91o1/Sbeg6WVCBGlPBejP/r/sFQLHtSW/7qgP/jyPjffHDDrIhHj5luGc zg5IbnsXqJtV4PNpT7zZ/2p8TrN8EyD5d5qIZZJSXP7C7w==&downloadAs=BitTorrent Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.chuckledownloadstag.com/c?x=SGCfvFeI2NRXI7SgRc02T07/qntcXO0mpoRaHpvEw8Y=&c=tgzeq3zyvFk2npDQPiIC1s2sbOpFM0LCIc9hbAx3chQukR7ktrP08CgXJMnDwc2QPOkX9VIvvtOpV9emHcKNor2ecnth1IkjqXAgEPpigpfzc u/Pr9P5TaiVB9/8PNf9ymHXLESIFKNrRScMsV5vA==&downloadAs=BitTorrent Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.universecontentvault.com/c?x=X7k8NQBikMqZZ7/xa1qYOI6V/zEgNyZmNbqCNYV0j1w=&c=xb2u8lbl 9SJlmTcY1Lrb2CMdB597eixHQ2gcA6oPcDatWVv/Rs KKkaPEoDen/0nr mHByT/mkDG0q9XgwQUbKtUg9gSMir/HXsWIa66e1Iph5xXj//nMRWv/eJ0QR3Dz0L2A4XnXg35L05O9p2Dg==&downloadAs=BitTorrent Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.vaultsfilespackage.com/c?x=YU7gRyxlc7Ef/9cN5X0VY295LqIIR2d4VtdkYWN200g=&c=j0oGJROWX6DYwkBqeuuWDDHW3LYgmIWYnQMLJBE8BYhRJDzL/K1fe4v/orGadHzn9Rm b7GlYLMVpwWWKq714Uvnyt5xP /hGLIp0gGN51qCTyDZWA7VDJ/x1 rTeG4AzZ4CkdSXFfNPzV0Zrw2m A==&downloadAs=BitTorrent Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.grabpresentapplication.com/c?x=BZ9mhAZsm4ipF0QFxV3RSm79kRFwVshwaaqsjNe0Qq4=&c=Y9RfwZN3t1es2SzZ7sjZWgxaJoweCNC OHiBIygl785fiHCR8jIa26QIHycL7ZdGUOPn/V9kWYgTHM7CKxEhU 6UGC M0DJIIUBMOo13Nbg7qs9H/edN67VZuIHuYe6DjSCXSRtEXmVoLZxjw8ob/A==&downloadAs=BitTorrent Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.centertowernow.com/c?x=Way2FIHVyfnB2zu0dRKZxJnM6I CPBFWyrfxpG6n6iI=&c=ZtdgiJlC4b0 OjFzeZxdONCQrm4CfOG6QflzNCjjri4AFFMB1o/OarT9fAwH1XT0RMnMFXYQYC9k6CXWrbmW1n/AEiu1OpbgbrcMcmgTp68PLRB/YnlXEwObuNGnmkv7WX3dnt7iDVTcRsHUCiLgZg==&downloadAs=BitTorrent Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.centertowernow.com/c?x=o O9a7YfQP0KyGj8MmMWVobGPbvYEu2hlhA nw8sI3s=&c=gEnnBZzQvDvTOj2lkSY6R fTN8P5C2NWrHkB9pCftSdazkL0eBFBHRvFCRvPzMrUSMOj87/usVKEGLRRASmU2ky3pr ErpkVnTBjikCcizQpHYo/teXpx7yJ2h2mA/2fzw5j LkQJRg 49JAlICOSw==&downloadAs=BitTorrent Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.chuckledownloadstag.com/c?x=XBte DNXsqhIrB0jW NhyVdknF0vug23KLLIkL8zbJI=&c=M2wfUYmXJ0IG4sy0YdWMjX/roGUi7M6j33yiKXMZs4RGTanag/TWbA16IEqevWvob62eoyADn6hW/vhoRKOqqQB8WBfD54wdPzXVMc1saX3tlqBBvy93mzU8ULJZ8n6BQXCS1u0YDQEQdprTcbfpFg==&downloadAs=BitTorrent Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.currentbundlescontent.com/c?x=5wsljGme2u88D6aNmIYm4I9HWLa2QWUPp XotlTWBTQ=&c=72OPxFhnnZ1cj75nnkJ6odT1oMmbKaHiSJ8/7wt7ctlSeaUUkUHzRFhdE64yFa8z6mqjAqBcJ5FXdkbJONURgOZoX qrt2Nr7Iu0a2knPfyVKNrJe U3iMBlUtq2o72Fxy/iwZ gkXTPkvs0QLjG3w==&downloadAs=BitTorrent Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.chuckledownloadstag.com/c?x=RDRjb2/ VDr2XGBvLHioxcghP1FCkTrJUJNatelOrM0=&c=jXrjKLyYiK8TO7vspQxMa6Lib1qyIJJAbEYQonGseNk2aVabCou8FMjbeXwrr/op f5Sx35brMACPoyRO /EqZ8Wu/nYKkJykimhkap0IvO26h3oYpAYIX/WnTqVh b5duGoU1duTyHHbdQhm0TONg==&downloadAs=BitTorrent Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.chuckledownloadstag.com/c?x=kUypdD2Jq ugUKreLB0nIDek SsHIp9QxfimtoJ0a4A=&c=8WqXfsryd4QjN86D zn5AKOlIkVqdH pfZF6sdWzU02JU07Td4Qpy65wvpVeu62GUV 1QihqM0RcBPCRbzdEMckjF0ll66ykk/TZblHwv6jG5YtY917gLYKOc3Oh/hoTYT7HoLAdEpwRgZUow7YNgA==&downloadAs=BitTorrent Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.currentbundlescontent.com/c?x=aOjdo93eDYd2wGhVTcjwKnFwzqR9V0yFC9z QnyQShc=&c=5JmNzgTLRUw mM5M0xDH/T34BhDyt5KP5MRtkskmZdl5fBfjSnX1DwivEODiG6tV/Dzm2eH SfVzbCziqns11tvqLKsPQrpGRiP4PtYt8 W66lynA1qn/2udqwUlO6Jcm8C/Y/zBJ3I3oDj1BzIy9g==&downloadAs=BitTorrent Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.centertowernow.com/c?x=muNq0bU6hZ5JBsJDf MM3nwIyp5shcjUO5uOYpKqR6E=&c=ixu6K3VW08Vajgoon0FyHVBzUQ7GM4JeY34vnHtct5rhuIK8k0x3uob1xD2Z2LlAHrOJJSJ5taEM6vNoFKJvb2WPTWpzblHon2Z5040kXEwwQjV6u2eohbpoK19ysNWpeBD8JbDpbnY1pTTyyeUPmg==&downloadAs=BitTorrent Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.grabupdatebundles.com/c?x=3Q5PkyoeogQoGFf PkmhYugPxzY86rN2ppXzI1BmQK4=&c=Fjq/t0bjNhC4nFn8hkN0lMcVmVSXD0Q 78JtcUXYR21lK0lcrBCh31TarNRZUbJowGCJFVbpFRd8mPf6vfFKlVbqMr5UJ5kMfxLcqLAqt7Ty2lVfMit2hainFFTaOOfDjHgQog6Yigo7bL5V sCwoQ==&downloadAs=BitTorrent Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.grabpresentapplication.com/c?x=Uoot6EgLgweTYpQTSqY6iSCoo4D5tgcgm/k7rzjM7cg=&c=a4sglP9dXGgKKt7GyBAfN2saWhZeZZLIPB6jjviQmibh8dQIb6jFDdz7MXk/HzEo1maEQkKZjg5zwqbwIGIePrRhjx4TIfglvze2vl6s0iSj5dXX3KSULHGb8zNg EZTFCwUPPC2sCJfdQoH8UtCng==&downloadAs=BitTorrent Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.signssafebulk.com/c?x=RQ8XVZ0ZvM3 rZNJGPl0B4srSEYgmxvXsWifskZu71E=&c=UAptBwwr1sd0HGccs51evVHRRtsAoAk8qWAmvh4tNqNgCqwWgFtHFGL1zHpEo3KfxmVJ6r7Sdshrw3IH6retO5kjDHon3pijU7AdZ OYBZo1S0pXZgZPrymx7ya50//Nk2qaxkgB2T25/B NFgQmpw==&downloadAs=BitTorrent Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.chuckledownloadstag.com/c?x=WDyH2SaIDPxVsG P 4t3iEMVqokKf6VHI34GVqX9Qis=&c=BldNZOc SDLXliNRM9alCyZunAP0iX4US6yYCGrHyx/OIMu/c4VNJZqaZ5Ki0gu7iPdnQ7M3ePyjTiHws1HxZCTRsQHo519ZC6cii1JJf4LurmS9TyLdWzdp2pnU KU27xMkuU5ORkEP5aqzDnElFQ==&downloadAs=BitTorrent Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

Remove bittorrent_setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.