home

frostwire setup.exe

Internet program

Agile Funnel (Alpha Criteria Ltd.)

The application frostwire setup.exe, “Internet program Setup ” by Agile Funnel (Alpha Criteria) has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions. The file has been seen being downloaded from www.grabpresentapplication.com and multiple other hosts.
Publisher:
Web Program   (signed by Agile Funnel (Alpha Criteria Ltd.))

Product:
Internet program

Description:
Internet program Setup

Version:
4.3.5.8

MD5:
fa25eb591b77c7de8d4b7d34b5c7f1f2

SHA-1:
85fd304c31237eb642f6c62c7601c10b516bfe7c

SHA-256:
bd43c60549f420c9024672701780a3f4dd255e7e8c623675796485051b2b1091

Scanner detections:
1 / 68

Status:
Adware

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Description:
This 'download manager' is also considered bundleware, a utility designed to download software (possibly legitimate or opensource) and bundle it with a number of optional offers including ad-supported utilities, toolbars, shopping comparison tools and browser extensions.

Analysis date:
11/6/2024 10:15:46 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCore.Installer.Installer (M)
15.12.30.9

File size:
943.7 KB (966,376 bytes)

Product version:
5.7

Copyright:
Application Web installer

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\frostwire setup.exe

Digital Signature
Signed by:
Agile Funnel (Alpha Criteria Ltd.)

Authority:
GlobalSign nv-sa

Valid from:
12/16/2015 7:25:15 AM

Valid to:
9/2/2016 6:10:29 AM

Subject:
CN=Agile Funnel (Alpha Criteria Ltd.), O=Agile Funnel (Alpha Criteria Ltd.), L=Tel Aviv, C=IL

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121703663FFB88F568A112BD801328BD38D

File PE Metadata
Compilation timestamp:
6/19/1992 6:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:35PtGKT3T947xcWA3V9qAS98gFN4fDjibF1vS:3dlTa9hAl9pSbF48

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, 53, C9, FF, FF, E8, 9A, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, 24, CE, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, 24, CE...
 
[+]

Entropy:
7.9273

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file frostwire setup.exe has been seen being distributed by the following 30 URLs.

http://www.grabpresentapplication.com/c?x=0hSBbi Rkq2jIXSUK6th1PR0k1 QVfP UZzsGTDI0zU=&c=BRLVedzsI yTbCyKGdMZd2tRP8nGkml7C4HlaJNoAA/mZWv7UJz77YK GwBtOVyipSOgCeZOwXHCS9uRiBH7yqGMCQIYl03smy9Mkr7RmLvyKZ7izoq86BeCtgayRKn8xSvUtai6DrKLzUW2T /XbA==&downloadAs=FrostWire Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.filescleartag.com/c?x=PmqjBi1C1C4fsobKXZweOlygo/3FeAy9OdEwEvyWGhk=&c=DDHUhaP7SGwbGz4QcBOLTl7O4Xnb0aZFbmN67pPwVXaHVzbDG9jZLCXXpePkycyn9N1bslIGZ4udGX6D L0e4wF/jQzmr98W0CT/mv23bugv2Q416iHXJWZYVHDQuCP9a3D8P 2lqMIlHgkZ5WkE0g==&downloadAs=FrostWire Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.grabpresentapplication.com/c?x=joebNFi4U3XV6zVTrcrA47qBFCgCWsrlbH2/oylay0I=&c=yE4CG/93czfGTAaq1QEVZ8bkjDCnb/SrO8VQ7MQBCpv Osc4d4Ds7zezBBXcik9OLAZIknRE5CqtVI3KXUYbFbG P/c04oJy4nrJQLRn9FZnM9VFkakti/ZR39onM0SPGIS 9bu0LS4NBjHKCR88dw==&downloadAs=FrostWire Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.filescleartag.com/c?x=dhxSrUOcoWls7gVDiQ381SnVwS21TyFqRM218mms7mk=&c=TiWye9u/dC6eyn9/PB0P27pc3YZcMxx2bgn/js7N2k9XUIghSDHSCVZIZeIZNxb2dhmJ/DlwHnt9wtk 7ZDXj/o9ffQsnG /Va3QT0 ckps8nZRBgUeibpmauqVGtqY5wXTLmNVtThh85U96cKrJSA==&downloadAs=FrostWire Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.grabpresentapplication.com/c?x=qGNdVoTDqkGOc3jQLqXEJ9JnS0KnCifc31ChMC85VCY=&c=dYmHOvNKMEyDxoNcy06DivmAnJAHGMY QiSNykPNmtjVtyyaWhFewl1xGZ4AXCPU8XO51kfziAtQnCyGKNWcE9WI MLLm BsGE24jJkdKJuNjrdAExu74uEikqyo4yvBOVdeHKW/WeQiLA Ae/zveQ==&downloadAs=FrostWire Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.vaulttowerssigns.com/c?x=UqLuAE6zSpuO2qUQAT/D0dqW769Nitc2oOq5EOyHu2g=&c=iG54bbIVWtrv6UDgWEnCVcJlvYr8oHqNBEx/Hpq4ELeG8BlCDBcjKBRHcqb7nQlSIoleKj6NoOqFjeImy3q04WwYROCUAcoq 482nO310RRYE9dT xAcNvWsLEHV7vgQsBKQf/lkRLAFfS9lO9hTLA==&downloadAs=FrostWire Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.currentbundlescontent.com/c?x=KE/raknRvzGQv1e5gRqZ9RmSWOC5QHPzVEV3/3NzVpQ=&c=WB9WhJvD9wfxTDpFIWK6INhsJ2pObtAvnoIq9U IezP44AZJosOr2tEiqdlTDLA0HffB3oj7kz7orzDqYgBqXxiSiztBPHKt 0GAeztafoNeplNHsObZEjgeCJzrxOjO5bAJd4W8D6Ibdq0UX1hstA==&downloadAs=FrostWire Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.vaultsfilespackage.com/c?x=O7ea2HjZtum2dFdbDgMedIq2PrJ7UJiWGf1GlQ5Lezw=&c=k93IkG6CawWIHlEiGdDd133Hg7s4hFG0o2FtW FGd5xmHDPc bPAEXOIVm8thuZF WHB0JHZ4qJ5U5M0EmKHo5uRc 1NLSuJZj nxZKWccpl2jQrRQBohazC9vCaEB3UGJLPDUD7Tv6VlG/9u2nobA==&downloadAs=FrostWire Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.vaulttowerssigns.com/c?x=ZdiFGa0CbF157IlsVPaHR6MsoHiY55qwnXyfqAd4i3Q=&c=MuJIatxTU17EnNmXMQ66eTMeH5Nzy5ErhtQ2p73xDJ8O1nPXfTc282kf5lzDzB2ZOFHBQMQxEtYP/I0xEjotuK/hPPNC8Lu3hDihHVXrq32WmJURrWhMW3sri2IOsWC KNRsnNzC2oQDzwAAdoVYhA==&downloadAs=FrostWire Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.vaultsfilespackage.com/c?x=3qr/FouEhKULNTGb1aNfGK3pVGZRuUuWx61DXPmrjec=&c=F8pnxWWkdAlSnVNUxOoe03AMlQNZEK VR3tVgSMcePrhoW1V/3iqe04g18HfY/YtUNhOCQo4eDhwYdqaFQy0RtVKhf/pZyHVXG2znTtHEqludg6CA ovL0G3q7YiuKKtR uS5 JZni66E3sVGHiGPg==&downloadAs=FrostWire Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.vaulttowerssigns.com/c?x=T5o5HwD96p8ulGXEbTx18 yfW63VJf8hzBbr8yjIxqc=&c=KDLirJKDTu87bkhecuzivDC qWipM2Ew9LOL4yTwiXMHfcFtEKWprxkGSj75WlZv3LcTUFZ8etUBOR4oiv/TkwuIxMkQb3pEA1yd45e5hcTCifUr4ZhI mbZTq t7lwmrysRT5SiuM Y45Fhz3 dw==&downloadAs=FrostWire Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.vaulttowerssigns.com/c?x=KS5FUgJnXFuWdp506GLQLi8G P7s/xkCA4RvrC58sHQ=&c=bAPMjkGOeyR7oOxHBjiHRTlq3vEqNwwur6YSE435mBu/HGP/DMXJW6UNv0K3DTGp5TPNG5oVzeMaOOgQKHkdKmwVZ93vnSj38Xm9Z65tnU xqbBXdcEHvZY2o7OMgpSunEDOtVSRNxSuES25lCFrFg==&downloadAs=FrostWire Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.vaulttowerssigns.com/c?x=IZnljkNVB8dw0RYL9Gg48LACyFbOCIAQqAZLC5pjc98=&c=Ut7JXfHFt/9yIcOjvmumGVjGPZqxiSrLCSll/rcvMuvlx G/APvrSqDrb40zNZpbtaqYKAW4IowMkSz9CCzhS09OhLNXfAf 67iCVPpeiVOP7oR6qzB7WfxdvBU WfTfIHFvzOhTrQru1519k5sx3A==&downloadAs=FrostWire Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.vaultsfilespackage.com/c?x=gSlqv0zuBamGoNdYqvmIscnZVxokMjIQcAdJIGmqZxk=&c=8o8v iZqznvFtkKAK9SmbArR1/6A0KTzWwVIn8TCt1C3cCPv9X5321PFKSozbbDShAubNL VWqFYI3gPCygTRswXyX295yrD7Y/ZZvZBVN42VQOv2dTz7yYWqqmltYIWD1DF4GJSaqgheD7XNa4A3Q==&downloadAs=FrostWire Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.filescleartag.com/c?x=ovnotOxTzLMnUNyKvMxjmWwl291c9nmlJF8kUuRMe78=&c=qFO6mp2oi6CBelCQkSChc ZbCYuRKBlOpicR7EbXcrZnEG5ifpUj98eJVR9M3RNmxt51AcHoJ kPOWoS//lAl4LYsRrudj10L0DHjZV wUbXxaw7gh8G4q28APFCCHwFhnkFUMnTX78gy9aZmd/3JQ==&downloadAs=FrostWire Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.grabpresentapplication.com/c?x=NpQ177UjKLMXTJn7dOiwyR7HOrC35dADITPdDSTge7I=&c=Bowwb4JmhKTt4DyCE9vYZdKViEz21wFt6NTyG15QSyXYskokuaCZ12VR8Ej1Y3hktJCXEAO67h1GjTagiOnCk wuAWLp9rOdsEjArkGAU5WVtYAisgSTpRAmP e2x9UCSk3nbah9AIuZCNs5/gaoPg==&downloadAs=FrostWire Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.grabupdatebundles.com/c?x=Qm288FNUkn115EBPPHQ75dr j me4xFvl v/2N6G0cQ=&c=fj0EvR/U/5T4NMHCiMzVUY HNlLVH7lFtfXjl8iPvtdf5ZUMYtlrMhvrUjdp5JDrmxMtrngPJyuugs3Ku8zS02u89kEd/EHS zOuKwCqf93HHnZcWzmp6dwHZrQtPMgOuQjQfuAqd7dwMa7oHKKGvg==&downloadAs=FrostWire Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.vaultsfilespackage.com/c?x=fOflbYBl8rf50o 5ytGczQUBhKs5TFlv/eIn1gRH6BE=&c=9HzOX08do4yzlXmV8dlRaQrNSE8xKlTxwLjmdI3OjxPgGCWpF/XP oxAdyOlQQbIsEeNMy05dqTe5jTCN7Mz0Cc6NSZXSk1PLDS7IMl90awNWuq4BkuO470I1j9Jv5Uw6fz2cMv8Hb3lyzzCYe31pQ==&downloadAs=FrostWire Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.signssafebulk.com/c?x=BoPpAsRSIXgfkh6XWAOxGxSUCx//wrHWe7QhYm18NbM=&c=HgwmwwGmOx/vJem5Plie2esNk0oPws 4og0EvVyWjG1Mo51kkddv/9cZBys9NRY4R4rVfK4cEbhEHTPEG7m5o/yG2u9dm8i4Vqb301aY3VI8G2MTkZMqiLyJ5UY0h5jyj6j9Z7S49JC/jctyqhdOFA==&downloadAs=FrostWire Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.grabpresentapplication.com/c?x=Ands0KPrmYjqGOsuFSEjW7K1GzclFCilikc3M JvDtI=&c=FYj PABdYMOcTj16YAbAUd5InAHgW1ZmwuCk1cIxOYFR8Mu9osqqkxqg1Ok/XNKICS0cA4L5qyPYPcMw1fVrqbfRFNFqVvN1Ba/uz2AObzQftsrxi8bogp7eG9KxjThNnGnjA1AHP7 c6ccW 65asg==&downloadAs=FrostWire Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.chuckledownloadstag.com/c?x=qvvuRQoaSmUj699Ja1nEXI5NXh f 6yQ4dZK6r35nQI=&c=DEuWkYuyy4yxoXnWbSEHtWHPtmRvPq41G2E5hiTZ0Qv8guRRE7TZYB70TCfzIt2VwtcEeHQ7qZS1Q1/tGv nVuzcImjkQCbHkiSjtiuMGbIOp2wztvBvrQZrb6TXzOpqJGPlLllhrg7E9zfFhfQbJw==&downloadAs=FrostWire Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.grabpresentapplication.com/c?x=xOWcHBp t5BMi9rg8NRc0clRmW6LQAvtrtLJJJ0dy24=&c=KSSebLdC8jsAXYGhsef17YAKFvqt5abMmG4gjI23kgUJKeI0ZUL/eFFf4jVu1obqtI184stiB8ziL7Hj6AajszvApjwU1R4vksUXUErU1nHSUUkBxQ2E4bhfVFuGK2iYolJwwBD7qUsyYWSkI9LE1A==&downloadAs=FrostWire Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.centertowernow.com/c?x=7ySvyw2p3Ib9YF541pp4RCrIOQvEQb2fv6Bh3Qv2mj0=&c=aZOFu5Vu/m8RMnnaQmeagd6A7raTKizossGk5f117gPiHESI8TKp/43AiAtGw3YhjGVD0Caj28m9wn/C0Ez7VWSfpvUNs57diKjKemz36uXmu/1ghYjOKCQbK1/jEsupVtSKOEAe/YJpll4UIL9Kfw==&downloadAs=FrostWire Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.grabpresentapplication.com/c?x=nApkYfL5o2mSu7hu6ubKajSZpB heZRg/iUMYsqqkOE=&c=jBZ0cIy5en 7wjfHpZhMpNpL4VijsVVHukQS2bAXczI/EndYwrSzfDmPzmdxa7SWMn/zn4jMru/VWygQ8p1dUtNZmpoEKRN2Rxy2wgV7StEmxFW/AWuvxTlBhEFVXO9dE69SMbc6gU0tGX6GLDy2Wg==&downloadAs=FrostWire Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.grabpresentapplication.com/c?x=5FVILZhUhww81fPuMU1VUPzPVdewwBzGiJlid8NKSic=&c=xUXlQqqAB/8Q/2IddDhqA 7SrrI8mJ6tBSGtjsw16 hWF45qgOpwLMZFCj2UYPAFqCN6fAJV6ztrJ AbnDEYP8IFvMvGvKHMsAQDupknDyqnUbywoNvFpcFaDo22JfiWSbCbl0wkZtSJ8Tf2TZZKWw==&downloadAs=FrostWire Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.chuckledownloadstag.com/c?x=WEr5z/Fzpds7UQIFUf5QhgESmK 43MaA8sTHAAv80UA=&c=pdO8Fn08sKSSMbWweS6qskqmm0mK5fHPqA0M7mrpmRbKYyT4dz e0/YB nmtrOpGjAkXfqBkBz51SoLPj9xDQEsihBiMgdPuDNe O7DEP96XZm8sFayZ64kXAQeWX5UVGFFMoPF1O0KOqeyGP3T6BA==&downloadAs=FrostWire Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.centertowernow.com/c?x=nUPanm4KdTv1WIo4UrjH3243vTYsU9CapnK2nTQ71FA=&c=iEWhe8B67PMzhuoJXKG0x9aiqnK8T3Sjp/nwncgKDepMws5jo06gIluzAf fdgA7ezxAA7NmaPc8HcuyWiIp3x52SyEN2dGc8w7T/4b55IWbgh625g8pUiIYIbfdacQX52QbQ2WqnrGByXlaPAvkuQ==&downloadAs=FrostWire Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.currentbundlescontent.com/c?x=TOMdMaAqJYzYV4baQc1WYzT1mnSqSdvEpvQcARmTZYk=&c=IVTx2 RwWOst7ouUaMuoqIwOQwxtCJ0JoJbatqWiRjizw2w1hu/pdyK/kvYtx4YkaAwluQiW3s3 G59j/KUWQuBufjayGpZ EqiLD5qNRKtMK9NSaIumDKLAH6jBpk0MO JZ52f T72ik3gAYVjlIw==&downloadAs=FrostWire Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.signssafebulk.com/c?x=YJeT1OYzSx1N3GGoxkM8qzg90EFpE57BWxY2aAe0WGw=&c=54 54Q05sdsC5Jxqg8IC0pEOP2b3z7Nlhlrn8b6oiZKcPxJ/DNdbLA/C3tMJXTxtN0ETaIf7rGJRUKzpfOAsYi08q7ZuvmFWIUTVZk W/1zqpGtf68Prrc/F6NTvNAYSV9jh/1P7L5lds7BbmK lvg==&downloadAs=FrostWire Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.currentbundlescontent.com/c?x=GTrJWP9yaSUatr/kL7iqiImla/D9fkuvSWe6pYfbQP4=&c=39H7Q8ig6Ul6K/x/QzT3RLyrmxeb1vGqJxIj0D f8LaJ9OQw1eECUBOu Dz6tW8P C cgHmDePFovi9jcj1pmpRkVe0fheooEYaRJv8hxHDDmkxGSK/MxhEaBOf3YzJQKKrACej8RZPl//VFqkvnXw==&downloadAs=FrostWire Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

Latest 30 of 30 download URLs

Remove frostwire setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.