home

internet explorer setup.exe

Internet program

Agile Funnel (Alpha Criteria Ltd.)

The application internet explorer setup.exe, “Internet program Setup ” by Agile Funnel (Alpha Criteria) has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions. The installer is marketed through download protals and search ads as Internet Explorer but will also install additional software offers which include adware, PUPs and browser toolbars.
Publisher:
Web Program   (signed by Agile Funnel (Alpha Criteria Ltd.))

Product:
Internet program

Description:
Internet program Setup

Version:
4.3.5.8

MD5:
0491dbb12c047fed51d3f8b5968de625

SHA-1:
098e1b2efe048e05ac55d0135e2ed64d96a76891

SHA-256:
a5931f6aeeac92c52e3c260dc40b37255661e11fa192bc81fa05dbfa94f7ef40

Scanner detections:
1 / 68

Status:
Adware

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Description:
This 'download manager' is also considered bundleware, a utility designed to download software (possibly legitimate or opensource) and bundle it with a number of optional offers including ad-supported utilities, toolbars, shopping comparison tools and browser extensions.

Analysis date:
11/6/2024 2:37:26 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCore.Installer.Installer (M)
15.12.29.15

File size:
943.7 KB (966,376 bytes)

Product version:
5.7

Copyright:
Application Web installer

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\internet explorer setup.exe

Digital Signature
Signed by:
Agile Funnel (Alpha Criteria Ltd.)

Authority:
GlobalSign nv-sa

Valid from:
12/16/2015 6:25:15 AM

Valid to:
9/2/2016 5:10:29 AM

Subject:
CN=Agile Funnel (Alpha Criteria Ltd.), O=Agile Funnel (Alpha Criteria Ltd.), L=Tel Aviv, C=IL

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121703663FFB88F568A112BD801328BD38D

File PE Metadata
Compilation timestamp:
6/19/1992 5:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:l5PtGKT3T947xcWA3V9qAS98gFN4fDjibF1vS:ldlTa9hAl9pSbF48

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, 53, C9, FF, FF, E8, 9A, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, 24, CE, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, 24, CE...
 
[+]

Entropy:
7.9273

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file internet explorer setup.exe has been seen being distributed by the following 17 URLs.

http://www.grabpresentapplication.com/c?x=fZ7X9QQ1NTAZUgjVrtzWCTcf8FXA1KdZ7Np0zD6lFwc=&c=95RXcNI7PVy7YDhv0KohXW9g2O0BhAF5eD4lv0bnxoWOgRB5yIRUTb9Zm7QMQaXdDoMp8w2PK46AtrJ8E YbSg8WCZqbPXfvGkR6LRq98cO1F4vcKTFyQglHi0dKBHA7Srn0TKRc7VEqjEWv9o4dnQ==&downloadAs=Internet Explorer Setup.exe&fallback_url=http://cdn.downtoad.com/.../internetexplorer.exe

http://www.grabpresentapplication.com/c?x=BI3AiaLCFcQFGwjxoV7yuCwOn2ocp/BaCqhv8xX5j A=&c=XW1HdDB0ns3xmzvJhHVf VavraLnB7f/y8bk55xZVP/ENodkwE3lYj05nMamtsSEjNGZaLQyjbZX6S9Lr8PjskLCvv1DiOC0y2FxsEJZhw5xPEKHPPAxpxQHru9oWe1YPEju8x2agC72prddCCPFZA==&downloadAs=Internet Explorer Setup.exe&fallback_url=http://cdn.downtoad.com/.../internetexplorer.exe

http://www.signssafebulk.com/c?x=UTM5/0GOR0v5lkpZF/Am/F5Gpoij7aANufywRdQkPLw=&c=Y2UbMZmkHbFStoEUE/8qEqQoxWJTqeEhhRBgdcWelJBAJJfupXwF/nmJdlXnBz/ZSup 0z6wkVq9A9jqbLixfK/V3s3CZLb1qTHWe5H9vJD4j7zo 4bHBl1sxoHvybvZ GZ6hFZZz/UpKoqbD1g5gg==&downloadAs=Internet Explorer Setup.exe&fallback_url=http://cdn.downtoad.com/.../internetexplorer.exe

http://www.vaultsfilespackage.com/c?x=qIOOsrmXYefLRpwpUwJOEEkkHw4R1ZgtOeSxbftujEQ=&c=JJCKPaEG10CbtUGZmf/Ztw0Vr1VINsfF4lpV RbbDmN3KJ7B3v7j4D4sPsmDE7hMJUnr9sup64CR7QuEbLFbgalYN1/QsDOfWx44Ua9nEJwo8WyVn/UnCVu4aSjgJRgmuMHmRHos4evgAaFG0n7QFQ==&downloadAs=Internet Explorer Setup.exe&fallback_url=http://cdn.downtoad.com/.../internetexplorer.exe

http://www.universecontentvault.com/c?x=OCa7HkNmCNEKYIuI3IygcybftQkyTu5SaPCgBTuUdJI=&c=wRie3cUQmErq9RQtdFAX15LaCLNn3rBnoG80 /BkKEzIgqj5WgWZ/B/084TJpz1JGkD3vJf7JK6bOFCIS7nZBwDUwkOxzLDj38GjOSaxfM56VQxgj0bbXyxQGaBSl tHsfCY6moGVkEvl/YJyzcFMw==&downloadAs=Internet Explorer Setup.exe&fallback_url=http://cdn.downtoad.com/.../internetexplorer.exe

http://www.vaulttowerssigns.com/c?x=QRMOYo6gP1MQvo7RfHIFbf7Wb2n8NSTjsMJU2q3Ng50=&c=woiAJFy6jRXkAIZK3GjDz7vwsTlNWTMMlvxDE3a8jokXZbIt8YGwk6mW801myvVBsz1Yw5t2/cfdht85hpA6MYV1IfiE4XB8aX87y7ZQpzexaD8nrNxsaAj6OVCbSGajdyb51 tM F7XTms 9WjoyQ==&downloadAs=Internet Explorer Setup.exe&fallback_url=http://cdn.downtoad.com/.../internetexplorer.exe

http://www.vaulttowerssigns.com/c?x=4Bd2kzQDObuNBSbwggpkiCBSiRqierAMKF0Awgy1BDI=&c=G8EhPgd1r2Clk1HXfrelmbluYDrYq9FtR3mwf3TbGtQnOo 21VpOAGEqfHV4IRRQ2r EEOztopRCLL7T0d6GR0emQXP70fO/GXTFXK6sXG09i7lVX/34Pb8Cxx48yQG4DfhAAZrLq9fFxCbGrKs/ow==&downloadAs=Internet Explorer Setup.exe&fallback_url=http://cdn.downtoad.com/.../internetexplorer.exe

http://www.vaulttowerssigns.com/c?x=qxr38dNMHBKcOMc3rCdBW15GumcA4qHUXMhl3Q4VPRc=&c=jepf7dNX CSCeIs6Wkp4O jG49/EAZfNFP mb3spvl3/idi3VDC3wVKYoHli1Z5Ajygrv4UjyaPoKLYKXcx4uJoW9GL8mMWAID 3/DEVj1Ip43iJm vvfqUqQ/SpuazmJD712Uv2OlxA7vUoY3asPg==&downloadAs=Internet Explorer Setup.exe&fallback_url=http://cdn.downtoad.com/.../internetexplorer.exe

http://www.grabpresentapplication.com/c?x=/Pf91o3GCBRR0n9BaEa/GR3hr9xqiYKYnW4COuf FVg=&c=86zr0V ZB nb9ZYQ5azQr9iShFRMPzvlPRUVe2Kn1MRtigvWWcn9cbpy umMRx668QqhksVDgbQVZA4Sn74jIF5zn2reWmSkuqMMF2 3iq6epcFFvjjhyEmOZOc53FQQD6Z5tDTQP3SVH0XcbTELIQ==&downloadAs=Internet Explorer Setup.exe&fallback_url=http://cdn.downtoad.com/.../internetexplorer.exe

http://www.chuckledownloadstag.com/c?x=qeuRhn/L39X2LPjsp7vH5mNNHaYV b4xn9vRW1ohed8=&c=uqzz jIgP4EeELQdPGmNSYsdkdCTEtajeKhAX3SUPNx4Z20kXLPIIbbaUdBCOWGNnZsopCsyARmc1JQ9hSL2LNbG4jB8R4WWD YBq0YIQXecBNIKWTUvkovApO6OeXOSitkXshcZg85oP4BvWtndDA==&downloadAs=Internet Explorer Setup.exe&fallback_url=http://cdn.downtoad.com/.../internetexplorer.exe

http://www.grabpresentapplication.com/c?x=xtM6XjYxTwOuPV2XZll4QI070s38C9YuFzTi3r2/IkQ=&c=Lp00MWBocndqKItkbLRCzJOmEl5dVHVolWuL9gc9xZ1ZpP/BEDCeOUIGPZCs59H9Xd4xiyX5EGV/QITIVRo6JY2nZeFi7IwfAI8FyDc95RSPnFCFkTbuDXXjNPZ3k5dBXHRPgrWdI/TkjfcwUaq8eg==&downloadAs=Internet Explorer Setup.exe&fallback_url=http://cdn.downtoad.com/.../internetexplorer.exe

http://www.currentbundlescontent.com/c?x=adOktQOgVHmQkDDAX3bDr5fPSa4Z1D1EWt4UhrsO8CQ=&c=O0kOrJCQj3s6zzpTl uVuj7J3fY5/hKMYkXhOPjQ0wpiVO4 cDSglWE8RPHNJwEVVfw9U8LzCsEvDSXgL4UVBfNKPN6eQSaQWrmX/iGwrOo5gP3Lnif5IiFKDL4plaAu5nkm NgjpNxUIZO W97MXQ==&downloadAs=Internet Explorer Setup.exe&fallback_url=http://cdn.downtoad.com/.../internetexplorer.exe

http://www.grabpresentapplication.com/c?x=4kWXabVAOGbt7ELHbQwvTdHe3/6REQzIdBjgrUqgXtE=&c=Qkmikd/Ii5MOF18uDWm35DrwFX/prUQ8eA61o84y/t0zi70AL5w7w0Tl/o24Jyyu7 RGCXaMMcqu14edH4O69EEMNZ7tzjimcpHuRJKQK5Qw95xm9NBU R7je8Y9BVHf0k1SL1ufuU4j77YhQcMBWA==&downloadAs=Internet Explorer Setup.exe&fallback_url=http://cdn.downtoad.com/.../internetexplorer.exe

http://www.grabpresentapplication.com/c?x=BgBi9azHDxuZvn4VNXHehBqy1Ghjo7C1Xs0tMSeD1HA=&c=D7wXIT/hV9gtW4FC2l1YK8UNNkqgMyAcO5By0rySBAjFNMsRc n2OT PfmDEFppVcewu8Z408jMFgdFP1g5 enjDVRry/Rj6J1VXIaCNcNKHMVHJreqPw8BQRaKzKpcFV2vstJA6u9c/1sszdLATCw==&downloadAs=Internet Explorer Setup.exe&fallback_url=http://cdn.downtoad.com/.../internetexplorer.exe

http://www.grabpresentapplication.com/c?x=ihcqnPNntwgA1LNPdA7ccDZcuAPqupJVpaz2xmuT0jc=&c=L7I4VuIgSvetl2KLEIgCOnyiikoPyb7VIKfCqKECXVwyvRLDFlmVO19lHxTm77cEE55ePD4n/ZZZX5WNeNs3i86fBv0jaoGSaAdCkY9dlEsRC0wWrvQnNOEPxS5nDKjOo8X4erDb4TPJQ1AvQK1w9A==&downloadAs=Internet Explorer Setup.exe&fallback_url=http://cdn.downtoad.com/.../internetexplorer.exe

http://www.grabupdatebundles.com/c?x=8tAJVk2Sx6VBjDtFPiLigx61p3TODwFZKWD0r/hYPsY=&c=P34O0ADYYGRGB2Fkm4DVvX5PP6RbvxN Wsq KlodOXPbqNxX34LQ8Ffsw2NeD0zeDftwgyY3HhtCZ7LP6g72cqRLePrL7fCG2ndTxB baP8FVZqdJeQ1uxlwQqx0UErNDNGcofYrDjkFQYYMd lnmg==&downloadAs=Internet Explorer Setup.exe&fallback_url=http://cdn.downtoad.com/.../internetexplorer.exe

http://www.grabpresentapplication.com/c?x=ZyydVpEi5jLbYReqKS/px1Ky92VflhNiLbW EqtiDn4=&c=e4Zpg4UeZk/Fs6KXClBj2nGSlrO7mCMmWLwQuEkBQTA5GzeP0jvd67/XPHLRnpyg9 Dvgj48MlF3Z6J6CO/aW9Expw/omKTzTWdXB5Ch4g5qerKxUtvfvmUYW7MQfT2iCQuo/ANq9DWBKDl6LFQ1OQ==&downloadAs=Internet Explorer Setup.exe&fallback_url=http://cdn.downtoad.com/.../internetexplorer.exe

Remove internet explorer setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.