home

internet explorer setup.exe

Internet

Criteria Quality (Fried Cookie Ltd.)

The Fried Cookie installer utilizes the InstallCore download manager which may bundle additional offers for various ad-supported toolbars, extensions and utilities. The application internet explorer setup.exe, “Internet Setup ” by Criteria Quality (Fried Cookie) has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions. With this installer, users are expecting to download Internet Explorer but before that occurs they may be presented with additional offers, mostly potentially unwanted software or adware.
Publisher:
Web Application   (signed by Criteria Quality (Fried Cookie Ltd.))

Product:
Internet

Description:
Internet Setup

MD5:
7da1a8dfb405a61d4f63fbb19c5cf93b

SHA-1:
a9d1f027f313156d304d11305b38ee75f1d0d793

SHA-256:
7d19ec3be0286b9edf5d565e78379df7b172a01706fa0bc0dbdf5e588cbc5115

Scanner detections:
1 / 68

Status:
Adware

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Description:
This is also known as bundleware, or downloadware, which is an downloader designed to simply deliver ad-supported offers in the setup routine of an otherwise legitimate software.

Analysis date:
11/28/2024 10:36:00 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCore.Installer.Installer (M)
16.2.3.20

File size:
955.9 KB (978,832 bytes)

Product version:
5.4.7

Copyright:
Program web

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\microsoft\windows\inetcache\ie\{random}\internet explorer setup.exe

Digital Signature
Signed by:
Criteria Quality (Fried Cookie Ltd.)

Authority:
GlobalSign nv-sa

Valid from:
12/16/2015 8:21:34 AM

Valid to:
6/29/2016 9:39:55 AM

Subject:
CN=Criteria Quality (Fried Cookie Ltd.), O=Criteria Quality (Fried Cookie Ltd.), L=Tel Aviv, C=IL

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
11216ABCF20419312093F809F0E003C850D7

File PE Metadata
Compilation timestamp:
6/19/1992 5:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:PHl0J+JinXu+fy6jFXsxRbvUyRzkDeQI+AMuuJVnsWbY:PFq+JWrjFIU+oDi+AwzbY

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, 53, C9, FF, FF, E8, 9A, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, 24, CE, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, 24, CE...
 
[+]

Entropy:
7.9298

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file internet explorer setup.exe has been seen being distributed by the following 3 URLs.

http://www.hostsendpackage.com/c?x=kbapF3hYarufUiiwPsWz2XIeR8a/Y cdVRbUJJqtUtg=&c=1svErobLXQBZmDe/aH/5Rkj0o2x/VYAB2JtTuFg9V2NZVTKZ2OdkGWStecqotIfyYD8ICvB I/AphIuqQ24iiqO0NF0EesA8OvEOUSyb7DNl1T1GZHF4hvt50w9YaSSP&downloadAs=Internet Explorer Setup.exe&fallback_url=http://cdn.downtoad.com/.../internetexplorer.exe

http://www.hostsendpackage.com/c?x=BraVT4irRpxAe8f/kJNAF77adQeT47 9oaorfRG3GIk=&c=c1wV/8QvQK pSPL0p4VrI6aUiDS/5OU2XPyM3Z5GFaPuTYYR2pSyPB5yspS3byxNMamoj1nEOAe8QJn6kVlJzce HQlNRGmg0dH 6mjzG/vNpDjPvUaQTslWdkCCIs8b&downloadAs=Internet Explorer Setup.exe&fallback_url=http://cdn.downtoad.com/.../internetexplorer.exe

http://www.giftcapitalgrab.com/c?x=yI19YjR yJkt4r gzNaAZqsed2IEFjAee3Cdxt5PaF4=&c=pJNr/S20WiTcs6BJDz4rP6zIPFD2S/I8wcru4ehH7Y6LNHfp akXwJk0XnU2dc1 ftC80UtNKLU1kNW7Y4OAuIKoD0sLwabsbWPfINSkxgZL0yw8s3vFZ6iOUDCGU0h1&downloadAs=Internet Explorer Setup.exe&fallback_url=http://cdn.downtoad.com/.../internetexplorer.exe

Remove internet explorer setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.