home

internet explorer setup.exe

Installer

Setup Quality (Fried Cookie Ltd.)

The Fried Cookie installer utilizes the InstallCore download manager which may bundle additional offers for various ad-supported toolbars, extensions and utilities. The application internet explorer setup.exe, “Installer Setup ” by Setup Quality (Fried Cookie) has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions. The installer is marketed through download protals and search ads as Internet Explorer but will also install additional software offers which include adware, PUPs and browser toolbars.
Publisher:
Setup Quality (Fried Cookie Ltd.)  (signed and verified)

Product:
Installer

Description:
Installer Setup

Version:
2.0.3.3

MD5:
fd0de25ae3bfe21695560089b33c1016

SHA-1:
be73db5085d04bceddfa8daf718e8724c7eb3c18

SHA-256:
1414872d28b789dc187d2edac569711ee7f9eacd286753a31c25ded234f00d84

Scanner detections:
1 / 68

Status:
Adware

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Description:
This is an installer which may bundle legitimate applications with offers for additional 3rd-party applications that may be unwanted by the user. While the installer contains an 'opt-out' feature this is not set be defult and is usually overlooked.

Analysis date:
11/28/2024 11:35:29 PM UTC  (a few moments ago)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCore.Installer.Installer (M)
16.1.30.3

File size:
960.3 KB (983,368 bytes)

Product version:
3.0.2

Copyright:
Web program

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\internet explorer setup.exe

Digital Signature
Signed by:
Setup Quality (Fried Cookie Ltd.)

Authority:
GlobalSign nv-sa

Valid from:
12/16/2015 9:23:08 AM

Valid to:
6/29/2016 10:32:29 AM

Subject:
CN=Setup Quality (Fried Cookie Ltd.), O=Setup Quality (Fried Cookie Ltd.), L=Tel Aviv, C=IL

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121734671448CB8540659135FEB5A8E8573

File PE Metadata
Compilation timestamp:
6/19/1992 6:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:ImiOa0eOFSiIgFA9q0QgiFg/ORnYhoBXa+R6cPiFjT:IHaexiIRqFgTONYh6KcyV

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, 53, C9, FF, FF, E8, 9A, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, 24, CE, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, 24, CE...
 
[+]

Entropy:
7.9307

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file internet explorer setup.exe has been seen being distributed by the following 6 URLs.

http://www.bitsranchcontent.com/c?x=7QIirpsqRolpdmr5KnkSkW9lESxdlxnrnryCGgwfGeM=&c=c9VFjf/UjWLZxVQDCb2FxbiP9Ji48VsKj/U17QBhhAvX2RBBJkPaUTKS4s48Rpe3jQkMmSNr6cEnY47LIt8eimHPykbSnsMfQOgGVf1oAlui52Ufa nAkocoYCDNJrD4&downloadAs=Internet Explorer Setup.exe&fallback_url=http://cdn.downtoad.com/.../internetexplorer.exe

http://www.tagcapitalfactory.com/c?x=nNmnChlW8L7J3P55PNpHAtCawppbvI6th6iq0l/qwp0=&c=zV8gNcsgPCO4TN43HP7YTIhnhAUBEMMTI9uTZ1aUoS3OIO2KsBYZkKzXVMSdhhOVZ 5IU6u4HbPSbJrtNJCNIeN9oX8jbuVZep33 qXGVkTHYrEA406maOrcBnxlbUYn&downloadAs=Internet Explorer Setup.exe&fallback_url=http://cdn.downtoad.com/.../internetexplorer.exe

http://www.apptowerstag.com/c?x=i9y/gRoZUB4JYSlQroWHyVAhBiSzHOMNPtPWa4T WU0=&c=epcyC pDdCUIn8HI2zkH5jmTRGAE65PotIheHQVHa9YPHSzgLy5L B94sI HLuB6CleWr1T98aUd1qTxh9V4mZlir6Dc1LqGQF 1SHFvygZyWC6sKkMaNHKTIIcBb2iu&downloadAs=Internet Explorer Setup.exe&fallback_url=http://cdn.downtoad.com/.../internetexplorer.exe

http://www.laboratoryfactorygift.com/c?x=N1M153cdgvzvM1PrJw82 I8wgxLkn5mrXQ77 LxohOs=&c=6JG1GqhPFa wAWSAEjbeUry2OxfvYSmyTXDbd99m4ulR2qcN8yYxoRCAou70d0l1pr3QKHPb6K5KS3lwg5V391H4Ji4vd92G/FnVS0uAhQQy/vfRyfdD1kmASQbVI7t2&downloadAs=Internet Explorer Setup.exe&fallback_url=http://cdn.downtoad.com/.../internetexplorer.exe

http://www.bitsranchcontent.com/c?x=rh6LY1q9E52F vR8G5R3ITaZCXiI40NmD4 wLRg9w80=&c=Bqt53XX3 3vvKxOlQeS0O2yaWflA2etc0Hh cglzb U/1wdsFK 8igsfgQAZLoIE95yyC1t9VQbLVYEOj5eGsIx0NsnCKDBUNLfpKd79KCckhkYhtxHDP6F/H9kMfFzH&downloadAs=Internet Explorer Setup.exe&fallback_url=http://cdn.downtoad.com/.../internetexplorer.exe

http://www.laboratoryfactorygift.com/c?x= Fa/Wi8kYcKAAoJAb L8vT2/Bhv9CrF71SR3fHw0vhc=&c=sPYiCTHMy6R0A3/crOUJmSS0cGZfnDfko6q7O2LB9zh7akGJsXRFHCQNdUXNoM5NMQwluezO3LqpIKPw UixY2TOESUa2gylDJ5KlftsFM3dZBwUGbx7op3PlewmftAi&downloadAs=Internet Explorer Setup.exe&fallback_url=http://cdn.downtoad.com/.../internetexplorer.exe

Remove internet explorer setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.