home

java setup.exe

Internet program

Agile Funnel (Alpha Criteria Ltd.)

The application java setup.exe, “Internet program Setup ” by Agile Funnel (Alpha Criteria) has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions. With this installer, users are expecting to download the free Oracle Java Runtime but before that occurs they may be presented with additional offers, mostly potentially unwanted software or adware.
Publisher:
Web Program   (signed by Agile Funnel (Alpha Criteria Ltd.))

Product:
Internet program

Description:
Internet program Setup

Version:
4.3.5.8

MD5:
88e7fd702a037b9f083d027c9296532c

SHA-1:
f4ac4205976f59ba594109f66f9f2d305eb8729e

SHA-256:
ca18988e393f932c1b91a8c9d420e19dfe01b8cdcf81f306a696f55e3d1f9adc

Scanner detections:
1 / 68

Status:
Adware

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Description:
This is also known as bundleware, or downloadware, which is an downloader designed to simply deliver ad-supported offers in the setup routine of an otherwise legitimate software.

Analysis date:
11/6/2024 2:32:40 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCore.Installer.Installer (M)
15.12.31.7

File size:
943.7 KB (966,376 bytes)

Product version:
5.7

Copyright:
Application Web installer

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\microsoft\windows\inetcache\ie\{random}\java setup.exe

Digital Signature
Signed by:
Agile Funnel (Alpha Criteria Ltd.)

Authority:
GlobalSign nv-sa

Valid from:
12/16/2015 6:25:15 AM

Valid to:
9/2/2016 5:10:29 AM

Subject:
CN=Agile Funnel (Alpha Criteria Ltd.), O=Agile Funnel (Alpha Criteria Ltd.), L=Tel Aviv, C=IL

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121703663FFB88F568A112BD801328BD38D

File PE Metadata
Compilation timestamp:
6/19/1992 5:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:35PtGKT3T947xcWA3V9qAS98gFN4fDjibF1vS:3dlTa9hAl9pSbF48

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, 53, C9, FF, FF, E8, 9A, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, 24, CE, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, 24, CE...
 
[+]

Entropy:
7.9273

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file java setup.exe has been seen being distributed by the following 4 URLs.

http://www.vaulttowerssigns.com/c?x=yQAbjSeWlSiBFadoHz2fLxKoTq32R M6SJh6ykw8hdw=&c=Ii/0g287X6EzFh/rZ86BPV16PcTZ5KHzZjEfqe34KGhFG8z94VR8CO6xM1trMCnwPaySAYbR86G 0fVcSXvoKZ1diAnRzsVpovPwEFXfJrPv7yMW9B182LMB565igXdxOQ21ZRaoiHRkHZ6VpX4hBg==&downloadAs=Java Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.grabpresentapplication.com/c?x=nPoP9sdT1kPD2Rbipcst8CCKGugAhXI84nvPTFMyxi4=&c=NPBZVSvoLu9wVXM9ycKSag8IACg3iDT 2hgn5xi87rS1PEC2MslyXED9pafu1JG h943cgpgseOURM9R4QlOS7p6t1RR9Ygt BdsBjelbRwyyzojrYT2S0aeS1VcXjfTBCI17m/LmTfu1DbBLtA9aQ==&downloadAs=Java Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.grabpresentapplication.com/c?x=HD9zAzMW fa6WzTrWNhDojVByzn/TLk YLHPvacTa c=&c=qYwBuzTTLp50Vyy8MAtpCVBKRDioQZ4ZjD0gYD55O1VKughCTNhU8KXOJQxij4tzxoDwGDo9LPD/i6Y5c59ZMMksaNGg/gASqDffxTxEtAjNh0AiUXVtrbUWFFpqE35B2CHsCRR9nhN0scGJzZoJmw==&downloadAs=Java Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.chuckledownloadstag.com/c?x=zRDRcY2SW2A4aSayV3PJimJaQnB PNAClckCM3Uc9e4=&c=TOn7 Q4/9 fV2o35V1 2EEEJVJkFA5n5Y7e0 cLsb9EmpOnsDTgoJMaMzhECkdj2mh9tIQIGkwL4x1wZ7itdBwHGFLwHaLDLyckh3Z3G968FXGn65SIQU5khOe1zrvPhArodG3ZJ6vvRGBNrgDLghw==&downloadAs=Java Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

Remove java setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.