» internet_explorer_setup.exe
Overview
Analysis
File Details
Downloads (1)

internet_explorer_setup.exe

TINY INSTALLER

Tiny Installer is a download manager variant from Adknowledge that packages various adware-type offers (toolbar, coupon extensions, utilities) with software distributions. The application internet_explorer_setup.exe, “Premium Installer ” by TINY INSTALLER has been detected as adware by 29 anti-malware scanners. The program is a setup application that uses the Adknowledge Fusion installer. This program installs potentially unwanted software on your PC at the same time as the software you are trying to install, without adequate consent.

File name:

Publisher:

Premium Installer (signed by TINY INSTALLER)

Product:

Premium Installer

Description:

Premium Installer

Version:

2.4.8.1

MD5:

bebcec7224e0d21739d5cdbf45376923

SHA-1:

f0d155ffa23b29e432cf514e743f2cfc21712818

SHA-256:

9b17d1c382d96e2f1483ae7dea82c36124dc84cd18123e3ef4d55391f26f8888

Scanner detections:

29 / 68

Status:

Adware

Explanation:

The Tiny Installer download manager bundles various adware components.

Description:

This is also known as bundleware, or downloadware, which is an downloader designed to simply deliver ad-supported offers in the setup routine of an otherwise legitimate software.

Analysis date:

4/26/2024 12:35:10 PM UTC (today)

Scan engine

Detection

Engine version

Lavasoft Ad-Aware

Gen:Variant.Application.Bundler.OptimumInstaller.1

6356136

Agnitum Outpost

Riskware.AdWare

7.1.1

AhnLab V3 Security

PUP/Win32.IBryte

2015.01.17

Avira AntiVirus

ADWARE/Adware.Gen7

7.11.202.6

avast!

Win32:IBryte-GJ [PUP]

150101-1

AVG

Adware Skodna.Generic.AQL

2014.0.4253

Bitdefender

Gen:Variant.Application.Bundler.OptimumInstaller.1

1.0.20.80

Comodo Security

Application.Win32.Adware.iBryte.BB

20734

Dr.Web

Trojan.Packed.25191

9.0.1.05190

Emsisoft Anti-Malware

Gen:Variant.Application.Bundler.OptimumInstaller

9.0.0.4799

ESET NOD32

Win32/AdWare.iBryte.Q application

7.0.302.0

F-Prot

W32/A-825ac5d5

v6.4.7.1.166

F-Secure

Riskware.Gen:Variant.Application.Bundler

5.13.68

G Data

Gen:Variant.Application.Bundler.OptimumInstaller

15.1.24

IKARUS anti.virus

PUA.TinyInstaller

t3scan.1.8.6.0

K7 AntiVirus

Adware

13.191.14667

Kaspersky

not-a-virus:AdWare.Win32.iBryte

15.0.0.543

Malwarebytes

PUP.Optional.OptimumInstaller.A

v2015.01.16.04

MicroWorld eScan

Gen:Variant.Application.Bundler.OptimumInstaller.1

16.0.0.48

NANO AntiVirus

Trojan.Win32.Buzus.cssrmm

0.30.0.64448

Norman

Gen:Variant.Application.Bundler.OptimumInstaller.1

03.12.2014 13:20:04

nProtect

Trojan-Clicker/W32.iBryte.2477864

15.01.16.01

Quick Heal

Adware.iBryte.EK4

1.15.14.00

Reason Heuristics

PUP.Installer.Adknowledge

15.1.16.16

Rising Antivirus

PE:Trojan.Injector!1.9C6C

23.00.65.15114

Sophos

PUA 'iBryte Optimum Installer'

5.09

Vba32 AntiVirus

SScope.Malware-Cryptor.iBryte

3.12.26.3

VIPRE Antivirus

Threat.4150696

36694

Zillya! Antivirus

Adware.iBryte.Win32.683

2.0.0.2037

File size:

2.4 MB (2,477,864 bytes)

Product version:

2.4.8.1

File type:

Executable application (Win32 EXE)

Bundler/Installer:

Adknowledge Fusion

Language:

English (United States)

Common path:

C:\users\{user}\downloads\internet_explorer_setup.exe

Digital Signature

Signed by:

TINY INSTALLER

Authority:

VeriSign, Inc.

Valid from:

6/2/2013 8:00:00 PM

Valid to:

6/3/2014 7:59:59 PM

Subject:

CN=TINY INSTALLER, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=TINY INSTALLER, L=Wilmington, S=Delaware, C=US

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

54C184C0CB6B6510B3582483FC098463

File PE Metadata

Compilation timestamp:

11/22/2013 11:15:59 AM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

49152:qXPmdrTu0VQTAvN9c4EW93OnY3kAexzxRDSWBcK6BdfjHl:/drTu0VMQJgQmzxRJBUjF

Entry address:

0x5D555

Entry point:

E8, 5E, 8C, 00, 00, E9, 78, FE, FF, FF, 6A, 0C, 68, 78, CC, 49, 00, E8, C1, 35, 00, 00, 83, 65, E4, 00, 8B, 75, 08, 3B, 35, 98, 64, 65, 00, 77, 22, 6A, 04, E8, 61, 8E, 00, 00, 59, 83, 65, FC, 00, 56, E8, C3, 9B, 00, 00, 59, 89, 45, E4, C7, 45, FC, FE, FF, FF, FF, E8, 09, 00, 00, 00, 8B, 45, E4, E8, CD, 35, 00, 00, C3, 6A, 04, E8, 44, 8D, 00, 00, 59, C3, 8B, FF, 55, 8B, EC, 83, 3D, F4, 50, 65, 00, 00, 75, 18, E8, 99, 81, 00, 00, 6A, 1E, E8, C1, 7F, 00, 00, 68, FF, 00, 00, 00, E8, D7, 4C, 00, 00, 59, 59, A1... 
[+]

Entropy:

7.2592

Code size:

549 KB (562,176 bytes)

The file internet_explorer_setup.exe has been seen being distributed by the following URL.

http://officialpcupdates.com/browser-update/.../install.php?sid=cpa&uid=&source=D-IE-Media1&transaction_id=8d931e59-0651-40cc-a400-204f036714d6

Remove internet_explorer_setup.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.