The patcher uses embeded internet explorer stuff for downloads - your just seeing ie access cookie files, not really anything out of the ordinary.