home

icreinstall_finalmediaplayer2014u1setup.exe

Gamog

Parukumor

The installer utilizes InstallCore which may bundle about 3-4 offers for various ad-supported toolbars, extensions and utilities. The application icreinstall_finalmediaplayer2014u1setup.exe, “Gamog Setup ” has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer, however the file is not signed with an authenticode signature from a trusted source. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions.
Publisher:
Parukumor

Product:
Gamog

Description:
Gamog Setup

MD5:
1523340b2256e4f7b3900a4429bdad38

SHA-1:
4815f8086509a63696824fb7b862db998886a428

SHA-256:
13c22116866933ad9c8f762622f1093670455fa31bf0f841917142ee82f9e898

Scanner detections:
1 / 68

Status:
Potentially unwanted

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Description:
This is an installer which may bundle legitimate applications with offers for additional 3rd-party applications that may be unwanted by the user. While the installer contains an 'opt-out' feature this is not set be defult and is usually overlooked.

Analysis date:
11/15/2024 3:01:53 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCore.Parukumo.Installer.Meta (M)
16.5.11.12

File size:
1019.2 KB (1,043,666 bytes)

Product version:
3.8

Copyright:
Application Installer

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Common path:
C:\users\{user}\appdata\local\temp\icreinstall_finalmediaplayer2014u1setup.exe

File PE Metadata
Compilation timestamp:
6/19/1992 5:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:YFvmfMQFGr2uLpduKYfFSljlfEiiXyGEP2ckOdwyf5qnh4a:ioGr2uLnOefEpyGLqdwyf53a

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, BF, A9, FF, FF, E8, 5E, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, 24, CE, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, 24, CE...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file icreinstall_finalmediaplayer2014u1setup.exe has been seen being distributed by the following 50 URLs.

http://www.conceptsguardbinaries.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

http://www.bundlecentralsign.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

http://www.bundlesheadsign.com/c?x=n6cmRbCYOeL0iWl7dN9/4CqPIwjhC/w gt8YzoFzIfI=&c=nqbwql4HwghcOh5LJKDGtyd4sRqaZsJTTSindAPCs6i84MzHF19829ACj7dHuGrIHdwEyJ01tCqc2Cb2tFfDbhK8n47v9pTyAjDAplUFYap W/7GeSXlSljtMPx 2it9uVmYGT8WyFmJyz3LhSdwtoHqUJjM962byijuHYxaMCxtUvhjFgcqgvTKILsUK/rU&e=0&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

http://www.bundlecentralsign.com/c?x=DDiD7H94S2mIaTq9xo WNZE8cSZc21x vKT4vtuiLME=&c=8Ghhy83kC6ftv09ijWtVVEr1C9q t GU1E1yaAaph6etrXDB5gVOvzuIMetkzv0A4nUQeS3FmJSViVB1REVtgBwXuhkmU5BEhu3ckwLcHktC7d7GgR3EaAKxMLgYITjW5npD5fAqpbiK 9W0ClLpJRhAnFbXTqO33wQq8rcp9DA9oNDeGF8uXgKwxnwNZmrf&e=0&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

http://www.conceptsguardbinaries.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

http://www.bundlesheadsign.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

http://www.presentheadbody.com/c?x=hRP61sykDo/7k/YB29WyXCEC9yTTxU5ywDprrS8rKXI=&c=p 84sj h9gZGFTDHpAZtgf34pYV a3P6vYWxYw74G/U2687iqwHVbWXI86oP4YU2Ltb2uU91agI KsKbgUMM71oPO69v9EANhU/ L/7oqmPKqSrycvwW5EWqlNIwGxIOGpaO8Pd0moIKzNl6j8keu FXLczP nXAvRo8toUomvp8IOZV5DD IlTbsZrI1j5r&e=0&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

http://www.conceptsguardbinaries.com/c?x=JzEOINy8EPisQ1p8KFsHYc8NQ RtKJ6gSfFMq2PWmrA=&c=e 7uff8zPoz8fThlflCWFNYCkHARldHAjdR2K2Uj5tdGODp2RIsgfDqh73j34KaosLSegQBN1yO3jRxYdAgPSTLmgrc5CwoucLDU/kEvGIZLp2Y2hl9ENejQQtVVFPyOqR6t38/aU6desHJFr0otULmer2NNZchSznwuRF86S8MF3auvVBc6mhQHk581vCSz&e=0&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

http://www.townhostbyte.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

http://www.flashhostingapp.com/c?x=/4UfIZ5fqyMaQ4ybhfM8r MKFIrIDkvuzMn/aoYnMDw=&c=VOsM44dSiUtZVayjYCExVRcKIt6mIrOnK/Yl6m1ux2xMbrmV0W9ydgOl8aIUmyi mtqaibtxXIYpI22i5sKyS sgzbA8a0g6XbwZ57p63pXevHWMj1JRmN2D/Sc5GjldtKDPsAP8RCxqDbWwnR6/O2yXa32eitidiveE8F3d9 FgAXyzwuLFjQwEm5Mu17uj&e=0&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

http://www.bundlesheadsign.com/c?x=D /7uu1HO0shV9zNOEd4T6rZsXG74HdnUWdadFxrVcQ=&c=ocO9qZA5mUKqchfDZ176a3vgCt1awIL1ujtWNK6C8IWyAgb2RkPDiAx0/hv26k OxkvXWsJPFHrgNd mnwrzzc Q1W6ZPPWHrbCPniDFBbGo32P1x5pVkBDbGJS998AY58pjB4/83HJGi/9ffdesnepvIF5utWjZfKzhHtO/8ExlWYaEp lNC5Iy7rcficTs&e=0&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

http://www.presentheadbody.com/c?x=ymBIIBr5WOJ7qrI3w9Md3UEQWNDEIcFMWpj65CTGlWU=&c=G/iGswqLoAa02DFSWVwIZrigAWhcmCUIkGEnP/qRWRR9waeeRmXiD/tzuSE3y52XmvHOYLzWqAPotf50OtaJvsR7P6PCGm82l8YgIJYdKpo0az/P0FZxOAiSYoom4oI0cCoT/c XlZSiHd9E/I7QoJOj1YEFaguofpiS4WHPv59NDvi4qQgVzmFY XC0U Cr&e=0&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

http://www.flashhostingapp.com/c?x=23q5oZIjNFAvTcwcpO/OHzwgdiwjvUSwTHZN0FjE2oI=&c=TR9Nyl8ixfPNipKWlMoVY0VAEQlG69t50kONW8upoHUplST0uJ2GXgR FUOIMoI2rF/Xh MPZTxrj 1VHQwi2bxp1iTehLFsGb4 JyWgs6fs/ssUJa2hpZs3dDopXOCuDaTO05W86UHeI4P5PTuZtN47oy7p9L4L3JbLOQQZDXJXIG7FT 01VngE8pgEK3AN&e=0&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

http://www.conceptsguardbinaries.com/c?x=dZm vj35R oOQstp9HCtlAOAdBgG3kJT3g1x25MawnM=&c=bCJ0pfgFT871QQmcqaakiGPUYVQhf1rx7jnyLDk1UPgwRmin1TzEVeT9pIHc/ wYTQav6c MyQ5EapceMVZTolZm4nHSpHPIhXVn sJTapLCv8gYnMmxF1YGgo5NVlspUscC0IlWl0KopUQlx 1s6h3oyTGTtrLyou0u2uyffY1FkLlqd9bCQ2EWn1LPmPr&e=0&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

http://www.conceptsguardbinaries.com/c?x=wehUmQtlZ5MnwA3BsBzP/1NLBABeOkHN2Ngl7UdeU1M=&c= D8sbVYFL p9YO96gubjq4OzmB zmdO0s5UBce 7r/XctP 1CV5C2I4WFVob0d0bqfsoA9s0CljZwLHkERn/v7uNUK6uml1NwZZS7tJJQYRGWnRJ/5/oYb2zz Rzbo7BN7h MJnSqnczpj d9E YktFs9OQQeY 14nZBnKkeRZ8gRGiC/jkbcP6IsOKZTYak&e=0&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

http://www.flashhostingapp.com/c?x=sPlJOpq3Yte9rlqto3OYE9jZo7meoiCli5x4kStd To=&c=EqfGOuZeeXlM16rcYex5G24zZE9rTvLgOA9AA3bknuv7tHPKfdCRP7TtuU5QJld8RpFdoXzVTq4lr7bBAjz9zjQLPEYdRdtXyOlAHkMTnbK083F25OodY8UbVeBahBSm1ziO2wWQnU0XtluxxQIdXPQ7yo9FXuPnKCZ7DZ9gG2obVa FgQzBvoag2b84rxqW&e=0&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

http://www.bundlesheadsign.com/WVl6OTRQVzVuV1hOTFpqSm9OemxFY2xoc2JWTnVlbkJpV1ZGdlpHeG1jbVk1UVVSSFkydFlhbmsxZDFOc05GRWxNMFFtWXoxdU1reEljbkpZSlRKQ1lYUkRUMnBtZWxvNVVqWm5TekpUY1U0bE1rWTNVMm80ZFVSalpVMUhOSFJHZERJeVdsTkZOVEpYUjBsdlMxWjVVRU14ZUZVelVHVlNaSEV4YTA5eVFXNUZORnBLVUV0MlIxRTJVMmhEWkhjMVpGZGphMWcyZGtvbE1rSWxNa1prTXpGdWFqTlRaM3BrZERCWFVpVXlSa0ZaSlRKR2NEWk9iMlZrVVhnbE1rWWxNa0pGT0dScE9HeHlWRU5xVnpKSE9FdG9aR3B2TlhobWIzWjNKVE5FSlRORUptVTlNQ1prYjNkdWJHOWhaRUZ6UFVacGJtRnNUV1ZrYVdGUWJHRjVaWEl5TURFMFZURlRaWFIxY0M1bGVHVW1abUZzYkdKaFkydGZkWEpzUFdoMGRIQWxNMEVsTWtZbE1rWjNkM2N1Wm1sdVlXeHRaV1JwWVhCc1lYbGxjaTVqYjIwbE1rWmtiM2R1Ykc5aFpITWxNa1p1WlhkbGMzUXVaWGhs

http://www.flashhostingapp.com/c?x=04Z6zdX5L33NcEMc6DSfjt2Vmkti83anMm/Jl9XKOOk=&c=ia2f3ts2a3O4ZRItH4g6hujzt3HIXEiTm3bPB8ugx0o XbntA8Qbij35ySN1yDriCcfVmVspIIAPewYXpC0RX64l4KH5FFMpg9VHWzKbtGNGW3PVaRx3oH98cGziMwFvIwtATVvxItgERIM0s3pKOYtz4I8vMcXGBKNn0 2KDd96uMZJm4pRxnxXD/TBfZDC&e=0&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

http://www.bundlecentralsign.com/c?x=wGFLnQ5WkZ18NaOVL qSGgh1Kw/FIZZ7O3/i5LqTW6E=&c=Yt32doHEyQ3eRnc6yKdtJ0z5/ SyS/OjFcysla4/ x9QWZAZU /qROVvB6lZQZpZrSnrbS/tA4J0cm33byFqmRewFL RYcG9p7ATOElVf KNwnbb4/esXxs9SqNY6F3P5T40safUKq0pZxqGKe46Lg==&e=0&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

http://www.conceptsguardbinaries.com/c?x=eV59Xhpu1WqIVXl0vZoQ0tqoPiOOhpD92dOyE8AKX2A=&c=IbSjNxFuCQ2tkLcWmKwoxms5ThGAa2xY5tXP4B1aldckRh9zZAfGppv0HUeNksS28OC2UXHcHoM0Uo3lBVeIf/QxdETauw/DNEJnro0/Q0QLgvLkSirOEQH 50VPmGcdMS4o/ww1IpcZEKPqsGiCVsO2kyBYdiJdEpdxTPcoUebnbhkWRZ4N9R40OeTguZ7C&e=0&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

http://www.presentheadbody.com/c?x=XaNU0ke8qtU35rvFatOAAH0StkDcgaJYYw6HLkDyYgc=&c=ukaqIcZuS/BVFzb9CBLQ 0fMAUNHFCmR0mOKknzNYO/F90stiKyK0kcxWlwiWkNyFwgvChczo3rwKCZZXXuZyeOx8pUs7StyKEma3IqBxTug89JrUjJeI267e5mP3B2Xt4AyhCrHFNCW6I4RtaSeVyjUPDurSK iDg3uCt1p4m5OIEgdmjjc/0PxpNOhcAQU&e=0&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

http://www.presentheadbody.com/c?x=UJXXT ny77xpBjhGEy1Yv6uq8vo81YqO4fWyaQltSjU=&c=cPmHit5EyqknfhpGXWxOFvn0uxfteqOp1LsJaepOfFzn2curpxGxirWTjPq6qRisxrWPgt4xvZFefXlP0g6rJZUpv9Hb3YcoHwp2gjA83KbErqivbG gnDjtK99ZhUik81Azg7UmNKqfshw4tQqFsDqR03jszHxvbnMgLjq1vvgcosC9josb/NVXYjZg15Lc&e=0&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

http://www.townhostbyte.com/c?x=fqbLY61/NK5DIXiPSY 0SjNJ5DeXvxsavdEPCkK8Tv0=&c=SPdZfryTa2 kzLUoExTPESP8NsyacpQhcgb9vQpH7 r7YyB9ZZ2JSD1HNRFVG08mQ3Zr3b6sCPjPqTJ7viUwKrNbjc7okJVVQyrBFi1IQj/OXwan7K9uLaKZ/AfTYlxTBLNSnFQd3T yc4T/bh8VHYcd8vCHuWdLWAGhKJFyGzaQLrDo68AsDGWPcxNUBo/4&e=0&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

http://www.bundlecentralsign.com/c?x=r7GB2xkQR8Lh9qPSbRy2wmwe0 kSc72CDawKbAPBkv0=&c=CV3TG/KFq6Qyixcqj05/P2nyuhoA06fBaUDftrfFaHikEVVT6S1Au467x6ImqM0Ru610ArxK OMMCrbtvZ6i14LggJUdIuC6USSTDqbgN TMe5fQbbOtdKocDu0qmwlc0q j9jbv1J/noTZkWzEHiioQPhbFNetVktVGo2N Ah7gFTqrkfrzNZRG1BO5avr8&e=0&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

http://www.townhostbyte.com/c?x=cn0K3oXGXxyEbWC3Qm/91CUPQUD8vNy24IO7ZtBYLr8=&c=pfUjBQzmwLr9WiBRP trjJxqcSalEo2yjZkvwF14XlyJQ94szBfBfhA2FXL0tsO5bWkzflVwLsiExYfimTIHv5mPX8QfARDlgkgsveCx28WjI1uxEPdxdfeETfkUDJbj3GuWUnphNXkr2ZSp47T6M5OtdrtqUxovS2PaVa0wF NTbh DkfrqRWmBl 4l2bWS&e=0&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

http://www.conceptsguardbinaries.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

http://www.conceptsguardbinaries.com/c?x=sPVxkoF5WSZsgPMHKlyPquIKxXKA9AfQoWAUvFradjU=&c=9GxLBevyltjdWeucjlE6NXG754Oo6kDxA7r1RzL KK5KVpRieZ2cQ2kP11Pl/LV2j5Rz3cgUFHGbvP4vZxmllyZBBFZsamgX1TaQnUTK3EoU8TxlIlswhYjMshmr0G3BArh1JQ35r9DA1017b2gnyucGGqsy5APbo811u hOOXKNGaQ2ZEdkv8RiP7oJHKQB&e=0&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

http://www.flashhostingapp.com/c?x=7/01JLtJQu/RS5FjnX7gimFm6B8ANTxI2UikWTiu4Uo=&c=jDmWVK1812BvncabI8kbfzjxdHbwWf5HVMYDuhK3PDhmH7U7c4UMcZA6N/ uljICM2Evoc8nCwZIB5EZQMbpDDO5DvtaBI8tNOPstKfsgN1BK1IlHtdappPJ4e4yGIr9h2aJGI4PP5LYckAoIc0pFoU4aM SNuysAf9RVTEUlMW/zF31AJNcag53CkQBMAoF&e=0&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

http://www.conceptsguardbinaries.com/c?x=xkmtGoheLF O68utouJwyI 9CvgYUTf9VwuLUr1hwBM=&c=Q3XowoX5qQA29ZFqNXODKu3kQUNPb6QCKfAji3ai4ylUFDNf3Mp/iYBLoa0QIw2o63p6gnYKRpG2mhNOOSdm5uOSh5gk/IQYk0ODHO7CR5TdO9mMMyllOBfkyveO8S52d9DzNId/s/LYCAZaIJuzo ibHGJEA9XqQoNKvBf/WELwq22ugLHiR4ZlVCcaB3Mx&e=0&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

http://www.bundlecentralsign.com/c?x=ZbRcK/TKzlK13Yg4zlJM/zMill/zxFD7Bp122sKXtfM=&c=bkcrE VkcWoBgWBvaf6/whZOCrnDvGyfXbt1aQikgeBrghkzaZdnL/VLzCgTdInJ2xrXSKRXYsbWsP5Y2W9CLdkMdqhRCK1CPrGSpHnTvZaB/Wdo7RzDxz0O9peFRbVx0XCLXwwTpYKdTHTBmJBE2VANlAoRMeHfIlSZWdzQzAKN/ knBhU1gQ0eU02Bj3HU&e=0&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

Latest 30 of 52 download URLs

The executing file has been seen to make the following network communications in live environments.

TCP (HTTP):
Connects to os.solvefile.com  (207.189.109.121:80)

TCP (HTTP):
Connects to cdnus.solvefile.com  (207.189.109.121:80)

Remove icreinstall_finalmediaplayer2014u1setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.