home

icreinstall_finalmediaplayer2014u1setup.exe

Internet Lite

Quality Funnel (Fried Cookie Ltd.)

The installer utilizes InstallCore which may bundle about 3-4 offers for various ad-supported toolbars, extensions and utilities. The application icreinstall_finalmediaplayer2014u1setup.exe, “Internet Lite Setup ” by Quality Funnel (Fried Cookie) has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions.
Publisher:
Quality Funnel (Fried Cookie Ltd.)  (signed and verified)

Product:
Internet Lite

Description:
Internet Lite Setup

MD5:
c8c405cbc50e5b96fb0bd9fc0d792afe

SHA-1:
a6b882e82dac6ca49338b39e27f08ac625c01b3f

SHA-256:
d072d9ca04273e7c75da5eb47e1d6836f4383dd27fa9f1be4a6f15f6dc4f7ec5

Scanner detections:
1 / 68

Status:
Adware

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Description:
This is an installer which may bundle legitimate applications with offers for additional 3rd-party applications that may be unwanted by the user. While the installer contains an 'opt-out' feature this is not set be defult and is usually overlooked.

Analysis date:
12/29/2024 9:01:17 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCore.Installer.Installer (M)
16.1.24.19

File size:
1002 KB (1,026,032 bytes)

Product version:
4.2

Copyright:
Prog Installer

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\temp\icreinstall_finalmediaplayer2014u1setup.exe

Digital Signature
Signed by:
Quality Funnel (Fried Cookie Ltd.)

Authority:
GlobalSign nv-sa

Valid from:
12/17/2015 12:54:27 PM

Valid to:
6/22/2016 5:12:52 PM

Subject:
CN=Quality Funnel (Fried Cookie Ltd.), O=Quality Funnel (Fried Cookie Ltd.), L=Tel Aviv, C=IL

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121771FCA92BA51266AB4B001FE1E840DDC

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:jEtjPF8gLTG58I2b3kDQ7DEIGL+xAYqZY3ddA0SmTAbzkv/wf:jij98gm5+bUDQHEIPzqZYdmLgwf

Entry address:
0xA5F8

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, CE, 8A, FF, FF, E8, D5, 9C, FF, FF, E8, 64, 9F, FF, FF, E8, 07, A0, FF, FF, E8, A6, BF, FF, FF, E8, 11, E9, FF, FF, E8, 78, EA, FF, FF, 33, C0, 55, 68, C9, AC, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 92, AC, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 26, F5, FF, FF, E8, 11, F1, FF, FF, 80, 3D, 34, B2, 40, 00, 00, 74, 0C, E8, 23, F6, FF, FF, 33, C0, E8, C4, 97, FF, FF, 8D, 55, F0, 33, C0, E8, B6, C5, FF, FF, 8B, 55...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
39.5 KB (40,448 bytes)

The file icreinstall_finalmediaplayer2014u1setup.exe has been seen being distributed by the following 50 URLs.

http://www.softwareconecptsafe.com/c?x=iQIHKOOEgmm971O/VUlcPfmLasA8Hv6z9BJ833Dlv4o=&c=228CLmRYU sC 1MJAxtQtukXXysfra9DfVV1m4tHiiEbNWeS6lQoxdxU/GYobD5 SNx1yH8WO4M2ugHHoGq4ti04BSRO45mJ2dB5gL5a/qMtUEhs8QtpNdI2ecnAPMZ &downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

http://www.sendcontentfarm.com/c?x=9luHQQUQ4X4g5USllw8 guL/mAfZy84vdW0tTiBAfGw=&c=zsGpCbEFBrVFHHeKM05MSCWEl7Q7IczEnCf53OEzspfgx0aVbLXOmog2oHhZ3IWBHPLQARZKOpzXIRC7W2PS73AyX5bAFBtZ9huQaeqgQjzDCyEaujMpCa3qWQleoI6J&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

http://www.bitsfuncenter.com/c?x=HNJNv9JTPDuoVl67uOrWV8WzLw3Vw0C3OZ5flaJPThU=&c=KTML11B25A9zQFKkMPqV41KZGkewzHuBd94huWaHTc2qDXYlC06nwEXXg4MEyecipavymT MXzCFS15L9gUew7FfsbdSVZHF HEw9vLKF6RxUH4xBh/ZIGJo03SjGxRd&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

http://www.sendcontentfarm.com/c?x=JB/mNTMo5noQN9LEj6KcRe9zbHakgVkKMCps Sdax o=&c=k6pv4ZIZ5SS13a4O8PQ0UrlMPoqqJzuSlVbOIVsydz/YmZSNZDwZ6eAkg47Kl8EppzLJhKtwjq7ArHIxdaIodwWMff5TV2XaQwu1u3dHBU7iP9GFjtSmWtW3azjOO0Xu&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

http://www.hostpresentrepository.com/c?x=67hRQ/B7ewHaAWLSAb6ig2cEYQvFY3jeMjfXYA BbpE=&c=zpOG43Ay0wARsh1Ka3P8yOueablJ/WC4ZUKPzaIr1uQERTvQHf8ZzNfeuU6bmjyvxsu/laTV NlaAIg bJgVBSX49nsJ/Y0nqfU/yIf1 IOvm18Cw5Ihkj4TwqdgccHy&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

http://www.filespresentapplications.com/c?x=EGak29AS0x96RQUbXBudon3LVNs/yCY/p9B8JxoD67o=&c=zwFpYVQp/fR9WojQCvSs8PDbY2uf4Xp4fG2YWi71TdxSN90t/8BtiTfQfv08mbORFCdrj8QNL/Mbv/f2YdH OdZWugOE0isPOBWSk343WOciZqL vHEKJoo4uQaxk/Ny&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

http://www.cityapplicationworld.com/c?x=2vFZsijZKYXhMggORE36xMByDkAN3NlSNG0YvnPoGe0=&c=W6zk9HrkUrFFc6V1rk3KtahuQMns/mdwjPY85Wr8BjPODAVwTfq7AgOZnCwee rfVyVlhGhm9FZC yYsTuc76VGj0MvIdpV/fuNAVntSDIGlkTVUqRnXZFYQGq3ViIp4&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

http://www.sendgifttower.com/c?x=Epc99b0vPezzy8j62IwVKaQEv4GKoxIH57aALbjs96k=&c=peRemfXR88KD rIAluP2 rKIcdvv0cAsTdTTnMZRcTeNJoGUAGq6yXmQrciS3z7bhro6WOk12ErAoEHvSXonE6pb5EBTKB5U7 j8fd8NcHWbRFW s2m/3C3NCWbmS8Y0&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

http://www.binariesbodytoday.com/c?x=YGofazQYMy0k/PLFMV7zPv bnfYlolPgcB1vwNiiZHw=&c=sQRhbh5SHrc1yXGSZJqvShVwc3OPsHWgvuQqCFbQkLtCzqQehkaVddPItsTStavHHh ECIAtc3RD7UNkLikTgcw1MKhdsrxyIrUnK8VvOZvf8tLvWvx5JpzYa9B2ezzN&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

http://www.cycletodaygrab.com/c?x=yqg7hTjE3L0C2/Vn4pWXN2ZPrEsSpp/raOnXfdbBlFU=&c=vHWnVYaJWoUyxXNzxr3agkSCXX0W Vvge Awvkvv1 6qjIFJi7SFqGMqAt/DbKxuDKpQz2Tpily/FWuGLPXMzgjNpeWbcT/eldFpSNNzuLWB0FlOlWxa8e9yCJmvD4wf&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

http://www.cityvaultapplication.com/c?x=SqXJMGiG89UWVbgkNpaDz4olKaCMSAC 8MEWDsrJADE=&c=SHBKW4BfaTyrcaOEuzKDhLC6l/O389ghHb6F/DxGRS4sP3vyyRmXh2lbO2ryTEpCQciy xJHVY5wWLRPynmwm0rb3aNJQezQjLWXWzTBglyX1eMLVErGr20uXaw1Wjga&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

http://www.towerbulkapplications.com/c?x=fiRSf5UcGxyLfmBoRqmxYAFcC369j UQDzsmy0vhmds=&c=XnoPI3RXVpb1XMbWOpZ ABgQUDk5x13fuXaoPLz9T9UGnVDLpC3aQ6N7CqR7abDVeaw/fbxvYjNPo/bsigu 0N/dB tD1jCP/ikXvHt3W ch bu48WsK7WCafTVkCToB&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

http://www.bundlescleartag.com/c?x=lF4RggZQ gu3Pts8vO6XToKfvlklKw89ACPBYuIpAHo=&c=a5/Rz5dR58eoQeUHTv9dEE9NvG5cePZGG4/y8VvWCCuOAe8RSqlpcFVSq8BHa0CMUzls3APeiOlpIluPCSDraDvq6DVYpruffM17ObAORIOAJfNB2R1Y2pTMnsNB0Riz&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

http://www.packagebundlevault.com/c?x=w6bXEGMV3ad9nDIzM87sJ73F/gZv8vAxoC/vTBx oII=&c=ISYEkcEzBjYJloO1rrlVq2CojtK0k4D5MG5UTGzPCYEM1OdW/24ul3CLai wfRApjN8fn3P Gott6J/LuB3QfmSWXtFZZ4SktkrOB06Y Vkk2ggDox8w1RvPhDjpWKwR&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

http://www.deliveryheadcentral.com/c?x=D5jflqkHxP0vqUhc3zk09S2JmIab3VarCKERetmgK1w=&c=LUTd2L5nGic1kfajB/H 3GB5YlXsMbqZQW6nnxnajr7001CJwZwM4G8P3b7KWapKEi3WQSFvjnzREobV9dYWZso5NzE4oc3DQ27EfivPlH0QGAvVW B9JQvyVFcLZmG&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

http://www.hostingcurrentfactory.com/c?x=U2alSJcdKmT9ar4GJm5/azpvXXpiOKfUCFuQamgVUGQ=&c=oBDTi6W 6Vscb8OG52x99WpOxEW90 NpQrBvXl0waSiKRra HLIcm9DU51pzntlv 5YNV43rMgiJQL47OgceugIT1aK72kZAfDwvm7AH2zTb0A6JkaTFfjWERdqEXH/q&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

http://www.sendcontentfarm.com/c?x=f8mWrqZpeQMedJeHScjXFHbEgj6HeMc3ZU2Xve3Drgw=&c=mu8HDDWxE4esRu5mTldvvzVClGk8Ef6DaGGdkUwlVoF71ufiD2GZlrjoPB2llIjRAFlPIdWRw7GzaM03VGEJKInlVEoyqgaFXPYipuCQ HVyl2oDPB Q4 ED7qrunf1W&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

http://www.packagedownloadsapp.com/c?x= wmAfPgwdXBtIZfjrrrRWFf3SW041xKEYnHB9KriH8c=&c=QiEkBqa9BaP6YaWHWtAyGZKAbpbA6Hc2HYq7ne8AAaPE jTcJOOWaDkOco2TZHKa8j8hAsfV84XHED2T58kvNJ9nWhwSu3ZYoCWPt6uBHMVwbTpq4cnjBA8Cpaq/W1LK&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

http://www.presenthostlaboratory.com/c?x=uRUx0YdEeO61jIOWvzfjxOEnk4RNDfdSrPQma4lmUtg=&c=TpDeUopnRptWb6iJK za8yUknD71tr7PmsP6/qGApfEBBDViS S9exikufmxqikG OcktTMwUJHLOWqLgbpUYNvTTzNX6Kuy5w6XCdMgdgdOhCAVOltrIw0JdvIo e8i&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

http://www.cyclerepositorysigns.com/c?x=EC5WcKQC8IeU2nJt2kfVrsMP5Ayg9LqNRxEKXkW6Q3w=&c=nA4WkpuHRWq1jvDfWgKndCQF0Q2/8matHI5BE66QQX1wnGep3eF1sVNSRkudLJXt3godq/VqHIUfIEDVEHGgUXk1OLa27u9VrQ0YQoelVMQVA Q1DSo5VSpENyIz83c1&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

http://www.cyclerepositorysigns.com/c?x=GsUaqyBNPntgUKOgQHRHHWWtUeoI KUEehAg SdATio=&c=3JSdQ0v0zWdWKG9QSxBQtx6pvvkBRFnkHfloGnAakcy vruVTbQ/KTBParWtYIjjDz7Mcrsfm/WslOGTWM6ksP5v7yNrVr6L18O0yoiJf8jvRnpHQW927hxgW5K8E1hO&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

http://www.toursdeliverycentral.com/c?x=1nheAvvqN1R1uapNUVv/OgVgDOcx3qwC857iROF2qvA=&c=nhlzrkzXYm3IDYFyY4aU5QR8LJQxXCvIKMRZSVkceoyY4Z5o/8P1 p1SdatZ CoMheE8qJE2PapPyTOvjs nD Cyx/ye bve3 9s874FGIpy1x1NmPJtn9jW0bTUegU&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

http://www.filesbytenow.com/c?x=VfGRE363wVF4lUch2r1IEyHvadC2QAKwfL78bi JJHk=&c=B9wHVPV NVNGv95XPp/BIc2FrFn4Q35nZWOOBhZj2bzFtiGIvWuxWHXtppkrACc3JOk/0KeLx4jUXv3GGet8kfvoKQX9t LNSjjpeFO7Kdym39euqkcwHlnJpqA/ogOo&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

http://www.towerbulkapplications.com/c?x=shWJb2tZQM7Ue5gvw5Y1 w SASBEE6BTwNR5sTYRkAE=&c=geSYzUVo/nFzJGLEA9yleoFloHLH/5xEZ39LWoQ7sw3USuuvq4uOlWx3IVIYdBXtovO40kjF8UqhoJcUphvbYxm0R1nk8TGq6AJdHu/hF/GK1ZfBioSuyDwyB0WSSnNk&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

http://www.quickfunmeta.com/c?x=9lmGAk4DAd4Y1OuUnc8TtmmW3MvNEfrW/LXquYpf4bY=&c=uvpYgVxC /Wg2YEUUkKtghxmykLUy0oXfE6ciM5OStxe8OHGDQe 4xqwxhsmB0 msDAlUV31fYEq3UCg3f rhD0XzN4gqX4F0gufcNdAraWzV/SbD08eqREm2pLQmSTh&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

http://www.cycletodayhost.com/c?x=Jtz3TLX84fo9JH8zvZYMd8IkOXw0KKjQE3mRTxvl9rE=&c=Z9lo8f8V9WxTRZdZwUgJngjCmz0w9fhVnk9cSn8RoSbJMYPPVXOS3Z/fw96i79n4urko0AHkS2hDRVFSoorbTGNe8HuWE3eCm2Wj8io3GnQMDbsW3Bz57lTUBPqv9rOE&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

http://www.deliveryheadcentral.com/c?x=Ar67VrF9XtKHDT8tG XnJvd7fflsUBBJWrejuyZybWY=&c=8 Wtjaz wy9cuzbJtarNG2bZOlvpOIXOMvNEB5qvfXTMqfNIx5wdW J3t71Hk8/dulv0gCoTpH4HqWpdAKjzYSQgZTr/iQ5cUVO5Vc55NdorhuYMJC6rOVAjg6GxuWna&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

http://www.laboratorynowlaboratory.com/c?x=ITofzHI8t4HVwZaHRGLjetjS6AZtgjjZGkEBcadoJxI=&c=jBtk80QNk/jV3qpkN4Eo3DaG5wCanlCvFPAlWPAmxRAvHCeM3gjTXvTXarwUSGkTHkQD9alEIpygDm/qNS6FyyFQ13BwD3owjnT3RotY9eoYZTmXO cRRBfD94FEFLHO&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

http://www.cyclerepositorysigns.com/c?x=VuiyQStIH/ltijjOUlSVJgQ n0g0qC3lyLqLEBSMOWs=&c=27aijTcrlmdmHWVZ7PzFb Q Go8Pnf8bIM590gjfgzNRdYbQD e510AfMeXG2l2yZFc8eLrx MUxb2Uhf9jg3L0g7wM1zaUk4zro4hq1pkizUgIz28wXWsC4OZJ2qsVB&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

http://www.dlsafecontent.com/c?x=wM4FBWqnAdLCVjffQpsZcoZ25hfniIQowidwKDvYH3A=&c=1lKPZ4OVkh/ M/WLWlCTZYLeBkcNuoAzOY9jMva1aQjJBGdavRDrNnU5JTkjO8u2tPZP/n9M5Wg9wF8wiDOt7oHRkFGMRSAoj5zm4pqtJY7 zT1iVCJewYSXxtEXU9i/&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

Latest 30 of 296 download URLs

The executing file has been seen to make the following network communications in live environments.

TCP (HTTP):
Connects to os.solvefile.com  (207.189.109.121:80)

TCP (HTTP):
Connects to cdnus.solvefile.com  (207.189.109.121:80)

Remove icreinstall_finalmediaplayer2014u1setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.