» icreinstall_gimp-13219-dp.exe
Overview
Analysis
File Details
Downloads (51)
Network (2)

icreinstall_gimp-13219-dp.exe

Bab

Mode Beta (Fried Cookie Ltd)

The installer utilizes InstallCore which may bundle about 3-4 offers for various ad-supported toolbars, extensions and utilities. The application icreinstall_gimp-13219-dp.exe, “Bab Setup ” by Mode Beta (Fried Cookie) has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions.

File name:

Publisher:

Mode Beta (Fried Cookie Ltd) (signed and verified)

Product:

Bab

Description:

Bab Setup

Version:

1.6.2.1

MD5:

e474245c0720e42edf5a6db274a3d954

SHA-1:

bd66262cb26e2b30d9efec8c1602f3cb98fc4403

SHA-256:

b235085f21a2b7cb52afeea5bbb154b3c4dbf964fdd177f32b9976f004385411

Scanner detections:

1 / 68

Status:

Adware

Explanation:

Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Description:

This is an installer which may bundle legitimate applications with offers for additional 3rd-party applications that may be unwanted by the user. While the installer contains an 'opt-out' feature this is not set be defult and is usually overlooked.

Analysis date:

11/15/2024 10:35:35 AM UTC (today)

Scan engine

Detection

Engine version

Reason Heuristics

PUP.InstallCore.FC.Installer (M)

16.5.4.16

File size:

951.2 KB (974,072 bytes)

Product version:

1.5.2

File type:

Executable application (Win32 EXE)

Bundler/Installer:

installCore (using Inno Setup)

Common path:

C:\users\{user}\appdata\local\temp\icreinstall_gimp-13219-dp.exe

Digital Signature

Signed by:

Mode Beta (Fried Cookie Ltd)

Authority:

GlobalSign nv-sa

Valid from:

12/16/2015 2:37:06 PM

Valid to:

7/7/2016 6:06:18 PM

Subject:

CN=Mode Beta (Fried Cookie Ltd), O=Mode Beta (Fried Cookie Ltd), L=Tel Aviv, C=IL

Issuer:

CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:

112172B4C29D53526C8AFAEF1C4F6265E881

File PE Metadata

Compilation timestamp:

6/20/1992 12:22:17 AM

OS version:

1.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

24576:mvp7y5I5PpEla6JVWwIar2hfWz21GkqfQT7L7/bpoQOGZ/u:mx8culbVzIaKhc2gkqfQTz99Z/u

Entry address:

0x9C40

Entry point:

55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, 53, C9, FF, FF, E8, 9A, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, 24, CE, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, 24, CE... 
[+]

Packer / compiler:

Inno Setup v5.x - Installer Maker

Code size:

37 KB (37,888 bytes)

The file icreinstall_gimp-13219-dp.exe has been seen being distributed by the following 50 URLs.

http://www.quicknewbinaries.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

http://www.dlchuckledl.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

http://www.dlchuckledl.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

http://www.dlchuckledl.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

http://www.headheartvault.com/WVl6OTRQV1JOSlRKR1ozVjVUM0ZPWTNWclJ6UnRaVVExZHpGeVkySlRkMHBWTUdwVlUwUndaRnBhT1d0RmQwUnVheVV6UkNaalBYYzBaR014Y1UxMVkzZFVZMjU1Vm1aMFFuSjVVakZFVWtoYWVETlNia1pFV21Sd1JqSmhhbHB6VmtGaGMyUkpORTk1ZEhsM2JFaHJZa1Y0U1RsQ05HUkNOaVV5UWtzbE1rSkNkREZoWnpkWVpHc3hNbG9sTWtaMVdqRkpKVEpDZFhVeE5TVXlRa2cyTXpCV1NsbEZSWGhsTlc4M2RYSjZNVkpRYjI1UmFETkxVMVpzT1dRd2FuWkdWMjFTZVc1SlRWa2xNa0prU2xsNlZVeE9kbkJ4SlRKQ1VsbG5KVE5FSlRORUptVTlNQ1ptWVd4c1ltRmphMTkxY213OWFIUjBjQ1V6WVNVeVppVXlabVJ2ZDI1c2IyRmtMbWRwYlhBdWIzSm5KVEptY0hWaUpUSm1aMmx0Y0NVeVpuWXlMamdsTW1aM2FXNWtiM2R6SlRKbVoybHRjQzB5TGpndU1UWXRjMlYwZFhBdE1pNWxlR1VtWkc5M2JteHZZV1JCY3oxSFNVMVFMVEV6TWpFNUxXUndMbVY0WlE9PQ==

http://www.dlchuckledl.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

http://www.bundlebesthost.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

http://www.nowapplicationsranch.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

http://www.sendnowtown.com/WVl6OTRQVW94VnpaclZHcEJaRTQ0TTNaV1pUWnhjRU5ZUld4TldsVnZNM1JFV2xKTFdtSkhSa3h5Y0hkS1dVRWxNMFFtWXoxTlluWTJKVEpHWlRCVVVGTnhjVE5VSlRKQ09UWjRVazVyUmpNelRtdElNV3czTm0xbFYyeFpRM1ZwU2pSWWExaDVUako1TkdKaFVURlpiRmxKZUcxRmJrNVNZazFvUjNOM1ZGTkxkVUZ0YUhSSmNWb2xNa1lsTWtacFRFbGtOVXhRYzBJMlJWQlhPVm81YzJoR1J6UkZWakpSTW5FeFIxbHVZbW81U25WelNFUlpUV0ZzY0RVelUwWXlWM2hEYW1kMll6WjRjSEV4ZEd4cmNFcEpRU1V6UkNVelJDWmxQVEFtWm1Gc2JHSmhZMnRmZFhKc1BXaDBkSEFsTTJFbE1tWWxNbVprYjNkdWJHOWhaQzVuYVcxd0xtOXlaeVV5Wm5CMVlpVXlabWRwYlhBbE1tWjJNaTQ0SlRKbWQybHVaRzkzY3lVeVptZHBiWEF0TWk0NExqRTJMWE5sZEhWd0xUSXVaWGhsSm1SdmQyNXNiMkZrUVhNOVIwbE5VQzB4TXpJeE9TMWtjQzVsZUdVPQ==

http://www.sendtodaychuckle.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

http://www.bundletourtown.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

http://www.bundlebesthost.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

http://www.tournowsend.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

http://www.sendnowtown.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

http://www.headheartvault.com/WVl6OTRQVFV4Y1VKMWFEbDZTR2QxWkRKSGNISlVjSFI1VFRGTE1sUXhhMDlaUkZKYWRWUlJZbkZ3U1hsRVUxRWxNMFFtWXoxelMwcDVaVXRCVmpKbE9XVm9RMHRRUlRsdlJVdHZTemRVTWlVeVFuWnJNV1JxVms5M1IydDNOWHBQVlVwVldIVnBOblkzWXpRelNXaDBWVkZWVDJJbE1rSjNTbE5DZUZFMllYTm9KVEpHTlZwaldUWXdVRkpTY2tKV2VqQkZTa2RLYmxwS1FqRlRKVEpDYXpGSlEybEtaRzE2Y1VocE4zVnNVRko1V0djNWVHSkRkVXhHWmtkdGVrbFRhalJvZFV4bk4yWnNibkprV2psNWVETk5aeVV6UkNVelJDWmxQVEFtWm1Gc2JHSmhZMnRmZFhKc1BXaDBkSEFsTTJFbE1tWWxNbVprYjNkdWJHOWhaQzVuYVcxd0xtOXlaeVV5Wm5CMVlpVXlabWRwYlhBbE1tWjJNaTQ0SlRKbWQybHVaRzkzY3lVeVptZHBiWEF0TWk0NExqRTJMWE5sZEhWd0xUSXVaWGhsSm1SdmQyNXNiMkZrUVhNOVIwbE5VQzB4TXpJeE9TMWtjQzVsZUdVPQ==

http://www.dlchuckledl.com/c?x=sx6qsiwZ3XXgvXHRNptoShBGqq wyBcsuBmJ3 /T8co=&c=9S2Up7TOnUB1pJ8isX7kiGSk7FamJOicyw/0YP0MGw/Xk3dzNO xmYKc1YwljJYz/wjQcBPZqgwv7q 8dG Ylc JHdEPZrxDWLXhXxSmm9v1lBYk41yjUdLgNCtw2sVhYzeQ8IsjndfdnIAOpfoT6pk4OYRu0uN5kI9hzFCEMx2okEb70vxL3Ee/7EScjLG&e=0&fallback_url=http://download.gimp.org/pub/gimp/v2.8/.../gimp-2.8.16-setup-2.exe&downloadAs=GIMP-13219-dp.exe

http://www.sendnowtown.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

http://www.dlchuckledl.com/WVl6OTRQVXRZVW1GeGJHdHNPRTFXYTI1elREaHdjekZxWTBaeVdVaHVaekpqTkVWMmNVNU1VMDh5VlZOYVpYTWxNMFFtWXoxdE5WUnFTeVV5UWpCSlQwbGlWazg0UldabFZXNXpTbWx5U20xcU1sa3dXRXBJUm1KQlZUZzRjRXM1ZG1GdlVtWllSRFZCY21RMmJFcFVaekZUVmtGMVRYbzNWakpsYUd0Qk1HSXlaREJHTmpKck5reDFhV1ZvYzBSUFpqSmFjakpUUjJ3MVdubDVZM0JLTkV0bk5WQXpjMEoyVWpseVQwZHdVVmRrTkdaeVdUaFdhQ1V5UmtjeE9WWklRV0oyYkVOVE5tbGhiV0pOYm5oQkpUTkVKVE5FSm1VOU1DWm1ZV3hzWW1GamExOTFjbXc5YUhSMGNDVXpZU1V5WmlVeVptUnZkMjVzYjJGa0xtZHBiWEF1YjNKbkpUSm1jSFZpSlRKbVoybHRjQ1V5Wm5ZeUxqZ2xNbVozYVc1a2IzZHpKVEptWjJsdGNDMHlMamd1TVRZdGMyVjBkWEF0TWk1bGVHVW1aRzkzYm14dllXUkJjejFIU1UxUUxURXpNakU1TFdSd0xtVjRaUT09

http://www.bundlebesthost.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

http://www.tourcontentdownloads.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

http://www.bundletourtown.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

http://www.nowapplicationsranch.com/WVl6OTRQV3hFY2xsVlQxaExWRWtsTWtZM1JrNXhWa3RKWkNVeVJuaEdZalZoU1dkcmJqbG1hM1l3U3pkU1lYRlNhVVF3SlRORUptTTlKVEpDYjJwV1JtUTNiakVsTWtKblltaHBWRWR0WlZKb2VuVnNUR2x3WnpoNlMwVklUbVp5UkZCck5sSk9OM2dsTWtadVRqazJSbVJxYTFKTlRUZzFiREJ2V0d0WlJHZDBORkFsTWtKNVZFWkNaM054TW5Rd2FXcDZia3hoUm1wQ1RUTnRSSFV4VGtaRVRIRkpSbmxWZFhrNWNVVXhRalp2VmxkT1FsTk5iRk01V0RKMVJVNWtPRkpPYVhGTlMxVkViRzFoY2s1bU5GcFFlakJ5ZWtFbE0wUWxNMFFtWlQwd0ptWmhiR3hpWVdOclgzVnliRDFvZEhSd0pUTmhKVEptSlRKbVpHOTNibXh2WVdRdVoybHRjQzV2Y21jbE1tWndkV0lsTW1abmFXMXdKVEptZGpJdU9DVXlabmRwYm1SdmQzTWxNbVpuYVcxd0xUSXVPQzR4TmkxelpYUjFjQzB5TG1WNFpTWmtiM2R1Ykc5aFpFRnpQVWRKVFZBdE1UTXlNVGt0WkhBdVpYaGw=

http://www.dlchuckledl.com/WVl6OTRQVEJaZVROVmFtNWpiVW8wSlRKR1RsSmhWR3BMZEZkWFdVMVlWRUZrVTFwTlRYQmxRazUxYzFoVVdqZG9ieVV6UkNaalBYbE1ObXhyTkVKVkpUSkdVR1oyTVZKb1pURnhhbmhaU25OeU1ub2xNa1k0VHpaTVRHeFVXSGNsTWtZMU5qaDJSemRGT0V0T1pGcExSR1o0VURKTVMyUldhMVJSYzFZbE1rWXdWVkYwVVZOS1FYaFFNbkZXZWtOaFZqUnBWbFJxVEROdlYxQnBNRkkwVjNCWVZteE5Razh6UXpaMFZXNDVKVEpHVVhWNlZGVjZXbTVwWTB4eGFISWxNa0prWkU5R01FaFpibnBwUW5sQ05IYzBja3h2VWxKYWR5VXpSQ1V6UkNabFBUQW1abUZzYkdKaFkydGZkWEpzUFdoMGRIQWxNMkVsTW1ZbE1tWmtiM2R1Ykc5aFpDNW5hVzF3TG05eVp5VXlabkIxWWlVeVptZHBiWEFsTW1aMk1pNDRKVEptZDJsdVpHOTNjeVV5Wm1kcGJYQXRNaTQ0TGpFMkxYTmxkSFZ3TFRJdVpYaGxKbVJ2ZDI1c2IyRmtRWE05UjBsTlVDMHhNekl4T1Mxa2NDNWxlR1U9

http://www.townbitsquick.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

http://www.chucklebestapp.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

http://www.sendnowtown.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

http://www.bundlebesthost.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

http://www.dlchuckledl.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

http://www.sendnowtown.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

http://www.bundlebesthost.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

Latest 30 of 51 download URLs

The executing file has been seen to make the following network communications in live environments.

TCP (HTTP):

Connects to os.solvefile.com (207.189.109.121:80)

TCP (HTTP):

Connects to cdnus.solvefile.com (207.189.109.121:80)

Remove icreinstall_gimp-13219-dp.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.