home

icreinstall_klite-codec-pack-13137-dp.exe

Kisi

Mode Beta (Fried Cookie Ltd)

The installer utilizes InstallCore which may bundle about 3-4 offers for various ad-supported toolbars, extensions and utilities. The application icreinstall_klite-codec-pack-13137-dp.exe, “Kisi Setup ” by Mode Beta (Fried Cookie) has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions.
Publisher:
Sacip   (signed by Mode Beta (Fried Cookie Ltd))

Product:
Kisi

Description:
Kisi Setup

Version:
3.2.2.4

MD5:
0958d42641c22b8f082acf2010a4a272

SHA-1:
041c15c3bfecbe1548d2bdca693169b387892f64

SHA-256:
e922f262a119dace6a52ab94e68879a0289292e78583d9c394c545de20986678

Scanner detections:
1 / 68

Status:
Adware

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Description:
This is also known as bundleware, or downloadware, which is an downloader designed to simply deliver ad-supported offers in the setup routine of an otherwise legitimate software.

Analysis date:
1/13/2025 3:57:17 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCore.FC.Installer (M)
16.4.22.2

File size:
952.6 KB (975,504 bytes)

Product version:
4.4.2

Copyright:
File Lite

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\temp\icreinstall_klite-codec-pack-13137-dp.exe

Digital Signature
Signed by:
Mode Beta (Fried Cookie Ltd)

Authority:
GlobalSign nv-sa

Valid from:
12/16/2015 2:37:06 PM

Valid to:
7/7/2016 6:06:18 PM

Subject:
CN=Mode Beta (Fried Cookie Ltd), O=Mode Beta (Fried Cookie Ltd), L=Tel Aviv, C=IL

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
112172B4C29D53526C8AFAEF1C4F6265E881

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:MjJz9OiMv1hlYlmHZRY5L5H/9x7NJXH6:MlZMb/5RYRV9h36

Entry address:
0xA5F8

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, CE, 8A, FF, FF, E8, D5, 9C, FF, FF, E8, 64, 9F, FF, FF, E8, 07, A0, FF, FF, E8, A6, BF, FF, FF, E8, 11, E9, FF, FF, E8, 78, EA, FF, FF, 33, C0, 55, 68, C9, AC, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 92, AC, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 26, F5, FF, FF, E8, 11, F1, FF, FF, 80, 3D, 34, B2, 40, 00, 00, 74, 0C, E8, 23, F6, FF, FF, 33, C0, E8, C4, 97, FF, FF, 8D, 55, F0, 33, C0, E8, B6, C5, FF, FF, 8B, 55...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
39.5 KB (40,448 bytes)

The file icreinstall_klite-codec-pack-13137-dp.exe has been seen being distributed by the following 50 URLs.

http://www.cycleupdateguard.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

http://www.farmtowntowers.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

http://www.sharerepositoryhosting.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

http://www.capitaltoursoftware.com/c?x=saIOK3jN05ur9vWmk3ELU5QkDRC IZuNqW0QXsqiylU=&c=nE9g/LekI1haBbIwlSon8JdMcZr9Xv1aIVl7zomZEtjLf6x31jcuaSqYMpIR4SIE8BoHLQAmCtnXzL6bw25jILoej/RfiBbQ4hOHf3qbw5L0EMot7x1FChP5a0E7SUXoDTqXJVGy1TwM1Hx7TNqQf6tgk1R8vp43X8GPW7pF3 LOKTWplOG7Ukovwk3Zy6wL&e=0&fallback_url=http://dpstorage.pl/.../K-Lite_Codec_Pack_1210_Full.exe&downloadAs=KLite-Codec-Pack-13137-dp.exe

http://www.gifttownsign.com/c?x=hNJAIihAQzTw4JxjoDby6Q86 SU vxo83WiYJmCCRq8=&c=AJ/pPzHcrITUAXX/idMaEmlp/4xzrqPEOxSWhcso KD67BNEyT7O9 BGjMuk9LIuXRp3S5rhFcvg3lTrWD2dtfOmFW63N98DUuUJist0n9gdebztD1QixJDiqfU I1ZuFhmcDhEw8YnhDUqQ3IETSi8qEF5p04ub21IgSbmzEUg=&e=0&fallback_url=http://dpstorage.pl/.../K-Lite_Codec_Pack_1210_Full.exe&downloadAs=KLite-Codec-Pack-13137-dp.exe

http://www.cycleupdateguard.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

http://www.clearguardapplication.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

http://www.capitaltoursoftware.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

http://www.appsfunbyte.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

http://www.capitalsoftwaredownload.com/WVl6OTRQVkp2ZGpCWFdWQkxiV2xQTTNVMmNXWktOVlk1SlRKQ2RtY3hURXhPWVVkRmFWUXdRbnBWWWtsaGMyRTVheVV6UkNaalBTVXlSbXh6U25nNFVWaGtZbWd3WlhCdGJEVnlPVkphUkNVeVJqTjBXalppYUVSSVlYUnZNME0zWnpGbFNtSlpPR2hXUzNWdVZHRnRZVkZ6TldRemN5VXlSakJsVTJobFV6a2xNa0pyYTJKT2FtaHRTV0YzWW5wUFZVSkpVV3BxVUhKa1ZGaHJaa3BvVmtWS1JFWktObWxRTURoTk5HdFpWM0pXVjFsdGVUZEZWRU16SlRKQ1pFUnFVRlp0U0VsUGJrc3diRU53TWpoRlFVaE1lR052Y21jbE0wUWxNMFFtWlQwd0ptWmhiR3hpWVdOclgzVnliRDFvZEhSd0pUTmhKVEptSlRKbVpIQnpkRzl5WVdkbExuQnNKVEptYlhWc2RHbHRaV1JwWVNVeVprc3RUR2wwWlY5RGIyUmxZMTlRWVdOclh6RXlNVEJmUm5Wc2JDNWxlR1VtWkc5M2JteHZZV1JCY3oxTFRHbDBaUzFEYjJSbFl5MVFZV05yTFRFek1UTTNMV1J3TG1WNFpRPT0=

http://www.clearguardapplication.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

http://www.gifttownsign.com/WVl6OTRQWGczVDBFME1tUXhja1IxWjFST1JHMHdUMGhoVjFaRE5IZDFibFZWY25jNFdtMHdZVXg2VlU5cVpHc2xNMFFtWXoxbFIycDFPSFI1U21aUVIySmFkRXhtVDNOa1lWSTFkVGhhUTNOU2FsSkNOV1JSZUhwclZFVk1ja3RZWjAxMGVWaEtWRWR5V21WeWFYYzRVVlpNV21oUWRuWjFWRlU1VDJaVFpqZG9ialpGVVNVeVJrSndSM2RPVmxCNVUwNGxNa1pEV0dkNmNFWnhiWFowYUUwd1JqTlpjQ1V5UWxwS2FtSm1UbUV4YVVsWFRESlVhRWhWYnlVeVJteHRaMnhFU2pWUmRXTkpkbWhoSlRKQ1FrRkxNVEJCSlRORUpUTkVKbVU5TUNabVlXeHNZbUZqYTE5MWNtdzlhSFIwY0NVellTVXlaaVV5Wm1Sd2MzUnZjbUZuWlM1d2JDVXlabTExYkhScGJXVmthV0VsTW1aTExVeHBkR1ZmUTI5a1pXTmZVR0ZqYTE4eE1qRXdYMFoxYkd3dVpYaGxKbVJ2ZDI1c2IyRmtRWE05UzB4cGRHVXRRMjlrWldNdFVHRmpheTB4TXpFek55MWtjQzVsZUdVPQ==

http://www.gifttownsign.com/c?x=b2sQ86znb8E1RVNYHTxpJhhzUpewR1OSL3fmjBC7jkc=&c=T8QC R7LzB/esQG3HDbnNV9qN2qAZKDTMynPyg9r8peSejvPLRMvJ9wkCZns/j5Ik0bJ sq3yXF6uC CaBQ1NpYHv7A8opk2W3J6sTf jPJE karf6gpj nW8O0tn2JckzmK4o98bzbPdmmOJEBjmg==&e=0&fallback_url=http://dpstorage.pl/.../K-Lite_Codec_Pack_1210_Full.exe&downloadAs=KLite-Codec-Pack-13137-dp.exe

http://www.citysafeapplication.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

http://www.capitalsoftwaredownload.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

http://www.sharetodaysafe.com/c?x=wGcujtqTWWh/LQrZN3bfEnswNDlE6R 9SLYj 3O9O4=&c=8OMMSFWrav1fHM9U grIqpIKZdwCBPAF KlvbVwan5OJNWmITOelaWh90/WAMPj0yOUaYe1OEMWQTWgdAkKrvWqHAkb lxkRDEbPJjslDO qNjwBH0srHh0fG6s4AFQtys2KS9tLQDqm8Moru4vMAW8WSX9sPufRCUN2NIwO/7c=&e=0&fallback_url=http://dpstorage.pl/.../K-Lite_Codec_Pack_1210_Full.exe&downloadAs=KLite-Codec-Pack-13137-dp.exe

http://www.capitaltoursoftware.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

http://www.citysafeapplication.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

http://www.laboratorysafehead.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

http://www.conceptsbodysafe.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

http://www.conceptsbodysafe.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

http://www.sharerepositoryhosting.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

http://www.citysafeapplication.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

http://www.citysafeapplication.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

http://www.laboratorysafehead.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

http://www.gifttownsign.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

http://www.clearguardapplication.com/WVl6OTRQVkpYVm5WVU0xWjNjR2hVV0RaNk5XZDJOVk0wWVRWVWFrNU5ibGhZUTJKWFpIYzVkVzB5Y21WNlNVVWxNMFFtWXoxWU1pVXlSbVZyVHpWc1NtTmpWVmgyY2pGb2VuZGliRzFKVTJwYWExbFdTamg1VjNsdmJrRlNVVUp6UVVobVIwUmhUM2xpV21GaVNIaGtNM2RXTTB4cGRFRk5OVXQyYVZoSmVGaERXak5FTkhSdlRHVTBhREkwVWs1WE9DVXlRa3h5ZVZob1pITnpRMnB3YlhkSmRVNXZhaVV5UWxOdmFqbFhWa2haTXpGYWEzRlhSV3RLWjJWNU1FRnRhRTl3VjBocmRWZHBka3RZYlRGbGVGRWxNMFFsTTBRbVpUMHdKbVpoYkd4aVlXTnJYM1Z5YkQxb2RIUndKVE5oSlRKbUpUSm1aSEJ6ZEc5eVlXZGxMbkJzSlRKbWJYVnNkR2x0WldScFlTVXlaa3N0VEdsMFpWOURiMlJsWTE5UVlXTnJYekV5TVRCZlJuVnNiQzVsZUdVbVpHOTNibXh2WVdSQmN6MUxUR2wwWlMxRGIyUmxZeTFRWVdOckxURXpNVE0zTFdSd0xtVjRaUT09

http://www.capitalsoftwaredownload.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

http://www.capitalsoftwaredownload.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

http://www.laboratorysafehead.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

Latest 30 of 68 download URLs

The executing file has been seen to make the following network communications in live environments.

TCP (HTTP):
Connects to os.solvefile.com  (207.189.109.121:80)

TCP (HTTP):
Connects to cdnus.solvefile.com  (207.189.109.121:80)

TCP (HTTP):
Connects to cdneu.webfilescdn.com  (65.254.40.36:80)

Remove icreinstall_klite-codec-pack-13137-dp.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.