home

icreinstall_minecraft-1-8-1-32-bits.exe

Installer

Bumpy Apps (Fried Cookie Ltd.)

The installer utilizes InstallCore which may bundle about 3-4 offers for various ad-supported toolbars, extensions and utilities. The application icreinstall_minecraft-1-8-1-32-bits.exe, “Installer Setup ” by Bumpy Apps (Fried Cookie) has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions. With this installer, users are expecting to download Minecraft but before that occurs they may be presented with additional offers, mostly potentially unwanted software or adware.
Publisher:
Baixaki  (signed by Bumpy Apps (Fried Cookie Ltd.))

Product:
Installer

Description:
Installer Setup

Version:
1.0.13.30550

MD5:
1d56b889d60a2b37dfafbde372f0e83c

SHA-1:
aee5b72a50374b39f796b0e79570728802136ddc

SHA-256:
aa8cd890d5d7f78836efacb01b1556533ed93a56a1b05fbdf76156550b810624

Scanner detections:
1 / 68

Status:
Adware

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Description:
This is also known as bundleware, or downloadware, which is an downloader designed to simply deliver ad-supported offers in the setup routine of an otherwise legitimate software.

Analysis date:
11/15/2024 10:40:18 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCore.Installer.Installer (M)
16.1.17.3

File size:
679.6 KB (695,904 bytes)

Product version:
1.5

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\temp\icreinstall_minecraft-1-8-1-32-bits.exe

Digital Signature
Signed by:
Bumpy Apps (Fried Cookie Ltd.)

Authority:
GlobalSign nv-sa

Valid from:
12/10/2014 2:14:20 PM

Valid to:
12/11/2015 2:14:20 PM

Subject:
CN=Bumpy Apps (Fried Cookie Ltd.), O=Bumpy Apps (Fried Cookie Ltd.), L=Tel Aviv, C=IL

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121B000FF2DA5043B97A16823C79402FCDC

File PE Metadata
Compilation timestamp:
6/19/1992 7:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
12288:waopbhpAM3XI6da76QikQ7TE5gflVCo5jOptDbBY5IIAwfMC7DCgj/5BsqBDryK5:waoNhn3XNa7HCYgLbItDdYu8MjgL5Bpv

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, 53, C9, FF, FF, E8, 9A, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, 24, CE, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, 24, CE...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file icreinstall_minecraft-1-8-1-32-bits.exe has been seen being distributed by the following 10 URLs.

http://d.likelyaa.com/?ic_user_id=9289&data=UrGOrW6SRlWHbBnf lmtCJK6NmoxI5aX7yQjWfI1tLUKKrRhFW5l3NSyBvlXG 59hOuuG mqI0StDeT1cC4V7noWx30gbBPE/qUuYWwhKNkD 5mqSMJ/KA671m78adK0eFGNHX3r1vMqmngBSmNnM4HyElWL6rMAHZ6Kc6oFrUVnNLFq3W YmdzFpeB087MAYGQv8YXY44Yalab3HkOe105cGyLwhnQ 4hUtaVj3OUDIvuThjkEDYpDfDqAxk BKI lRghoeFKCLlzGgcVUBfEKhqPkocsMbeAgZpMwxuriZGdN9bJCMfw9yokmVcDgZIhe9Mrgj9wXuJw5Cua3Y5HFt76rhe5bTjN97 tp5wV9H9ejIYK4TPJ2iTf/7lfttoHcwxK8LmD7AmI5RDEtSIblSEdYOViJPX42zTtGuWGrVIEV/32ogC4stXftAOEhqCAzj0w7vb1gh1ITWyDaYiTyDSqf2nvVWNZ0mwTXmwFhtH4EUDcyGyY6EQwNvujgCPM5vbw3t9jH2HhSsb1c6NbJYUky7FWKxRLRU9YtfIeJYpEgPSDjFXfFU6jJeEpPyJGyag3Qn5B2HXEtNv1y1w6UZEL8lOowPk3yxvoutuQTwkemoaLxh/PKAZAYNuY6OZ2qGOLPRk2o6J4Kjh45AZGBAkXgZ/5BFgf3OEqbEKm5P0gnQwcBCVBFM/ ocnzUFQKjlMA2GrYw1QW6XPw==&key=dX6b7blCtLUaFTZNUmk lEbN2zlkUpbBqVK1k6rdxqWAQ8ys4Gud96ucoI7sCGPmwLGLx9h2f0mUZoYyFcK9KlXqDMiq8Yg/fbzjEUztKlg2 nL5N0jXDoMB1akoadiJq5FMiciIlx8CYQTrzoprCToU3Je44XxWjQEEUOjN7AUB1iN73crhslY9pif6/.../tAo0e9pfpPwHyawvOfizrBTa1PgbFej

http://d.likelyaa.com/?ic_user_id=9289&data=mioSa3m5mCVgxJLvgOGchQf6XcHvw0jz1GlewfoON5q/ZZgyMmARLs6XIA9GzmTtEPosn 7jeZZoMjrjEOashTRNUycUHIF8P2o51i6Jlb4fQXoVSOC/X Kaf7/2t64Tr35tB73i lFpOrhaSDzh2u6XQjA6oi1dFmB5o D4kjlM2qfR6ZndoinKpNztYPp09UsNl8Qa63lhqcRbTBl38bQpvuzRpnKIlzRvRl20c0E4zbnDAKWlBJ7ODhMNn8aadbj5n13aStw0bLj1hzc15bMO/kceFg/PbNJpCPVUKk7IGLL0vgL9K9k8w39RAp2qczMgASTz43vbDl83MCGSvyBy/uBFxddFcPS 1h8eTKEebtZOJo91YJtk0Jt2tNIROS/1uJBdenQ8OEOVC6/grrZBr8bgiquLadVygc0j9dB slFchmIWS6lmGHx0WOnO2B/SkgTWvnpdjndghjdOgEX 6F2r 5QCU8tezaeVNcXPkdKaAgYAb9sEuO TaBQQmS4un0rDc5kADjQoiqSatIR3V/gUVVkbpcxP3Zq9TTUrzaN6OpHdoN3aijtAahVitYX56hBlUq5fEG9tDydyjjkhELoHV5sfqRnu9TR83seX94BrUwLH7XvxbYpo2yTsLRyFRCx94oyQKdMeWLUuZUDAzys7PNKHwvuQidAvAcUPzNM4EB8C6A6kmg3R2RP512gfbfve/5CrWflUWg==&key=SGlGRD33nUH4h3YZYz/Fs98DQeY9r9abjPdiBdZfT9N jVpvv9dd8j60etZJNQHeL/rp/.../haJ9z9oy9JtleVzg4jVRzbAs3xyK dpVLsM4asSVh2KQxPEEq0AeH2OAacSPnXFKx38yjT

http://d.likelyaa.com/?ic_user_id=9289&data=8H FdwEehIjXJyw5GI15hi96tJ8TebB1alw8EWxy7/SIE/iMz7 TbLfItwquleJTEDYK3qPbYX9VQNIwTOk3xYadA9O7OYBouPptQo15V0pBsBbivYAVHK0VR15Nv2o9bPqHo1 /g19WksfCUgJHn8S8Hfvue9u0ntlz7 bO7smBKG7GZWlBoSt qBykOLvJXGzCcolPXz/dxJGtbzIl7H5pFqhnW6e iLkSPTcxW0iMZuD0LTa7nnFm6NybbeTilJFFvJDhvvQNoAiQx65UGTYsT5S2VrwEDqN8eyC9i9niU1V o11QsDMtIR4/nsRlItanllhBEJIhSlSn9uZ2dLdVyGEBb/J85wTy2KFBajtP0hrQEagRFt63Xp39IophrWsyiRjmjRU8kMrUdfUK pyIQ5Qi Ohua8vpR4tKzwQT9csTJExVr0IWKFbPkFybVQ0pCUmDyj652AlmrU NVE7AlSQdulnL3RZpTYTilMEwSRSZtRHgJ0V5mwL3Fu99mE/nfm44 cgy 1GO2kla5yCCK8hCKFvC1BrmjGnHFoQathQHtveqSxVBvN36xwDASaxaxFLioJxcAyy UTp/ZOS9HzwDof2cP6ynammps8Z4w9G/g3R5ndiTIEJjJLa3lk9x5Wysj/PMLBtgTIlcpC94UKMHSZlcwewvn1x9PwtJf8nV1Sme94rK9xmYVUbL2r6bRdv6 bZVZLP6qQ==&key=VfZYGAairyqTHT/pubPwUh5UBP3BMb0RqYNbkWO8yKlRZDb5Yj6bVSTQLyxet1l0eJGDnztjTOKBYAMP1Z15JaA zRVVDf4AH8eV2NsBBEdmSDlzmXhPvskWdUT2vDw408/.../7SGtbeUDch6 0dRERmBVFoPpNm6IPt0pY

http://d.likelyaa.com/?ic_user_id=9289&data=4saknPM7q2tLCpAeEV15LkFiFCs9syK5z2H47NhIMZ0secwuOA/nF7WhBzxG Wq/toDn3z8 Tfp9zqDHsGjx41G5cfL053M76tsI5ycxRGHRZTH jhu9uetKhstNX9R XCC2MnWD1AxfLqAQyQwJkYyJzsnYD61fdvWPVWF6YizeuCLRjchijgNtVUBPcw5qN6M89TLvRlcA6kW4lNVX4D2C3L2OROF7LOFHCL5X77RUoCRtrxW8QVf 1MXlq6C9uS3Olqjpr2M78YBLXsuwm1BuqmAeLhJxtCVbxbGGPfLnyGarxKfALUAuzlihYgsq1X5Vh9cZx pOpsBDj52ZosKYoXJLVGFejcRR186rldVXapKBYFeOHioICR8IwxqEC0RnSWHKQpI9Zts 6TjTCQtaF1yUyAhbBCH73tm5Vn OtXmjXc6rP4zH/eXQSW gNDqVzB8SzKWvYHcFZPgWfxbzHDd6gILpSFrJk7w4w3T5o2Jx0QIiC0rmuVOu5Sx2Tx3E9QNgdayY3FVXw0ewVFBrE1G6fBD4zxqFLiviHoMoCP BdY0S/uph0MlZ4TCiY5dGVpvnSOGmyPBZ4tUuBBiF8017JUbDzjJEDIC1wPqboF5rd9Je64ihqkmlUBbaNAW4QEMfD33sCxsMQOtYDJHiVmO vTJVf3dOczV9YXQlTEwbDwdtcQN9jkzaZo 9DE8PGxWtP8PwRodOkA==&key=nekKfHHToiXUXVQ4lwH5P89X ncmcirdcQ1yV04OljK2pxt5zglsowGCG8Bs8C73hQk LR ooA8JWdW//QLp1HTJj1DUoxj98U3twBZoSQzLYWaax6QFLQMIfSkgeDkhNIC7n6Tk3EU5 LqMTEFg36ZYPiVeLGGqVvniONIKBwveBIQmJaqQF SxZ1ovEJeanHpKhOYWQ1tjjq1bNceoJ0Jlheomxg0n6A3

http://d.baixakifiles2.com/?ic_user_id=9289&data=EX42JWzOG7AqE DN5zrDnc7mMxfuBmIZeM9mtn75CB3vPA0tZL5 lXL7JTdwMdR8LQwlvomlvIdgmY WchCQmd33IhmtfhnY2sb1q361NFTAZr3mFP6mugj34p23DVl9OzeSFI7iAzoZu07jQfLQSLSeSbXCwzFGVLRjWpOW6qYXcMUHhFJt2/uMk5Et/WQfUnScQpiH8lXWiBVCFwfjzJ5viwwccdTeK9866dnFJU Ky96qQCdikdqtceDv9doKjKtCD2hnzMN dFf5DI ctxxDDlkdedwkISedl/m2NaXTErlABSPo0mV6rhGyJULnktXrrpiNTE/4AgeP6X33CdMpbg2IKpEEQnGuPosTHnglZVtigZ6Krd5 FVsazV9 QlfL/c2OdoXnrlH75SZAAngaaZmA7oe31CQguMp38becRsabVx 33EftSzXVTVaR9sX2h4buLaMJA2dBC0kpTl AQ5zsKRiokrI1v1blW1YsGGB1eCB63m07wv/xp3qcdenoiA yQoIRoEVLbJLelFYTMW64UwaF3TjrlbLwtar5xgFELjlap5fCM0PJivEwdL60j4D69gFx7Ap3K0ba2xWo9yx0POEax/QOGg239NgiW/pLvLV1KagTpDDRjoqIzdrZtNK3s aKKauQkyILhtQBYNdjqN3pb2mOKKGhd4vXMn6Zvg445LtM QUnFbS/xyzRI7PjnJFS0AhiQ==&key=o1Girp0qWSdSEyXmSlfkbX03oRMwHhEf8jNkw90mupC8WrgAmxhYyQYLqqWncxjp/ PLpkhsrO74VvIJ82nB5c5BPppqdkAkfQZMV2eh/.../r4arXRBT7xyIj5yKgM6LH

http://d.baixakifiles2.com/?ic_user_id=9289&data=Y3NGqLxYHYpEid7/NJ4X3PJx/ZOZXoiYgGn6gg1IjjtR19HEEjgF83uWsEomUezB3TICHUls02Y/CICbuz4iYHnPAXJteEBT6HdLpZfppbdzlNMzaFBbBN OymlMIdbXJD4JAvSpiiQ3Ds1VJn5jkxnFsjTYJvPsxY1yzyRLK5KqiEzzUtLfpPPdtu hpHkKXwVX6nFNZ1xnSPi5Gad6j3QEoBD2/LtrFqmmcIlox8zes4goxBGlpB6nKZmDsrJx5m3hbKcqAdfb5roaTMZklmEA6E/MLDEbmzA5R/oz98UToTADsoVT4hnTUZ EcTEkyfizgOxq2nH Pd2eE0F7j/04MMLqUYNRfeixyoPAKN9spiPix1kM1m4H3xUm/2fEKN26q0jhLDnefLu262H8P54/1lGgkjwoOpe4eDKU/TnGnsyOXUarJnPGl3arLGFjIJ8YYlhZzm6tBJPc3XCmbQn671RhpqGtydyAmJzNLzAN4Wy35gF//fYHzL4MT9ehrx1NAUwrz2ZpagOI4ogEfx1E2fBCoBQGXaGeP9v05gVUE8r7UV98BDJOMeNo/pdOg/Rclqkm2k5IlrSXp yNrPZ1sHKPpgH A76gFKa6WrMrIoOX7pxIW/Hx/54scxfBFigqW9rjdHeplCjvaFe qTSi2G8bm4jNN4FNMev/rIkQmVjSnV130WgeCtl8RrEKeuuZJGGF58rv/9jaOg==&key=DaLwDsUzomoES2EMAyPhshgvyG95gUybjDcEuTBEVw35os3klH/NS5JeuS6aFPAXNGTT5Yx3lqtxxqm2WUjqjDur2v O/SjjMOixJFKgqDsAe4CwFyuThseTThOni Y09jsNRmleOk3e/.../usN1xqdrbGvyszl1fiWKLoXAJB7OmQdf Qg6wiI3Z

http://d.baixakifiles36.com/?ic_user_id=9289&data=tJmAgHYVL6/f/VBvq5mguzFDNNNAYFj9rz3KlTdLD6gUJ/iubcKx9nWpv9wR1KexN4tc68QUL5M bZjEAIZl a3lMykxNPNszOjc9VYsJ/mvnA7f9Jwp/Ah 3I1JWowM4ZXfzLK85jivS12oZBFE7cO21tQOqrWVMAoupQ9Row0vpc U0Yfz7g/6JE/l/dsMpQiBUtI7M4J405A3AV8Vf0iXbbHsX8CJWyeqchNYI5J8vbd3CF7YTFXV6EfBRbqHBbt6Jh6CFbz9/8BUCVgXbTSpZAXeZXnNscas7StIXkm6OTgaQDJTrNpTNLRYdLKPBy0Klu67i5i8iT/xCkIvZWWgC0OCY6dm7KLhUZ3Zo7/AGdzZU5CMKkPEfR5jPIedU4LHvoLoeJyakQ6Tl3zdJiaM0H4S4DYdgTm6cbGPIEnN6dF2v0OIa2JE8BHMNiNJAwezPqi8sTaV 158LYhK6kyDk4nYSlx D0rVYtuItOWe9HG4gCWvIZbsBKRAcE vuggnlzewav9XX2038mcFnfe9a/2VzBUm2XscJ1h3i7Q7vl0U6IdrOPikxGTYKL6fzFJXXbgFP7vDCh6llJMNEnQZIgpGn1 4Nqpfj8mOKGa/d 7tbC2WTPozAOifDIkdwW0MaZwBJESkVYefDEqM3merB65mGzQosZ3qmaraBEgpVYJurFuguyEkvVjyDXEgoZ6kADJw/.../6pwFyw14t9njCs6NsHRJIGLDNPf U2kt65iO9u4pISYt KW d4PlDeBh0XlVJq

http://d.likelyaa.com/?ic_user_id=9289&data=qnBiNEq5u4UdejrWWWX0BYjsEgcs6Wv8LISjXUkfgOHrxsnqP0XgsFjfvzIO EWtPBJh8C03Q1G/oR3g9iDhJAqnG3p2jWWVsvDXBPkw1SQPwv6 YVd BezO/zX36LBK/BfGq1Wcol5BrdWNzWdlos z8VJkpiSIPAT6T9oAQpb/6ZVCSzo Y Ux6ehoCO1JivM5ts W7h547m9vD1RSpsC4HTfvYI4d2V2hSSuyQed shy4aktRXceflGVZD5J 9Jhwec3o8AnfwtwOCq0HjC93IgA0h4TLaqe4K3riKbpVae/ NjoejgyRCpn0elrUe9k5EMB08eKjspHvc9v 6X7FcSgK5 to/W0MGdVqHqSrRdUFlQVMHyL07W0Sr8FFHkuByslP6P Xg8/v12SsHuzLItweWDK8U/bpT41USUvMaRcIk7sgehrY01jXmMkPJOikYvN5ABy85GPsSeRe0Dv SxAdSdwNMZx8lFXOHEMGCDJ73g2XFKuV2jp Fp4C9fIIoiwgKPUbkS/hPjkznZtJA5gtb4S44mZeZlNFKqke3joHSCM4W4SAGKVasvsbAubGXchx9UBzPV9Ek7C7K1KiEw wqJLuaJnyG4PjCFUrNVGiZO5Pq0yrEJ7fZTrnqMeYGk5VY/3DqZ FF41QbyiWoX4kIPELwzqP8C5xJipKyKOD76LPb3OalgOyCteyhJVuoF7 O29pssPpXA==&key=lHfFhGVY0HFD0JdCam5X3DOg9DaI1FApNzycsX7nO/.../FjHbD1cv5OkOsxVNlYbiZbOA3DmbeEa 1Q4ftAQx9v0HAh1GVtPl xlbLbAe7lTxryB7BVbVqS2f65Odk3c Gm2DRHz3Uz2y4qHRFU6FdtloAJ3RzM7lp5ZhHbkPlz8NAGpjMlxEFTUNKBSsiHCaEWfeqNsQ2wr79Ug4dSRMU9XxTKdGakQOZ

http://d.likelyaa.com/?ic_user_id=9289&data=6cWjmHD0wSmiDQ0EBC5YT70mOJhYho6HvRpGFamK2PORvPhrEpCCtR3/Iv28husrDAj ncXiMktf3X xv3uHoza8XDWQ3aT7HaDVyicZmgcRtyhaugsdfjES/n8Y RcqQW8BnlhcUPH6yxo7npOKd/0wFO7Yeor4hF5HauSSWHp7YzFH48ckdRrk 6YNZr7es3OAO Gr5yXl/lhpKvkq8LZwTWB6HKKo5croP4u42v8A9o7vFCPkXvuMuvoVIvhuiDOul0ZlF OQMZq4uSjUTUem409uBEGMLUCYfc5JNGTA/hpXir79NAPJIbkyRE/G8/RYkunVKI1VJg5Q3sfsPMhCNMbMnkRURD0ZHGYVza3FLenmRF7OlppCG5emqR2kSs37HGe7XfTp1 GStzRoDmOqdCvlQDjMvO/u1eSQPHM6VGGuwwhnOikoKYoeGO1yEbF/aDgBf6w4kA4NknCr9qYzwev8aU6nvM4VYhuGvJi9s11WEay6 PKrBihSUDrOpmi9o8d0IUYPvaKGysZSUOhoTxi7woreNrp h9gbxlSL3FCgHDaKtBm7BcyhuuQQ1on/fOqzKb3tArxKAqzHACvUn4A7rEzArCTxWeuPccmxJLyEmEjEISO91uH0p0gr92cdTKmrBsHURScLVvP8j/g/4g1WjXY8dRLSppxVsT0mS2iETPDMuYvlxCEbFUpzuHZGJf9c5MWawXV1Hg==&key=A5omNZm4mSoWjsHprvoeTxzIqqRGLTA3eFxxgoAZaR5FiQEoOIpXqDjzBdoi3XAZvVsQGnRqywUo0G4OQWN9WudvBgxuy1 jkxdprmFlwaCT eUDJdZiRkVrgdSbkF5OEfhYFu/iR9T7 ebx/.../fH45RrAb0MOnnF34xFUQUGY9hhimesmtUNYFWyxn KScBUhYbF1xK0wLr4aFuAuhDg

http://d.likelyaa.com/?ic_user_id=9289&data=QBSMfQ0crKZv/lEnZ6HG3nKplT6OnpGrPvyg/rXd3CE88Opf/S1ksKEawuReBf40KcFDdMT7OKFXykwya9t0WU0PqIp788 2D6HyUAcA7KLZa/L8cizWU/5wgu/ZnGBJc1Wo4ZT4abODcv/KZJ7tKcocc7ofm/eQLYyOff1EzSikN1PLhiu/Fr 7LHIOJC7L7lEaW5EQUmD7gt CIC0TlQlLCr8HGFodxND0xBNv6f8xlHrSiK4iVv7aIKCYB8sF Yq0 im93jslPanBV3ZOG0aAH4VB/pIH K8I3ea6STrUBosoLx 7fH3fE4JIJtCAJDDCXqz0Lgg6R84BTP/dNEnvbXAKaV1oJJ/qYNvy8SJrc1VW31Gzl7fox9UbB6793L1V7D25KJDZLisNpxW7LMO1poeFstLzSj1zQbz/ APr3 l8N1bEW7QNEby5LpnowNPE U6C1ip5YiD1bJGYDL1isjFSEU9R8ntkCV/8h4xsqQmEKdwy5jKivtDyowzITWZLO3FQyToN4iC8pLSXmCQ73Zq6T600pA8uHCgeikXrIbeonZxz0kbDC9zQinzKTWknV80Yjff0hATdxKMXFfn1eHy4k0W6VgKeq tlDmOBF1e1CAISOLJUAa VinYq2V1Evi hgyiR7fCsn ED1In5aaHSZDkferoWeRV3YI W5sZhaqX5wELjrgu6wg0d1HCO64wfITmyk7w5Lg==&key=hz62Am1Hso/CLSNnYYers/.../7w80GjgLs02MIFUUYzzu28ZGNnth

The executing file has been seen to make the following network communications in live environments.

TCP (HTTP):
Connects to os.solvefile.com  (207.189.109.121:80)

TCP (HTTP):
Connects to cdnus.solvefile.com  (207.189.109.121:80)

TCP (HTTP):
Connects to cdneu.webfilescdn.com  (65.254.40.36:80)

Remove icreinstall_minecraft-1-8-1-32-bits.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.