home

icreinstall_minecraft---pocket-edition-0.14.0.exe

Cir

Destiny Dream S.A.

The installer utilizes InstallCore which may bundle about 3-4 offers for various ad-supported toolbars, extensions and utilities. The application icreinstall_minecraft---pocket-edition-0.14.0.exe, “Cir Setup ” by Destiny Dream S.A has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The installer is marketed through download protals and search ads as Minecraft but will also install additional software offers which include adware, PUPs and browser toolbars.
Publisher:
Minuho   (signed by Destiny Dream S.A.)

Product:
Cir

Description:
Cir Setup

MD5:
ecda1db00b4e91dee61dc029fefc43a5

SHA-1:
924e0b69782967dc485e62dce21e9ca02a6852a4

SHA-256:
4385d160b300edc7184994e988c9775587862ea8b8b06e415f551c65d3a298eb

Scanner detections:
1 / 68

Status:
Adware

Explanation:
Utilizes the InstallCore download manager that may bundle various adware-type offers.

Description:
This is an installer which may bundle legitimate applications with offers for additional 3rd-party applications that may be unwanted by the user. While the installer contains an 'opt-out' feature this is not set be defult and is usually overlooked.

Analysis date:
11/24/2024 1:48:04 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.installCore.DestinyD.Installer (M)
16.3.28.17

File size:
1 MB (1,078,040 bytes)

Product version:
4.7

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\temp\icreinstall_minecraft---pocket-edition-0.14.0.exe

Digital Signature
Signed by:
Destiny Dream S.A.

Authority:
GlobalSign nv-sa

Valid from:
12/17/2015 10:55:11 AM

Valid to:
10/2/2016 10:36:18 AM

Subject:
CN=Destiny Dream S.A., O=Destiny Dream S.A., L=Clarens, S=Vaud, C=CH

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
11217A75EB912AE2167326222C18D9E2357F

File PE Metadata
Compilation timestamp:
6/19/1992 7:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:zbmjb2rfYLfQazIgBOg5h3bMqDyrRupNCMvE6G1NFYZVSmc8AR:zS7cazIgBOg5dbLyZMcoJu

Entry address:
0xA5F8

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, CE, 8A, FF, FF, E8, D5, 9C, FF, FF, E8, 64, 9F, FF, FF, E8, 07, A0, FF, FF, E8, A6, BF, FF, FF, E8, 11, E9, FF, FF, E8, 78, EA, FF, FF, 33, C0, 55, 68, C9, AC, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 92, AC, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 26, F5, FF, FF, E8, 11, F1, FF, FF, 80, 3D, 34, B2, 40, 00, 00, 74, 0C, E8, 23, F6, FF, FF, 33, C0, E8, C4, 97, FF, FF, 8D, 55, F0, 33, C0, E8, B6, C5, FF, FF, 8B, 55...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
39.5 KB (40,448 bytes)

The file icreinstall_minecraft---pocket-edition-0.14.0.exe has been seen being distributed by the following 37 URLs.

http://www.hostingtagbody.com/c?x=1vS8D5WmylhYMDly11TZ LDNxEuRxIk4DNCww/FjosQ=&c=ROmT7IAuYGcmiUb5hX8r1ponXntSZaagSB8oG6nDUmhhTOXo8M08sMu16rts/yuZFtcFgGzoglsXI/JvS2XEg8piT0BJ dYSNdlm6c97pdSn4 6FkQkAQqCKDQtpGTzHGoHNt2LFgfzv 9udSu pJA==&e=0&downloadAs=minecraft---pocket-edition-0.14.0.exe&fallback_url=https://itunes.apple.com/.../id479516143

http://www.hostingtagbody.com/c?x=W2Cs 0YSvwRiPnqSwJ/t7Rb80 N 7uybuzCdZc2OSaw=&c=iPvodp8ZXtFj9eT6J7O8RhD I99YldbDDKufdh4ug/tWn2T0dn8h8k40y7JEVvQnRifpkx1Vzo1pLrAsZkENSV3ST9OdPrb6W6XbEQYyNKd8bAd4gZtSGuwbTe0jMHYfniJgRBQpBNyaOlaEkdkytQfc30pxPxCWSQsClgSeyGZj71utuz/VBR3PsjykbPD3&e=0&downloadAs=minecraft---pocket-edition-0.14.0.exe&fallback_url=https://itunes.apple.com/.../id479516143

http://www.conceptsbinariesbundles.com/c?x=/QlYyCSc tctkz8H4tH1jZQNTOfrpKT2o81Vn5Nwx7Q=&c=xPCrS8VgnkMQ8e7DQl3/laGmysVXoYc90Nwr0SphG5KOPUsRjy/kg1CcZ2cJVrIrnL5aPF7Wb2Bx4vpTgOnzoDZDwPzmJ2m4Y9xubAxq8TyCNL1AE16vLeMrGW2ZUHAqVxyRRWHFjeIEriZ34xHv5KetolfLiXEsDFBysNaRg16MhEsg71rHr/Ui9W6KdgkI&e=0&downloadAs=minecraft---pocket-edition-0.14.0.exe&fallback_url=https://itunes.apple.com/.../id479516143

http://www.vaultsdeliverycenter.com/c?x=QCBywF1SgTAFX0yQ1wbLsphy4hl1uGj7vMM0ak2cZMQ=&c=z9vLcd6GtT4qANW 74PoYVNVXG86xZiEptKTgg4qCDXNOH8D0wsttOah qhK7QcdhuoJECaDMp8EUFk3RUGAjCl JXN6sHUTVtRTdQia VnT2G/xK9LhaAiYTJx72FK6JcW60TnOXjy8Jksb22x68skHUkPw5iwXTz2NYNgkj3g=&e=0&downloadAs=minecraft---pocket-edition-0.14.0.exe&fallback_url=https://itunes.apple.com/.../id479516143

http://www.signbundlefactory.com/c?x=1PxB3hA4QYz IeIc67oHOk0KyT 5L3JMDcsk4pCKqQY=&c=h8LhDpjGKrJCYnpHzTVdqPZluqF43nYJAttvmFD0L8LsKqs/TUyYw0pC8uJRFSAcHJk5zyRtJkqkSAjewkC1r nurLc43EsWB7xBgtO/V0YH/seWCNI03Ib/TgO7xHVWVhItX2NzZWtItq5m2/UWVUDeOuhJi01n5yr73Ij5FbVOKbx/o0mQ90E6tdBXH3Rb&e=0&downloadAs=minecraft---pocket-edition-0.14.0.exe&fallback_url=https://itunes.apple.com/.../id479516143

http://www.appstowncity.com/c?x=SGF K 4DPhOLVw9Yz ZsCwx3L1qgaV4ntp1yQfaNYdc=&c=wnyLFQFX7STh5qiYhUxMPL3TKiyAHPbCGlnqIcPSCXkR0Sx1KSVqM35QyH 5hnsUTx2CfyIG4r3wP O7mEVPUqiU4WotauaO/jo Ry7v9NfWUw0RPtqMVNxMIzPODPMNjL4wI3MzagbgQp AsB4BmEtJSWaJxNFtmjZk94zMPTD6r5ndSJ0WEsK BwQTOLro&e=0&downloadAs=minecraft---pocket-edition-0.14.0.exe&fallback_url=https://itunes.apple.com/.../id479516143

http://www.conceptsbinariesbundles.com/c?x=j8VkmgRWZ4TbiaCPRa 8pV2hjn/b0nrn/nRGp4IajQY=&c=N3TUBsx1TT5v2q9A7fTt7hSe0L 1VS82GDlONSXjkop1sV IwH4URxXcJ6fATJYzIuwZlrnIRjCOLclL3Fpd9e9IBREQeCz6ZXGzGL9qNM7rooqS/MH4ShqDvYxWlWjrGOPAtPA4y4Byh9gDXABSsAoYFiW5TdKukGBQgnrJ6NI=&e=0&downloadAs=minecraft---pocket-edition-0.14.0.exe&fallback_url=https://itunes.apple.com/.../id479516143

http://www.conceptsbinariesbundles.com/WVl6OTRQWGRwZHpSNFFqQXdlbU15TjB3eGFtRjNTMWRMVm14Mk0xTnhNSEJCVFVKelYzQldKVEpDVm5odmFsa3hVU1V6UkNaalBWUTFOa2RMTURjelUxb3dTMnhTV2tSbFNIWlJUalIxSlRKR1QwMHhWWGhoWjJ4UWFrOW9VbHA0WTJwc016RmpVR0V5YWsxb1VtcExOSFIyYjBKeE0zVmFZbW8wZWpreFJHYzNjMWR6U1U5U1p6aG1RWEJqWWtGcU1FZEtPSFJWTURkU1lXTnBWVEJLZWt4UmFpVXlRa2hhYzJsWWJXOXFObkprY0VGTlRUZG1UU1V5Umxab1lUWlBkRUZ4VDFaSU4zaFJSM05HTkdsUGNFNVRaeVV6UkNVelJDWmxQVEFtWkc5M2JteHZZV1JCY3oxdGFXNWxZM0poWm5RdExTMXdiMk5yWlhRdFpXUnBkR2x2Ymkwd0xqRTBMakF1WlhobEptWmhiR3hpWVdOclgzVnliRDFvZEhSd2N5VXpRU1V5UmlVeVJtbDBkVzVsY3k1aGNIQnNaUzVqYjIwbE1rWmhjSEFsTWtacFpEUTNPVFV4TmpFME13PT0=

http://www.signbundlefactory.com/c?x=7CUl9z xf4D4NsQJmsYaPCu7Ds9GRtZukK4g9n/Jqs=&c=dJ2Cqd1ytBd5JSxYF25pIRiBABWujQxbEZGetu9Gsj93AvgF6eBRYocOgbbbuqkjAlg1Y9PdbltNaG6ranWoDcmMRB2dxUwxqsaWM9SmhXSxlisItnnXS9DUeVq2XkYBFpcpL/TjnVPIR kD5tQ5p03F/aE r5h/0DGz2G9OPE=&e=0&downloadAs=minecraft---pocket-edition-0.14.0.exe&fallback_url=https://itunes.apple.com/.../id479516143

http://www.cleandeliverytour.com/c?x=TamJmax7Qjl5/Z53AqJXxkE/RACi3 YQvfXg93RPsJQ=&c=KvnTODWgQZDhQgYQVQK29gtKEhHdvZhjRuquziIay7DyM6ILkmZCvRp2L0pUXc12XdbfM 56qad5N/ybQPWdpax60TZ1LJNHJsuKWZfGVraaSW2CAc5 8jk9/DVCde6/NZ2SOIissH6XDObD8yK5df 2UEBD/ZNPBkloSqNWyI/PxqLPXyj0Zm fITfcOgkG&e=0&downloadAs=minecraft---pocket-edition-0.14.0.exe&fallback_url=https://itunes.apple.com/.../id479516143

http://www.cleandeliverytour.com/c?x=iuqzUyBh2kGNbio0ODhaVm H/rDRlIB2yGXahNGjrjU=&c=yTaWhxUno4sakSVDpsdiKTEsBODTDhrF40axl5bxYji63KUEDyya6sK1J nz5b7VOO27EusEdrSK1c3jzYsUu/2k9vaWD tW0nQTHvKpcE26DVTFbp6a 3uQ2qCLMcr01olf hKSLgtr7h/cTRcyKXs41jvDt0gcQGhIJufFTBQ=&e=0&downloadAs=minecraft---pocket-edition-0.14.0.exe&fallback_url=https://itunes.apple.com/.../id479516143

http://www.signbundlefactory.com/c?x=I6wpYwgQqL3ZlhZDvijR1qmi7a8krRwhRwfMI1WF8Tk=&c=7 hDXEp eMeIVGSn5MDJfHygzCb29zTNzjx8KZN3pRBt407kXPZ4zrA20e4FFmxWXkMkYvpQD8o/OZKpvAROluCFJvC/6/IzTxGY81gxjTmVnZbJYicW1aEJI0On6sdvoQXfGqE1jhcRtMVoGQaRdQ==&e=0&downloadAs=minecraft---pocket-edition-0.14.0.exe&fallback_url=https://itunes.apple.com/.../id479516143

http://www.vaultsdeliverycenter.com/WVl6OTRQVXQ1VDFWWFJUQjVXRGQ2V0ZCQ04xSnZVMk13YVNVeVJsSldKVEpDZGlVeVJrcE9iekZNUW1SbWNHaFBKVEpHTVdOME5DVXpSQ1pqUFdWWk5rSjBlSEpRWWpWa2FUQlRkbFkwZEdaVVJHVjNZWEUzUkhsa05VNTJSRWRzY0d4TGRsUkdTM04zZGpoNVpIZ3dNWEJaSlRKQ0pUSkdlbWRpVDFOUE1HWWxNa1p0SlRKQ1pVMTJXRFpaWmxFMmRqTnFiSEJLYmxaSFVVTm1TV2xpYmtsSE1UUlVNV2hEZVdGSmJYbFpSR05PY2xOMVEySTRlbTFaVTJWcFYzbHdPVVYxUWpOTlVHODBNVEpoVUZWWWVHbFVlbGR6WkZKVWJ6aEJKVE5FSlRORUptVTlNQ1prYjNkdWJHOWhaRUZ6UFcxcGJtVmpjbUZtZEMwdExYQnZZMnRsZEMxbFpHbDBhVzl1TFRBdU1UUXVNQzVsZUdVbVptRnNiR0poWTJ0ZmRYSnNQV2gwZEhCekpUTkJKVEpHSlRKR2FYUjFibVZ6TG1Gd2NHeGxMbU52YlNVeVJtRndjQ1V5Um1sa05EYzVOVEUyTVRReg==

http://www.conceptsbinariesbundles.com/c?x=I1PU/G1zBtWGnDSIzKGrmV2Xu0t6rbbCcLSOs1WmoL4=&c=8khQPX79Pc hcU mjMbjHGfOj9uBBjQlP44/bknSzjfauzaFkhHnfUlzTqYNoGPlxBYPAJpDn irfrEq /vO lYIMkzijO0e1xe7QpqmR73UjGtLCk9EU5fTWrFzyjIAlC5tUNs/VNt0bJdX83AYgjTiaG2Df3/F91jEyr F4k5jugy0J6o WmZfjR82gLJT&e=0&downloadAs=minecraft---pocket-edition-0.14.0.exe&fallback_url=https://itunes.apple.com/.../id479516143

http://www.hostingtagbody.com/c?x=Qdyki9NNEGoya8lbPEd3YucZj4mdUYzwb0jWdLw v84=&c=pvsZsE6wm9rxbFHhYQhQKY4u yPkWx3PLK1r1jCXnlDEx0oWL20EvSciylwJkoQmr4aKzdi2a mDHf rVvzUXaNuMKhdLcQSZ pWHxxzZhgEOUb7jbb6Z/nUarJ74wcvKnuKU HLezogh4olGZ97kw3ZA5AHpHYPmicifQs4Ffl9DwYX0zzYlYWhdPFrdsuq&e=0&downloadAs=minecraft---pocket-edition-0.14.0.exe&fallback_url=https://itunes.apple.com/.../id479516143

http://www.conceptsbinariesbundles.com/c?x=kzSfrQ4RQCFGhzeGSaL2AqYREfdJGaSl4enl5DNcDV0=&c=rf0067FZdTn71dI/8H5opgVFy8k1kMJOCUz2VvIEqAthbY2bHx5SEpt NkB2O534EidiERNIBqWg8 H5N9gv4h4P0LEwIIYVQrnnbMmCW7Q3 e6ray8TCpaRbEWriuNwGuKL 6orrR82QrnCbXbctnZysT6nfgFvxl3559PMx7tShwBt4pYAcHXmZHXisHqP&e=0&downloadAs=minecraft---pocket-edition-0.14.0.exe&fallback_url=https://itunes.apple.com/.../id479516143

http://www.conceptsbinariesbundles.com/c?x=090ksaYMNPC aYYqNVC/PW8jInjMhU5R6c QPC2504c=&c=0pqP9tNyF9OFP6ORT9JdF8A8SUJKxq9axpTd5WFiJaJ74DDaWV5LqB5X8hcTT1AMIrX8kzd2ENPz2QfG3sUNlsfJL2Jlkvyaaq34JMQhKPSEG6czajqIEHpy3AwAWbotJvIc47i0CzgWXCmknyW9j79eNdM0OPdqNyye COrXDljaRfTT1OVO0775SYB4fqD&e=0&downloadAs=minecraft---pocket-edition-0.14.0.exe&fallback_url=https://itunes.apple.com/.../id479516143

http://www.signbundlefactory.com/c?x=0J84POdZVju/jmvm46AuPGWlxZ YFja8HpOYqTgkdVM=&c=i0DbenJIwo0q1TfbI QCDJQOeSqxXMxplsC 5aHe1Bb3qtHCcSXwGCES8c YBnKqzxjej8iZuzNMsAh1tZRb0SUGYG31LmhhIwyUk2GNz8xj2qj wi41Ps6UUQeF Awn8uXx zDJ5FYJ8pTSusAqKXvAK8C/HrsoHSLxUYGQLb4=&e=0&downloadAs=minecraft---pocket-edition-0.14.0.exe&fallback_url=https://itunes.apple.com/.../id479516143

http://www.appstowncity.com/c?x=YRGCJ1Zj0R 2Vwkbkx67r7ATAgh5kEIj5a417KPEzB8=&c=1s580owbx66 fSNj9VDTIP1fet851hBrw/wvGFGpRLtuCqYNlGqquh7rsST TX7j7GWynBga6qMS/iA996T 3BXvO8vVDbDMgAF4vtp TwHF4k77fbQ5n2ILZ3/RkxpwiSfn4cMF Do8WQ2Wvww/tpws83rCp8dN5CbDjMTwytouSp VEuQ8srOt7uI7p55t&e=0&downloadAs=minecraft---pocket-edition-0.14.0.exe&fallback_url=https://itunes.apple.com/.../id479516143

http://www.conceptsbinariesbundles.com/c?x=VazpeGJkByuEczmWApioHjy/oVT/On7fMaF7VFW2JAo=&c=vgNVqKN2oQIEwNRWn BksdSrmc448x0Fsc0Rg1UWszibM0DHYi0RLw/eJHb8dzpBDhuLhrmgkPZUNe3vBSnQzbAfoWF327zB9byiJLujSfw32ch39gNfJnTrMtJAYCWQXjYQGlxJRp1EeZy2tOTE3RHgQH05kzJpVVaCnSnrKwQ=&e=0&downloadAs=minecraft---pocket-edition-0.14.0.exe&fallback_url=https://itunes.apple.com/.../id479516143

http://www.cleandeliverytour.com/c?x=TXFPVWHALHS22RJHw61IfPLM1McpnY5wtjpnZIML0U8=&c=J8hHkrDC6AwfvYtIoiRP7CYY0Dj3b/i2S1nxi5BmVC1G35laeKPWdXD1E1T/4Wtgxg2HAw8rdbuIDjTdGU0duH9F4Dj/RBtS8/Q8bz6zXXxMPh U4BjCMswlgo4WPN6CVanj KlgmFpaBqc1bOezUrUdiL7N6 kWDKePKyXimwxAo12OR2qwSJZ/wfqxAj4E&e=0&downloadAs=minecraft---pocket-edition-0.14.0.exe&fallback_url=https://itunes.apple.com/.../id479516143

http://www.signbundlefactory.com/c?x=EUweYj48TuMpCzyGNgnGZHeqhdXqqKd8UXR41YYRJnk=&c=Xb6n5g0AtyFHDDVsAyKtk2uIqzq3I LcTgvhO29JZHAJnK/QtMK0DEuOsCPGhgJjbBy5tzFTeiYPCXrd1/07E8IS7FMfxJ42sNVeoXCCBFyqEORnfsnUdaGnD806skZgLctUhC6l3J6PWVqULNVHuQ6xmokdVe ez94uk3MIq0HZ GTASaJFKz3//5YAFcPY&e=0&downloadAs=minecraft---pocket-edition-0.14.0.exe&fallback_url=https://itunes.apple.com/.../id479516143

http://www.hostingtagbody.com/c?x=DzpqjzDIhrq6dyF3v5G82tpiqKVj89gXBsz3dRaAirk=&c=paDyY1KuSz0dZ/frwck6cSYXxtZf7eXmsr9sDRq1XvVMWC103CC2zLFuabtm/cWjjlQ9/Czzn96AShpOvfAYpz/iN8U2eSbTK9BGVF0 h4dsWtl8VXLx5eR5UEY753PrZu /dDN0f7XDZCLWZEnaLQ==&e=0&downloadAs=minecraft---pocket-edition-0.14.0.exe&fallback_url=https://itunes.apple.com/.../id479516143

http://www.conceptsbinariesbundles.com/c?x=MKNorLdrTNRTKZzAJuHIf2yp7ImgTl0l6wGnzOnAmts=&c=G0LQhqKHMfsx2KZmql2yoV UUoajR3yn2couPqmiJxfbtxVoMw9SYKTL3SOJYDP3wB5Eoq9uneS6zLLP51zkwca8oULJFPEexHwIAHWewu7Ib/CU9A2 0Lq mIMn6yPT5UHI3QLqB6ecM32dFbpCuGss/LET5ImV541vVedm Bk=&e=0&downloadAs=minecraft---pocket-edition-0.14.0.exe&fallback_url=https://itunes.apple.com/.../id479516143

http://www.signbundlefactory.com/c?x=yHS9U4J955FDwavoIuinxdC1PwHdQ1yBxITaJ slh7M=&c=FEk9AZxy/Boo44OD/VhVsT6mO4eatEh h76y4pQ9HLbIVFnLM0VvX9vJrrG/fB8cFvNDdisy4aS4qrqdT43/qHCv2A 7f56bFRR47BDelfIkDSUC 5YV2BYIk YgkUqVVUdqfA4hHF0mCS2saKUnTwtm5B5kORB39MtpTvpmqONvM ggLtIOxHfxeoy0cElV&e=0&downloadAs=minecraft---pocket-edition-0.14.0.exe&fallback_url=https://itunes.apple.com/.../id479516143

http://www.signbundlefactory.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

http://www.bulkapplicationsign.com/c?x=G91j9DpXrk0pkQQR3ohpNFiGBcqZcr4JyBfYuG/s4o4=&c=2KP/BjJQIZwSQSQj624yxPw5K12o GdIr/uh0MEEQ3WmsdVVOMC/uZTxQe/1CiZNa4Wku1S43A81s7HnqXQj9Dqt04apJJUkLU/4vdkGXli VnnJb2OVQv2wOu3qfgtZrCGRkqNd07tSHYlhEZIDCd17Mp3yKHr57dhq ElY158=&e=0&downloadAs=minecraft---pocket-edition-0.14.0.exe&fallback_url=https://itunes.apple.com/.../id479516143

http://www.vaultsdeliverycenter.com/c?x=br3LpUDqcsALimJBqbGH8lQVINJBKDNtDTNpEEp5GC8=&c=6Ybc4wbPbu0p5OxjZHfWs/XPtZBvYprU6ZVUGNy 10SGJzOmGoAQ4L3rjMuMUbLJCinVtTUGEYzMzdlz zii9KUyDmZuPJlF7egE d tSC7YNDsTYXot6ymIyC 2XpN8GHnN2vDYkvwQUKE3u3nPttAJAsTzsZOXBoOt7yL4rp0=&e=0&downloadAs=minecraft---pocket-edition-0.14.0.exe&fallback_url=https://itunes.apple.com/.../id479516143

http://www.hostingtagbody.com/c?x= CO97U LCVjQCYbvcdAU7Z/9Qu5s7IA5Zo94STFup20=&c=T5elbklGTkKI8M6VwuClXDBFVfVmP3qJnOrUb7ZrWvu/2bkepCsehuA2OPLIR/Ric0kUXrOuDi0/7dFLk8hDyqnN0RQMYUXrq4VkvgRa4qvPkOMLyAVPCQErijWmIxf26FV1/mfrqd1HGegbVm8TlKF2gyz3dwXB5tS5mZZiRUx4m2WhUl/4p5p8SJZ7qLCb&e=0&downloadAs=minecraft---pocket-edition-0.14.0.exe&fallback_url=https://itunes.apple.com/.../id479516143

http://www.vaultsdeliverycenter.com/c?x=y/rmmVA6xk0 hKQ M5hUAZWEFZG9nzL4ZxjkmgdxX3Y=&c=rzJ8g1kw2uuZiSYRr8keDa8eDke4VomFvDCTldG2cKbmR3unt BtSZEhzO6j/YBsB9Kde iP8mGGAyRcLGsKiCxJEV2vfzqCipRxvTUQnVMpriakImUlAontrEY0FHQvB2aeH7NP6wxZb6dyItrilZls6K4Vrk4tVrEVC5Fa uQFlzMQPY2 lwsTaH8brciP&e=0&downloadAs=minecraft---pocket-edition-0.14.0.exe&fallback_url=https://itunes.apple.com/.../id479516143

Latest 30 of 37 download URLs

The executing file has been seen to make the following network communications in live environments.

TCP (HTTP):
Connects to os.solvefile.com  (207.189.109.121:80)

TCP (HTTP):
Connects to cdnus.solvefile.com  (207.189.109.121:80)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.