home

icreinstall_setup_imgburn_2.5.8.0_dlm.exe

Haselo

Digital Digest Pty Ltd

The installer utilizes InstallCore which may bundle about 3-4 offers for various ad-supported toolbars, extensions and utilities. The application icreinstall_setup_imgburn_2.5.8.0_dlm.exe, “Haselo Setup ” by Digital Digest Pty has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The file has been seen being downloaded from www.sharemegatowers.com and multiple other hosts. While running, it connects to the Internet address os.solvefile.com on port 80 using the HTTP protocol.
Publisher:
Celodoh   (signed by Digital Digest Pty Ltd)

Product:
Haselo

Description:
Haselo Setup

Version:
1.0.3.1

MD5:
e255434ccfcf1282222c69b6b32298e0

SHA-1:
fcbc7fea6f36cd2203ca376264a3f0c49ef682ff

SHA-256:
37d14c4375ac9ad41662b8a61324f5fd63f7734c5c284d76d19448aac7fdfad3

Scanner detections:
1 / 68

Status:
Potentially unwanted

Explanation:
Utilizes the InstallCore download manager that may bundle various adware-type offers.

Description:
This is also known as bundleware, or downloadware, which is an downloader designed to simply deliver ad-supported offers in the setup routine of an otherwise legitimate software.

Analysis date:
11/30/2024 10:04:17 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.installCore (M)
16.12.20.23

File size:
1.2 MB (1,206,176 bytes)

Product version:
5.3

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Common path:
C:\users\{user}\appdata\local\temp\icreinstall_setup_imgburn_2.5.8.0_dlm.exe

Digital Signature
Signed by:
Digital Digest Pty Ltd

Authority:
GlobalSign nv-sa

Valid from:
1/11/2016 5:08:02 PM

Valid to:
1/11/2017 5:08:02 PM

Subject:
CN=Digital Digest Pty Ltd, O=Digital Digest Pty Ltd, L=Templestowe, C=AU

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
11210941E2039A7981182E840CFA2EFD84D6

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

Entry address:
0xAA98

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 2E, 86, FF, FF, E8, 35, 98, FF, FF, E8, 9C, 9B, FF, FF, E8, B7, 9F, FF, FF, E8, 56, BF, FF, FF, E8, ED, E8, FF, FF, E8, 54, EA, FF, FF, 33, C0, 55, 68, 69, B1, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 32, B1, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, D0, 40, 00, E8, 26, F5, FF, FF, E8, 11, F1, FF, FF, 80, 3D, 34, C2, 40, 00, 00, 74, 0C, E8, 23, F6, FF, FF, 33, C0, E8, 24, 93, FF, FF, 8D, 55, F0, 33, C0, E8, 66, C5, FF, FF, 8B, 55...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
40.5 KB (41,472 bytes)

The file icreinstall_setup_imgburn_2.5.8.0_dlm.exe has been seen being distributed by the following 33 URLs.

http://www.sharemegatowers.com/CzZaL43 s7ZWRRAtLKskDiDegsJhcbPBwR7Q_CPgG aPKlTjyld3rsL2zIQMTCy8FGhyojLuzfd3l8WrewErzK8 Ev9waTdh8H5UPFvG X39EQzWikRc9wTRgf5q6cg0ieFm7t5mtVCWr_uOQcPd76R n8JI5QxgBm 7zhIlnz FNE27JFjETeVgozCKOaJAFGaToHSdTuGTG9o1d1bPQszzHbcB98sRl7I_Sw6NPtNjju33oOUxRSyhmeNzHskFQlfccpGKjO9r4kuBgx5ZDeyLHPBM A4sGsEq 0NuVrpiQG UQT if_vyvzrH0sA9XOEefSOronLL95EVMbtKzLX9Y 15VSfb0rl3L7DN4Zzo02CzxOMcbnTUdqne PZmOhVH96b Q 9S DzGdYFH6DEGHoiyYQFnTfTkgeJ_Uzr_Vghx8sAr35dyJSo9hKNMq4eWLJU2FgH2 GDQTirAM0B892DVcg==-G3cAAMSWW2vEiQBi2fU1Q9U9etM4dXLg8P3wi7cF1pZbQLmN6fiiQgS9eI1V1LMAYDCUgrU8 buwyj0HqgUTnltMbbN 7ZC3DSKkV1 7RyrbfeUuceqWicMdasIwBw==

http://www.sharemegatowers.com/G2Go_OtTBIeNqMr0O2OV _5A4L6ETD_kmuaVUIafXIM8Ot1P4YPALzmQJW2GS9OxqiMSi0zU8aEpeUE f74EZ_usnSFrvwIwFi_QsjlibM7gbdAi2KZ6UhfveRmVgAAHudohH7JltYoZr_Fzp3XqWS5lW_B32IBYnGVpGR6qrgPt1msYAUNhN42TR9_SrWhJPTcNVLokHnW0zzMErjiHePH_AYjK5jsJrWFX4hgN6LKPbFeNGrlbSHdQbaozGSd3ra3KDzCDEoKXnU8oCDGBSifXwQSrqbxXP8IB_gkKW3e9NV5f5MFeJyUN3k6AWmxcNFzVmg6VBNU2oZdsGricv5F7BaozzBkYRf_5m1eczUjkuPv_gEN_gN_gx34lEuCEOR5hvHKpJ4Bq7vDatpgy8aDF8NYAsbOSPMap9bGyxElegcT80QDSRP4M0XG58cATnvZz_8d2cuNv5cDcDyyBU0owaRfD7A==-G3gAAGRwXmuL8NmV3QbF3045cGgFJd524Dte7M5DHX8qEvvGa6yguaBzDnGlZCyK_lZhyn1l13KFgXtuMUg72ymOf7fzAzjPvUsqdDCKU M1DbakVklflsqEYKkiFA==

http://www.sharemegatowers.com/189aWv7cpn529qBftGWv VShNQ9DJ0kEtvc3oaJq55f1vfZjWj3r eaYdVqf5ZF4HNpBMKqfmdx6z6z8FhWbxil ZlSgFvHmMea5MM8PP5J1QW6IPv7osY4n2_0vynMNXjVaeXwcpD38lRCXVyczaxABDNt9I6QgjABWepUUXSL1g1kekjWWhk AlXYV2Gg2hL4kf09q4spWswx0fwCFTtzzyGX32YweEHwst3_UbJenG9qyauQZUTKN8ptAvZI0LmduWj 4tuw8Rbp7P5bAIBG0lB k7zmpu8jBz_f24npcwB9t49B4tQ4BPhALtzH90a51hlMhH2goSc0hVKQuTHZcHcvaide4lUceSkH69uFKF5rQb14wEyOrtlJg_8cjBrSDqc2I_THCJaFwkfN8JaHZWnv6wYn2hGcgeJDa _7EptzE6AyFU73ZYLZ X9IwY4aPk1wD_IRdJHmaaLRQX6sfEGErRA==-G3gAAORsW2sfVVgnVNrDyYhiTjlwaAUl3nbgO17szkMdfyoS 8ZrrKC5JAAgUErGKsZbhSn3tcPkkxbw3GKRdk7854VpPgQg98YR7AZUCoyIOqcS_NBkImS32hAd

http://www.sharemegatowers.com/hF uaobklUpfE29eAcMTO1_LvIE OwsroKEnD7VdXJIRJusp1lxj8iHkg2vOLbIIB4uTl43uKpAzO7357XKOVUuTXjlf2rgBnMnUEgni1EDF_OrKw4cbDfq_fZ1z9i4yphvXfj iwcXOYigLBUjCKtIA zChLUmEbzfzDyd3tl1H_VsTkF cM0naDLVLq5qw7kofdbQ ZrmXc8P_wLkIRa2n1yeLzSifFKuRWjNJP9n0FuQp2bxJM2xL5xtlNin6_Swi8V CwyYnMPDgrUrIG2tHhKeHB9gYReb_mbv2IPI9UdMqq4a8mRJ1AIx2Bb8JTJGLrBIKuJWcaKXNnWZMmSMfn1qctskIN4K7BLlfJUUVL9ms25NzQoClBgXikjzECk3gpQyIhtjeN3fYy9yQlK10u2qTRV165Lk_UaS1Rzm19kj8uDIIiCPRE3l2QgSOyJY0JDqy7LiHb Q3JAycqioVanfX9A==-G3gAAMRyW2sf4Rm_hw UYIg 9zo3G26qUw4cWkGJtx34jhe781DHn4rEvvEaK2hWAoCglIzNZzwqTLnXhSGNCc8tprRz_Pp 975NQnBvZ0NnKEdhd1Fz7WjV5hESpTo=

http://www.sharemegatowers.com/xfN7MqVPV5bbqZ8RYCV8eGH8zha9gT_UFGKz HAnHK 0kysLsWwVosbueQe8FHGp1_i4LDn5iXSPSscnIDjtkh7Sq9U_U58LsEOW8r MvZQ8awp5fRTn9hAfSysl4Xnb7k89nyN__YmLR2EDV8KJrZSLhp4DTHa5ZKI3pdNaVN8vsqiyPloJfAKJKVBxpioI1zi1TJ2KWGKqGyhKnkEs2VRK0I1E_xjmx9aTIfCL8Z7VKPtWehMZcywnyXdkAPROCZI6wxyfrWzUq1 8FUbD2 AZk3RhMnFEHufhAp3k6uqHYGXM8aMX5UoZbQ243WAlo29MIBR4_1qcOIymH6TiGR9H9y1KwbYt1x8kTPv5vxEDLD9K4zqauryo9QJbpvyoh52N4m4sEeGWoiuyR2mxCBBdjnwEHeEWB9ZAGgysW kfCHAO53ZYZWZ217wEQSbAAHE9iALGRZwIAZqatHpCD123fkJxTQ==-G3gAAGRpXWuLB78YqpqlkwOH74dfvC3g3MpyG8PxRQWJevEaK6g_1Pc90peSsfA0_CqMcn5L7wlNoH9uMaSd3na2RT7ENfQD9w5soIoYizdGaKq71V4HIuU48K7rFAE=

http://www.sharemegatowers.com/hUqKuSdpny77aF0kb4cenfEm4Ul3EVs__JOM6pVmSxMDmRL6opHyYjhHajeAXnEIEhLYi5AX rU6J2GI33rHByJgNqwbhGoS6gEvrAlXXpxWYUiYVYaLP6o0H8sL17GqOr4LZSyWnAW3V umDSEezdkbdULMlsst0_cqzFMTKJnGKGC4Pju6eDKCo8Icfu_WXNUA1oiGMZ98jP6OpUlcsfkuIzvI0LQQHFpAydBOC37_9A55GPJRTlDeWD5GAmdOKySJNm_MDMxBbh4nf3yytJMPhM5sIIr9Noy5AfixQ9_Oklr9SAxTkSyivfcmo6EjeaUt6u7BHc9Rsv62C503anwvmVFMTEOvskeX66EzF BIeXRGzz_ YZVzIq0MBQUVwQ211oW3s560p60kkK8Eufg10oyAqkwHNdD fgE6C9UpI18TQpQcJMOolQukBQBOT8JV5vvEP9j92eWsOECxbGcUaPQETw==-G3cAAMRsW2uLuB1wG4FusBTkN8 kd1h0yoFDKyjxtoN9O5DdeajjT0Vi33iNFTQrAUBQSsZul38qTHnXjV6UCc8tprTd56_vc wEUG LLO4M05AMkTKiGp81hrc2RQA=

http://www.sharemegatowers.com/wuTRfM_BwoR2Rds8hlWkX6zj8Y0PqCzDkHAB26A1XXlCaoRWBy2e fDi1QHuaRSLDEn6IiskTzLP09YJShPGIjIqZO rZaDhBxi25qXIN7 QxTJPnv oYFcKgm2JsbOvf2aaN _UyAtHmXDxeSLem5lgjOvlil4PietX873693Rz4cVkxyaBakJ5HM6zM7H4LXgFSDU2iTPaMPZLRyhw0uwVMimOwrjuP8jfMisXZZwJDk1cskTEtRU5N5UnlbBJ1dZJuFyDdgaymSzeRvpvcGFOHRTpD7Mzmnc1_PoVFyi3vD55YILzILrkmU5JhLHBYp 32hJ5Cg7Y8HowKj7iMCfeNhJ0HaDsoXTUkHT5hat0u12pcGl5AXvTbnRnvbVKlx2adSbVMJmKQZ_Gzma4W06yLP9OrTHASIDqHaI8EXFN3O5kJldTZghdnvGHpRjPbN4hTZ0mX7ZPhAKvJxR42GEe PBZ_A==-G3cAAMRsW2uLALvBzkD0LJn5j2fGok4OHL4ffvG2wNpyC3Mbw_FFBYl68RorqHcCgKCUjJUffiqMcu8Xw7wInlssaXO0wHn9EIB6KyfbQVP2Hqa2w2e4rlV9RsEN

http://www.sharemegatowers.com/xXpGvBU9R0LjhrWHtIrcljr9Sl3bcxBFUyYWirDkWI QTsf7m7qHnYjfzPY92ipYFDwEAWfgG9VATnxcVeAdoN2Jm2LRCsw6djTVGaOaspzrbDP5p7cGnLyYeFyuTmRN_pWWIvoJ3LC2twQnn5LreaR8ICOrSNdVQY5ag 020HCar4p5NKPeGSpsMeTI3NZV4igMSvFNsSgUAlMH61wQgyP5qWTxln95sAIf8nUhR7lACPdh7Am4G0IGL1hL3f60qg2Kv4MnvKLW2KK_82okE 87OMbzNCIR5IOY3aA6B2whW_f4xZgLLB1g2isyCFV9p6bWFtSjmKp_TZmRhQZw UK6w6wBD134R1FQNf0IwFiMSFJBYUio5A3f5 6gF34JZPmM8pA1_bBp86HF8 6D18SIe6S CA_NpHgkI7Pizr0fmndXCmnH26gsIh0Kh58 iXJRSMysd AcchEZh2fNSwL1_EwDA==-G3gAAMTCba0tOqKRkLzC7ocnMaccOLSCEm878B0vduehjj8ViX3jNVbQHBwAglIyVox0qjDlPmbkXigZnlvM0s78fOri7_aSgbi3cyZSQehFg7I6cDbQg4pCQyAyNuwB

http://www.sharemegatowers.com/3lIboD5F3xtXoH5E G3Chzi7euazGtiRH3xj4ABke11EDDWLTGYCGDh5OWfmUHX96GS8X9mqXiGnSAPgg4VigLlf6KrjwpbYBX4m08Y2tbtk6cwhFiW3 zxOkTuIiq7j9Hqgs04R2ZdKHnfjsG_V0NnGoBlE4MmBcvNZ xq9PMGCoctUchjYTkXz_EwFQISnE3FtX M1OPEIm9fAnMHTXx3QGcozrzPoIdYZXMMjmT_xcYZqN56JCL2nHbaoyD6BwNhjLrbK6jSkzip95_h5hhZZizVd_cSeIZ3E4_EnkA4_mcT 0uEBIcEtPSLPuUmChT58zDur89TEtgQovpFaIvfXzXkWcacTYP0RjSTjv ay b7DXG0by5XGPijRt5ZJyRQAmJTQZw9_W4G0K3zqRE6vpbxE7NFkbNZKDfx4TWpJQOSflT6u50ycExFxTH45S0w0EgKAzRjddgimkXQ6w9qwAj6G0w==-G3gAAMRsW2uLyAvKEbhuMhjS8DfPPHRy4PD98CyBtkDLMcptTMcXEyLqxWusoI5EksGmVFjbZ8uFUe74OWrLwucWS9o5kON6dN1C02bp01le08V85tlQuzrgMEXuBw==

http://www.sharemegatowers.com/JfG88EOaZJNid5mLksRyn_UVyEBsL0bGsO2W97FywnlWIhemC_km9D66IVo11nV6 GcIzSIuwhw2clq2m0JKVjZu XRrHAsS8xJx4yhg3dQfj0NVdwr8UDN7chpobtW28tLbMY4mTOMbGTXOE46Km3cye4vFEYhXRdiP6JZaQEHo23Zey9RZdf8j9V2Z6wdNKviO8322c7gU0MxFY9l7Io4VOj F6GAOayK2R44yEtyttbKE92PyerT9NtJigxZvkLQ0PyJCFEurp_cIr6V2 oBQAwE15QLx8lWYUJka9q7jwy8pcn7OiN 6S8s51hxTgkihMrSWrjDuc39qc1LxMgqBFFfQfU_GWALM4 yGxt8ZXn9v8qgNepaSxl8ZmXaU2zswAdn_0AnD pV09ExIO b9rx8qU0MDMQW0Plssp6M1C9TUG68_FOENPmJKlE2GmzDsUIGjABqAYAmmSRJqn_TOXG6gA==-G3gAAATCtrVGVIcwIFCkm63i7zwyOOXAoRWUeNuB73ixOw91_KlI7BuvsYJmbgBCKRm7_7ZUmHLPQQ3pcDy32KWdtd1Dr7Yeh3HvXlImmnxZiOK7SfF0fU3J4UQB

http://www.sharemegatowers.com/Wbn IZHA_A9HpHGWW woBtkEQtsfebK4RCR3ANrdBhnr5J6YdE_OnQXbmleALbpIyGX4uHmdTYXf a1sv58VRMlnPQwltrTUw4R E0NAJw2b051RelIicQlmOYJQ04FWeTXF8G1PHyrsnDB01328PKj5z_NVL8XyogR7elLLpvK1hGFYbi9zrScvo0gzH039Xc0LZnN4vOKqLwkybz9lDmkEv3LmdwkCRWw6BJHYnsvD22IpuZbKR9wl7nFH8xL2FMSCTmvy9L0P899COazbg1ppc80EsjDpNrITveUwIGxiIhpum3H36T_Tyhn5eI_XeGn 2 Zvo1SOmIbEBld6lBgr1Kp0ZeXoITlvZvMCJ9dErZFFryNcOPUUPnaXmv_V2iWMRenCJmaHgbDFv0Jd_RJsHmvZdGxqxsGYFl7Rsk3RQFpmdMS6jEBBsAANTlic17NITObRGiUBAqINi JitMUHByJlMw==-G3gAAOTwmtnhMsDm40j dMqBQyso8bYD3_Fidx7q FOR2DdeYwXNhXrvSC8lY_EatwpT7uv0KDSB_txiSDvjZ9ibMv2hD 5Nh9RFT8ELkU3bwnotRjMjmhTMVAs=

http://www.sharemegatowers.com/1nA9NhVr5x5hQvIRlVZDaaQ 8HNO3 vYfj0KhUS7W8 LOvQRX cOT04aXLWuE3qmZJDpkhSZlf1jyQSZdLTvwpVidtKwbZ59myrRGiorvAaEE CmltMyglMmNfpivtK2XdOH6GqoQoNxuI srFaVbengnV XnU5BhJyD7DbTQwv7pndHnmr3Lrym86OLvXxghJz3mv7PVz6DmEgAYG6hRRWsPtNv0IMEgmRE0liVbvZKHSy6uS7kMkuvwEFkUuNc1wJH7DXbiR1LcPmUGalXT_CeOnRtnbWdeRUrdvFkobT1pedaSBSJYc YGNZ3KaiUoDF785ErcZB9bM0xdW 7PiBoChp6as2ozPKdUIInIpna0 eX12VzN4MNa4 goRKQdXDU8UvNgEbtfaQvKgIjvNmbGIz0kyZgBMT xEHJUwPlxg7geVdcvHjkZESsljtr0Z2ZEOkC exSRO8kvh4khhIs95i4A==-G3gAAMRmW2tERcbLE75E1xn375y2d1OnHDi0ghJvO_AdL3bnoY4_FYl94zVW0MwFAIJSMnY9 6vClHteaGpMeG4xpZ3tuP HP2FC597F6iipEhFVIk19T1e3wb5ZmAA=

http://www.sharemegatowers.com/IO9_Jp6Ku3yBvc0k0nfL7fg6XkeuMCfAOJ41qV8a9ikMOCcGdlPL2En6saQJQJUogR665t LaH5xc OlXMyG4T21JymTA7g8gu_y9OeNSyqIAdcc6QxX6m_tgzi21R8lNT6rPV3 uteeaXAZWHnkdflGXQSwfVaBs_KZKEzOFy6E5L09_xViNjP4jR6Y0XHwIoUk q7XwDHh4sNjXQUahILqBcKVC36PrgCyBdbarsHrX2ggpPFTRJcN82MbW0F9CtCddDy4JMx k_ZX7bBHaYDTIWz4RxkhnrXccy8ZENNldFdUcopGoe1YFmTa6ykecFMSCT6jTfVfF8VT YxR6T2jzTnO2vBXN1OVkuuvG2fU5tUl9pGCwo7aZq1HrSmcb2CeEzPlgBJ6jwTwCzSdsIgnz5EhT_XQphjRkRaVGoEMKStH5sxEWidLJ6bMT6epfye4V6wRV 9BErXbmmmwzLGsiWHK8A==-G3gAAMRyW2sf8X_jHy_QDLpZXUcOnRmdcuDQCkq87cB3vNidhzr VCT2jddYQTMTSYSlZOzyjl FKff8WHNR4XOLJe2sx26bX 0UDu4NQMOe2_JakGHRvWtRWLSAwwE=

http://www.sharemegatowers.com/7fKhMH4JW680W8hUh3oGT1KqoRPfV9IWt9J6X80NGhbc3m_CxkfyXVs4kPAKW5KzsmLrRDoFW76bH0mikHiL0LTTmcoOJJedcBzxdnpYrmVqrozNgsnr77p7gHtoWNklj3ty8g5IPB4fQkz9i74Y4fq2IE37LAxFiUFggNnHyfYcxw6p5qocLp1zNRWa45bisbIdGYaGvo4GoUkH15wH_x6tSLhwa7vtu6BQPj4d_AK_hYpDD1BcLZSfkt0DiZCTbxo5JgJ7Y7JxC14myAipkT_iV4qoGBQ459bBmwdQLb8sgGLwnCvJDnIxwodU6HgeTjhlmtr6lRir5CHtINXnvezShur OxOpJVivfTnU9 Qij8ubCO5fD8J2ozKsbLV gDxCkEDMK F2cKTM5ps4bDuLZ9CgquDE_7aXhaxOg3qWG_zEI7ktRZLO9M83q8XegoSAm3jq5tjFVsDaWtJdnHUlY7vKuw==-G3gAAGTwnNkwS Sty6elUw4cWkGJtx34jhe781DHn4rEvvEaK2huWEpBSikZi9b6qDDlvvcSuMKgPLcYpJ1hmfEfuwuDUrm3NEZnmQiJylShsqAJM8pyM7mxTDE=

http://www.sharemegatowers.com/lUuvtBGkPvYUM95NCEACPd DZYKfiYIn_gXaS2V4F9kSZQk90sUjia8BvzoXBSTJLPKohchmzyXxFDipOqhZT6qfPoQjSdv5O7JteCVn1ou3YUz4Gv6Jb0WdSNRIB8ptb5SUax2D1pDFVseH5IJe0ElD6l5vs1PMgnm1EYmIkYZ4_O5YCrm3yxShhxOgx0KNp7ClxVnVH nmyzPSiwnx S2uJkmNjc6uSMkVm9bIKEDozFyLa4uv5PKAHodg4tyfWu7hTSpg5mxb3T8zmMMb6OGK_cPsJYhmPw4h3Uy7P3emwLSV7v9H1UqautY58YJ RfhBdCFa2DydyemqHw1DcnO4_cTNzW1SkdwlDWiDNOxpZpocQzUSv8knUItqZSifmbfh4ti8IZA PnnPUxMGSqj6GE60Ggt4Y9uyBnzyOQlii79T0xidCaTWu3QhMoqjlo0O0l92vXPoV_Vlp9_t6FK9ROgjEQ==-G3gAAMRsW2uLuNsYg0DIJq8LPz2TAU nHDi0ghJvO_AdL3bnoY4_FYl94zVW0KwEAEEpGbvd8akw5V4PenYmPLeY0s6ufxn7PF5CcG9vKCxVZ5YaHhaVR5Or6QkTmQY=

http://www.sharemegatowers.com/ _i4 Vt7E91Lj_cND7lGkkq10wL5d4AxLcokJ9BkAUxKXxpeAFAVZfH2YKsrWBTEB2QJ ApttutJcfp8e A6MQRke9qg6D1yYomMAmGztEf0fhrOtZKEFOFqKqatmuOXbffujOwK my0yhcwJhD91EDYDE2gGUSOIFV5_ne6xoPrL S3ZrAQVtezKywd7KWhhOS5PORlfj0QtBZrxEsf7il COF7Y YJKwYZqCYqvVyfz57Nix8IM6tYK1NjipB02Xk7MRvIOVteFtK b6yoquXW2nD mpVU9tCVdqch33aZC4O50mr 5nax_82TohEB5Wo16zlCywLGq31xnUax4b925D85MBCIAPmXDZJdEGE1juprRIqLpyR0mUXfbfsGdVqIuINLR_3PiZ71p4BaO92rFE6QwxXkxMUtsEd3uonCP93j EzOGTEMYAYLC9OmrDflX45npjWY8H8 tCxlQ19hYbaw7Q==-G3gAAMRsW2uL6MZ2QCCZLHHcD8_knZh0yoFDKyjxtgPf8WJ3Hur4U5HYN15jBc1KABCUkrHbFZ8KU 51o2vZCc8tprSzv3XG_xwnIbh3VGFpyAMWlo21qrP4VGmjuAM=

http://www.sharemegatowers.com/AMOFlI_iINf0TQjcvaV6oFQCKgtZRFA2QZm9BQC_VQc8V7x1IpflciE8vYuKkFORKd0wRLia0PluEe9DI4NltYZEGDvoM6MTO2FQxkwnuPZrVTZg_SpUk2QwMsklfw52URAWa67DxmyF1WcerzVXLmj07rS6Dxui0rgprzrZrNjyZ2sSbMRMPPIVqnCbMLoL5tA6jOyuLZIyXYIkAeiJdDxG_VkTtOLn0491qMHKXZXEKNO1jDgYhxxtORx3cFmn2eDlxRtI1B8pK4PD6_VJ4aN15yF04X9FQasLcCphw0LxyIgVBYPk2vL7xMpX8NSP71QMlyV518fHmly5Nq_8AZsCBhGpM1ztBuouImZQMhIb_LRzceR17F_Ylb5rhd0FDtqfVF4RO14dNBG3Ej0H_2ntqSMRwm0Ufkcq8669Wtm CeAe4WNHCICith_zlaihTkZ3udD5chDQF2Dp3TAAxwLASd5Oig==-G3gAAMSWW2tEhQPBspIW0rYfqnUmnXLg0ApKvO3Ad7zYnYc6_lQk9o3XWEGzNgAISsnY_ZqfClPu9aBYMOG5xZR2lttqxlt_wuTemYHB52TjwaK9R3PXNPHuejQB

http://www.sharemegatowers.com/kUDbcs24ztgs2oDTTceSPXQBLNyBQWsEr52S0_ZYv1UPKAH92cE1UbBU_2nBelef8aQXilLNwELHoQHwxQ9SGwZYCpyOwVVvuQ1drT_MHacdtFqa1VJYcbFBXSlXbJeIsihFpLF8_Lj3LD5y1xeER0N2Nj6C3I9iWWORE8dgzeEnlydlJiizmlkXTP0gc2GuJcdkXaJXkLiVWFR9JcJpmvfJNG90d6cbYH4oldv65IdB80vQOvl5Lb3EwHP_YA5zGmweR2Bp93HTMjuOMQ2iedBFc_UiW0qInOmEPOHgSiBrnCF1K97cXKAlP7y9xlLgHTlgViRp1rlmxUyNUPUcJaIGJ2zFFys_F0_LfEnBmkXNn0fRFNaNUm5xapRFGWVMWZ3j87Fe7x9juhikdVso26AN91 8xfPWATN7XY7jowO6YgHCvcgYEA 7GxxBlWm5zW Pr0VJVWUVj5k38wUJW8uw0eHlHA==-G3gAAMSWW2vEOUCGhgWTJW_34FmdTjlwaAUl3nbgO17szkMdfyoS 8ZrrKBZBQCCUjJ2e JXYcq9XvTdK G5xZR29si87vElIbg3lNOVZ5tiY6od5g0ioidX5zA=

http://www.sharemegatowers.com/GLji6VXeugcb_BpxTgQWr2n3wcVbZaiT4sgWPYyuvdMPqMJ uVkx8x0YE32DGC9Efv3vTmRWdzFXr3x0SMbgb1vcCsMjxA0tdTWtjaQEyXcjRpp0LaW_DfctplPxbRdNJ9K4TLel2FLZmenoKNlFik0aVFRVDzW2s_s8PulUmnFSIeozD1zhNVXFxYOY2i3VhUx04jedJRLAd8hZvJbdZiL89sBM5Gbs5xSiPhLCrWhJ1 zxtrCGy16TzXh_4VP4uXjsghra8j520Fjk3iHwNyErfwObZjBnGMQbhzN7LgxUkSsJYS1fI85op92rbSJdPZpIbfy 2wiCs03h4Z7fmGYKMHBLHKVEAHpsllFWZhUR7 bz2D47tLyJfVmsS7U9KT1 L8laX _XDy LfwE1BgSqhjAgvlq6JPh2dLHecFTSI6_YpJhgrCboX2yVuLg4tp_PfbikNOJDDHbfVZD_0XTOrmV3pA==-G3gAAGTcXGtEtfX3hwJ E6ccOLSCEm878B0vduehjj8ViX3jNVbQfLCUgpRSMhb1 qsw5f6WErjCoDy3GKSdYTqX9s4bBqVyb8UTZsLEFA0rXOacKTatcawxNVFg

http://www.sharemegatowers.com/sca6lCqdWfgpdgYk5wO_z5TxsruvhzcTwSqVhPOjfmMPL 32jQ IBqUypbshYdodp Cw5Be6SyIsQsme7qkv0ReKUluy2Xp42SIyObapizp7wX1_7JQMGilmI31UaZJGpC_cVbkd8cGE8xb oJOiczeHJPHUy19VCMaApe3 aVDPksQo8jH3DI9nfW0k6x6P3fgRZq_OhsHmjqKDbeba4o8bKwqfa 9a5x00xDR7TyfVrad1uPKyQL0BcoyEN 3H6TPTn4QrioZPgrLTE40ygdWrP_V8Elk9jBGqD4t1f8x0yARc6t8MxnawHptb036hyo8jA2FxNXSA8tMopXk4JDKUd5R8BnQMiqFKI DwY xgeMO7FiFa2N0xAn8v9JBhVD2A3ixoxbmr_YLe LLisJFEqQlW38TfKipL4Ro5E2W5_TNq5j124 lm5eSoj Wk6YhT_GuGScfgfjHs6AOKBLpxK0I8Yg==-G3gAAMRoc60R8Zldn4ckz6SZOOXAoRWUeNuB73ixOw91_KlI7BuvsYLmoAAQlJKxbDKnClPuY0GkHU7w3GKSdkb52v5XYWcEhnt3lpTcNraxJXehe6mFtkaBwROQnecA

http://www.sharemegatowers.com/tmDViYX x4FN Ic6p2aef__ fZLB4zJJSylugSxZvntICTVQmeTgejCDaXJgLuLr_4BgYZT9k2pazXwS1XT7ihwSc5lib9K7ZhwdvkV8ywXoQ5nop9C_9svZbG 2hhKDl E4zHcX0E yrUPmcYUWRq38dyWOSCq92elVOlnZoAbDXU CP7YMa5vp4T0Lr_fN8t7mXO Tc9rovRh5GOaNf wGIFmN 4 VOQ0zDkzcIRaAyPnXO7tjvB0_L1_mj7TJTWwR0bt7xy_mO0BoYqOIMAcdUC6JnLO8WgxyRWYYwlYqaOm7cLYoQqB 6qR4sxy3olOGPOcDUkbG5t5QHn00pAAq4bN_ABZaFpuRm6ohHrHm4Y1pt8s1pEI8NyBRr2IVeT9L7aa 8IeRCNIOA18jx8L2hjre4qNmItPV2_Q4HuTZr5QbgxF3ySKoz5cEv7NGAoxRdRPeSgrZuoMQxOBVyU6Unrhz4g==-G3gAAMS0OecqB0DxE 6X6w_JKQcOraDE2w58x4vdeajjT0Vi33iNFTS3AgBBKRmr9vyoMOW R8SWqxGeW0xpZ9zuOaa_yQnMvS0pDI890zE8yZCdK0xLg6lbtqEJywc=

http://www.sharemegatowers.com/4QdFSfRap7NIVizqSScmNQvoz0R61AA ERzExtxXO2jm6qM4sJdpsEoeu0MRKFXLXgNJFVEokNV8epO4oa5O1oJ65utOdTMee9bwDtUy TXqTqZAJf7dV4EL6kYFr0jfzcSocaeeph2l36Kobl zbrP7QKJfGaM4uZlGuACGtpYBr8hqYgPQFu IMyrAKgw_9mQueaKHoVv2tu8YF6Vh19U5tNuxipU0SSFG6tO63dbWtWVsmuot3DhrZW2aWaeobJm7khU_sjZSLwFDts8UgLNKnLaWEMAh5vcnSfwV_nhfhq7xJ0TWBBd6Bov0hbUdUF67vXveqnUfl7UnxHnlHjgfBxGYc8oA5M1_eKwqQRGl3fJCA79QKTstNi6UzHuX7zQN0tEReZ5NxWzticjPr tvNiG0k eOEYnqBw8n2mOXNM3nszltoVwbH8bWy89qtjphsoGVn_FAt3XysnoVc_mmw JQgA==-G3gAAGRqZ2sf50baJTg_M4lTDhxaQYm3HfiOF7vzUMefisS 8RoraF6Yc0ZyKRmLWvlUmHK_IweuMMjPLQZpZ_h72 dlvUAu3FsRSjUzhJqMDeYPLVWp ohKxa2FUA==

http://www.sharemegatowers.com/YNYO6K6dpY2v20AIi_fCEViZg_t_w3Oy5rvDw11sLuUd7kcA4d8VmXucX1kDfwe1Kqp9lDfFu hoGGDsjfE96qndSGCXZue1BKjRLAXHl9 Ov5ip969RKdWeMTBGlvdiIOOt0OJ5EwoiFJn3uQBFnPI5MUd9DBas7NgSuicOpdmXvsL9zKw1d2v2EA4JRmye2Zvf49ipqkeHEOL8e4pKO cKt79dUfh0WDwmi1mdlMnepHkWJ5 GHlzwjgHjcDfVcKYDyZepx1YYbmeyb06HVIYoyDDFjAmOgn1Drvall2_Od41pqdc8862ZJw5rQBql2ihSiaWcjFD 66w5wq64hmMHqCvqDAXvb4p9acN5ADvKtt0vdaFhzrGJQE1ZR6roucN itodgWYZDRqOrkt6DLau0OZHh77OioRoCyaT 7LQPAvQj8ZV9AGIepzYqOTCEVRzuilKvYDdMmeD6FCv2Y25JGNyVg==-G3gAAMRsW2uLOHQHfOC6Rk1W c0zo1MOHFpBibcd I4Xu_NQx5 KxL7xGitoZiKJsJSMXV7_VZhyz4_dqgqfWyxpZz_0nmfsl9C5N0pVoAKRSx7QprE 3pwW2IYZ

http://www.sharemegatowers.com/DZxxfBS3_PIun 4e9_lZu8wMp2vR1XJUsEMBj9Qrf7ATTDjuHxiYKcDc_O0cnqR_SLwAf0ONoBm7Y4 4_tP53gB3BD0 6A4wOSzV0Syw57pKRiuGaViZd_37XxZUsleCCZ1XBGi47Q9klnbCajH amLDC35pRGzsqBcPhxRTuCh4WWcghSbrw7oBRQ39yph57GrZijEfKPXEgD_DkfMOUd6W9U964FFSGxVPThmqJFgqPJAdQJthz77ayHUHn3gzWsrkES1_I2tO4mTeTj77t_04ZACdfBHtCuHVQmB1sFgrwGl4mgEEr4lHR_e_pyoZvdKupEBxCXjX8Nz JBUK1wI_mao5PkEOzEB7z KJjpjEdbROpVE8uesfXN5Pu9cCOtNyFL_pS _sbCmvF8tXJpymZp0fvh1xl4HDuAZ13BzoVmgU2sUT__TLlhcD7f7h__sCuiAb77n326X8EhBX1XacOu4ntA==-G3gAAGTwnNkwC_D01u2ZTjlwaAUl3nbgO17szkMdfyoS 8ZrrKB5Ydd1SFdKxqKx_1SYcr9zF7jCoHtuMUg7Q3H8X9a1Oeh67o37QWCMWYzUSJYY7lKnBUuRd4wrEgE=

http://www.sharemegatowers.com/cx7WamS1w4tnBKOfVX0 CN9IwBJWg08fomaTC_NX0RNJVPhm8Jf3e3_XnY9G4Klf_ma96Yktal5PoAbxczW7e_P4TAPsj6N3JvFXABQIcz8rFGzz3AAxpuuHxb3LLudi6hudIpggMX7IaMKu7EkscX0B9DuA1Sk3BzUxz1FlM0orwgoBTIUopLL3rxbQ5LpXIPFB7AfQU4oxavLBMmyqPjFSro7CZrraPfDydy521ZqqNVOQq96RikvALOfMhAI7LvPSCeqO ugLg6ivpIqi5 SzUchDs2rYQjzqdR5axKTg2b3PCzDFFFtEkS8jKbWcPXnwz U4MRyf 15y4DMG7BY7tFuLFqi9JhS8ndvJU9Me9m1wgc9Lg6xHb75phWPumZVDskVhKycBGVvO rkVbei8t0gyzxLZpssO5cPq iW6_2URGiuWanA AXsBhAKJ6E9OPkr22D1YdnM0TtqdeC6mxefm2w==-G3gAAGTwptnwPioOi3ce951y4NAKSrztwHe82J2HOv5UJPaN11hBc8JSClJKyVjU66XClPucJXCFQXluMUg7wxr_ezm2HZTKvbNMgksuBBaJEpa0zDSzRCUTprGcAQ==

http://www.sharemegatowers.com/1eRrMXYL_BnWt16NNvqrCxoNLSZ4r9dJ_RR4hEaqeccYoJuvs6ZR4wAiRKLBABsph2MRFezlxR s7PRhLm tNDuHOnSATlbH0dHB7YqVhK1bw6635Pn Ov0n6tfy_9gYEYJT8DWSAWgk91F61AdELNHTh_LBeqZN4UTBtHY0nr4iEUYEEfIter2ibbBWv3pVsmAIUd6rJFym_MpxjLrcRdRM2h5wLlbNaNh9in73WRCQhDqBBo2JNT3_orjKnPX0KQ8RiAYMPzHs2HUgVsokbcPjH LyN9zinEWmkb7 Cc_AiukrvrIrMy6ULWcehmE_5oZpY4iGdqzSQw8gjZOcSLMNh48cd3umbK5APyeckJfJ87qBeyg3eoMbjREtXuxWPEJmcVNtktwsa9_GMsDIqABUOipvdJHtxU8yUjcNGC3hFy1o6PHn_X3h4DRKYdH87cPAuJzOO7 mRmuqW4L1lB7xKYwSlw==-G3gAAGTwnNkwC_h4XtSD2ikHDq2gxNsOfMeL3Xmo409FYt94jRU0FyylIKWUjEW93ipMua9ZAlcYlOcWg7QzKLKK5Y8nKJV7E0YZy40aaliLQhmscCMZS1VT05kD

http://www.sharemegatowers.com/cU4I5xMk31C8aMnb7W30YtlTAWsktcP0vI6jkaxpFGyAPHx0QpezE4FMMGNwWE2ZpdXlRDcvn8cT6clj8ewZPCicCz7Yr1rJQ4mxxWpC3mToU_8Q1qeCc7uRgVEkM2J96DWWWD58_lfp5KgIjMr9lXiArqjY716H8mPcH_DnzVG8vQsOn4V2xJx7D8_DUlqfU6IGHnKxsZCxYauTOstVpy2vTMD8akbJyu76KP1ZhfPBWsTvx ZSjo8LCSo_MvD7lrdn9YiaWzmsrRNKLx6NpC9Gg75Q_BvLeLsN6KmB0s H6RO0OQ0NhKolNAoHGEzN6 cCnGXEbjVBxkwYVwem87w09p4yIBohMfHh1 0ZogkT0a2QcevGmChCBihEwsYB9GjP5aUk0vN J9K9m HyujyBaxrvZ s5VMFjaLkSe0z6BTKlSD4EnsByWvvgLt47Yu1E8hKstvqlZSV2pxjQP669Zd6mUw==-G3gAAGR1zrlJgpOwgB7aPVcETjlwaAUl3nbgO17szkMdfyoS 8ZrrKA5KQAgUErGshkvFabc5wKZdpzAc4tJ2pn1v12vJo8IIPe2Xo4IiGEUkdAcFQ8hiobJeeEwch4=

http://www.sharemegatowers.com/AkdwMs6FpNgfJRoOJ0 3HUAqRZfnigLQ GUvicG63 z05_aZV9l2F5vyvTAmFlQZT8RSl6p km3J1Ky1j4S_ mIjSpjPOWZuBoYMrvxnwvgP4qG3AjgWgD50tG6C_ntuhmAx3uKFyFontwI4f3S saqw0rXcaKZk7MWSAqbzHRAViXqFj7 F4yzAl1i5i9tcVM94s3j4zXEPO4APVx51XbUksRJ760MPlDbRToGcURP0dnGqzwfKKrEvbY4uVqUVGyYtQ2GjdDjz T7xY2zCUnkhvyceYaezm9E_hyUcQYZGFQsG2op1H3g8tMy8ioMUP8e4wx7SYYQmeOVboMEzW4pd3O_ccZr6jgBBn5ZMGbxhh7955BHTCfOW1TcM w0KuhHwDl6qxunBduT1NPNU7QWKCYOaHmXAJP1D2dBCl4XbLLCy3ukR2AFecesuCGm940b55lu3 F94P8z9D1poWE2a_gd_Q==-G3gAAMSqba19VKFZI3TZO4amTjlwaAUl3nbgO17szkMdfyoS 8ZrrKD5JAAEpWSsOulXYcr9XRh80gLPLRZp5zCmZc283ALEvV1OtkRKxFzKHiwFYxnFmBhy2ugA

http://www.sharemegatowers.com/G_qGs73TwLGnVsCouVxoZ_X0MxUJSb1zvhEr_rob0qvxvDdYJfzmbD9JWyUNpZRv_vj5 EYaT24fuKcwGyOQoDkihQb201JSu1NVQcngp_k_owa4ro2N4VlH bg3pMBhtNdebmHD5ovhTvGRcedmvv0ZTBYXt3TfwEPAcNt eAyIt4iWiJk4PbY9BFqZkeeu6LJl22QWoGpq04CMHA6KMuhr6hw2hprzc7d8JMvm6guyLPkxwfutZsHC7D7ceR71WfgQUSxxzcG9r2YzqKHDtecjJOD_WhWo8Tlv8_YzeQXFFwDNUvvIvshfDpB_c8aL dY_4Lna oYut0RI212z KB0Ep2aOsGnVXwm59od1QHOp4Lkp3qlqoJ4fiCvnGOBOaX43Tqq4eFfKFISG1Or2JbrDqD90wpKzjSGrWvTYIAXJUsWmqu_4R2YhkFb1LKYkiZCFVJ7w2QD4rI HQtkkr38doyIVw==-G3gAAMSqba19VCF5KEx_2EOyOeXAoRWUeNuB73ixOw91_KlI7BuvsYLm4QAQlJKx4qRXhSn3c6OzQTI8t5ilnd33_f25LoGBuDeFRr7BhuiSsUYrYNsp s0l15x1

http://www.sharemegatowers.com/iURlfaTdq1QmGrD2NBjXN7RQDHmwteOAXv51wF85hvclr9Q75zOD6J 3Sb5QujsDGEK slPz7Q1o0YkiXD3aDMj_qoCEtqT1znj vl5lCGHCV o0wpeIxjERvBOi5rno2P9yPbkPFsQgOOOy4HfnWfHev5cz6sdGZxTN2H1AbkZuGVauG46uOhJiitDTz1Jjt4tP5uKk1OK cnaTgQMpLnZaYEMkegRhdA0bYIJ4sy8VNjBiu5I0wJ8 RZ_poK2eYn57jlEQnuQWW7_hfTawbx3rtJ2sfVedBR53MtD6 PoT31wycVu8jI1ALqW7hKUO2gn4szeI_zcm_I C4m0WKwV_TqYDeF1BU4JbL0Sh UuKmhQtJaLEzCEE7csNANPZq17 Nio8PSXlMvCfdcgkrx8khHJtI1ADVMkvSl2_8le2_VS04Fd5JGWSpnRjxTW0RxlZmANdzeiVRjUFJCtSSw3dVC59w==-G3gAAGTwnNkwyx5FB1v_WE45cGgFJd524Dte7M5DHX8qEvvGa6yg WApBSmlZCzq9Vdhyv3dJXCFQXluMUg7w7CQ81mOA5TKvWmuOmKMi65Em8wNxZoLnDFrSZAkAA==

Latest 30 of 33 download URLs

The executing file has been seen to make the following network communications in live environments.

TCP (HTTP):
Connects to os.solvefile.com  (207.189.109.121:80)

TCP (HTTP):
Connects to cdnus.solvefile.com  (207.189.109.121:80)

TCP (HTTP):
Connects to cdneu.webfilescdn.com  (65.254.40.36:80)

Remove icreinstall_setup_imgburn_2.5.8.0_dlm.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.