home

stremio_setup.exe

Dimoruleb

Agile Delivery (Alpha Criteria Ltd.)

The application stremio_setup.exe, “Dimoruleb Setup ” by Agile Delivery (Alpha Criteria) has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions. The file has been seen being downloaded from www.quickbitspackage.com and multiple other hosts.
Publisher:
Kehitoheh   (signed by Agile Delivery (Alpha Criteria Ltd.))

Product:
Dimoruleb

Description:
Dimoruleb Setup

MD5:
f5b2c6d31331fd265384e3f40a3886e2

SHA-1:
0e9b32434ffeebd5a2029fa2ae42566920126d96

SHA-256:
a2b79bc426799adb160df693c55c6540e85f564d327ceed71fc7c8bda61f4bb2

Scanner detections:
1 / 68

Status:
Adware

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Description:
This 'download manager' is also considered bundleware, a utility designed to download software (possibly legitimate or opensource) and bundle it with a number of optional offers including ad-supported utilities, toolbars, shopping comparison tools and browser extensions.

Analysis date:
11/15/2024 6:34:27 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCore.AC.Installer (M)
16.5.15.17

File size:
1.1 MB (1,136,504 bytes)

Product version:
2.0

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Language:
Language Neutral

Digital Signature
Signed by:
Agile Delivery (Alpha Criteria Ltd.)

Authority:
GlobalSign nv-sa

Valid from:
12/16/2015 1:23:29 PM

Valid to:
9/2/2016 12:29:04 PM

Subject:
CN=Agile Delivery (Alpha Criteria Ltd.), O=Agile Delivery (Alpha Criteria Ltd.), L=Tel Aviv, C=IL

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
112167FD2CE27007C69C69FE47CED0A20713

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:EOi0DnlHG+QR9YPAZlbCSFcA5UeI8zuOrv+4QpnhQkQGMv:EvsndQUPslzcA5ULUuOL+4QpekQ

Entry address:
0xA5F8

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, CE, 8A, FF, FF, E8, D5, 9C, FF, FF, E8, 64, 9F, FF, FF, E8, 07, A0, FF, FF, E8, A6, BF, FF, FF, E8, 11, E9, FF, FF, E8, 78, EA, FF, FF, 33, C0, 55, 68, C9, AC, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 92, AC, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 26, F5, FF, FF, E8, 11, F1, FF, FF, 80, 3D, 34, B2, 40, 00, 00, 74, 0C, E8, 23, F6, FF, FF, 33, C0, E8, C4, 97, FF, FF, 8D, 55, F0, 33, C0, E8, B6, C5, FF, FF, 8B, 55...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
39.5 KB (40,448 bytes)

The file stremio_setup.exe has been seen being distributed by the following 50 URLs.

http://www.quickbitspackage.com/c?x=tIGl2YRliK9J VQAFY8PC9UVJ55urjTI9iGACrVR Gg=&c=0XEDG3eIv5sg6YZmYQEBQpzKC4ZqSCMfd I0tq3n6WxUv2tMV66aDjFMYZ8c4TDnK42hdlzckKsHtJxvlYLOWq1ywHC0LVHNXDiDgeCSHjyBkm4tad71Lhf1yEPoDpr9EN6WjZhFIi B pk1gM4KW5KwUG7 POiIenqoVXmHsKY=&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.5.12.exe

http://www.quickbitspackage.com/c?x=CX21rFRarNA2ouHxgl1MNnJiNY0Th4TshFqoBPbBpH4=&c=V5GkZgK0Z8Es0SdzaLdpxDFYE/Z83NDUEW1a5lsPIh3REU3HEIeqRF10TjuzTRBPXyL5sabJ1T0XYJrbJs Y3M7IOxBTvvsGtTWfH9b5Owjocn 8rviZRSoCLUvCzwci8N8qZF54 JWuC2tJ3JEw/OiO6uHhcqRImAB5j1riynI=&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.5.12.exe

http://www.quickbitspackage.com/c?x=n9h1T70IA0dD0bXV9hd yVy32Pbc7aSO7QmU0Ugpnmk=&c=wKx7d4pHrCBxQuONeUiu58FxcDnkn7c6BIpSzw 3rQvbq5AUO/7zvdj5fHuJk5ARUWzL9iCY6 mzNs8Z8zRJ9mANyTSTKLr0GRgzJJbgxS3wvJKDAF9xVeX8UU0wpE8dQv97ZTieu8kS4VE6FyCUecEun/p4wEOqFVtNozjGqu4=&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.5.12.exe

http://www.quickbitspackage.com/c?x=5LON51ppNo ABAmxF5K3StkFk4lE4sGP58eNXbQVBhM=&c=6apjxv5rmLjZQiUy7VB9M9oY2gE5OfbphbeHFpL9PEaus39o273rS89I3zTitYXMQPuuhi4d5JGvLAJnvP3vIjlSv9WoOgHmxNHHSKpoUzeSmk4Ko8UkI1BQ/bS DMHp1v8gRJ5hTykhYkbFnmly4KplLoHI4cVfFq2F9t3umRI=&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.5.12.exe

http://www.quickbitspackage.com/c?x=kKzBuQvsiFVatNsTPL3p1SqBWgkQkm KqPOosnb/Yso=&c=fbh66FBXcBa1IktSPtwEMz1k8dGs7N0t2gpixLC4WU82aRoGze3592adkDapFgHVMRbDTEqytToValiMriwUj1FZgARrFtveC1QifWlapCPEQSrN2YtjlmUNT9P9AyzSHC0bW6HgiEnT6eANETO lsCt8NGxy8rAavdr8JTl1bs=&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.5.12.exe

http://www.quickbitspackage.com/c?x=oSJ9GrMhtaQMFB0K9tErlie/tUjglQps7HA8/2Ubf0U=&c=t9 VB3zp1BAejNUG8RzXVEJB16jshLhlVCRZ0gvq4VqQwe1oqhQCVk7174REt7Q4D1PxlszNLNQnhi1Z/mJZ2TQFnrWfILNBo2m0XyWFnoE4R9o ylt8dr JIhUao/7Z3bcmt5K3iN0QeHfPDAvpVMFzRDqCtNKDjRJbRXBzQXY=&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.5.12.exe

http://www.quickbitspackage.com/c?x=V650PME/qgPHcWnvbVzsC HvDc3ys9L5SJFMF51izJ0=&c=2tlDrK9uVEO5oiFDgLDBpjwHQ3QpXZErqT0cHmxM024udcr/ursNHNrHQUvEISdktvoJsUM/6sfLnrz/spCO9OzRkoUBxzlOzo0oXILlmVaKe1kK tWpqMS7N7wtw5gZTnxESmBzzKfIUIcHxuoay0eQjRNYxWMuwN4QbKY Z/o=&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.5.12.exe

http://www.quickbitspackage.com/c?x=L8L2R6KBhIrmc2yssON 2aXOGNDgrsQZmFdJ5hCPYQI=&c= eEjkGIXFEB5eLdT8p Kl2FnMiBA79i/Rp8cuSorLOlIGjDyev433FfYPjRy2v/qiPhf72cPttHm66yw3yT7xa7GlJAQeeXFLcbCLmgJlHkSe5Q lrv/R3htvuqotrMt JKx2bDjd1rhHH9vzJwNrDj8MngHGJ1HAwOLwoMwbjI=&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.5.12.exe

http://www.quickbitspackage.com/c?x=dXQ3mBefJ9PXiYhLH6vEQErrQCAveelOsQVeQ9LvM9U=&c=Q/6KFjtL3KQ FE6O0lBB0 46sk/m/MmzU2lsb81KmmtvbEH1aE8 quIN37/zQ6shmWTO7XEZEIBECFkicx472nbe w8DKn1q/MiURiPVlcucl tnnkp1uzg1qRM2ZxV61izNiUB gvgUE/Y3bp0lpVUtGHXel3Y3niRb X6idCk=&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.5.12.exe

http://www.quickbitspackage.com/c?x=EUIDOb0zJ2ee2QgaCbPz4vn8UlbVZebrqUFKEDGLBuA=&c=ZBLPZQhKph1HCZroxGjuOUG0p2HyZD8FDklkNv8JEOG5Uh1xDcKLuT/IsiC/96bgeoUbA0aIdz9eMrfkXYEcmOidfa/ hYXnDDr5k3cj6MB6CSs2kgU0lFaflC3V/GOlukBSGXAVqOa4nPfBJq8izT38j5b1oFYM0Nmr6VgxT3A=&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.5.12.exe

http://www.quickbitspackage.com/c?x=eGZJj5HuQVb3DZcuKktPhqQspAjQyJbFfJOw681afp0=&c=NIukfWuIhggHvxp/K6e07UuCYYrgLvwZMX6t78SqGx50cr9iP i7pCJYZsJzdCYyUVhL2PZbv9P8MTY E2rADLBYZXLQDwCgNLfveAocD2Pk1CyT0OYZNGlA0mi0lFbrLL/Q6XBBTq8fKtwTSHXtdT6tIMl8aV0PIRS7QU9ANU=&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.5.12.exe

http://www.quickbitspackage.com/c?x=aBrtqHwCrlIcxdqY8YXe5hPvEQCy3NmJzsOG8FYe9UQ=&c=IxgOaX7lr86LZ3YLqL2FNQg7xsWn/cikhsjbGymRYhz3oCb68UjEdOe8CMLwH4L6Bq7gbJ6sOtE12iwGxR/FKhsDDZKIAl4FbpErtlC9fAZs796nztQ6pxytTvO5/tTdgQ4dfIN96yyKERZvgmp/4yN1ljeT8OJ0o7Dc4l5LYpo=&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.5.12.exe

http://www.quickbitspackage.com/c?x=TEhpNhD VOSlAdBQEBlppW4xSTHbyETHDU2y5yYMX9E=&c=nwVQEc0yM6jerJHJ8r8TOARuSwHob6E866vnTB0GV8Swk4hrKOaCDBvgA9zn93 QVUP0Ns8KWofzJ7k8CGPoMVd6bKmiUzYu9rsaDdiDQbCOPX9C6nd4/qjJmJd8ewPm9k4l/pSY8JUeIWpkQtAQ/ptx WpYnAlbX8VFOw5e2tE=&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.5.12.exe

http://www.quickbitspackage.com/c?x=42Ec94TH7Pcfz2Y2rE/3K6VAhVZbzMm7OyIhow//WAo=&c= mW/8FiM92esx9k2 Px5qT1iyKmLvO9gCkxCfUcBjx4G8R70GdNYLqJCFR931Emxcnr eXJsVlczE7aDVwPA7wQHnuYU8fUPhjmicAqDxD3YclbGO3nkeYaLth2WqYsjb2AtnvWPfGKqTz/oyySryr0sVojUySh/H06uGjQOuDo=&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.5.12.exe

http://www.quickbitspackage.com/c?x=Qbi13BqIOxh R8sxqxGq0R5q3PmsPHSwTTL6YXHnkjM=&c=0mG5YA3OdehWurpgH8dHefOL2Piq5bl51no2ZHAZ4OtOwhnu3eTRkRzeycr/KZy4XwW/cWSoOJEtUza5txTHhnA2ElfTeDBe1MIVn5CldHkiOY1goRXP3RhpX LGnw3SqUZ/JX13tbcEfvBekR9fQo7y/sgQkYWAeCW9ysgozks=&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.5.12.exe

http://www.quickbitspackage.com/c?x=9kJylwfKOwDZptFWzrDm7FRApSjNcMFUl0Dn12bN18I=&c=OfKJI51AgGwVCn31Uu9 sN2Gf0Y31qkJ8Lrsb2npjjQbrvZ9Q/PGnkVbndmtnmgwXzLyOyz7k xIgQSG6D3 cCpnCHOwfvUpjS6uGVN8mOIO9zp c8SA02S7 pc8cRS0DcoDpAo1ppFneOjsK nH9Qz7QzJccV7vBsxDCiyqCwE=&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.5.12.exe

http://www.quickbitspackage.com/c?x=mY3DIOfgfH/FDVGai8EbuPG9ltsjXpmGdk 2MXdBaUs=&c=2DLPr9UfwojMpwzGEPCS3KsgPNg0j7k6/INZkh87fMQXYHxjt8JS04zfTydGWBVGjyss1Bay5mrVZ2uPmyWB5YErYL uKspwTz2qMqznJvprYJKgDi1B7bSgAFRQpdMisiSTuRpZm9vKs4E6IPs5lW9clAm1/IWpjG6y EZZt7I=&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.5.12.exe

http://www.quickbitspackage.com/c?x=7v1kte2gs9GedUrN047vW00vjU39caPjAM45D mE4EA=&c=WBUxPtHGtM/5VgUB9oNVwI7eOdVHLisIONSDzfc0ypZ fpNXCeZqDPPNab5SDDjbEguq tRrsUxHuwdUFmULC33KyrY3sFJGRdm1zeVnRPeKSRMsDWjHbWUCMnC8nEyDn25klYUcdq6K3QNjxVkm7lFwEFzijbvXFYse6JzyNNA=&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.5.12.exe

http://www.quickbitspackage.com/c?x=7i1Ef6pGrBL4XQZ/YSbutawlF v9XzMWgvEpEsyCOkg=&c=BZkISFkceVK2PcFCMQIz9n/C9LViGF5ZE0RscS41kQ8DxKhC6t2sLM cRvScdk ZLjWB0SKQQNmVGa3VckwIZdRGHFy0ICwNNqeFQAjs1uCfOtvpPBY/RxmAXPO4UdyhPCCF D1V5z5 Ks7ybiDU48zDTUN1pemaHOW4cKjqj s=&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.5.12.exe

http://www.quickbitspackage.com/c?x=zeIT KE ufddT38wKybtxq5OfY/HE0SWjOZCPV/EwtE=&c=n a6HLgpYrY0DhejlUBUgY ZMGsSj5v0kqR kurKsMt/8KVu6NaH4lDMWjEo86qzDpWezuBUyHzpXpP0x/0PWp4i9n2OFyafxbzmA jSNQI=&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.5.12.exe

http://www.quickbitspackage.com/c?x=tKqdjpsAyy/3IuSAWnjpE/8fRdc5RtBPLEs dqonS8A=&c=1QNw634I5uyYAxya KRO 6w/lSC8ze0P5I9elXzkbsCEyCYSU/lu6TSbGCrVjhYQsGEm2hJymRmiOoTjW8/p7ZElvSBxpte0Z6Y4XL3ISf543D8nT70fC73VSPnWmsbVKHRNKABLErHrYeCKnPigVwPIKRzf5WXsndnq8G8f rE=&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.5.12.exe

http://www.quickbitspackage.com/c?x=hG7xp1vysGVTdMQiqYYsvSgMbMbU6A5BBHEgN2bg8QY=&c= bA0rgO5fLJxF2X4QVJS4kIYzbsmP6yVAoJ4SWUy8twq8 zTjgwRtlhGdUTvHZrz y7MvrPvlrEtBkB1Rghc0IrTWFNxWGLRQqgNw1CJg2aj4WBDAyyH pxxsT2CHQ3V/f3r/Hp2gn6zw/5QqldKj7/h2k87CjHA1QVbCHtoG/4=&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.5.12.exe

http://www.quickbitspackage.com/c?x=SqNRJaPHVaK717 o8ZfxrIgaTDN6aUYGIeeqiZPs3Tk=&c=rv1p0YO7bZNSmQDB7cGCfTRaQLZKwZqZe9McEIf1Q4AZImgoCEMBjJr2Pxscet14vPnJ1s1 b1okdJUelO2hfKD/oKLX7dDebUGUgvrNrVFCdb0A/3MfiD dbu3C9Sk0YzAW3oUgmlRh3ZbJSsaYbC6 uV7XVcpxsvS/9bbxwao=&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.5.12.exe

http://www.quickbitspackage.com/c?x=H5r4tY0KKjtDWRNPzRVfWHmMI1i Mp9VCEPpFYH8MH4=&c=XSC6lQcMZXo2ynLPg75mVqoFYC0TPMKV5FBVlOAUytFy6I8ERTkxuQYynHKp9vJFnnlQfCx2tW 1673vRm1nvpK7iafarw235MzBQ4NdRMZ5HeqGbdL1Q2h/8X6DEbRJvHQOZtiSs2P/OoEaPW6NQOLxzBmwdh3YuDdxTimUKzc=&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.5.12.exe

http://www.quickbitspackage.com/c?x=aTuv3NTOzQn42ETWqF5JZCuzo3Y7WDbIn7gUQb492kw=&c=aDUXtv0kyZR8O9G29WzQoYF/uvRSEpsYw 2f/C58W1yhhYoIZOeersK2Vx2CKwDxSq3xitNcVkuffj/VxowdZmd67cetYN0nJpYwF RYLGuUve2tI4VDUnMufOip0vIfEDM dzkh88yRu/3/9RHv8uU9evRlNzcVNEBF2gQjfMk=&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.5.12.exe

http://www.quickbitspackage.com/c?x=O/7MfMY1uLTb6JXiuAMhWKo7G8uh6TQl0k0aJ9HZTco=&c=7SDbq0NC1gO73c6OncLBHuYCP3B2mKxwu5DHEhMVdfv8omEilUfgd80aUI/AT6MRLK9J /QuThAGdd5FPTU0KZJnROSWzY8EmBUGdtcvvZOdRSQ7DtzVrRjgOqMbLEvhnE8aiuRz5BUSap5tmrmahFQ1 UB4FZZ5B6tLpVsiqk4=&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.5.12.exe

http://www.quickbitspackage.com/c?x=NyUHAyqtxgEmQeiVoCNSQDU/RvQTsfHgezXpk0EcQyQ=&c=CuqixDV5MAPrFpVDjQDLkl80dKTi 293vKeUIneolMipt8IQ8AxmiEHaiYxd1oMEeYjhF7Oe8YBISTCFjBG 0LpD4862N1qrp7ooH /vvaZRCwSi /KaVC0m1LuT2oc6lms59IU1iDG3rZy1/EeqF69QcKwHxW27AppBR1PemhE=&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.5.12.exe

http://www.quickbitspackage.com/c?x=MhFlRaVZpg2Ec3Uy1hSuGydxxnAVyas8Pt0Qx6cnnEw=&c=ANbnxSz5n2FFqmxXH /SyatfT uJV7/XmbVcaBtD60FcLuWT7dFf0G /RO32XXJFLfP08LvBAb2 H3lq4wQYo0MVcwPbwm17bnpK9GKgCDoIKCt8z1Gjp3zyJ2tYrhyBBsWqu/W6bdBmBgikrU3Ff3 2IFH1pvRPGqy0PjjV43c=&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.5.12.exe

http://www.quickbitspackage.com/c?x=Q9Mmrr2t4DmD/mbERecaloPnT97EJ69OqeYcXbQEqmc=&c=BcW55HEtV9r 93Qz6lnMPNSmeiEEp4rLEb1AcWhqSy43S15JKg0/QXpDgla6lv3RkTCa Am0krmbwwT/hU5zr90wLftCgkaXerU/xA/ohJ/gi2SGcz3jEdJv1Wrimrs7I7KYAtXPplZ3LwvQQa5cJ4ED/W6WibivVLPoxhIOeZ4=&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.5.12.exe

http://www.quickbitspackage.com/c?x=mhG9XMKTaUvSaUj4hduSLVsdguPMj19yztTgfBx23sQ=&c=Yia38zhkNHF zeqA G5zdpyekOu932B73f7NsZoXtuO8efaV MLjnGDEdgfk69yMNZ5a0PLyagVv/QQqgCMGOWqoQ15BEi6qUM1bmuzwpVg1dmuya0uDfR6KLgNZr0OzLOqgA4CiZpyEkJJOt02Tad8Oo5Oz5N4qEK8I8UjnXI=&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.5.12.exe

Latest 30 of 330 download URLs

Remove stremio_setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.