home

stremio_setup.exe

Fuhoko

Smart Code ltd

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from www.quickbitspackage.com and multiple other hosts.
Publisher:
Smart Code ltd  (signed and verified)

Product:
Fuhoko

Description:
Fuhoko Setup

Version:
2.7.2.2

MD5:
9778ece46d883121266118bc97e6b7a2

SHA-1:
4a7f131b6dac50eec08e2481672e074402536d8e

SHA-256:
abeb9516b0dcefc6ffe512dbb561d34c7edb9fba9b5cc5897842b3eeab1c4b57

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
11/15/2024 6:43:22 PM UTC  (today)

Scan engine
Detection
Engine version

Qihoo 360 Security
HEUR/QVM06.1.0000.Malware.Gen
1.0.0.1120

File size:
1.1 MB (1,138,384 bytes)

Product version:
1.6

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\stremio_setup.exe

Digital Signature
Signed by:
Smart Code ltd

Authority:
GlobalSign nv-sa

Valid from:
5/17/2016 4:35:07 PM

Valid to:
5/18/2017 4:35:07 PM

Subject:
CN=Smart Code ltd, O=Smart Code ltd, L=Plovdiv, C=BG

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121966945A9CA5F98C1EB7723E4DFD5E099

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:Ycif1Mn9/OBa73hpFmGHZAkkUDIUv+5MCAEVPwN8GevwzUa:YBty9wazhpFpAJSwAAMveg

Entry address:
0xA5F8

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, CE, 8A, FF, FF, E8, D5, 9C, FF, FF, E8, 64, 9F, FF, FF, E8, 07, A0, FF, FF, E8, A6, BF, FF, FF, E8, 11, E9, FF, FF, E8, 78, EA, FF, FF, 33, C0, 55, 68, C9, AC, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 92, AC, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 26, F5, FF, FF, E8, 11, F1, FF, FF, 80, 3D, 34, B2, 40, 00, 00, 74, 0C, E8, 23, F6, FF, FF, 33, C0, E8, C4, 97, FF, FF, 8D, 55, F0, 33, C0, E8, B6, C5, FF, FF, 8B, 55...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
39.5 KB (40,448 bytes)

The file stremio_setup.exe has been seen being distributed by the following 11 URLs.

http://www.quickbitspackage.com/c?x=ScQQr/LvpMnjtSt04vJkAXGqlnHl0 xNl3XQ8wImNXQ=&c=JaRPtadeqkznAY yBLSkh9Tpz8cHP4sVC5VxZe8Y7LOPPiH9Lou4o CI3c9N5uL7cp02ZhPyB3frw/9Cx4j6veFhrz357bTnOlW4rDloXoqw7gbP9e9e0J0MoUcYQXrj4EFuvVNHl7SPtjniQieiNIUbXzdshgn NYpzU/UwFG4=&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.5.12.exe

http://www.conceptsnewvaults.com/c?x=qBrtKnyjT3p/jpa4SUqpsWEgAGhaWKrYPqNGcDXlauA=&c=uDqamFZUNWU9jpeyswA7TGHKUPmKH8wKVUj3Z4UFK4dovLzPhYgz2pHzNp0vbLS0fm4sjPH7eLWLYOfpaPCQnKmMqWBDQJsY55NC8XoQPUFL/qQGlGDhrbVtYKabLUhKxsYyEcU51 2/Ncd3JQkzY3hfTYhpXGRrJDlnC6TuwJ4=&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.6.1.exe

http://www.conceptsnewvaults.com/c?x=1bJG20s9i OaIfCqviOLAHtUvhTFSeYPm1tboKUCsME=&c=8rEDh9ieCscHdwtWQhveubKEpz/qIvBV7V pQPhrUvoBy9Q4FnmcnCUIYrwtVKeuJ/sNV/WZnS8Mqb4FGTm27F1Z/HpZaKtG4IG97RJELyMKa 9TPpM/sahQlRZUOeR5tmsP9MsCAYxgDzERp mvW9bD5Ad2QukPs9CzAut50yU=&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.6.1.exe

http://www.conceptsnewvaults.com/c?x=wTkLFgwze6Wq4WA/yw1B YdXzukdGsZyoup7xD1byOs=&c=6C9skzgp8S6JqmiDzfcNfGsugUkeoB5mzFd/GPcz4kxuz8OnvtZeHF3lCAByQf gY5Y0HblaSWVVgz0g6zeYlZ1xRsKReAzdtuTiELVeRUCmLaGJf9e9zbKWDswacKCHBWe4HK8b5xKJ2Nb5G6qhe/Bk7Bb4D9qpMnqwzc65XyM=&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.6.1.exe

http://www.conceptsnewvaults.com/c?x=rzkg/aNHSfytfkEb6lC/P8cC0mtgeyRmMiTFy9Byedc=&c=rCtrtspBc4ppZpExxCbjovZe yERc2C0e3yWzVwL2lnLbFUYGV9mVNalCY5Brbe4o1 H2ps34moM4XNqdXVlzfMzTS5wjtzfe 9nXTGo6EbgzgzYP2jb9j2laoiTO/sriaPTz2qwbHaSYErMzXMXfiBSWInJOd5nCiOB5UEB/jo=&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.6.1.exe

http://www.conceptsnewvaults.com/c?x=MW2GsPWD r5x n48/rBQCFgfYQ45xdMHB6Vnhh4FTlI=&c=JUf6oFcCyQxJWtYxYqpe61/XTbw9rOdLscW2PFSrk/AMpnJL7gqI/RrunNHrjXOO/k8WyLbLpp0gyxH4S4nxf w4HVwEUas/jl/4aXNfwzmeelqTzrZTJ5TlsNzbcwpIcEZaJgwyBgYFiT/ wK 8qPCUJ4IEVPJ2XftAg4uNYQY=&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.6.1.exe

http://www.conceptsnewvaults.com/c?x=osCyHyHcXsWO025dG5N0BMgehK60kv 6EoLXG6wsOUI=&c=lSD1IPymr6bNrmia2TQFAPVlhU0NFGdDBdgdJ8xRHxSXTXAAk5HspmN36058luJVLHmbdLUGBUjhg4jLqYUmIxTihgJamSzXOgOFrnDnlpm6LjA6q4WI7mgs0GwyfTCrFunUOprHyv/hEDqphF4btZ4YjqmDFyv eU/j/7aHUZE=&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.6.1.exe

http://www.conceptsnewvaults.com/c?x=rW0mfX2 KwQw3SVtQenpXpLCIQS0EYzwDx8z6PN4wic=&c=iFSGwbJ8ekYB5FCNraXXQUYiCaOHoQ/gIxgO7OxaSiVHxO5CErj92GlKpJnpzYSgJ0rwGqYtPi5lWxyZFHfHJ6UxvwrAqdUiVh8SsdmNkmSX4Wd7R6ETZ/GV47j5TbWnYJzP0rj26ge6CrhOwBZ6iTRKHNlY/hewKlxfQT0LK3k=&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.6.1.exe

http://www.conceptsnewvaults.com/c?x=miGmizRSJ3up3NoNKwLQ726aqa9whBYuvcmPYX5hVE0=&c=AAYcvp3wkkv4I9ebU9JacQdnbGXpN8yBkIgBFd1dkEY/IoaqWFVNV4ZnS7zLNB5dCmPgjoDyJAyBlBrinsaSHUZzYH HmB2rsUHF1pcAsKjib28S wvMDjhxt6obnHQzNBOFRwt9zcQUC9rSSafvS70MOLxeE8yniHTNeaRKOao=&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.6.1.exe

http://www.conceptsnewvaults.com/c?x=PzjJ8TW1EkNJvU0WnKgXIr79ajeB4ecwXisTdeRHe4U=&c=CoBxVGU w6tYPRfINDmHaYEGpVgeWK8/sdUDweQLZLZInQENo6wMNW3ANSbYEI4vVqNmmBiDoCd21Yq5 fLqFUZssJcaGO5AR gG6k/F2bB134fF9/Sp6P83TS0j3LsFNh/VJV2YHMWhJKA2EwS2qnEQCTRyMZlAaF7Y83BxM00=&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.6.1.exe

http://www.conceptsnewvaults.com/c?x=XVIaHhiLrNu/OJspGLX7vxarHHrxSP9Lf8BLk52/PoY=&c=hYrTlObO9PtvjuIhwHZLVQEce4GjyzuoPaUbkJY2BSNFCUR3/rbZyNYGQHqLq2/1IOsCAUfevxDf9xH3ifrKYh 3bE/3JSjsj3lQ7bzoimgCieU RdF2dGFSSBH2yrUO4CaknNJ9j9iCaO1Djyw0lDWYyK0LMaKywTPpwfYmR/M=&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.6.1.exe

Scan stremio_setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.