home

stremio_setup.exe

Habi

DeliveryFlash (Fried Cookie Ltd)

The Fried Cookie installer utilizes the InstallCore download manager which may bundle additional offers for various ad-supported toolbars, extensions and utilities. The application stremio_setup.exe, “Habi Setup ” by DeliveryFlash (Fried Cookie) has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions.
Publisher:
DeliveryFlash (Fried Cookie Ltd)  (signed and verified)

Product:
Habi

Description:
Habi Setup

Version:
2.4.3.0

MD5:
d27f9400a8406331f7ec934a5bb5ee98

SHA-1:
5beefc020d416c73ebaacc55e448e7ffcca69320

SHA-256:
f5844e79566a8efe55161846f6b695e239d2db9a76b5ad9bbefd75f5ef50649e

Scanner detections:
1 / 68

Status:
Adware

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Description:
This is also known as bundleware, or downloadware, which is an downloader designed to simply deliver ad-supported offers in the setup routine of an otherwise legitimate software.

Analysis date:
11/15/2024 6:52:15 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCore.FC.Installer (M)
16.5.30.22

File size:
1.1 MB (1,150,000 bytes)

Product version:
3.5

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Common path:
C:\users\{user}\downloads\stremio_setup.exe

Digital Signature
Signed by:
DeliveryFlash (Fried Cookie Ltd)

Authority:
GlobalSign nv-sa

Valid from:
12/17/2015 10:19:47 AM

Valid to:
6/2/2016 12:19:25 PM

Subject:
CN=DeliveryFlash (Fried Cookie Ltd), O=DeliveryFlash (Fried Cookie Ltd), L=Tel Aviv, C=IL

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121FE9A11A10286605B22CFFCBE758C366F

File PE Metadata
Compilation timestamp:
6/19/1992 7:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:Z7SpYEt4DorgpBb+d7q4l30b1GWBQEfzdLdXUDY4:ZOjtkwgpBb+d7Vl3w1dLxAY

Entry address:
0xA5F8

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, CE, 8A, FF, FF, E8, D5, 9C, FF, FF, E8, 64, 9F, FF, FF, E8, 07, A0, FF, FF, E8, A6, BF, FF, FF, E8, 11, E9, FF, FF, E8, 78, EA, FF, FF, 33, C0, 55, 68, C9, AC, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 92, AC, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 26, F5, FF, FF, E8, 11, F1, FF, FF, 80, 3D, 34, B2, 40, 00, 00, 74, 0C, E8, 23, F6, FF, FF, 33, C0, E8, C4, 97, FF, FF, 8D, 55, F0, 33, C0, E8, B6, C5, FF, FF, 8B, 55...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
39.5 KB (40,448 bytes)

The file stremio_setup.exe has been seen being distributed by the following 50 URLs.

http://www.quickbitspackage.com/c?x=JSFYopUfyEp AW9u3ACM0JtOR825LglK1C50gKn0nG0=&c=GabCNK3kisl4kgtKCL /8db jcBKSkyjddCKKyVRz g5qpUx7sGa3R6/XFfNqsbuhE/aSSkakVxxkd3s3BBWEimIruwTAjb29njkgpM/TUnr3aGZc4aVFpO4r75BWvomsMBRTpuVDmfiHUlTO4T5AfVZ7zoftOdkuoPfnixmaKQ=&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.6.0.exe

http://www.quickbitspackage.com/c?x=n6rtabdBrnVkU/DD Uog6K4D7rRqGOK1lbzf eWnH4k=&c=3KWcJgBDu8X g KT5pzT9YAriNigj3MBiXoriR3u1Bd1EHeCbMVBTpEBkSJiLzkOQcWVWxjtgZdHMtnGyss4J9KTgYqapA7HBtxwX4XBJg4cJc nFiJIQFmptl030znCXqkxdNrsWtHpJaJZzIRP1Sz8I2JKpnGVXFr7HUhx7S8=&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.6.0.exe

http://www.quickbitspackage.com/c?x=ZvtuoVT RbIdP38kIyleZu4R5XxXL xDYhAi2d44epI=&c=WZKy5QWDxoctJCaNkloTMAtqF Vc0xuK9AaYDs4AQYkcv2 sy Xr3qvODYzQ RCZj9VToEHw9bjMv7Y4rklz4sIMgS88zXXIgOf7N5mIvLuSeiMSMDIESygjmFCtuNWeDesU4uUxvKFlx d/IGYLNzfKDp6hmoKp36w/TUtYtW8=&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.6.0.exe

http://www.quickbitspackage.com/c?x=6mcaLOHay2CeZA2R85BXlLGjuXNpiv YBdI/9sJ6Rbg=&c=2quXJe yqTjgibKp4nmoznnkheEiIBmrVKP8NeTmTll7vJA94VjnecF5TLOU 0UsqXfmWj6ohTS2J8sqS/tNO JhOh7pL4MmxTf3pk2BPmvr/Z0Q/H3rOy9F/RtgCkmCjyzOeuJuH69UzymzkJ0qf2ef5Zk9lCaypEOvmh4VAjU=&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.6.0.exe

http://www.quickbitspackage.com/c?x=jFOiM9opJMsIrhz82bGgz7dLyWBGQg79jWh7p5lx6N0=&c=soQstA5iHFcbkVxDIQVuJyRl8Kuouj 5 QeLYEAMkxb0Ul6Wtb57kjRnRSzFbeIhV2BXDiII6Ev0O6pXbtmlecCH2PGzV9BtUr6wVmN9oGv0dTx 3wiucC/0WwpjemTSQehRI1yYOUDtE746B8WKxCsEWoJhnto5CTPjL30eQj4=&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.6.0.exe

http://www.quickbitspackage.com/c?x=FXAucHluPU5eLS9THMM3bXqBao1ASoa7z9NHtjlqkUg=&c=oCgQeBX2QlLBK5qkT3eomY06u31fkPf8YXvmehwZODna6eBei3fZHcbYHK ZoZzKLbealNYo3BvG2YUtPFnZOtYi3FeF gNFP0t9gkzyZr446QYol3tWlJhcDWZINv/NhdVXYT 9jpl460kvLceqJgJ/s7Elb52 kz7DnM2NoD8=&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.6.0.exe

http://www.quickbitspackage.com/c?x=i2Ny8GcohSmK7bHO3oyMb2tDClKIQV6Nj7uTZUu3X4k=&c=Pb56zw5mlV58NV3yt9teNYiXrtQ9VADjwaTF/hUy9EzAdfsjUiKwC5Jt4yN 7180nZxYo62iglP13xXkRoxw3G0Gr9h7vKUYg XWeSRM4WlOyRJXSEe8CoF3kunV8p4vDcfkSLnuEOP CrOpeeOfFpUCeuarvKNHDpM/U4eu/RA=&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.6.0.exe

http://www.quickbitspackage.com/c?x=6rHbAqdNYXR2qa2MwN/O1IVhP rFlV0he1hb ARDwGs=&c=IthptB7kHXXSBy/PgK7lORgJDDM/b4nsSxt5Roe4kEI7 SBdl18a4r0XMTG2zy2sePcVXvYGQToJOaYgBVHYAFWCy3NMfK6UzeK0aXq7A/uYZVp/cL87urFOWEzyLLt7UFBiejX9JApzcqJHUfMXSRBuGDbtpMC EINffoadGdo=&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.6.0.exe

http://www.quickbitspackage.com/c?x=3C 158KucaIdPUUvcIPNBKjWWf4yYuVbfxa9nyXAXdE=&c=1bpgNQTKMXr5JLQ7ksk0vhgd0s UGGB7l9IFgwEGlRycBZ1EiF2WoOTe4wUApFiRnlwdoLDH8rhG8GtxFGC53XdmYyK s8VjHAySZ/j4ycY1RsC 5gMmkVfxVrziabujlx0vcq93H2OCymhtNcw0GACQJJa93TGXUQf0QPqI2iA=&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.6.0.exe

http://www.quickbitspackage.com/c?x=2CqvXOPBYcPoQMPzBMSfK50nMUvmYTw812QuCFYu1N0=&c=NGhtJVo UjLi nN73LogJSZWFNza0Dmu1NA8RWWsqGlV20WON0pP3uNnM37nELhoPga3WaggwXmYRIWEM0RnL1LA0wQvJs4 Ftl3D65iezMka/ bw7Mw2vfnVwt9QaXuBeWnumbKHvPtpbfSKrHmlkX5AlsVIvseFlU6RZ5Uc7o=&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.6.0.exe

http://www.quickbitspackage.com/c?x=qilYp2t3lDivuBmu8qq5F59P IkQGumg9TpvC9kmEEg=&c=/knKtDPSNiJgSjYLoqkuro9y3UcImBwYQn6hae54fZrW6STOcpkRvkqQ4q5cjJ0U32NU2tj9oDujL4U9hFYIpXFfRTC8fHwVJQHd/CdJjmN3yH figTAtdyUGGAwla2TA yQQ1 c3Yc/86uuPZVDsjraWJe q Yg8dZP7zxxnMA=&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.6.0.exe

http://www.quickbitspackage.com/c?x=Z9txuCiKqHme8j3NqXc1r8vHNHQ9dX4iaabO2CihOhk=&c=ARLPnUf5QB 898f/Fk4OuLQaj6l1h/4K3U9/0B/zb77dpLwp9P0n SO009ox0gUK 9dgNVD/yQcxq0UbrdCjzCZKAR3NTFjPWpwOHTxDKLA9VwyIM0xR2bgvNfc5Y4yDnvxI4BRUqf4Z44cKE2ftlbtODDh R2pew2/et B1rTs=&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.6.0.exe

http://www.quickbitspackage.com/c?x=5hXgFlxB4I1VumFIUSI /NBHu ypigDmXyzAg3qGDtc=&c=DuzSkxSPWnYzYGw5UR/8iu22QqzOOvHGwMKSfHhxeTh/Z0gaFPsBWH8OmtysVIRAjANkWQp18J/Pd2368Mk/M9ouuZgRsBfQkfRY3CH2tfmPX98QdrdJ4ocMKDb7HDdjbOuCuvYKz7IIst2K5NxJj2REhd5OlJgbob7DKJtf8AE=&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.6.0.exe

http://www.quickbitspackage.com/c?x=C5GTpyHETm k34pOk8NpbztG4RmbnmwZAYnXXNF6Wz0=&c=QHUlVC5cPUuURNG2EZOly/PuFYxPqTDaf/zxJ9a zCy91bSlScIPvobie2CCA4BaUdxyokU/f8aL8akUYwdOYgu/8A1C3sSNlYgEENmT8UzmTmMm2gINBWGhFgxBwyal2/2VLK65EwfsiQ CfODqjBhzuFnM9BuxohR/U00eQCc=&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.6.0.exe

http://www.quickbitspackage.com/c?x=648mZtFMrCF4FI3uSNEA4hHzTwzNCTMx7Drw/RRonXs=&c=SutPU mn1s Uc7SZ7q7n9yr9zyCrMjbtM2ErFJ7A9Z6Tpor1o/RXBYQXqQkD3uWllYXEWyfIWLCYtVC4eKMQBzQ q/6k6ZmcjraF2sfxH5iMR8CvE8JMk128OmyQttnn/mTbP7O3ggukxcDuRFYj7eqx6/sBDk 4I6kPZ4Vmk Y=&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.6.0.exe

http://www.quickbitspackage.com/c?x=tpwhfBAeNzYYwL257genXB7poR2M rlK3hzP3j5LGvA=&c=aQ5TWgf0Sh/wExLNGTrHp X8TPw3sxc9xumSXP/PRkmsiWiv1uOplcjkvLy6ADp0AeCuBH7yqYML m/3qQuUq9tv474c1fqQxjcVNdGJ1a5 VCBBCXIbyyfW8zHaRAxlAUX4YVfQTF2YTEhhsJ0R hjqHvge41CkQp0bVRwskds=&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.6.0.exe

http://www.quickbitspackage.com/c?x=KvucDiMN5jHEcxW0ScmmHfQWrKFSSsvrOKsDWHYfik8=&c=pKc8Cmafl5kgJILbwaKESPbG1bAqfRKCwGT Zhru 4Je0 vwvvTWeUE C4GnT4bBkblmMEf94tebSfB078C47BgHEDghaaPue5lWIdMvnJlBQtbFwVfSOh3Nejxw4Y9bLxBr39nByC3IyDjRofPuhdRITACVG9ACiDlWAUBUmXU=&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.6.0.exe

http://www.quickbitspackage.com/c?x=GLtFuOrCq0YpdIPwV54rRZz4tzdZFJqaQsPDO2xU5g0=&c=yxW ZdrTIQ2 VBXCHatCr9J6EWDWOsgzGtFxfa3g szlvgfizSjRJwaUn/SLg8q5d3OjWRYzWW3Ir0pOFl/TJ5NxXXfM9NoFbwPlp38wiesb9hv/qBYYHM7BgkVTwQSlr bPpp0Qk/fH8HYQrbWMrex3Uh0hwF5JY0dL7N0 Pbs=&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.6.0.exe

http://www.quickbitspackage.com/c?x=lER5CO2SkbxAgf0p0lprAHYHEOoNq8bKH3h6RbxF7us=&c=TeaQoxvKy11mx8wLVNdZd1ftUJgmL9o8IX9RREVT/wuw5QZTAZnGnP27Epow2WV7WnBRySZthW7h2GXHQnZ4HrJyZaiehSz JtzaRQBCo49U6GHCIcaBmJmm1u5aOxpBH0QKiipb7qVyjWqlhedXHGdgxeLFJwQnwdYuIcpBR30=&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.6.0.exe

http://www.quickbitspackage.com/c?x=BzNlbJ4TkwWQM0RZo8M4m1n8lb1zLThtiKV3LPvWycQ=&c=/FPtWw1Z4mMU0RqjasmfeSjcTFdKTz4U4a3pMnyXfr8lk5dcuc78hhQlzpaeuMeE9Of8VKZ8n/Q3gNqawRG1bAlWgadKvjE4yIQF4Wy5VoM=&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.6.0.exe

http://www.quickbitspackage.com/c?x=AeZK2f60FkFsZwDePO/hCTXY5xcoLdszGFoDIgQIBhY=&c=j79qEbZGCt0kCBfEGI6MzzenzRxWhdhXAqIlR UQ4dgiU/IUNDR6IDXeIiHOo0VxCMWv3QErc4yG5cqdU1ink9TPZrerDOr /3H3fBZgpzl6 OtamFtaB6an4qANAoWHVPOzAVQVJy6tksvFTFgOjmbEDEURQOqS7aLEcu q5UU=&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.6.0.exe

http://www.quickbitspackage.com/c?x=C8gdXE0nXFaTNx43Rw OwDyLu2q5yyr4JFEtlJAsGg4=&c=q0/rR58xABpa0H Ld9xwh6tlJNq9zNq/Z2WKa7QXlifOwFlbalVlVamSv9kd7JZUGfAlmsebLE/lJ1ywJx8tVMbIHhlSd67gb 4Db5jDYWmGGreldEhqLuOWYZekh6UPeWAIOGGR8qiYkZne1w6WlfmvF8E IQo4KiZ9acwpTYc=&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.6.0.exe

http://www.quickbitspackage.com/c?x=0Lp4sHnPpI/iR79Pk1HdPujUvkfiardTJtu69Lf3cf4=&c=Ne2BqZ3//3Cacc4/sdiGOlz9S4ei20/ 32L7xrlJi77v u1PKoHHpR6/NNWYz1zqWJAdmIFTMwTXV5HvdexkhukC9jJoWZk5qEeyopKetcFPlOnVRdXFDsoQrrEyu3/5XqeGf8bAdvGBo fsulyNnmU7/oKFPClmQGAnx3 QuPQ=&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.6.0.exe

http://www.quickbitspackage.com/c?x=pKiv51UOo8AXT75pwhOZjdHALWA7LOFPqGL1s7gzeMM=&c=8Pvrq0pg8fMox/U7dA0w rm/IZW kdj 9ui3BCSSi92EB2vAWaTmIPfpUH0CsMTTae9oZ1QZcodJHSzMcXRxdnAaDWKxfSxTBZkfg9T0RgNPFh3HpWCHoyperN oF0elJ9bXFOovGboZXF0AuXAoHHr19FFApmv6ml8VRsnPDHg=&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.6.0.exe

http://www.quickbitspackage.com/c?x=wNYBlACqOL988P/srB/QCjskGho2/b9k3U2ZFBZ7z/g=&c=AXOl2hYXr dlMIJY7X/WvSQZvQDO jpqA15ecyExGObpn8ZYQafknE/ASCUUA6E6/13 HbuGPUnVBQ4CdKWD7o1MAcTVMffT5aYl4n2XGTCizHFcXTs38R9GrdMJRAve6ksovLPYtobpB8z3Sh9RpED1iGn1gLFKP1CjSNozszg=&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.6.0.exe

http://www.quickbitspackage.com/c?x= O5tAySd8LkhLRTnwDN9UNKs1i5 NJ7I jlmP00D1yI=&c=jGN19XSt cHdUKBNtfuKdJtUwkBp d3ZUBeEbo7bUhZ0S0ESDRyyhYLlaW/4wKF1bwdctBFkOcP0EVkQHiEtKJxsVrgUc9Ny4vqSMcr0090=&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.6.0.exe

http://www.quickbitspackage.com/c?x=1fmLQKezY6okyzrHGyE5FdtZAX01E5JHMIIYg9MQYUY=&c=B1A1oM3f1NrIsIny378N2W6HqK075FIfx6j A0wUpg9oNeT8 BzwnV0xz9MM3JfZmQ/G5Tuxg747AM TEJjQtt0AVh2DGw2UKE1Ltbqmv6F2B94amn7Nj5PBqnqHMJlig4sLD7b9i8xmG5BBnA/kwCL98ZsCy1zvkZ8TUg7iKbQ=&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.6.0.exe

http://www.quickbitspackage.com/c?x=Z9tAqac 10RBoxPPTgIRhaYXeToIQKZX uHWfVxQqKQ=&c=98EiNd0gt/mbIOXEIYgCk1 71MsqOVQsTNofuPUyF6PsMqb4rblsiwLcp1fPtBfTrsiI0jNKzQSw8O6qXXgYGdRP634Uf3iH Wcw9Jk9OfM2SBntvpwk zqF3sHlr87nl/xIuUSsArcU9xnpYt/SlMf0C4QLNvOpWOwvwNJGlHA=&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.6.0.exe

http://www.quickbitspackage.com/c?x=BUZKGRi50OMl2kFCLr yOB 9aaOVf/pYibkIIFsZi2I=&c=k4Fc1hTBamy7Fy4aoHGpQRWJe5BLKKz7WEDNozXdl5XNmWKGWlmjTPvyLk4dSWOc yANMV3hlCPsT7Rzu8VuXQP/4Sd/yE5 mQx8T0k8Rp 5ja2Wk8iYWxOFM yeqTORu3ip f3tFrHPKLDNVCcG5Beg hugdtCY kkp4unJMhY=&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.6.0.exe

http://www.quickbitspackage.com/c?x=NTZ9sRF89QTOu0ZZuCR91n6baxXF5wXXRkuLddybemo=&c=bk6gYkbR7jC7MkzDOdWVmtaxM8piA0Qqk8AmF/4YvDGFQPkg ZZVNBMj4qQ31Zw3VhxQftPTVP4N9CsvXNGXue /TJOYiNcvYR7jWrIgVoJv6C79VVyW8iBM5ETR/P5ypaFOmqe7H4saDQwuDiSMexbd9nUEMeX Yk3oHkBVNiU=&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.6.0.exe

Latest 30 of 104 download URLs

Remove stremio_setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.