home

stremio_setup.exe

Pecuhi

Agile Delivery (Alpha Criteria Ltd.)

The application stremio_setup.exe, “Pecuhi Setup ” by Agile Delivery (Alpha Criteria) has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions. The file has been seen being downloaded from www.quickbitspackage.com and multiple other hosts.
Publisher:
Agile Delivery (Alpha Criteria Ltd.)  (signed and verified)

Product:
Pecuhi

Description:
Pecuhi Setup

MD5:
e880fe83e605cbfe36f5ca8fbe339291

SHA-1:
85a78d507ebaf16e73ee49e3b2f4d0ca02f22d4e

SHA-256:
17c5f303bae70425b48bf03109a1cd7a532fd92f362c1208dbf790e409738ab3

Scanner detections:
1 / 68

Status:
Adware

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Description:
This is also known as bundleware, or downloadware, which is an downloader designed to simply deliver ad-supported offers in the setup routine of an otherwise legitimate software.

Analysis date:
11/15/2024 10:37:12 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCore.AC.Installer (M)
16.4.27.23

File size:
1.1 MB (1,141,664 bytes)

Product version:
5.1

Copyright:
Prog

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Common path:
C:\users\{user}\downloads\stremio_setup.exe

Digital Signature
Signed by:
Agile Delivery (Alpha Criteria Ltd.)

Authority:
GlobalSign nv-sa

Valid from:
12/16/2015 1:23:29 PM

Valid to:
9/2/2016 12:29:04 PM

Subject:
CN=Agile Delivery (Alpha Criteria Ltd.), O=Agile Delivery (Alpha Criteria Ltd.), L=Tel Aviv, C=IL

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
112167FD2CE27007C69C69FE47CED0A20713

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:pupwXuZFswHo4VdDQjkIWhBgPEvQHmw6nGIn3lryV1GfLvE:p4wNLQQjkIK6PhHm7GIn1r+c7E

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, 53, C9, FF, FF, E8, 9A, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, 24, CE, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, 24, CE...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file stremio_setup.exe has been seen being distributed by the following 50 URLs.

http://www.quickbitspackage.com/c?x=w7ZEr21O5ffIuuk Iv9U2g0kjLBAW/BNjYtmoegBNYk=&c=/nVxEHNfx9pe gUdoBeGbQN26h9LGef3XmLXYGyXbaEbx60AtDp4/9sE/MBBDhTdLEFKqJo7qXxJCMVK5Oo/EbE l/RnWHA3oDGMMFRsRvQMCttmGtihirX7mt HRlcWRtl2uLICS8XLdy6jtKumIBbRuNnllWdmdH5 sZjEj44=&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.5.11.exe

http://www.quickbitspackage.com/c?x=URQtNQOkPXeN756APso48ktUQsIpyJzAISFUbr1JU4A=&c=Px4cc7b7wPhKymb2Plm Yv0ZuRFxvZvZa1gdZ4etDQwTLMxn6TJ5Dn6tbHjNMva0yNLAf2yDulWCpNMuoZtGwAHNMBplRSAI3D/OUk5ipiXgPSB1dj4Thf2m84PZe/cY3X1FNfP4wsobT0tZQGe1XFxM7gVCEuMnwZ2pO9CKvX8=&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.5.11.exe

http://www.quickbitspackage.com/c?x=afR9ujVreksjNJKS98CoKzw6lLC4h7Ssu1zYDWp7VLE=&c=FWRjh0WXW6npQ46Veply542elCHA8 RhDlbP1AlcY7sbhzQn6w/UaP7gkHA1Ni/mi4S49n3q2oGXmi6eUSE0/8pIewInw97RIN7uvVrBD aoX7c666kZ2rJ8L8N4kaMBnq6Cz0GCH4nDXWU6JRLn67dsN8Xpqx37GsDsbCwplUE/jcpnaTTeWPoEwox6/t0p&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.5.11.exe

http://www.quickbitspackage.com/c?x=Khj4NCxidQV6wfZaxS2MBbOknVCy7AZt/MQ9AQv Zyc=&c=TGRnMKB7WK/UMqRzVKUD/Z72RkPavo8wDNvcOQday3FvEHYy uBUgvQpSivAZwYY 1yAy59Wj2Zloe8vZzXcfqm2st6ai3gri3ixyHw0LmdILvrsR04j/fL9907niwpzRVXYnLGWlPESXWJoBbEjKHp adbC8DPJUfBHqDDygu9QuGfJUBkx/86V8Gecmukk&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.5.11.exe

http://www.quickbitspackage.com/c?x=WVG4dQ 8W96DQ7rt7caaqQ9lrGMz3T9fbtQvu8LvRO4=&c=EiNYQ6YKVuDdgB60MBIlQ2SYbOyWHIVZsaaJImqaFsKwwztPEVAY5LC2Mm0qR//XqIusWxt879o2hJ 2321ag4QtgKfbLvhmauRa3/lUciOozYn424l1DbhFcq0sHt u5q5/0YBXoDFq4nlc0iP8EVbl8UVZARFHP1U/cRK/f3KW3GEBYzsvjMAdKzkWCc7u&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.5.11.exe

http://www.quickbitspackage.com/c?x=KiEwEwdC8YhLdrvQsxwNp7A/8pJHJnmM6/WYJjusiO8=&c= B8DAurkY/ZIrDqrD o9pJe3XGkdHk29gCtQeIGTuOh8kdaiDaJvHonzD32WYVA1hfatSxBL/kjgvQmDw8jswpIoqnmlrh3uSQ9qDmYiAbgomrkkN5c9VyinAbLCynCaxcR/IH1tQohU2en9sCcOLUzMehnfamegbqjvybXvDDNwz0C/C3EVZdF2h2mEWzg1&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.5.11.exe

http://www.quickbitspackage.com/c?x=wOECxZcc5s5bNCGshL0M 3YMaUeEv cTDImBPwmnZM8=&c=vXdfaH4xHszLi478blDW3FgqOJ3rsF0wJV 7Yz2iN43JbHwgcmQXVmgajUxBuLw/xJr0ffaWsyunfcwfGYM/ZCPUJa1nunajpBTeirGfkTZlBrJtvGA7CtN4K/1HIDBoq/i2fLY4NUZB6QSqyOrqOkqp hZHNTmAxudJ nJYtY4=&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.5.11.exe

http://www.quickbitspackage.com/c?x=HAkte8 AzENwK5xgaY69yEj5iyAaRg8zWkrPAj 5jX8=&c=H/gGlLHYI24xPpjaFGTWO uopgEBtue13NN8IzNP8l1psSdzST0UZn3fVSjw0AmdcG8WrTEsjRacBkLy2Yj s4FUWnW K6sfdZ rPJGg8JjrIi0CKH3O8qhxauNmLTzfuPqGWDX9xsMQFL0/JNA7uT/738 lDkDN1Z1aiAoGKRM=&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.5.11.exe

http://www.quickbitspackage.com/c?x=toBCv/UDg3M04ahKgzfvpRqCrgsG8qHYp4L1OHd7sZE=&c=UCrhB8CD/yE6msnzNM94bECPtn3hiwOV8GXhT8zVDCrbgNOSzKPVqQTqxvHpR9hfgKLvpTXz3hbUKDmOhFsPBnVwVzd7q7i3vAF0uNnG3/AQtCdaxlTg154xIW4SaxbMlD9 zarpu0xdPNl Qg7d8RREds7EII/cPUh8H5lOrkw=&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.5.11.exe

http://www.quickbitspackage.com/c?x=7CWhF697OuPv9InZ96BHsW CjlK4xr1WTimFdG r79o=&c=F3gZ0BooDeGD66rqRRzGEySH1TqHyJ3Cq/9d q0yA1/wcRmyv2pea QSXC1CkIVgmzzwTVPqusYGtIvGtuolIrB wLVrzMrHMIZ6FOzSQIYWjV0Hw XJ ceNJmUxwqMWJ9oEArm3MiKy0GrVfnC3OrnipoAo c5XZnf5Hq/3nd0fUHVt4vH1r5XR3dFPldR5&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.5.11.exe

http://www.quickbitspackage.com/c?x=MTGLnY3LR9s j1LMazNGZKkl90/H5J/EhVJBeS1VzyY=&c=18LxHAv11svFGhhOR0B/2ehoeYGIwC8hxcW90b EAIfdcP4O7MCc6r8KZnctOWDNMq3tW5TCpoR097cQb7Xuz4pdJo6k1ZKl0xWYE80SJXZ0u/7rZ5hUW/TINyMKdpgq6GwMKBW5ow1u ShUg91jBaBpsIwHFKZUkcl/JycB5a8=&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.5.11.exe

http://www.quickbitspackage.com/c?x=ldlT6VVRFVO1xBfYm5z8PqHpH 0UEvp60QfK/Erzs48=&c=fHbLFhKknnMCjNE2sHq8lghwue9lJdYzc5oze8gkUnIcknzrLpnrH0sRFF34q1cr30VbpH 55Ge G90l54nzfwbEImnWGGNXm mtMNAk9 YDCr1wiF9eAwYKK6mOGFj0XhTCK2czcxhIXEZtRmtzXXGxalcQRStqc9JC2LiTESMT lc7ZKeBmHwxTfdkhkSa&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.5.11.exe

http://www.quickbitspackage.com/c?x=RP2h96Z6KB/ywagaGLwMqtQnuxZ6on8v0 hHNCOzqlA=&c=XMyb5Osi16dpVY5oo4aamajRd8WxvfG2iDJoY1pYxQEj778RrGKThUYbAnpeMAInZWm5rXYw3YrV5i8XM/34RGLKWKmCEBSJLbCz46JYGGFqWmX9gDAtppcXPpnqBmwbrmAmmnRcGE8ptlkobWWUEmNwbkxL50AVSXCnriDE1cnYgmbRXm KbEi6z vwj7LE&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.5.11.exe

http://www.quickbitspackage.com/c?x=vmOjE574f0EuRk4oFBrAEqpnWeidxMdFAzLAjxTxT7Y=&c=T6 WxVg7DlZy2t2VeSzCp2fh1sR3j/SABLHfpZBzOUUNjudM LCwZQZ3ZY09gGKMSc4rryftt5S5bmoWF7iL W5C0vJr2kv9JzaEK3JBSmfjaHM9xceDnLdYmF8xPsvd5MsBISG092ZFwugoGMQDmZtJFG5dejVmrXCc7G3dmDQ=&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.5.11.exe

http://www.quickbitspackage.com/c?x=FdztXnQCFFdD ylRvHxHY6WEe0RsPfXG1ajGKcx7Z48=&c=hwSn7bnkp2KL5rN2WNY3E2HkRGnLdVR6WxvL07vkf4EgiN0uTeCmt/Cgra4 A42HL0L sk/1IaFTmQF83tAHeSn2OXqIdi8jt9j/TyW0ujJltQlemD/i2LUYqPy8ljE2BgdazsGA81youCCKk6ThlB63bhxQI0ZjqEDPFuTRDm3jvtCNUgIAN/8ivUnw/uR/&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.5.11.exe

http://www.quickbitspackage.com/c?x=QnJa5cViHEBoe45qLJYwRiCYQ0EN0bBzwazlgOE4dps=&c=NJ7T0vh1T7Wqfc/lRHqnyWf8Hxa85dWYbwJ2AaAAKqKkMcRoYjTha0AZCjcJ1QxBCXH0frzB5PmMPasXOmZ XLjIrb/jAm81sNQWHm54U031OqQXUoHVIVo38fD7A0SonlupFiI2b RmPbrQAe6JiEOtUv5YPmixdt3ycvDgS6IFrH9 dpoerzJJL hF6kVr&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.5.11.exe

http://www.quickbitspackage.com/c?x=NVE1u9k0 O7Cy8yFaFo odBxnVv0D8jIJ55vjVeu9OI=&c=jzW8vpKlkC4Fzzd198qxsQQ4oqVCBvXzhI5mW/ Ig43VQJzsrSsu8uRVXesyTUNSH6TdkSNrjYMexH1KBpFmsvrBw nv2OYszDBLsKc51mOaahRf1Hwys5JqDW5cBVwHhfdLv6OHLeBrxaX1NQjOpAqGiD0bwf8dmlibY0SDpbqxrDFavk4zc6ZbtQwWx1xM&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.5.11.exe

http://www.quickbitspackage.com/c?x=zxbL1UEhadPbNG7usWQZOPe9Ws8xr4w6U44zFcXw/xk=&c=IKjpg734QZVIjWyyuqxPbiV1jiCOhLBfF/iQozZ1xCjnKESPkvMFjEdlN0DbJu7GrJFBsgWvcyytxYdDTMvAx77Nu6/tDvHy4ZwDPjqgpGVXzSqiaJ9jsdrqKalNf7x/6ePWOPFWfbkFd3q4N0q7Lnf31losQlgI4CYeGj4XLEo=&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.5.11.exe

http://www.quickbitspackage.com/c?x=7c7xbd8v6lNv52SrqaWNvQMABUSK7gWESVxHB4oyQYs=&c=gi8JztqdCBALbwJdeEcMQd8KRBY7T2YaJ pBj70 1Tt6G 72FlhJXXKFV/B jCILnbZNvO8l3YSq1ldRvANXYR5YokN94UN7N7VWov6elEv5on pvVZGBj84qL6adYWVFPT5opYZOlndbOy6lKLHLeOV0ZHGjHcbJgWBJgxqHnY=&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.5.11.exe

http://www.quickbitspackage.com/c?x=ykVb30PJVd4Rp76pEwT0BYYhP s83ZC3xD/ro0AWfng=&c=G86E3LYxdm8HMLtI 3za2xgwxerudwx/0tLWfO5agUKuct/HG4S11gNrhULVue2oSE/tQ5CKzUaLwsWSuufl2j4wW/gOT2SGW7ld93Yq8suaev7hlYMagQZyQ0eQK9rtmwg2ZWGniZ7d3w0TNwO8z4bs fIEtbz/hrWLOYd3/Zh0TT0YoKCQOzf8rlJtvBj5&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.5.11.exe

http://www.quickbitspackage.com/c?x=aVF1C0E14/eZ/FVR4pQ25UjuSa2owmaP2H7QFt15nAU=&c=OcsQA DIsk8sWcLdDPk430yFpXltPyOHvaEJ7epWY4K/i4WrfbY1jqYZToSjpqFqsmOu0v7aSP3fKNSFbuzKkYVaN0lNbPdUH9lF3Bk5Seh1uejyWbL2fi9fo0lClAtZUgOGNc ocVCvQt4IHvql/ 4V5p3 ei RClm8moiXfvX3WVbSVkHCETFX29r1oydj&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.5.11.exe

http://www.quickbitspackage.com/c?x=ZE1Diqf6vpqKgR9uQDLZ/0XTdI7svdGLHNjKtg0oNnA=&c= iy4VK2W18JrbcaUh7Ugu Wleh63RvZX9xquqPUxeudNO/vCmUk0AZ4 vCXNAEch0KkfouCpmPSw3Pfaa tgMXdF0X8FLUH1zMXjzR4bJqnPx3AvBlJESvt/myQ qkPbbNhOowD7D8zAwoF9q5CwVEf3 qhAWEZF/9g6ESPJBb Z1HHQVKgdkBWa1uIsT5Yf&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.5.11.exe

http://www.quickbitspackage.com/c?x=Y19UPchQWjL58DDVde1lIZKqIyRlKL/fFjnfMSSmS4c=&c=1 TDFMJ4pzzIXsZdN5XhMKISuC3FOg2i0hUTLLXu33uZiWKvnspCvpQi4uzBkBffZ6Q54zdQvFOY6yLfTkCKb0OOn27GdBRawc6bFlCBBILS84d8y1 0Rpdz3bwnsl2cxlKkklxCEZGZ9hdlHUozNgI0rTJ6gmnCMIJ2fZ1XtKXSxb8JEoWQERBZVqruwYYf&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.5.11.exe

http://www.quickbitspackage.com/c?x=fNkvufxZSfbYKlEkvhl8 d09Xo1ITLvyDDf3tgCUUlQ=&c=jdUXVop3h6FX3Y4sS/3qDmBQ3L2/D0LVfDnrva3mmNQd03w5L980GVaANmVhEhDIJyyax JT33wq/FpNpYynZDh9J13m0lU0B/MqUTZzI7ufmQ6xH48J7PNeThRYc4Q2bkS77Nm6I3/Kb6xxf2Z26a7No7vUhFyKnAdUsAR6haA=&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.5.11.exe

http://www.quickbitspackage.com/c?x=fy5iN/sKdbG1nEn12ovwup0kKxnk1h64kaxzCKjnB9k=&c=4c2Des2wvXX5WgjUX9v9SGvkJ11E0nkXPlAn4nJEloO7fTgA9bb4TYRZjTh1ywPxPvkGbqP2MgsS/Gua62R41UdroTqcDaZzBJ6je5s0mA354ysxGKXzfbfOVpRiaNOG9XuJ3Pg0ElCZfNEJSUuzXhT45EG 1G FQDhaoiIaJQM=&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.5.11.exe

http://www.quickbitspackage.com/c?x=W5YAqIoxkAKxI2ZyLlbDZ56XtE3jM6vkt9Qmq2IUxYA=&c=uo2rAQrsnRUd0JNdGvXOlzHRdPZjRCtMuSnhLK2KnKSvSB/m8kobx/ZNCjdLOGVkRdtEBEzzBt/Sk9mkw Yzjbi1 BhhKAmXwfMF aZdcI0BJtfSX5IRe2SuxWXywm1Tv4umBg2EODpHYC4qyToI89R/rpy/RN T8RhJJSS2cIs=&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.5.11.exe

http://www.quickbitspackage.com/c?x=SqMB/fgAkqPYX9oFNmhV9bX07NXc/5vLG9oI52CE4bU=&c=q2LaLyW7G3mTmaOuP9M32Q2iTcWx5vAtodNO7AMH5N21tXEeD2ixJjhR1xMpkvJrejQgdlYzwd8nxOmHRJ80T Y4BtIQx3gEP8VxnhWzwxEVME5ODoyW6uPdEtmDDKX8K2gXRlHCo WxZEpb7bMKaQY8LrJ5I9fgdUZfEk4WBfE=&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.5.11.exe

http://www.quickbitspackage.com/c?x=sfBEIkdm7WzI4OvfpIgIe6 HT7FkXHZhkT O7sDiiIs=&c=dA1CHk27dWszxfjZzKYbVSWVf/HXDJN2niSDSssW IWhgmWB0yEJeKFCD9bYRPdY2hK0CGpK8kPYdXAFjfwBl8VAHcwsmu6eVAKdBysBs6rbGwa39F2ri319Vp1ODyX40wzacV5NgNLPP6DokhbdbLkspF8GJnxhOM9UPqLeFmY=&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.5.11.exe

http://www.quickbitspackage.com/c?x=KV0MxVS9Zy8JOXoNsKTDM7T1whr1 lsKv xGaR0G2pM=&c=/jC SD42Py3wL7kFZ xchdh4rWWI4RlU2y2sb0sv/m0wkQoowRn/E/IKtE1j3thfOMcp1uvNBUskzE3Geb8E5repOpQ9bNANYRunzwqpfp3dJ1JCqVm7007QrD/CcBoT7q FRmh3EhtPiqiMmIbMNX25MNe6jaftbAiW0 NqAjDBttGSUafslOje19ws27c&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.5.11.exe

http://www.quickbitspackage.com/c?x=FMPiHTEw72l6UVVVwN8nKW9WT0H5DBp/EOImKZFYEu4=&c=XbtdCavnRezCJadIt4rDpimCy8ZtOfDrPwrB4HjIK4BFsUrYkLXZqrWVo5hBeHv7NDC8YTJKMJLNokvTm2tfS9HfUrD9aQxaCSvaKzTHdd65RYeBKeMHfjwM Gd VPHnuG7zyBl4tqffPsIquvEbDffdWtAKWes YwjBqxzwJV8=&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.5.11.exe

Latest 30 of 184 download URLs

Remove stremio_setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.