stremio_setup.exe

Lite

Quality Install (Fried Cookie Ltd.)

The Fried Cookie installer utilizes the InstallCore download manager which may bundle additional offers for various ad-supported toolbars, extensions and utilities. The application stremio_setup.exe, “Lite Setup ” by Quality Install (Fried Cookie) has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions.
Publisher:
Internet Web Software   (signed by Quality Install (Fried Cookie Ltd.))

Product:
Lite

Description:
Lite Setup

Version:
5.2.1.5

MD5:
05faeccea0051190f52293c7251e3f35

SHA-1:
95eff56258743bc1ea5d192260d6401f2a4f28d1

SHA-256:
802502479255495667806e41525f155308643a38e25038b148a87066b026585c

Scanner detections:
1 / 68

Status:
Adware

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Description:
This is an installer which may bundle legitimate applications with offers for additional 3rd-party applications that may be unwanted by the user. While the installer contains an 'opt-out' feature this is not set be defult and is usually overlooked.

Analysis date:
11/16/2024 5:35:37 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCore.FC.Installer (M)
16.3.5.2

File size:
1.1 MB (1,115,824 bytes)

Product version:
1.3.9

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\stremio_setup.exe

Digital Signature
Authority:
GlobalSign nv-sa

Valid from:
12/17/2015 9:55:47 AM

Valid to:
6/22/2016 12:07:45 PM

Subject:
CN=Quality Install (Fried Cookie Ltd.), O=Quality Install (Fried Cookie Ltd.), L=Tel Aviv, C=IL

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
11214C5CC912A574A2582BFB6F780F00F102

File PE Metadata
Compilation timestamp:
6/19/1992 7:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:aPf8SfpPLjoSHysWVhBvDGP9hpwNJX/8D6bZ6XIKgawcMWvASFKsTI:aXnXOVjGP9DmX1bQXXi6vG

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, BF, A9, FF, FF, E8, 5E, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, 24, CE, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, 24, CE...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file stremio_setup.exe has been seen being distributed by the following 50 URLs.

http://www.2016delivery34.com/c?x=d85acWa6FI6ejJE6N2Tw glcY5BKv8O dxHfx0ajbQo=&c=TaVUGCdkKJ2vKIFVlF9/1 F fprUIHxJhRrtvdbOayhGJviSo6gAhM0qvzvxxZbaKzcwsibWXmxOl02WuOcdCztUy Cml7IiT1WRnhD7pPpw70X63cjYHUxFrm5j8z9wiqyGjzlXh/fuur acRC9FVFxL2UdbwKjPkrqNGYldzI=&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.5.7.exe

http://www.2016delivery34.com/c?x=skzZK01Ek/h1PXK/rblAsWR/JkUy20BW4SzXt1qv5FI=&c=YGOhyaGOlv 4kXd 03TAmSlNGqz22mWWWfEJles5hnfBFiyhjXKRrGm44UdQkT9uS0yaT 4B/ereGDnK9JrYzrdliCl74GD89F31D0/xpzepv3FFvmwf7 4Uh59gvjLjfgKVzAcq3MO056AKCiuJh5e7bU908tHFmecSeTu HmY=&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.5.7.exe

http://www.2016delivery34.com/c?x=X n6srrV/Qc0POVtKL1peXLkfN6RB5Mq9kV qC14Hgg=&c=jA0fFeFpvCqARfOqRdhe22Dojlk70srUBf9/GHIcLa303w9O/V yDbVn9J6/cHR6mz46aCCsgFgmbSB93UU//pQLfZvVCDHhPi3fGWPExqi69Xyw5TiwKAP C/jNS5iu1PpYDAIYk8gPZdHImzRSc4d2Km396VT7QJiLd8FsRG0=&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.5.7.exe

http://www.2016delivery34.com/c?x=ceFQ6ykJsALbB603bsY5IMxN3ehMTvGF1/cCLaBPfdo=&c=1ZWKojg4EV6MLVydDXg6xmEjX82Sg08S2VMDiccRuKkleHoVTimtBx9HPiOV5hXfAxqbNvc/9JJCcq3LP1Fe7THurGRsEi8Maxo1yLTbFyU4ataq8JaHIx81/f6sD1LM8VcRkpvly9gbUCeH3qk02qvqC1J0 ygY2KUiGlJNKxQ=&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.5.7.exe

http://www.2016delivery34.com/c?x=8kX0hEyXjmaTsz6IfUCt0GeHHQcbpitpWtXJ56gU38c=&c=EGWJMfpYKZHBuk5 ouMjTD65Iy5g44eQF1jvW2J21VDnDRWuuHnLnHrOrw3 XXv0BvliHqTz8tdAq0KePxJ BA8/oY2GJxYc03K/mXI59K W2b/VMqS7v0VcZc0uRem7XRg3Fy8ltZJAGUG5M6CVEQuUSI3hTg6JxRkbNBjdNqI=&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.5.7.exe

http://www.2016delivery34.com/c?x=j82wkh7HRF6Ho6Q8SL5nbvc/3mRnWUK2TI0hA3k5OD0=&c=zGK6xw1U6Qn6APuIIj/ERA8hHxYr8xBelaK9RbOh0kHfCt9fIMiWJ1JvZOHvjJp5Z2B3wyhBu0dkb1/9eTYo/9/hc4V1skGbvZaueSuUlouKIQXs20AC1kFVV4VPHf0cL02wrV3lde7HiRNW8ynO4ktrRzpj8CyHy8nnSeK8aO4=&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.5.7.exe

http://www.2016delivery34.com/c?x=19ZpkyJIqY7Af8YXsDgNiCbXT10praKxgN2q6w2OQq8=&c=D8LqcaPlnOtAyGYZc1vctsOB4byNKMXQ4ixxdJQ8ZgpzOG9a0CerR3GK8Q3slg8YAUCW/fYNveY0bjHUFYMkiKgwb8F9EeGnULy8VLp4tibS61t7W9DD2lFkavbDHrYqhe4bZhvtpN cLnfibLKfl8euB8rSIFM8zACNOPct rw=&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.5.7.exe

http://www.2016delivery34.com/c?x=MHTYKx4p0lEpJAMpmN9Tdln2QlEGt PnvIko7qoY8DY=&c=hhaTyPP1tsBNAwT2Mg8gr2JI2Eq0Ko9CMquunIpOoUsGnauA2VVa3COV17jcVqVb0mZwLHxZwYbq5EAlyn4IzYeHRbCXBKYETd5z6KOOLj/jOzDcEYqYtIJFMq4E08qDs tpGUnWRbyP460CdSrpycXuESt80skVDpu8ukyIFJc=&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.5.7.exe

http://www.2016delivery34.com/c?x=su1ofVh2JwGgsn5kI0iIcFTGruKBcqEdVe7XJa4BFXU=&c=xpAU11Ceo9JUfuxg/1BloU1z7P32a1tfNbSucG7UKEIyFU26w2GBqBRRG6JTQAVQNmBgOz7ifIg2GuVqHGjNuAUXqO2DWztkSuU7BanSbZRUjnmQ0gUuLBdRBuFOaWGxgQoM9/H3cLbdY9a7fbeyK7ymblFY9JC T9YnSsrJSRI=&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.5.7.exe

http://www.2016delivery34.com/c?x=diBaPWthMeryq1RPz6ieR5yiULQ4IqwpoxlttT/qyDI=&c=l6gHEgNp1ap56my63GVAI3GLW0FMwbsjGiQ7fpAPHsYCJyOL3VKrPuW66fc G hduVEesLlrVaYHlm2tOLNDt0OPHDzZjitoatHws4GK7SoyBKb5sbiF3rKMHQh4qHIRWkUwEUTxxtoVFneZ/G7nfJMIkUrJMwvA99EZ94syHZ8=&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.5.7.exe

http://www.2016delivery34.com/c?x=lcWOL8P4jyyGNtd8uhAtFit7oQ9i6PZEHRXipgETQ0Y=&c=Jh05oYFS5Iy0s89TjObRH3 55r9CU rp7iU3D8ABVW/LhCYmePfkGqKgDI4yKUaYfY8qoEBCADPLvb6Un i1gmBROdhPi5tkZYTSbzmbTeCs1VJJzhKUzIRcxuNH3nPQ8jia rx X/pGj/f3nOHf8PVGjWRmtPUPb8UnnnAFslc=&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.5.7.exe

http://www.2016delivery34.com/c?x=Ju/KHERvmQy0eNFF4Ul16CRP20xiO QLeATCQ3ldc M=&c=JMU1fOxaTaqX/29DgW7COr9g4oqm1wMfqHGHeX2HEgzYxB7Sjx1i0WBnPTdYAVpq1CGFWCYYl1zRNcpQPntq/9m2Q1ZJM0QsCHoWqQtqVoCQrAI7DOuz9EQh1aIvTnFOVzRzQfvzKai1LaRmnRZVBhbzclVkHRMvjVaY4q29Kx0=&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.5.7.exe

http://www.2016delivery34.com/c?x=BFy/lqkUugwRhBxu7YsdISavHIG4OHRCGIPQS25OX6A=&c=0wplKM1Jbo0MYAjuT6zaH2nn/HGgWv30/a5vvea/icsaKLAxqe4MYUp8XyRdDhFom8pfUphN3OSVyth tH3sPKQFN2s9UB3YvtXR5GWzG7ojphu1mbjURbRP24OlGDX7aRJY9Ud f3kYBqaimjoBrWgt73DYazXOhxT6w0Wquhw=&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.5.7.exe

http://www.2016delivery34.com/c?x=N8FqiB9NxvMJMheTUEMlkM9pG0bnnTcFUNcRibYUClU=&c=MlREfb8T4bp2aQxmSw1U3iQMhZ4mLmslOrOO K5eCTuedv63JNGvHvGi8rHvtlbB0EJJO868w976wWB/sierC3epasVvU87qiVOB/xoF0d6hzWPjZgwmL1XZWKndnadXCBqs4GeDxDkL4ahKIa1fRuVH3Cf4C vHG06B8CtNY30=&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.5.7.exe

http://www.2016delivery34.com/c?x=Z5dmwdOvef0qJUmiexfQSg4/6o/z2utDMgJ/F/OvOkg=&c=1TZt3JCSt6o6fmVXGe/uVtsVIosOxT1OVWbhhc265xSXdeqJXB//yAUnRJmTFx5ybkqTYSXmwrK2Xq1L2WL7 JeDKNXYq 0MByxwjtjWB 1IgXtOmWFWWKMLoKFr2w6x9Fmh2l3zuhtu3npR6GZeUfY5w6xOjrLtZSldjHdokdU=&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.5.7.exe

http://www.2016delivery34.com/c?x=xVfsTFpgFIQ2Md0y4oo3nkNvL ffWSsR QeL5vgdCxo=&c=k53fFn2ZYdUtfSBMTrXsptcom1WEiE vORv6CdmrJ UZasf8JYefq6Z3ab1Sx1Pa0hjUBBsutZMBul5ec4JR8Y/yjKdXfkMqD/M5UAxz30pXGTFmzvwp2V6r5B60SjM44wGMGlEJeiXDt9qfKOGnFrG0DKNqzXEDP iNEgnmKe8=&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.5.7.exe

http://www.2016delivery34.com/c?x=oKHikBswQM1Fad5qoGCfqLWb/7I 14V6zY9d pHwZEU=&c=iXOZI2XwDQg0Om93KhRng1kJ9aww23b4YL/wZxpv207gM/Vmh9DBZjxreusCL8GbyUM1e/5WIV0XPKBBdS/1P2xKECj2Ludi6Rn56vBy35rTLno9kogI9 fx1iMLGr 2OtWZCqKfs7EMsOWvu8qrLiEjX3KCwG4yxDBI2Acq53M=&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.5.7.exe

http://www.2016delivery34.com/c?x=bVOfmV fz k SpPC5DfOihHlNGHwTCA11nwJlHC9L2E=&c=jntbNQKLWulocMi1T/MU0EGw8iP7/9E54uYmrD6nLf4fU8fSOuB/0xB yRkTzCY7nmbuJRJAlduZywyuV3oAVSi8yLPEV5CgBxCFVGWcEv8dvMK6cDwjn/h5gaplW8lsJGtFb2PLLKP9tR0VhAGTZ9XxfZ104moCxY/uVF73QnA=&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.5.7.exe

http://www.2016delivery34.com/c?x=8XHVz7l7YP/m84FngadivnGSFIyqzMl7Jp5NCACIuB4=&c=PS3WNzKrInLKMa3bE7dOu jYu 8YF62KQ9N6naNb5UVmTgPNUp3Hzbzq2EU/trRoK/YO8hTMhnd2p8FHJu5VrMOjiqkKwlHoG9EVEgDVdLfiA5LtqIILgCD4E312A0erYvNCuq4KUwPFy262hlGN82HWN35Inn SDwy94DuZhXs=&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.5.7.exe

http://www.2016delivery34.com/c?x=mXhC1IB52BL3P5iKO5yfFV30yFJsospd1eUuc/JgnQE=&c=z/js6HhrlaeLNOeS6/s4fFk1thFdNjDrUjSiGgvz8CPYwcnYqCiJk4ALkz2GAkXN FYi ppiDz7ifMkZTE3bDAomU 1N3H5i4vPYRoHtfezw5UNelKgi/qHYsHc4H8k 0D hxy5a1pDbhxQjxv1Zo6bgooktUK9poBBx45rr2yU=&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.5.7.exe

http://www.2016delivery34.com/c?x=EAcBJ/BmdflyOlwaBSbdf8hWCW0pZ0hk7f CAlrX1Bs=&c=SJREm8Ad muN9HHsOkjemIhz0ellQ7 Pm9ytzRv8kOv8QYJA8rvS4Q1HrWJNfhS8ocGI2QCkeYztnFn/8HmrQzQVxfYHQg2oTRbrXGsdWOegqJ/ULpPKOv6Jttik57Dm5RbFrE np94/vDdi4rLJ0Wxg23LLqLTcscZ7AzjM55o=&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.5.7.exe

http://www.2016delivery34.com/c?x=oV2 rrS8rizntKqEymfJewofTWjAcxOfu5bk7WfSB44=&c=mlc7ig/YalP0wlgtvBoar3DP9bfTFCk1Rzs lnUqe/eqdgD/4onsDrtbf4YG Yqd6Uu8A YZa2HBbpgiRW4t YoT 0wLaTwS4zB6MnykpCrBCFaMoNWEMzcCzBbYjDdU24m1l5hbDdvVld U4wgMQNxaxMCfnCKYjWF hBcPC7o=&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.5.7.exe

http://www.2016delivery34.com/c?x=wO umTykKWmah4uKFW BsvovAMxxHdhVr25RcYXblTE=&c=LWmYt2tkIEKD9kMnz9uowLs82q0Wia03H/W8Eoq8z fWeVBo6ViiBlpF0zE42KbDrSOc1sp0EsJEwy3oN1cyWTSu19DzoHsdJ3JbVfhBZpudiWBC0e42jpQrjF4oqZ0x10IXfrQSe6ZErx9gkvbpzoTzLG7s2bhsL2AW2ZCSUKo=&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.5.7.exe

http://www.2016delivery34.com/c?x=heuQTCUc2SRENWT6Rof6PCUMy1lcsCmy9QSRUWYcmfo=&c=4SOCVZeCbQJobMhVQWoUT0ZSXIHgD1HtPyRhieFa6gzUNd QkNPsetcbdHKLiZOovBWM6kM4qfCUzojFe4VCJMSVjvEWLlQ5tDs5j4NHAlgKe6ijTQdJIi2t87JzHyYuSgbvuYuH97eqbhwFpyHJ0OWOSx9Bzg6rVPIwlqPFzz4=&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.5.7.exe

http://www.2016delivery34.com/c?x=inH5xbFh7QFccdTppAAJqnD4a1AIRk/OAgQnWi MVos=&c=rwmFPGqZm7GO/udviX6cxSnPuP8R27AJO6dI8Hxs4MVJjRnhQxriiAcGs22OopsNXT5ADv80 UYZfnIgqT1VaCKPhqEg6L5uuvESPIB4ksXrLvHVfaxV59 EkFHA7YORdKP0fDemw70ZfUj7Tx3/JoQPJkaVtq JRhRPIUrTS0=&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.5.7.exe

http://www.2016delivery34.com/c?x=7hgLtWdtKihzujvc9v4WADiyj5WH93NwjOl LGzkhqA=&c=V2n 8szlAODixDfIKm3lRECo da65ZEvycbyqoZUCFxRSJV82YA2gIg7dzL4UZdKgBrzlrJjY2E7tuqg9tb0Y/3IiEm1KPEW gTpgl5B10O7zQlceTqx5Ar VfaWIUV9dmUCM/KyJf8t25W9BSMKtiN1TrpuObS6vlKgfVU/Ptw=&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.5.7.exe

http://www.2016delivery34.com/c?x=olJSDu8pFcHQyYKUDscgnDrlsZ1sSkirNRpFmXdMF1s=&c=fRcvC4uTgXdgbZZyE80te0O7Fl1KLVuPDogkXIUZlvx5s9/xi5OZfeAZ l1H1aguoBCempRY9vdeW3eb4MMo5VDHChkNYzEqs7Y5kwmarfMAB9ZGgMquI6ZzQnLGrvMPNpLAEIz0Rb2H0CYFyNwpjY7JDkEK5JEHozVBoECR3KM=&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.5.7.exe

http://www.2016delivery34.com/c?x=hdt9H2HjzYy0suKDyOXF8Np7ntyzQ58J/pOuiBfIeJs=&c= S qx47MEEG8NoUx3ZmS9/OAWrSupvWzWuU2QshVtIRcG/BYkLgtjXGrqA8Hf/xGLbshMWXjBviKNp8rdv9Ujd1iL7wdoxV3oKqsr8XXulhT8oC2BaDRgs7RTdcunLE0nFpgLPK6ezWQKk1yVqskfLFBDwz6gjPad4pX4sDF034=&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.5.7.exe

http://www.2016delivery34.com/c?x=kIYMg4 23M69NZNTmSm1lEjDSCyb536zjCAzDTSm sA=&c=/rkGhS7GzyOG3nnfe9xNP5sPHcpIJljqmjWNW4 ovdEAe QBSf8/vn DfOUeJWV9GdfOEz3tH9s oQoMA16V4ljqOCfp0Qn8hs uSB2u/jTWIGN6rfuwkeNV aJdGWQ4T6oE5k26CODDMkvLk3r2WN8tRtwoYX vo/ZVWB PSUw=&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.5.7.exe

http://www.2016delivery34.com/c?x=5IacUT8kPnoQMUykYE729aAewoWcZh5FhlvOQBRCVeI=&c=KWXQ Y7cW3GLxGXgx6nPUoPebwzjwYvkHpXMNTYTvvOYFusWE4xESMtRlxNhUM d6VGMcWOWef3Ed8wtL/EFmbkRLxr Cq4ekVnB1quZZTx0blt7tlfG2iowqFcN9AhKFyJh9 cpnEArDVnFMo XwEY1B50Y A741HH8w9BdFmc=&downloadAs=Stremio_Setup.exe&fallback_url=http://.../Stremio 3.5.7.exe

Latest 30 of 219 download URLs

Remove stremio_setup.exe - Powered by Reason Core Security