home

binkiland_iobitdel.exe

The executable binkiland_iobitdel.exe has been detected as malware by 13 anti-virus scanners. This file is typically installed with the program Binkiland by installCore.
Version:
31.0.1650.23

MD5:
d946977d16bd137a5d9479f3fa6eca74

SHA-1:
1d1da0d7ff4ac968335081a0b82e34974ebd8818

SHA-256:
9cabec31ddf1db5ba84e761546653a030f420578136e5d0403239e20344e90de

Scanner detections:
13 / 68

Status:
Malware

Analysis date:
4/25/2024 9:30:48 PM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Trojan.Generic.12750616
729

Baidu Antivirus
Hacktool.Win32.ADInstaller
4.0.3.1526

Bitdefender
Trojan.Generic.12750616
1.0.20.185

Emsisoft Anti-Malware
Trojan.Generic.12750616
8.15.02.06.05

F-Secure
Trojan.Generic.12750616
11.2015-06-02_6

G Data
Trojan.Generic.12750616
15.2.25

Kaspersky
not-a-virus:RiskTool.Win32.ADInstaller
14.0.0.2529

McAfee
Artemis!D946977D16BD
5600.6863

MicroWorld eScan
Trojan.Generic.12750616
16.0.0.111

Panda Antivirus
Generic Suspicious
15.02.06.05

Qihoo 360 Security
Win32/Virus.RiskTool.a62
1.0.0.1015

Reason Heuristics
Threat.Win.Reputation.IMP
15.3.11.13

Trend Micro House Call
Suspicious_GEN.F47V0204
7.2.37

File size:
990.5 KB (1,014,272 bytes)

Product version:
31.0.1650.23

Original file name:
binkiland.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\binkiland\application\binkiland_iobitdel.exe

File PE Metadata
Compilation timestamp:
2/1/2015 6:54:10 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
12288:fMCUUl42yySZ9GV9OqhmgaJMI7FOwvmy5tGFZLwkHHYB60Aj+xgYxj1J+Zb:EcI+aPFOwvmyPGbRtRjkPjaZb

Entry address:
0x47242

Entry point:
E8, 58, B2, 00, 00, E9, 89, FE, FF, FF, 8B, FF, 55, 8B, EC, 51, 53, 56, 8B, 35, FC, 32, 46, 00, 57, FF, 35, 74, 35, 49, 00, FF, D6, FF, 35, 70, 35, 49, 00, 8B, D8, 89, 5D, FC, FF, D6, 8B, F0, 3B, F3, 0F, 82, 81, 00, 00, 00, 8B, FE, 2B, FB, 8D, 47, 04, 83, F8, 04, 72, 75, 53, E8, AE, B2, 00, 00, 8B, D8, 8D, 47, 04, 59, 3B, D8, 73, 48, B8, 00, 08, 00, 00, 3B, D8, 73, 02, 8B, C3, 03, C3, 3B, C3, 72, 0F, 50, FF, 75, FC, E8, E6, 44, 00, 00, 59, 59, 85, C0, 75, 16, 8D, 43, 10, 3B, C3, 72, 3E, 50, FF, 75, FC, E8...
 
[+]

Code size:
392 KB (401,408 bytes)

The file binkiland_iobitdel.exe has been discovered within the following program.

Binkiland  by installCore
49% remove it
 
Powered by Should I Remove It?

The executing file has been seen to make the following network communications in live environments.

TCP (HTTP):
Connects to a23-41-172-135.deploy.static.akamaitechnologies.com  (23.41.172.135:80)

TCP (HTTP):
Connects to ec2-54-232-204-22.sa-east-1.compute.amazonaws.com  (54.232.204.22:80)

TCP (HTTP):
Connects to ec2-54-225-218-28.compute-1.amazonaws.com  (54.225.218.28:80)

TCP (HTTP):
Connects to a23-196-23-20.deploy.static.akamaitechnologies.com  (23.196.23.20:80)

TCP (HTTP):
Connects to ec2-23-21-242-90.compute-1.amazonaws.com  (23.21.242.90:80)

TCP (HTTP):
Connects to a184-85-142-3.deploy.static.akamaitechnologies.com  (184.85.142.3:80)

TCP (HTTP SSL):
Connects to 186-231-74-50.ded.intelignet.com.br  (186.231.74.50:443)

TCP (HTTP):
Connects to rtr3.l7.search.vip.ir2.yahoo.com  (217.12.15.96:80)

TCP (HTTP SSL):
Connects to rtr3.l7.search.vip.bf1.yahoo.com  (63.250.200.63:443)

TCP (HTTP):
Connects to ec2-52-204-155-35.compute-1.amazonaws.com  (52.204.155.35:80)

TCP (HTTP SSL):
Connects to e2.ycpi.vip.nya.yahoo.com  (69.147.82.61:443)

TCP (HTTP SSL):
Connects to e2.ycpi.vip.lob.yahoo.com  (87.248.114.12:443)

TCP (HTTP):
Connects to a72-246-216-230.deploy.akamaitechnologies.com  (72.246.216.230:80)

TCP (HTTP):
Connects to ec2-54-233-142-2.sa-east-1.compute.amazonaws.com  (54.233.142.2:80)

TCP (HTTP SSL):
Connects to xx-fbcdn-shv-02-gru2.fbcdn.net  (157.240.12.16:443)

TCP (HTTP SSL):
Connects to xx-fbcdn-shv-01-gru2.fbcdn.net  (31.13.85.4:443)

TCP (HTTP SSL):
Connects to edge-star-shv-01-eze1.facebook.com  (31.13.94.19:443)

TCP (HTTP SSL):
Connects to edge-star-mini-shv-01-eze1.facebook.com  (31.13.94.35:443)

TCP (HTTP):
Connects to ec2-54-233-73-101.sa-east-1.compute.amazonaws.com  (54.233.73.101:80)

TCP (HTTP):
Connects to ec2-54-228-223-10.eu-west-1.compute.amazonaws.com  (54.228.223.10:80)

Remove binkiland_iobitdel.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.