» gtasanandreasmultiplayer_0_3_7.exe
Overview
Analysis
File Details
Downloads (19)

gtasanandreasmultiplayer_0_3_7.exe

Installer Internet Web

AgileMax (New Media Holdings Ltd.)

The application gtasanandreasmultiplayer_0_3_7.exe, “Installer Internet Web Setup ” by AgileMax (New Media Holdings) has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The file has been seen being downloaded from www.bundlecentralbulk.com and multiple other hosts.

File name:

Publisher:

Software (signed by AgileMax (New Media Holdings Ltd.))

Product:

Installer Internet Web

Description:

Installer Internet Web Setup

Version:

3.4.4.8

MD5:

054215aae9a4236a240c0fe6a51c5193

SHA-1:

524a6af92cb6ed86d93e4d2563df496ee9ac295b

SHA-256:

df4b994c12ad28f84a3092a646112b28a5be15dae2113ad3d867a88093ec35bb

Scanner detections:

1 / 68

Status:

Adware

Note:

Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Description:

This 'download manager' is also considered bundleware, a utility designed to download software (possibly legitimate or opensource) and bundle it with a number of optional offers including ad-supported utilities, toolbars, shopping comparison tools and browser extensions.

Analysis date:

12/26/2024 8:36:44 PM UTC (today)

Scan engine

Detection

Engine version

Reason Heuristics

PUP.NewMedia.Installer.Installer (M)

16.2.13.1

File size:

958.3 KB (981,304 bytes)

Product version:

3.1.5

File type:

Executable application (Win32 EXE)

Bundler/Installer:

installCore (using Inno Setup)

Common path:

C:\users\{user}\downloads\gtasanandreasmultiplayer_0_3_7.exe

Digital Signature

Signed by:

AgileMax (New Media Holdings Ltd.)

Authority:

GlobalSign nv-sa

Valid from:

12/16/2015 6:04:31 AM

Valid to:

10/30/2016 9:53:45 AM

Subject:

CN=AgileMax (New Media Holdings Ltd.), O=AgileMax (New Media Holdings Ltd.), L=Tel Aviv, C=IL

Issuer:

CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:

112186313590F7C0AF7C143BC6BDE6200476

File PE Metadata

Compilation timestamp:

6/19/1992 5:22:17 PM

OS version:

1.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

24576:oKSxgTgYTb5VISBjR4+UL5WwuLCv9yUQ3YuEjHyq8pU:oreTgmVVH/U9WwWCv9yJ3aZI

Entry address:

0x9C40

Entry point:

55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, BF, A9, FF, FF, E8, 5E, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, 24, CE, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, 24, CE... 
[+]

Entropy:

7.9306

Packer / compiler:

Inno Setup v5.x - Installer Maker

Code size:

37 KB (37,888 bytes)

The file gtasanandreasmultiplayer_0_3_7.exe has been seen being distributed by the following 19 URLs.

http://www.bundlecentralbulk.com/c?x=MVq/dK3XYupwkRAsIzjGOyhLHCg7zNkfW/mUtJFANOM=&c=kYwRgbQSuD841eeoNS0W4Tyr1Cj4xwMgDrHk Bx53LTo0oFnaxqCNhn5cNaq457h/nvcOxsFSmsyZCPUIaCGTedZVRcJeqEZn/snyX076NdxBjzbcnlnZYGu6EOh2eeyYd cclwaivE/Oi1/gshlyO49JFWWToP8Nxa2ErR7R6Y=&e=0&downloadAs=gta-san-andreas-multiplayer-programas-gratis-net.exe&fallback_url=http://.../GTASanAndreasMultiplayer_0_3_7.exe

http://www.sendtowersnew.com/c?x=ebOmU9FVXDDohtMehHPS0yxwb0XAKVwvWaKNsyZzG9M=&c=nmJPLd9axH4Wqk9NjAqjUIyAKKSqFtUx8eQ6XHj75Ist v8oe79fkZ5ZnXXtVq26qMq4twk dKJV84Vi1y/N66qmwG5xp64sVm6s/EzCXsEFW1fVbeZ1/exqOtseNY2BwWv5dzOe1IsvP81WoPWRhtYrNREYBMW7ccvk9c6gNNs=&e=0&downloadAs=gta-san-andreas-multiplayer-programas-gratis-net.exe&fallback_url=http://.../GTASanAndreasMultiplayer_0_3_7.exe

http://www.sendtowersnew.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

http://www.bundlecentralbulk.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

http://www.bundlecentralbulk.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

http://www.bundlecentralbulk.com/c?x=TYNooqQ6LI5GVz1xH6EHYiOFeLeCXttCZyhruLbiRLs=&c=ZohgrxDYNxU4V5vh0MiNg8sZUU6NB21B67RE8aY5vOhi6zrqc2l9djF/UGeI1h2MLfpwK44v51U1wuqJRyuIEk8iF7rAwhqX/o8/k/lcx4tDBwC7Ri4YKssvCPRUK0eTBEmnE57rUoJY9g/1RRx4lxznhZRj7SRs/nP lJCaPlE=&e=0&downloadAs=gta-san-andreas-multiplayer-programas-gratis-net.exe&fallback_url=http://.../GTASanAndreasMultiplayer_0_3_7.exe

http://www.bundlecentralbulk.com/c?x=qtA9DIpsGqH6TV8g3/cG3gmAVEcwOF8t6LKKicstYME=&c=iZxbOv/K7ZHHtwcjBjLJRjlHLSFag0eLkPwryYsXvZJx6NkZ eC919Q85OeZ27Di05/MJsfqURqBQdfCsnRRhCgg1Rgx7D22JDKYaGYQ31sMi9k6XWNYoXvRodrbnvzZxlhtmDIWM4Ch8B740ris0J2FNrsWqqQfhoMjpsRHdaE=&e=0&downloadAs=gta-san-andreas-multiplayer-programas-gratis-net.exe&fallback_url=http://.../GTASanAndreasMultiplayer_0_3_7.exe

http://www.bundlecentralbulk.com/c?x=39w7dvM/I83ZYUxUTeBi7YAQwchBaitL4hN9/vFCJrI=&c=FFMUYmAhnemVW9yvtSOkuBhiBpxlAtQ V7syF7 ft6vTjKuv19kBfTo3wn9elwOlex/xv1QmdnR4WqbJfpB5M0jWnxaT0kWzKUDb1djpMPCs0U1gu0K4QDBx gFnewRMov748J CsSrWdrk0Xj7JHIGFQ2g790xfJfNx77G2HQ0=&e=0&downloadAs=gta-san-andreas-multiplayer-programas-gratis-net.exe&fallback_url=http://.../GTASanAndreasMultiplayer_0_3_7.exe

http://www.sendtowersnew.com/c?x=UqrklCRSXytamhn59E7G1ULjynfjFFhxn2oBKo ghDU=&c= D9lj0tn8I7t29fHoRcna7dx4rauBlWkcf 2wt2bSBhwv9iBdN0fNYK39YZHW0CmqaWiyPfIavH7am0WdLQxmMZ7GOLWX1d0pNXsn4lA5eZm69hzqhQA6T0vJrxCzhIhd6kuZk057u4oqJtk5aw/cNjCEr4IICnVYAyrFfwSM1E=&e=0&downloadAs=gta-san-andreas-multiplayer-programas-gratis-net.exe&fallback_url=http://.../GTASanAndreasMultiplayer_0_3_7.exe

http://www.giftbulkstock.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

http://www.headsignchuckle.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

http://www.sendtowersnew.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

http://www.headsignchuckle.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

http://www.sendtowersnew.com/c?x=I0Y f1hLfk sb8D4WAl l9tCG 0Mrv9XxXUk2k9UE8=&c=DUf0VKjYl4g2myPYSkDI9cPdLMJGKZGuaNxT4uPVhZ6 qKI76469c9XnbpAnaFKCcuoXFlCiE0fJExQaxRFt1dLzEZN8/UygX8sc/Fxiy0hh00Abv5Dv27lO/yyGHWrKvnf/nCnqOB95DbqmCCsyfFkWjryzlyrrfGCqkO/FqdQvelEJE7EqrDs/W0wn4Z3I&e=0&downloadAs=gta-san-andreas-multiplayer-programas-gratis-net.exe&fallback_url=http://.../GTASanAndreasMultiplayer_0_3_7.exe

http://www.sendtowersnew.com/c?x=XWgqMWYRy/78FqRjanibcxpRw8DdFFgI7fOD91E3nAc=&c=8ywD1xRgAkY1iSCDimHB1F26aCDohAud1SCBic0TB3nA8jL/LGNpws4iU00hxUrSCtASw7g4jG5RWoqDLiwH9V3z115yYOEuNCCztk7pbmC3Q2GB6 J7HXSmaypVrp8o4e2o18AspE5N7y3 mS4gRcYFRLx1kJ1Nuh0hQtCG/0RAXpedEaAQeP1TIRR8it0z&e=0&downloadAs=gta-san-andreas-multiplayer-programas-gratis-net.exe&fallback_url=http://.../GTASanAndreasMultiplayer_0_3_7.exe

http://www.sendtowersnew.com/c?x=KraSRB 3BAEGC NO/B9B28KmKYfRmwTBD24geKFZiQI=&c=ZgdIyfNCx9jPUaimKnPOWGe1Ev98nUm37Wm5wVEQC5v7x8S7SrnXSrED/clCuM2gx9ebK5t6Wa/HJcucZwr4A /R3YjDwwHwDpK1TBBxYaZ0BFgqQ/cC3zr2uDUd0ZZl596LQrSMSLwnWQHyI5vfVpBMw6jCeuFS7jfAx4dJGRvJMgDNn3LuR9saqzYPjkUC&e=0&downloadAs=gta-san-andreas-multiplayer-programas-gratis-net.exe&fallback_url=http://.../GTASanAndreasMultiplayer_0_3_7.exe

http://www.tourstagranch.com/c?x=ODnjA8JJFJ JiDwRpZnA8iHl5TYUqEQKJih5telPxVY=&c=v LF0rG glcovEVvn2LRJpIzktSg/Ph9zoGo7DWTyaghP9bTkv4YIX5CcH51KGzIvoajMHeDbElfeTx8RdWhmoNnP/AagMRN5oTY1ySNXVtNPb3XrlGoAlmal fZPm 3YrVDDa25lR5tqwx0oHF3 v24DRpg7zncbGxBm TDQIsGmr9xUFNklTNFNAPX9sc0&downloadAs=gta-san-andreas-multiplayer-programas-gratis-net.exe&fallback_url=http://.../GTASanAndreasMultiplayer_0_3_7.exe

http://www.giftbulkstock.com/c?x=WI6rMaThPtMMM45GyDXYlFfn kJ/qccE2s6O96MgwFk=&c=M2DDDsL/aRWJZrORn/wt5Qg6OW1ZfiEnbQZt2vbSmQW5rm2XALpvbf6DUrkbjkADiBMxeOPNJY3EwuTTSQpapAGwwTTImBwVB/cySXEAgDJ BdZCeMhdZpOpCD2yihgEAM 8GGOAzn4d4kvwg/zynkJHKG3wdQ/ yfm7tm8pOho=&e=0&downloadAs=gta-san-andreas-multiplayer-programas-gratis-net.exe&fallback_url=http://.../GTASanAndreasMultiplayer_0_3_7.exe

http://www.giftbulkstock.com/c?x=Egydn02A/dp2o94L4U36y9fTy54b3sHfjMxH3hXzwPs=&c=b XKL9KU6LXJrZcmuLVu5Y5zIp7G3/tfc1TKBqBGwr3zW3yXSLVrQ lxqptiPTdw5ah7rVowBW1cwvoAvGEQQcZzJ22tHJDUPbiw2C7TFX2HIEQFdnYzSFjzAafO/sDw2K7pm5Maht6RumlM4sOeOOuQjWycLq5iCh4 5/px/RtAiH6Dn7yU xJCnUyGWFhk&e=0&downloadAs=gta-san-andreas-multiplayer-programas-gratis-net.exe&fallback_url=http://.../GTASanAndreasMultiplayer_0_3_7.exe

Remove gtasanandreasmultiplayer_0_3_7.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.