icreinstall_los-sims-3-programas-gratis-net.exe

Installer Internet Web

AgileMax (New Media Holdings Ltd.)

The installer utilizes InstallCore which may bundle about 3-4 offers for various ad-supported toolbars, extensions and utilities. The application icreinstall_los-sims-3-programas-gratis-net.exe, “Installer Internet Web Setup ” by AgileMax (New Media Holdings) has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The file has been seen being downloaded from www.besttoursvaults.com and multiple other hosts. While running, it connects to the Internet address os.solvefile.com on port 80 using the HTTP protocol.
Publisher:
Software   (signed by AgileMax (New Media Holdings Ltd.))

Product:
Installer Internet Web

Description:
Installer Internet Web Setup

Version:
3.4.4.8

MD5:
33e345424007f89f0225ec1a30a93c87

SHA-1:
f4f6de84b982f67e4209c1d3b74e201dc177448e

Scanner detections:
1 / 68

Status:
Adware

Explanation:
Utilizes the InstallCore download manager that may bundle various adware-type offers.

Description:
This is also known as bundleware, or downloadware, which is an downloader designed to simply deliver ad-supported offers in the setup routine of an otherwise legitimate software.

Analysis date:
11/15/2024 2:32:18 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.NewMedia.Installer.Installer (M)
16.1.8.15

File size:
958.3 KB (981,304 bytes)

Product version:
3.1.5

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Common path:
C:\Documents and Settings\{user}\Local settings\temp\icreinstall_los-sims-3-programas-gratis-net.exe

Digital Signature
Authority:
GlobalSign nv-sa

Valid from:
12/16/2015 12:04:31 AM

Valid to:
10/30/2016 3:53:45 AM

Subject:
CN=AgileMax (New Media Holdings Ltd.), O=AgileMax (New Media Holdings Ltd.), L=Tel Aviv, C=IL

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
112186313590F7C0AF7C143BC6BDE6200476

File PE Metadata
Compilation timestamp:
6/19/1992 10:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:RKSxgTgYTb5VISBjR4+UL5WwuLCv9yUQ3YuEjHyq8pU:RreTgmVVH/U9WwWCv9yJ3aZI

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, BF, A9, FF, FF, E8, 5E, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, 24, CE, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, 24, CE...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file icreinstall_los-sims-3-programas-gratis-net.exe has been seen being distributed by the following 50 URLs.

http://www.besttoursvaults.com/c?x=EKkmvITjyHhlOW7aH6Pwv12smGVMksMABoBnHLI76Nw=&c=UU2DVBx3WoGRYbqzOzt8pIhBEkypU08FafAvEhupiwnZaHBL2 P3vQe665wikbyLpJ3ekhgzU/CY6U Dey97exl zE8zDMk4uRBeIyAOKYNYx1T 2drnDgD11LL5xIE Jgn9Jh4GhfGVg8NS0zudTctVpVGcco0sIl01RFqzEf8=&e=0&downloadAs=los-sims-3-programas-gratis-net.exe&fallback_url=http://.../LosSims3.zip

http://www.bundlecentralbulk.com/c?x=VlC3u9WLS5CxgqM2MDWxfqpIoOjiRJyy1BdhqsfoX3U=&c=14S9GWQAigXeqzr4MtzPq7Ipoy4vR3Lln0qVWVjjPZiri8PEUvcJozEtA6nGMJ7Br 37ITd0W BW6FE7a7ECeTDVuD7zk243gjoZIq8KXHfkC0U2Hf64tLq0gBJY9WaQiyxoHb7pPOz6tioua5Z8qlBWkvpFHUkFn9rWBzMEz U=&e=0&downloadAs=los-sims-3-programas-gratis-net.exe&fallback_url=http://.../LosSims3.zip

http://www.sendtowersnew.com/c?x= F4Uu7mN3dG/h ZWDOvpEddqct1CGjheypLuKg7QjD0=&c=eSsYX2GzqOtBVNagaGXKgI5fPBEkcy7MEyES6ehz7p8tlIT9VhJkyhwsApXS4uTwX8uKWp2J/puIXE1k qtmhd4DdVzO855f4DqLkzXGxIs SVnucoy3buR0SiVBllLFj2s1OEFfqrxzvEIOuzWHAejo0plXiYtGqapYqa057/4=&e=0&downloadAs=los-sims-3-programas-gratis-net.exe&fallback_url=http://.../LosSims3.zip

http://www.sendtowersnew.com/c?x=D7eR yHcqZokV/Q8Cx qhzX73pxa3uaKtzWitIT1P/Q=&c=2uQRra2IizKFqEnnyjFrWygTDtGxxmcaBRaWDzeaKkqaWt reuefju8t 1yB42OjjJNBGCXrblVFva 4KMFKbeGsAhyyO/VVoq0/9T5t9pW8vpKIn7DNKZhNWF3r0uY5dPjo5UVSayrUJMzmdaR955YotRYkl0B 7XPRwRosGTZNglMJilPQSot3vX3K0Du1&e=0&downloadAs=los-sims-3-programas-gratis-net.exe&fallback_url=http://.../LosSims3.zip

http://www.sendtowersnew.com/c?x=nz1QM7aXGUvpBD6rEsGbFjSeAfBtLTurpCkKeWkJJaI=&c=RXPSkhDlijC31F1aLTvv5/iDHTrbC4u6g/fOw917bZ5D4Me/HiSRGmgziSSaHSg4J8IfKMqRX1dZZE496kL2B ubqiqfh4YcfGlx0mujGcEFS37hsvHk2zVDfubdgi 1meTLGcVVzAOrt4nD2BTz4RNZavcrxkMCKP8WLqQB6Ys=&e=0&downloadAs=los-sims-3-programas-gratis-net.exe&fallback_url=http://.../LosSims3.zip

http://www.sendtowersnew.com/c?x=WZXCDh3Shxkm1arS5vTINOhiG5jkcXPTe qVIVRTUac=&c=szYivmQtR8Jxpo/AtaZmyMPbkTiB2NlJE5pHwM0e4suYADywG ZkPavdxWteGZ6nbgA8QAcwxfcAqIG6CVlNErP0jmpQNnH8G GzUpJabNARFL1KQ8JL9LceVzxDnMyaetEDG2naE8 Qvhw8mWlYmWlEUaCdSqyaqj4OhgAEaO4=&e=0&downloadAs=los-sims-3-programas-gratis-net.exe&fallback_url=http://.../LosSims3.zip

http://www.sendtowersnew.com/c?x=mRnKmcmz CpiXGJBYhDhgqZboTBAwfAc0sU8U2QLBkk=&c=HI8FZyG2G6VbDqQZseDern0iPLu xdvfynYCA6l4UFS5cHpy6vSEuGWjgPvdc8DuwVyOb4wVlor9JOxL1x4rMfngly1W8VJuaN4CW2KQ8sVvYkxO0U94muVPTXl5HSsD6sEsYgdHPME/KmSIoIXm1zOMw90tp7jCD52VdRwAK3M=&e=0&downloadAs=los-sims-3-programas-gratis-net.exe&fallback_url=http://.../LosSims3.zip

http://www.besttoursvaults.com/c?x=MMlslBnZyOpin2aKlP2enZdkjnJcXlAj7wmMwAxZFx8=&c=vdT9rYlkV3HCqqSzXj/1sr4X6T4g4oInG9hHmtwe vGtIMBggWb4PdlJC7uO 7S/ClYSd9x1fNh0KWaKjBfp2yDXqfRYWQiY50PXpdt6Z7YYGXBZeynxdMJ5gOrhZu06FALbibUs9wFpxD52jRmR2blZz25S9f0INTu9Gg/0c44=&e=0&downloadAs=los-sims-3-programas-gratis-net.exe&fallback_url=http://.../LosSims3.zip

http://www.headsignchuckle.com/c?x=qLWSl9uSrIHhD/F4GmnH8iLNsDnROpnAWU/vM9v0/TU=&c=lLEXJPEQtKDLatRmStU8Tp1ICw/6STl/qoXQup0ZfT624UsHWXt11iJzpDxa8e1RptDdHvRC3lGRWmQNgS1bUESNwIyR H ZNnuKVzXIEFQJ DRFvNdvTMORYKIFyy9GY57TnWQLoDEmd0jN3vsfMRj/CEnjphr1E2WhDke88eo=&e=0&downloadAs=los-sims-3-programas-gratis-net.exe&fallback_url=http://.../LosSims3.zip

http://www.bundlecentralbulk.com/c?x=6KKyfaHWHsDDDfzcJXSHPR1d0A5fPmyzKJS8OadvAyQ=&c=MY97lwkGJDXQGIxUf7Hs78N6hH1rbM/haWuntStP8cUUE7FwZUQqGl5G0w4t5WyYZOC4D5xboltZGAKi0sjEieON6eUQejx7ZXfYivdD AeaGeVhwteXzBleWkmV/9HFOkJeYgOKEBFa6jClYh76iIhEmZ6MqktcBul1dXt4cpc=&e=0&downloadAs=los-sims-3-programas-gratis-net.exe&fallback_url=http://.../LosSims3.zip

http://www.sendtowersnew.com/WVl6OTRQWEpvU1dnbE1rWkRSRUYwWjJob1pVRnVaVWMxYUU4eWIyUjBOalZUTlU1TVJUVkxjbGc1YjBGbVJsY3dPQ1V6UkNaalBXNXRUMnBFYjFOSWNIWTBhM0JyTmtSTWREVXpWM29sTWtKeVFrSkNaaVV5UmxRMlpFOUNjakI1V1VkT1FrVXpSWE5zVkVWb1YzaFlVMDlOT0d4d2R6aHdXbU5pVFROUkpUSkdaSEYxYzBNbE1rWTJkMnR1T1ZOT1lXVnNVVlZMZWxGR2F6WjVUMmhTWjBrd1JEQnRRbmRZSlRKQ1VGUkpkMVpPWVZaVmFtWmtTV0puYkZacWNHNXlaekJGUlZORVNtNVpXRkkwTm01bk5URmlWREEzTVhjbE0wUWxNMFFtWlQwd0ptUnZkMjVzYjJGa1FYTTliRzl6TFhOcGJYTXRNeTF3Y205bmNtRnRZWE10WjNKaGRHbHpMVzVsZEM1bGVHVW1abUZzYkdKaFkydGZkWEpzUFdoMGRIQWxNMEVsTWtZbE1rWm1hV3hsY3k1a2IzZHViRzloWkhCeWIyZHlZVzFoY3k1amIyMGxNa1pNYjNOVGFXMXpNeTU2YVhBPQ==

http://www.bundlecentralbulk.com/c?x=k9hdBLfI1JQVVmtoGu jPOQgRWa1yxv3JjBBr3nAlok=&c=SOp51vCxVhdqYK4volwQHHK1gG/iYV51tNbo7caMA0BbyR479va8kB2DjOEhbxj9cdmTv7RF3FUEBQHS330yloc4zPOh0i yRGxYH4tqK7aLgy2Z0AvbXqck1naZqKovLWOD0xEVkS93P0Y72CL7bb2n9QBMegEXSf663uPuEZ0=&e=0&downloadAs=los-sims-3-programas-gratis-net.exe&fallback_url=http://.../LosSims3.zip

http://www.bundlecentralbulk.com/c?x=PjWbf5XSgEv2IX4JLrYFdMgWM4DoBLvCmfynrfNwFeE=&c=jvq0QqZR3Jr6V 8jkWZboLJAIKhx0GGAxdiQuQHRX6zTezk6sElHkHSoMq3Uk2YOqIl65GOOwOz12MPq0lgujiyNC UNhKtssxt qPkkiJ0QrfGI0hJzwYDwXYV0Zal lJe7QnNJka LkoSmcmacW4usA5F2dca2wl2fKahj3L8=&e=0&downloadAs=los-sims-3-programas-gratis-net.exe&fallback_url=http://.../LosSims3.zip

http://www.sendtowersnew.com/c?x=qNf12YEFJCIHeZeaZm5UCy4a5k535A915LKsg51woZI=&c=Rofezk/S1OAkxitbyPKvbrN2j4qHdyNoRgkj qrEc0eA0eVlejZpYFovmBuIa5wnIqHym1EnsfmnqLm0mJFq60FeBon3BMXice35NXvomgvDFX0wGU8NB/KIspj 3HB2qjhCaos7P2j0lC2Cu3LeoTVWJKASHpanvWnuJE Vug0UORVqdKBfZAPq v1er5er&e=0&downloadAs=los-sims-3-programas-gratis-net.exe&fallback_url=http://.../LosSims3.zip

http://www.sendtowersnew.com/c?x=2bUJTKaJK2excvyj 9OmnTLcyzTs5dNa8z6IZ8blP7Y=&c=IDPLDXSw4KLekq0i/HsJVazsLecnWwi5Z3n60GIQkY3j0DA0YXFll6Lri/X5jt8wc/ASYJ 2JaEGIOKiRNQhxdndc/Qe21ZaOSz0aIOD98ysQZ2cIQj3Sa7U r6Ahk2RQH1mP6o n6Vh7GDYH7BN7yxe VJgzcZKhJ6dGkLtpaNEVBNr6DjrkaDy62d0VZdV&e=0&downloadAs=los-sims-3-programas-gratis-net.exe&fallback_url=http://.../LosSims3.zip

http://www.sendtowersnew.com/WVl6OTRQVk56WnpWb04zbEpXRXBEYUdRMlNIZDBVWFp6Y2s0NFdrc2xNa1pSTkU1VWQxZGhha3B5YVdWVGMyVnROQ1V6UkNaalBVTnJiM015V1dGellqRjFZVmRTYmxBbE1rWmFka0ZHWjBWRk5EQm9kamRrUVVsQ09YTnFNR1ZUYmpkQ1RUSnZhblZ6TWt0aWNGWk5VRFpqYW5aWVpHTXlNRWhFVG5CMk9ITmtSMFlsTWtaeE1ETjVSemR3VlZOblJscFRiRlpqYzJGVWNYaHpSbkkxYTJObmNIWldaSHBQUTNOMVRHWTFSWGhWWVVaaWIwSlVObTlVUlVnMVZVcG1VamcwTm1aMGFXRXlhRWhMT0hGU0pUSkNkeVV6UkNVelJDWmxQVEFtWkc5M2JteHZZV1JCY3oxc2IzTXRjMmx0Y3kwekxYQnliMmR5WVcxaGN5MW5jbUYwYVhNdGJtVjBMbVY0WlNabVlXeHNZbUZqYTE5MWNtdzlhSFIwY0NVelFTVXlSaVV5Um1acGJHVnpMbVJ2ZDI1c2IyRmtjSEp2WjNKaGJXRnpMbU52YlNVeVJreHZjMU5wYlhNekxucHBjQT09

http://www.headsignchuckle.com/c?x=gA12Ks7QilFANqufd/CM9CHMBwNozv3QnjZtEvDc9zk=&c=1KP/2S3R2bjZJFuJZYpWdslYgK3MNzNwKOmwR kUIvyWx81M1A1e4rA2fKs2J8Ousth2gkBOX2UKueIP5jAUZamaqAQnOJLDiWcl2ddmW/HWvnx8pdWeJPSqrvh /E3/8jJpFNTkYwvdrUxqgpt e74HUi/CEz0Wjw8dyqprBb0=&e=0&downloadAs=los-sims-3-programas-gratis-net.exe&fallback_url=http://.../LosSims3.zip

http://www.sendtowersnew.com/c?x=Ens6KpQZaA7MW1MM1QCj n7uzosLjq648bhxD69jv4A=&c=5UeaRQmAS1WPA/2deqIAB oowcY8L7W6hzTUyJ141f3p /pwVt8vea4wbvDfxGeSPlJy5bW0DobP8MRDvBGfy6CJDzK8YalbZgGGlcca62W6ubr9YC9O9T/YGgOnRA8MoY7XvYYTzocxgm2S4wdVmDe8rN2fAmm2j4BQ5iqLvF8=&e=0&downloadAs=los-sims-3-programas-gratis-net.exe&fallback_url=http://.../LosSims3.zip

http://www.bundlecentralbulk.com/c?x=zI oIgCqVsVBJNZC4KxQY/St7Xs58PdMusIIHI5r3O4=&c=BMlGE1LYGQcP55IwSEzRVVJr2ELzeTEpoG4OmH3x4kh7/RXfE3VqeK2TiE26qL7/py6oOoxQiK8WYk3H7rY0c3dSJCUrAthyPTvrirTX7DM Xb0X3TZEfy8t40DUXMXxWt7c00eE7GGLA7K WRQAbVGXOpgTx1ZI 6hKQLDFMlQ=&e=0&downloadAs=los-sims-3-programas-gratis-net.exe&fallback_url=http://.../LosSims3.zip

http://www.headsignchuckle.com/c?x=MED ZzasL5p1rJC Iv3f1PcXN/CyB5nj6Yxc2HwooE0=&c=qwlgJAuq0X9 rVxJTUyK/N2U8Ld0ynCsGn7wduZVyCU /3Vgh6wG6TAVhsT6Yh5iBg0ggj8KYk3rzAlB7MijwlCgbDjuEy2hRpaFecrmJqASmq DhOuaprcLq 36WYJ5n 1HZ4xNFs 0Rv1MFaKNdv/8yj9eIRCBksf/a/9ubc0=&e=0&downloadAs=los-sims-3-programas-gratis-net.exe&fallback_url=http://.../LosSims3.zip

http://www.bundlecentralbulk.com/c?x=OWmZiSneGwvzYW6tYVocA9vIwNAWpBuszTU0V3tB6bE=&c=UUrAKtcD2teerAOO5c/Qws2 adAnWxqCg/TlNl0P7uRkF63XkM1eZknC5n/UE0o6fXmA24R2w3i/6etp3IMsvvG/ZcV/x ToNjcBCUaPtaIdNLloisWLXhjPEwzHhGDr6fmG9KeFbJbNRfE6GNo1rKzeDoEV5od4KdimO1opRkc=&e=0&downloadAs=los-sims-3-programas-gratis-net.exe&fallback_url=http://.../LosSims3.zip

http://www.bundlecentralbulk.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

http://www.bundlecentralbulk.com/c?x=PDRtCfndcos53eRrEL7qDJC13gPNxjcwbVf4lJeBVYU=&c=mjLsljAh5ss jBlQ20kDtrIgnNNIvkRw/S2a70eJ/OoqfKSSOZQTt8bSzwbS8tG6SuBagm3bUL1VQ2P VaDjR8AxFVm avfdMD9i42xRctQ3rw7F66hYHuBogjr0H2mz5mxhLjNiOFFpBTgdF2wgAeUtohA1PTBQQJo64BP8jJc=&e=0&downloadAs=los-sims-3-programas-gratis-net.exe&fallback_url=http://.../LosSims3.zip

http://www.headsignchuckle.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

http://www.sendtowersnew.com/c?x=iHPGXwsOkmz2//CSfa/IDJJzCqD/xJvTC1IRHlem8FM=&c=6X00R6VME9Q3kcggfCDKFFFQixm8Kpdaba/sA CulQ5DtVGHuhoSHd4TcrQcHzHwdWV3c6wbsFxGjTXPB/AJoGpVWSohGDpvn7T3iY TgjqB/jmRTqE WsNh28uxg5enEQgbInbEogAv0Ncnm/787GekUtxHcxYYr w8FpZ4x4Q=&e=0&downloadAs=los-sims-3-programas-gratis-net.exe&fallback_url=http://.../LosSims3.zip

Latest 30 of 191 download URLs

The executing file has been seen to make the following network communications in live environments.

TCP (HTTP):
Connects to os.solvefile.com  (207.189.109.121:80)

TCP (HTTP):
Connects to cdnus.solvefile.com  (207.189.109.121:80)

TCP (HTTP):
Connects to cdneu.webfilescdn.com  (65.254.40.36:80)