home

icreinstall_los-sims-4-programas-gratis-net.exe

Installer Internet Web

AgileMax (New Media Holdings Ltd.)

The installer utilizes InstallCore which may bundle about 3-4 offers for various ad-supported toolbars, extensions and utilities. The application icreinstall_los-sims-4-programas-gratis-net.exe, “Installer Internet Web Setup ” by AgileMax (New Media Holdings) has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. It is also typically executed from the user's temporary directory. The file has been seen being downloaded from www.sendtowersnew.com and multiple other hosts. While running, it connects to the Internet address os.solvefile.com on port 80 using the HTTP protocol.
Publisher:
Software   (signed by AgileMax (New Media Holdings Ltd.))

Product:
Installer Internet Web

Description:
Installer Internet Web Setup

Version:
3.4.4.8

MD5:
5d21cc2a86ee5d084d27eda46b02f1c6

SHA-1:
b5ef816e413ccaa2061f5e85a4c0ef7992a5b53e

SHA-256:
f3ef88fff06408a3aa3080bef925befd038a50266854e9f4e758908df6230da5

Scanner detections:
1 / 68

Status:
Adware

Explanation:
Utilizes the InstallCore download manager that may bundle various adware-type offers.

Description:
This 'download manager' is also considered bundleware, a utility designed to download software (possibly legitimate or opensource) and bundle it with a number of optional offers including ad-supported utilities, toolbars, shopping comparison tools and browser extensions.

Analysis date:
11/15/2024 6:15:18 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.NewMedia.Installer.Installer (M)
16.1.16.1

File size:
958.3 KB (981,304 bytes)

Product version:
3.1.5

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Common path:
C:\users\{user}\appdata\local\temp\icreinstall_los-sims-4-programas-gratis-net.exe

Digital Signature
Signed by:
AgileMax (New Media Holdings Ltd.)

Authority:
GlobalSign nv-sa

Valid from:
12/16/2015 4:04:31 AM

Valid to:
10/30/2016 7:53:45 AM

Subject:
CN=AgileMax (New Media Holdings Ltd.), O=AgileMax (New Media Holdings Ltd.), L=Tel Aviv, C=IL

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
112186313590F7C0AF7C143BC6BDE6200476

File PE Metadata
Compilation timestamp:
6/19/1992 3:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:qKSxgTgYTb5VISBjR4+UL5WwuLCv9yUQ3YuEjHyq8pU:qreTgmVVH/U9WwWCv9yJ3aZI

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, BF, A9, FF, FF, E8, 5E, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, 24, CE, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, 24, CE...
 
[+]

Entropy:
7.9306

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file icreinstall_los-sims-4-programas-gratis-net.exe has been seen being distributed by the following 20 URLs.

http://www.sendtowersnew.com/c?x=mp/rzQ8YmQ4qsdT1arfZj0K u01v0gOXS7eqmvCA1mg=&c=XANnAhXt9S6QBb5BtgAeuKMhpMhimr2KVTqv484GcENvssJCIU62grpKCRzkY9/ICqLldZcQHR1NP0z6V04055DmccsQv7sWB7OiVGcYRu8NLEx7Q/m4SZR3DHAzasgXZLUilgAu7uY6xRq9KLO5XdDu3r/TIWS7Uym023Y/98s=&downloadAs=los-sims-4-programas-gratis-net.exe&fallback_url=http://.../LosSims4Wallpaper.zip

http://www.bundlecentralbulk.com/WVl6OTRQVmxYVEdkc1oyMDVlRXBWVFc0bE1rSmliSFZsWVhWNlQwWlZlRkZSYW5CUWNtOXdlRTV5Y0ZwYVRuUTNUU1V6UkNaalBXNVBlWFZwY1VsdFlUaG1XR3BSVjJwWVlpVXlSblo1Ykd4T1YwUTBhR0ZhTTBoWmNUVlVKVEpDSlRKR09YQTBPSEIxZUV4YWNGcDBlRXBuWjAxaE5pVXlSbkpvYzFKd1dqTnpSek15YjFFeU5FcFZZbVpLUXpWdE0xbGpVWE00YUVzME4ycEZVU1V5Um5JbE1rWm1jVGd3YUZZMmNHSjRUVzVMTkhGNE5UQnJhMDVKZFU1WlZsWnNUelJpSm1SdmQyNXNiMkZrUVhNOWJHOXpMWE5wYlhNdE5DMXdjbTluY21GdFlYTXRaM0poZEdsekxXNWxkQzVsZUdVbVptRnNiR0poWTJ0ZmRYSnNQV2gwZEhBbE0wRWxNa1lsTWtabWFXeGxjeTVrYjNkdWJHOWhaSEJ5YjJkeVlXMWhjeTVqYjIwbE1rWk1iM05UYVcxek5GZGhiR3h3WVhCbGNpNTZhWEE9

http://www.bundlecentralbulk.com/c?x=oKbQQM tr6cx0Fj2WEoCiPbldz2vML2HZV uKklW3Xw=&c=DiAmrj/sN5JsA5uqa3pkRcG/eick68xOJzrLqjzyY/b5yeYxJPP6kH 9WnnFjCkZ2fl6kxgbXvrFEvMW40jfCnT0p550H1Weu9U94XtXbtRspUSLFZradLOhz5OZ2nueGH0h/0VSRF0BY c8ZMKdMJx7MnGzMqGJj30oltbUvS8=&downloadAs=los-sims-4-programas-gratis-net.exe&fallback_url=http://.../LosSims4Wallpaper.zip

http://www.bundlecentralbulk.com/c?x=J2XpZL 3anrkSD9KmGbJxq1BCth/WYFicFlVclR9BZc=&c=eIEPOO8P04Ht954kpD4w5mevG/iiLSoOYkFIesCJLZmQMwv9hgae/HCEekitYQCzd/FMgEIJFSYgS6QM5VrxfHkZyMuimmwh/m9RkjmmuviH3ZmajviVo GYpVlxZ/Ng3OC97EVbMeHJfUMCXLJYTRLTEH7/l1vPNw6kRcSbOu0=&downloadAs=los-sims-4-programas-gratis-net.exe&fallback_url=http://.../LosSims4Wallpaper.zip

http://www.bundlecentralbulk.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

http://www.bundlecentralbulk.com/c?x=L3NtTWI PZml1jJxXG4Bd5 IPGjQnDk/7tOMsy7 x6U=&c= jLkAB u3Gwub4uZPozZTVnf9NttQ4PnKpVWQGIDU h7hTXSxbiI4Vyw a523Nq/bwe5bieT8vxbBuRk9ibYjiSNYt53cBfbrVTfe9ZRjlrMBbaVyjN7BtabIw1j2aMLZxaGT18mO0PfW2nzPrOS0Zv4eTDy6q4pvOBwx1C9Bd8=&e=0&downloadAs=los-sims-4-programas-gratis-net.exe&fallback_url=http://.../LosSims4Wallpaper.zip

http://www.newsendtag.com/c?x=SwEcKm5sN7tPGUFYfPrw7LU6TEXCo8gpWRMrDXc6d7M=&c=gGAWDuqyDV0n/U8jZd3VLVsKnt8lvcTmLixxIhaw7SWnNENozYzSVb6df8IMHLKU7tIfTozg4BHmFygQpan8Dn/O3SEsS5nQaAYYb3ojyWeYQ zbMAURgYfJHeHfO3wzhJAJ74yxX0FuLL2 ahTWDg==&downloadAs=los-sims-4-programas-gratis-net.exe&fallback_url=http://.../LosSims4Wallpaper.zip

http://www.sendtowersnew.com/c?x=wwCnAHiCzlJ/yKgtze0fdsft7z/l5Y iiEUv44b169o=&c=5h8imIaRQiKXdgjuqFjLIYMhHlx01TVNVjNZuj8cjAw3gNBEeDqANKW1U/j0Zfco0vUsgyxNlv6gkY RlmZ9XWSpCZEZD9PyOeyrWdNBrsoZmVvXkqUC8n8zB1ZG/46nSm0L5HcdT9L9FrTRMjzmoZCFyWCiuAsCoe1BD47DnKk=&downloadAs=los-sims-4-programas-gratis-net.exe&fallback_url=http://.../LosSims4Wallpaper.zip

http://www.besttoursvaults.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

http://www.sendtowersnew.com/c?x=3N/Bguxd8v1SjAGUXvmn7GZBwiCB 4/efUchsG JoQI=&c=gFcjdzd5d/FnwvNVAeDrS0acGmJs9QqyR3asnM8c1AniCkE2u//3I26cFSNwYp1j/0 2n3X sYR45CqxuEcTzje1jxYuc6nCrExq7iBrsJR4gzL/MEr4dA3jxCUT7afI77Pzs9LEFM7wN6kQZQ6cHj7r7rGqFEEKEfCc0ai3iQ8=&downloadAs=los-sims-4-programas-gratis-net.exe&fallback_url=http://.../LosSims4Wallpaper.zip

http://www.besttoursvaults.com/c?x=RKIhxGJWwevZqMiH3Lbzv/S3cIK38CporTeOzze3IqQ=&c=7 NfL0CT7tJtoT4izYz0Wo5EX4kA38uuUaOfxANqv7leLDzDQz/TNwuukSD2BAYvNXA1p EYZYSCuYAFIm9qKzIma2S99iJAJLvZgeZoucOc2VwpoW4Nd3nylkiMCWsHIp5OKwnUi09 5/fSCMKR9fkxPXerS9uu/AIqqOK1Y1k=&downloadAs=los-sims-4-programas-gratis-net.exe&fallback_url=http://.../LosSims4Wallpaper.zip

http://www.sendtowersnew.com/c?x=TnQiP9i zRKefIO54AN91PfC8E0GrS5CJ6o/51b/ b0=&c=Iv6dOLlyNzZVjck1IpO4 wjtn0YwEZrFEp36I4CEc8tLtbinWZOaF5Hu/2sX9j5MY7CNhPz8rc79neBe/3ufQ2HdYiy971Qf1gUTOf7CbKGxdou2d233X0Rv72K9phWsiOfTkFTPHWmb uH49hsfkeWR43lrPAB8rMz2sEm 8B8065zWR mgbx7HlCznhIFg&downloadAs=los-sims-4-programas-gratis-net.exe&fallback_url=http://.../LosSims4Wallpaper.zip

http://www.sendtowersnew.com/c?x=Hc jRrFPJKswWwAyjxPnCag6WrWzKSfy/a7ch5yD5vc=&c=HbpoK2MhKBolzLFX3Y5F3 dt/DrFGu9nB8gRO1Y81TIbcZvVKuU0EIyvhoHnN6GWU2eLPJTLuzbxDAJUdxRUTvE/We26WsdJSGyqX9DGS7L17BY X8IQMD0SlNhux3WSroCIhNgFlQMzpUcuBmkB2iYSd1i1XeOuWvQ0B0sjqlU=&downloadAs=los-sims-4-programas-gratis-net.exe&fallback_url=http://.../LosSims4Wallpaper.zip

http://www.deliveryfactoryvaults.com/c?x=d/PsyIe9OzrS7h73J42djpILbdtUzUozsht9dAQEyGw=&c=EpFD 9c9E9rhq1JmVQ95/enR9yZpMdSp9d6 ePbmmMeIk S0rRk03XRvTo0MCbGQurLdtRNHQYq0edBq7SGu7B/SNnJLBWJ5a1zdp61njS4AEvCnc926AfY07PWS96kD&downloadAs=los-sims-4-programas-gratis-net.exe&fallback_url=http://.../LosSims4Wallpaper.zip

http://www.giftbulkstock.com/c?x=O GjwtBt3Vk7sBwoiz8DO9UTVlSMtLhOhCg4 XoUBwE=&c=ZyaO2vCq4QM4RTHffRDyBGy3lcpWkAOQdF2fDjpunMiaNc2ZnN4cqIuNY3Lr6I4JmC7J07k3bHe8hr2Smcss9h2g511SfuN1oCjVU7QMcl4TfzIQV3UiOLn6FtwQ cN3&downloadAs=los-sims-4-programas-gratis-net.exe&fallback_url=http://.../LosSims4Wallpaper.zip

http://www.newsendtag.com/c?x=38TwEalbJ50c4iPgVYu4aq/orI00Q/U8KM7vnF7TDzk=&c=epbXGgoC9b0JT 13Oq7WoyvDoplpKp8FNrs9dOO6kkJvMLtmAx5dPiWzd1gOHsHQCnQtDUCSAlpNg 9vWRU06VjRPzu5AydG43pQI1u/hUY1PopoBFjoHiKlpxqf5Lic0d85NuNuziRwUtbvcDCMw==&downloadAs=los-sims-4-programas-gratis-net.exe&fallback_url=http://.../LosSims4Wallpaper.zip

http://www.tourstagranch.com/c?x=p6EgDMQeBXfnHjfDeRBFpr23XOiNXqp1HUpr4nOGCT8=&c=akaujh4YPPgNiyxkddB2X/II7pZkblu6LccqXjoaknc7G TvA/T4pOztUGEX/GrumNFJ7MMSEIPIc54vJSg7STKaHE7ri3vVte3UFgxIELkMzVaiy6aOYX9L0WWXmeKI&downloadAs=los-sims-4-programas-gratis-net.exe&fallback_url=http://.../LosSims4Wallpaper.zip

http://www.giftbulkstock.com/c?x=XxuU7MSDFUB60OtjOLkxAhZ/V7bS/ckYsSZCtc6w0j0=&c=dlI33FN8zVFTabR9TLYXZtW/nQz4j257iI V GIPRaglLpqa6LnpOBs/EOyd3qPYiPA6eR9w4SxQa1M7 70anpTujds s2uZ46/ymheg0vsEp4G0UPz6LfKztJevv2Wd&downloadAs=los-sims-4-programas-gratis-net.exe&fallback_url=http://.../LosSims4Wallpaper.zip

http://www.tourstagranch.com/c?x=K1qsMy7Ok8UEAACUTnNILHUtMDAxbUbozzklWgHDh70=&c=GaZvT2muD/mCbgeK9HdBzt67B VL/7pPZgNzH6MY3fKQXhKNBqguSh4U TOygSDL1g1JMNNoI44OcuzWLEtXkEot5/qrt3DLeU0RzwrW BcgROlWY5X1rBVRf/56JMt3zfdlAB56BHi3JWag9TAbm4mJnT7bKvKJk53EIIsem3v0pP7wn1lm5r9pDoVUQbzx&downloadAs=los-sims-4-programas-gratis-net.exe&fallback_url=http://.../LosSims4Wallpaper.zip

http://www.starsourcefilesnow.com/c?x=VEniNLxkdiSJDop46B/zg2kDqo/tSJXCWuKoN /3eNw=&c=/oll XtpsxlLFv/w25knRC wEYHXQm/HEFVcPhb6WciEyP3LK b8XvEKWjpnurHoRaizInWLITXTAAaC9pCFF G/MKXYm3oi6EHVoPNJVG8eYHRFCMpJG6I8e/9rI3p7&downloadAs=los-sims-4-programas-gratis-net.exe&fallback_url=http://.../LosSims4Wallpaper.zip

The executing file has been seen to make the following network communications in live environments.

TCP (HTTP):
Connects to os.solvefile.com  (207.189.109.121:80)

TCP (HTTP):
Connects to cdnus.solvefile.com  (207.189.109.121:80)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.