» naviextras-toolbox-programasejogos-com.exe
Overview
Analysis
File Details
Downloads (18)

naviextras-toolbox-programasejogos-com.exe

installer web

MediaProgramas SL

The installer utilizes the installCore download manager which may bundle additional offers for various ad-supported toolbars, extensions and utilities. The application naviextras-toolbox-programasejogos-com.exe, “installer web Setup ” by MediaProgramas SL has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The file has been seen being downloaded from www.bundlesafevault.com and multiple other hosts.

File name:

Publisher:

MediaProgramas SL (signed and verified)

Product:

installer web

Description:

installer web Setup

Version:

4.7.2.1

MD5:

ee58d88095a4cce27875eeb54b21e949

SHA-1:

ddd377a009add4d7316931b7a220e100f9b8032e

SHA-256:

4d4aebe7ad223f8b3618b233390696d04a59a35dc526bcb5ec04a4022d4d0e59

Scanner detections:

1 / 68

Status:

Adware

Note:

Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Description:

This 'download manager' is also considered bundleware, a utility designed to download software (possibly legitimate or opensource) and bundle it with a number of optional offers including ad-supported utilities, toolbars, shopping comparison tools and browser extensions.

Analysis date:

11/24/2024 9:56:39 AM UTC (today)

Scan engine

Detection

Engine version

Reason Heuristics

PUP.installCore.MediaProgramas.Installer (M)

16.2.27.6

File size:

1 MB (1,063,208 bytes)

Product version:

2.5.9

File type:

Executable application (Win32 EXE)

Bundler/Installer:

installCore (using Inno Setup)

Language:

Language Neutral

Common path:

C:\users\{user}\appdata\local\microsoft\windows\inetcache\ie\{random}\naviextras-toolbox-programasejogos-com.exe

Digital Signature

Signed by:

MediaProgramas SL

Authority:

GlobalSign nv-sa

Valid from:

1/19/2016 8:45:23 AM

Valid to:

1/19/2017 8:45:23 AM

Subject:

CN=MediaProgramas SL, O=MediaProgramas SL, L=Caceres, C=ES

Issuer:

CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:

1121D99693421A43CAD4725D8372A3D12E34

File PE Metadata

Compilation timestamp:

6/19/1992 7:22:17 PM

OS version:

1.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

24576:FkbattjombUPazD2PyycG2DbQkUhuutZ7uo7xma9wc7:FYItIiv+yi2DbXiu4Z7XxmCr

Entry address:

0x9C40

Entry point:

55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, BF, A9, FF, FF, E8, 5E, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, 24, CE, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, 24, CE... 
[+]

Packer / compiler:

Inno Setup v5.x - Installer Maker

Code size:

37 KB (37,888 bytes)

The file naviextras-toolbox-programasejogos-com.exe has been seen being distributed by the following 18 URLs.

http://www.bundlesafevault.com/c?x=mfigpGm4INWUxiaHTVWrzNT20SwjexKhlqDzocmWfGo=&c=aTTNPTl2h9FfxRq3/Wrk0bZli0aqjiHU/AGbEeatkFWsypPr1EAvH3E4DTpqpO3hrWOmVnvFhTBBLzS4DHQnyXqaJzrT5h6vah8pHxpIQ/34wsOe2xeBHnoJl3Xw7xl2PkMvKhaTEHpRmdmQIUbe0nxdve6y3gwx6BL/SC1cXXID05pF/CDVQy0xb3MIR Ab&e=0&downloadAs=naviextras-toolbox-programasejogos-com.exe&fallback_url=http://.../NaviextrasToolbox_3_18_4.exe

http://www.softwarebodyconecpt.com/c?x=0bQ55c3slhGXmHLne29dfkJDHQpWJgMwhPacPcHCkoM=&c=blyMA18DY/TpyU9WhKDIUJfw6lHrbIyDxRsORIdVprCMkh1QYzjL0rqValVodwG1vKmAnxz VD706BUE7QPRwAfWOUSLC2rOOkI8PARrZ0s72EsA9oxnM35g/XMMtqhWI1P Ww6GROFTsZ8jthFSxgTWxIyVdSOCGi1gcNzUm7nzRgNIg7Xf2Wklz8DsKl c&e=0&downloadAs=naviextras-toolbox-programasejogos-com.exe&fallback_url=http://.../NaviextrasToolbox_3_18_4.exe

http://www.bundlesafevault.com/c?x=QeG0MQdZonBUk6Ht9TvbvHiNQiJujkgF1IZtgsdV91U=&c=YBI2FI6neR5zlSiOmdqxP9vjwFLcagy7ixqLihGgcQo6J/oI61NRSYQNEmZlfLbvGB4pomP jq42EyhGLBa5XjToQnjaw0oVGKcOFDEsQfDVV84cEdWaKmoYpJj4Rox90YgXKgj4LrFTVOHl9rRHEPJxp1C7zsWhfdx5Mh3i3kQ6HEQ3832s1Jt2pkPNceg4&e=0&downloadAs=naviextras-toolbox-programasejogos-com.exe&fallback_url=http://.../NaviextrasToolbox_3_18_4.exe

http://www.softwarebodyconecpt.com/c?x=9sGpU8FZcT9QJFlt6glMr0N6IYq6VSxlWZYklBIDinA=&c=0yfd5JUmQGC9yhLqFFahS27kVNvOOBbopdvzvtSSlL/afszUg r6pth31Rt/5PSxQ0SucqARZ7BycGoU/5l9ilvMqNVrKQDZbUUX/aHxwJKFPnuhlGFXJ0WgubLvSiBAHkTUYhR7V3tbFAxX8sMP4k6aSB9VjElSSdWCI7TvfEtXiHd65ivQAcpgc2070l6h&e=0&downloadAs=naviextras-toolbox-programasejogos-com.exe&fallback_url=http://.../NaviextrasToolbox_3_18_4.exe

http://www.bundlesafevault.com/c?x=1dxlZytwh18qBlXWOC1E M7rx8I21IcdfFbZQnfMh1Q=&c=vCiLwXVsqy4j 8hpVcmpvt3ZSLP7pSJ5uz7RsI1is42kZIphzJF5LpyzXC13nZlJZ/Irsmig6cHgrC43P540GxC/bA0xxYcG9U70aIAHuluVHtDpXUPBuiUfjt3nMplpkxVnXJV3FKPMPbziX17vKYTwZXKGGlQEbx4rjHmqj0I=&e=0&downloadAs=naviextras-toolbox-programasejogos-com.exe&fallback_url=http://.../NaviextrasToolbox_3_18_4.exe

http://www.bundlesafevault.com/c?x=gtnLSNqa QsNeOfW129Vb4HNNicEhgN4hxiLKMLFq5I=&c=M17xJJCJJafe3KmX2A 8wO/mvYe3ehYeqULM5YozgMxu7PNY/CwY9OE7lEivepm1YN47yz HshS KhiaGx3p9WzhQDYk9ST2gXeFzCrHbunaeSH hzxolg DGkq9c0/RGGO4SikNdsj31EB5NK0VT2UggF0QebG04KqAE3hpqFd427NHN6o4I2k6wTf6I/xJ&e=0&downloadAs=naviextras-toolbox-programasejogos-com.exe&fallback_url=http://.../NaviextrasToolbox_3_18_4.exe

http://www.bundlesafevault.com/c?x=x88wdlxYgmclTLR6DFBsqzCWRcdg33PJa4Q5IE3u9j4=&c=KS0zpYQPrEycthUtvOpNtpwslSuDhvAQzDcZp9KxqGZklHMoI93VWx 8iQ6kePPoUvqHpxzjOn1uMsqYPFUfDeTMiuv tgBaAJwGAkZsRBCyIJOCrZrIEuOCF6PWAgc174c/KARGSdoL/PGXCL6mboFC Hes6E5cP4EeX 3KuJkpMWgOy8gLbjyrTgOIoJwW&e=0&downloadAs=naviextras-toolbox-programasejogos-com.exe&fallback_url=http://.../NaviextrasToolbox_3_18_4.exe

http://www.bundlesafevault.com/c?x=7sT5VpHNphRw6ViPl3cJOv9qsmIcWAaLvPOz/4zdOc4=&c=CWFafEzyMZ1dnaFAzQm52z03d9LFJXfwKsBMks452aO5iPyuH44NPbov/Nd2kJlvIOvrJCzwpsaQcSoyJ5IxZb2RPJ7RgyoQDj14mWOdHP jskz4I2LPMmbWUNy8Zdpc3MS8toCl13 OJjsCe27b9APYMGz0lJ4L2KFTtuOzyIlj4l72Kvjui iLcJKV2HVc&e=0&downloadAs=naviextras-toolbox-programasejogos-com.exe&fallback_url=http://.../NaviextrasToolbox_3_18_4.exe

http://www.bundlesafevault.com/c?x=vkhdAyOkaOJFx2UZO3L5lmxAmUeI7F81MWsST9qtfxk=&c=Ge0HM9rETdyAKFW7HbqEwZCMZkj/iWHCBCnSkMBVXgTTR20Kea1m7vBHVaoI /oFQQXcCopAovbl4karmRTZHAW/SqodQdxr0spbQyfRIixvwinSS/jlJYQs N087BNd6Ytfjgdc7Xm9evwDfd3/k6m3dLMp91GPiXnTWMSt4Yb8Y2GzQg2Xg9 a5o/oW9od&e=0&downloadAs=naviextras-toolbox-programasejogos-com.exe&fallback_url=http://.../NaviextrasToolbox_3_18_4.exe

http://www.bundlesafevault.com/c?x=7NhhFoAU5R3539uO5qwPWT1I7BoNHdjFKBrevsZeKXY=&c=XeaDcPz2gmH/RUqFVMS73Hfgcm/2kxL9BrYVNqALqlJ1aoOBNG/JkAtuwkRx/4CsrtHxoMdH7IQsd2xJ7MXiQDDMnakZZ b0bRz7nsRSKcqhk41kr4g/xmQIOTvDZdQUXk8gVqXoIcHDGWg6DU7g1C3AzxiFYK9c/bSJb2Ld3MTnPaH712XfGwftcvM1m4lT&e=0&downloadAs=naviextras-toolbox-programasejogos-com.exe&fallback_url=http://.../NaviextrasToolbox_3_18_4.exe

http://www.softwarebodyconecpt.com/c?x=5L8VzU 0/iIjmkVlDEbCjKNogNIxiWV0csxBw0Oo/48=&c=blKvjbbDqBnVFFTPurOfQ9xmSe8CiNELljPODtugyAPDV3qML3lZTCrp0eahYFifNkes54nnUyjfeXQrmmhe0aB1YhujQY9bJWwnm2T8NoPfGDNE9kPp6LDmtF/kJtFrogQo0BVNZV46Y5ugdd6 cGfTzW3Ez4KXX/i7/L3tE51yUIILZBbLot0mcZz604Hm&e=0&downloadAs=naviextras-toolbox-programasejogos-com.exe&fallback_url=http://.../NaviextrasToolbox_3_18_4.exe

http://www.softwarebodyconecpt.com/c?x=2ZoYtx7dLrsl3lC6/P1JszzpvfP/xS1j9HhjnwNku9g=&c=KfpIWEaoVl1HfAUZyl9AGuHHGiSujjAg/Nk3mFURs0FIHLdL8noA TE3/a8xdYw2jAj5g4 EzUr4yT5eFu0LD0P9OqQng8CqfTw6Rf21smoITD5Z gXIbgvGAqc0cM3FjbUXxvoD7/A4OPoxfr/uOkFjhQRkexEGQNhjfjYTlAwQrvsnOmz0HKDWvYkGm7cK&e=0&downloadAs=naviextras-toolbox-programasejogos-com.exe&fallback_url=http://.../NaviextrasToolbox_3_18_4.exe

http://www.softwarebodyconecpt.com/c?x=je8eSnMYbEpdtVVKgrznkCMko1Nj07/nP9HbJAyTlzs=&c=bxM njbtvfiX562bUZf7xskNVDWjXFSL1b cOyRGRWZkqmt9Q8VyEtD3VtEulbPnE/GXcWUh9zYjH0POu5qzvxEr6uzUkosOidLJrDmkOmRfGMUxohTFULrZ63Dzi9Cxo /Pn6DpPvIQg90qQp/MEtIGqYa428GdfMZS5XG vPBUiF6TNRgC0ugDD4Bqurwc&e=0&downloadAs=naviextras-toolbox-programasejogos-com.exe&fallback_url=http://.../NaviextrasToolbox_3_18_4.exe

http://www.softwarebodyconecpt.com/c?x=zpBIfip0yADqRBVecvlIOCh2kC3WESNMAIPmLZqtWoE=&c=R6puxmITKSroBNjnramL3NQ7inHFBEck2FhsERPvUxFbLbwXQRUg53AOqI1Q/6Uz0BRN6zrigYhuNrO1GoJCERvzi9Blo2/RGX6KShB0brQYTJMnX6cBWqXHcH5M60XZ9ZFZ8pG5UfdmBPew72XuoExnatg//574Hr6syBlYcu0=&e=0&downloadAs=naviextras-toolbox-programasejogos-com.exe&fallback_url=http://.../NaviextrasToolbox_3_18_4.exe

http://www.softwarebodyconecpt.com/c?x=BArdchwl62y8Nfe4neAFISDYEcfhYH/x7MhI3gnGa6k=&c=F3fO3XKpFpN0Nr6fuZId7C 13IaviIEXvb0UmIwVOqWfnb2w59wJud0YvrGTDfyccZ9znuvOCuXlbZS kJhU0zmTcr9fToL5x9UUkTNHOMbEaPRNMaq9iu7 FzoTI8on02e VLRvLOKZHN22M6ZI6m aVyNZUDbYVFfXbBJkKA97mPv8SzmTkA7cPyXjmgLu&e=0&downloadAs=naviextras-toolbox-programasejogos-com.exe&fallback_url=http://.../NaviextrasToolbox_3_18_4.exe

http://www.besttourssign.com/c?x=ZDFAyURPR7K9H4OPmwuiGKG Ubingzzr1BukG35QEOE=&c=RdBodkTJfqjmuWYQeNufrLNOkahsVBm8VQEfNXsLRGI/D5INtlu57IAX/5guN3DNKuXHbvw0KTicrIdjh/uI8no/i/EakEjvyUrfM /YFGiMneRP5UWmmKoxlob4cJg0DxSGcOxX7GMzcurnUVQnzpEQAEPCV1c5z5SgDKt4yen4V12wtB9c55zNdBy0UpZE&downloadAs=naviextras-toolbox-programasejogos-com.exe&fallback_url=http://.../NaviextrasToolbox_3_18_4.exe

http://www.besttourssign.com/c?x=OlDlmeG7VKO0u2906XpzcNlZx 2MYmfBi w6f YbD7k=&c=lG4rXKvy3lEhEP2K0bzusLoygO 937B6sRZIoRJIWMroVmXsBaB3brpon264ikXu5uBRNL3u9nIgakeI34XsO0YRYOXZo9dgIloz/1XhrjyXnbzaq/4rUNO7GHEq9B6RGoJsYXx75wlJ391II99061BVfPVh9mdbbTVJ1J/yVzcj0jkRj34ZBnqI2yT VIvW&downloadAs=naviextras-toolbox-programasejogos-com.exe&fallback_url=http://.../NaviextrasToolbox_3_18_4.exe

http://www.besttourssign.com/c?x=rqzuEQ2G1lTtjEBTYgPTPFkrPAeMcvrRjFfuTbdq4H8=&c=VfKwmKHSdgBv2XDkIKAV/uA vgqTH7GN6qGxKx3UCLoOiyoMvFIsRzTwbUdZqRQ4S NFo6Ao8fO KLO6brIjqg56zsF6eGRfVwb2u6lmHveGhbZ1b56 /mm/Flgu12jdsB7r4kEfMuNBp Bxpi5t10ufMLxCSsLub9FaCCdoAXutMgRg9f2TPnLy0/SeS/Uj&downloadAs=naviextras-toolbox-programasejogos-com.exe&fallback_url=http://.../NaviextrasToolbox_3_18_4.exe

Remove naviextras-toolbox-programasejogos-com.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.