home

netgear genie setup.exe

Internet program

Agile Funnel (Alpha Criteria Ltd.)

The application netgear genie setup.exe, “Internet program Setup ” by Agile Funnel (Alpha Criteria) has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions. The file has been seen being downloaded from www.grabpresentapplication.com and multiple other hosts.
Publisher:
Web Program   (signed by Agile Funnel (Alpha Criteria Ltd.))

Product:
Internet program

Description:
Internet program Setup

Version:
4.3.5.8

MD5:
09b262689434c46c5b88e9120d66a4b8

SHA-1:
86f8cf23bfa7f626e7df77e5703147d763647c1d

SHA-256:
dff070641c878a056e4254d0611369f73a684d136d0ce783796cad5ad3235e8e

Scanner detections:
1 / 68

Status:
Adware

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Description:
This 'download manager' is also considered bundleware, a utility designed to download software (possibly legitimate or opensource) and bundle it with a number of optional offers including ad-supported utilities, toolbars, shopping comparison tools and browser extensions.

Analysis date:
11/6/2024 2:28:50 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCore.Installer.Installer (M)
15.12.30.3

File size:
943.7 KB (966,376 bytes)

Product version:
5.7

Copyright:
Application Web installer

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\microsoft\windows\inetcache\ie\{random}\netgear genie setup.exe

Digital Signature
Signed by:
Agile Funnel (Alpha Criteria Ltd.)

Authority:
GlobalSign nv-sa

Valid from:
12/16/2015 6:25:15 AM

Valid to:
9/2/2016 5:10:29 AM

Subject:
CN=Agile Funnel (Alpha Criteria Ltd.), O=Agile Funnel (Alpha Criteria Ltd.), L=Tel Aviv, C=IL

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121703663FFB88F568A112BD801328BD38D

File PE Metadata
Compilation timestamp:
6/19/1992 5:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:G5PtGKT3T947xcWA3V9qAS98gFN4fDjibF1vS:GdlTa9hAl9pSbF48

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, 53, C9, FF, FF, E8, 9A, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, 24, CE, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, 24, CE...
 
[+]

Entropy:
7.9273

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file netgear genie setup.exe has been seen being distributed by the following 18 URLs.

http://www.grabpresentapplication.com/c?x=6rVSn6ptfkFDYRqDcIiufMp4f0yOuH87PQpX gFKfwU=&c=MicvdtUh or0FxLSWJK8jRnXCODDKtCj/lI yuvG0QB38GHGThkfSo2n099veyN9PKtN/0zGjvNCrxQf2l7KWj cf2XQByDT11Nfvwt0cWfVUsYv4HRTHHFgThIvvsccvCyLTpew/8DnxGihpIo80Q==&downloadAs=NETGEAR Genie Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.vaulttowerssigns.com/c?x=NAAdqa/kctGSbkLquCANFT69IEB/DYYUkml9C0e1xgI=&c=gF5bY7l7/yxxp7eJqV8tK0/8KUm48b XHB9PolIM7Dy1RI9irBkbbVsDY2IeWNgcym 4MyZGSXFSiZqs2WVFuLtuiVlUY2WO2RTlC7ryXKOlc2sE0xPs1VJz79mh4zCRuVSudx6yoyi 4wVAZMeFrg==&downloadAs=NETGEAR Genie Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.signssafebulk.com/c?x=7Oblp tY mzZjX6T97Qv9g3Wzm/zr311cDlHWv3mDSo=&c=590vIz7FX fEdgS10W1aullibbHXJoKyJ88bHkDkaiX3Z1KC3VbO/dfPc87Izojx XC5h0xlW7din8iUGGVc0j9qvdBXEpwKtWMRVg fej3BpQ/Ya9U3K3WBlmByYcDCT2dnzWZIGlXzAteHOiDJVQ==&downloadAs=NETGEAR Genie Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.grabupdatebundles.com/c?x=kbLTNPGkGWcXDecVObEFJF2MBRFV8eohllDGFmlWqIw=&c=D1DB3cy1y/aeZ6SV9CO i8Dy8HHx eJVZL7SnnsE10wL35dNRK/cT3sW6v5pWpgQh/dLlhUAo5Tf2gqtLwtrsOJAC0 GmaOJ1Vxe3QZRcJMZjlHAz0zdvpzjuePAczLXy3QOhG0OXyOvSvTZ h46YQ==&downloadAs=NETGEAR Genie Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.universecontentvault.com/c?x=LvI/KxjUYNuRkmnbm5tDdquxHb7c9BVlJ78PpiuiviY=&c=EyLq3ZYBm5kBwrHb5lTMaJj w9zICD9Yssaz6FgpY0MK2Cv7nciyWBslbWpWtxdgORhbQqpZb noIytUB12U6x5wt0qki26ShgyVvnTY8/VXw6FK2ieF 759dL3w4Y1cJj9d7vAZHy n1HKI1SWZwg==&downloadAs=NETGEAR Genie Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.vaulttowerssigns.com/c?x=BYbRkUKq7wc6IaA7hO8lHfDcV7MFVP/D VCZkSV3tBs=&c=Pol1Vo20zY7okkqzZzJjU/mZ/Ddxm4sewx8OQP5Busuldoi2BSPyglvxkUk/BZj2bjoOqnR7CaZAXBtW4SzAatAV23jPpqnxOtczUr4mIsacHPj5IFGZvnxIhUXy5PwgKAhzAN8T/eGYUTwpEzeD1g==&downloadAs=NETGEAR Genie Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.currentbundlescontent.com/c?x=AyN0mlVoRG74x ivz1l81orVkhdGyqnXfoOpAqiBse0=&c=1iJ4J8Ecp2nzu9lKgAxPlModXH5cy14U3lxrSXdS52oh8al1bHNNqjCBDsZZ7VKtKC5y09ApeZiCTqcb4wnKMIZ8CjMn2XJZthAolnU2y2AxGEwbTPSPBZ4C9C4bqaBZF9isYKrZLSMad0T5ihreew==&downloadAs=NETGEAR Genie Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.grabpresentapplication.com/c?x=L1HftK/pnPA73raJ86PKi5RAUfj0hBAmUvbU0Q0KMos=&c=HFtZ2l3j4EvXmPSeeJ7IUxtkjZ84g224lxjjppwqNUdvgUoWPitMx NpuNR2kOKW2uKmQu dF2tkGNcFeYrWHySF7O7 7uQc/6blu/tAHlWN0Bdmj8/JB5zcj2trsZgKimH20gb8es0N8 pm 0SJ/w==&downloadAs=NETGEAR Genie Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.grabpresentapplication.com/c?x=CQ3XFkMyn95SajOOozpkSq613Ta3TUj4dtXg4rq3Rh0=&c=SrZjiZasiuiKudMqtXRJ5HV3Tl3lKw1vNWuiL6DFV7a/FQOXzXdQhPLM1olbK6q6t9CPYRR7xT1GF1i3QUAxJLW43nS2BPnR4Zy3fDet8buv6j1jbdPjFcP9L9mKowTLYVRtkRYCpmJG5JC4c9v37w==&downloadAs=NETGEAR Genie Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.grabupdatebundles.com/c?x=yJAwiSARAMFgqTrJqrjrDwKls/DlBCnKJlyeu7ViSxU=&c=QtQS/ vpb6kMSXTra6VPNEAvULRu eensO8gC0OC6uofwl3ffLgPAq270aWQMgvndwhOCis6DB YcRv6vB0Z8R/s4x6qrNugNPNQmYMZld8TkCSFG4HH Jq4/rTCWBFMVXAhHZG9kR8d3lcoZbqEOg==&downloadAs=NETGEAR Genie Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.grabupdatebundles.com/c?x=tE1N2BAoYStPZfKidkHMXpfRDp5sLpruRHTpnmZcufw=&c=4SodemHChCDYgPq pQmqLDFJTVyQwOZGh3PnWlUcbssqubtOvMpLzdLJxRCHnf1Hfjz60QNhlPCZc85Jrm50BEev mlXoGoZFVFcx264QS/niTa3uacfMHSvrChvuq6M2FVrKOEJ9jElcMbrmdP4Fg==&downloadAs=NETGEAR Genie Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.grabupdatebundles.com/c?x=QNZKmCUKdJk9Ma1CBVbCFmf8WP3GMFzxthRWr61q0YI=&c=6Hfk7xwRKEonvTGZomjIrKP z/9WE/q0F3KFMBViyTdUje3bU8jPxkEtKX7bJg2FgD2B5sNCapM2ZGuKUA1jZKDRgqwH2eHWUmIKqHMU08sKxBwyDdyJxLICvXQWHoo9qulsxApuAngISYJ5fmpm6A==&downloadAs=NETGEAR Genie Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.grabpresentapplication.com/c?x=hlBaM yoK6 mRhT0P1hmBLabvDWUJaJRr0fcDXLL3WA=&c=aWJidGhGG8Q6FGRnbpx8Y706pZDec1KaSFlle0iqVYKnnwlucLRzCgtC5QVT4WszBvZkWyeheEjbme8g6Ec 3ufGR0cEjoYFE21WUROUTmjD8Je5oWhf5J/a76zLT9 fwr/6M0sJzPZTeubHaE9ovw==&downloadAs=NETGEAR Genie Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.currentbundlescontent.com/c?x=v4j1XayeyFQuJpmhSayPJxnz0VXr0vIvChSypTu0oXo=&c=GelNepr1dqx9VVej 6h/8egKbLXJyUmMRB89jc3dCSHiE3MxlRNsV2faSGFOXIYURiLKzZxqTKMRhly9uUwmlPgXUjocqGk1Dmyn/evOYHC/EDvRqYJ4wsYGawuCr7dOy Fo4ZA7PIig6s1UcQKh8Q==&downloadAs=NETGEAR Genie Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.currentbundlescontent.com/c?x=6gQxwqC993QKglaDy3oaBqwPOUi6QbsMCfkzgT8sma4=&c=vMqJr 3q0Fmeyp15EeHG1xvbbo6D/wOiaM32JNxTFzL7baX/qcqhgd0lUhWV6IpVkOOt 6n96Rq9BRwnUUpTosFvZOCMwRSVercztleUg/Br1zpr/cuXKhER9HmsleWB4AgQaOqOPofvYtfyg8lRA==&downloadAs=NETGEAR Genie Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.signssafebulk.com/c?x=BKa4f8SXY5BLfeMD1EQwWA2egqqIzbKXvYAkOIDBwxA=&c=SrlB4b7PAHaTWmcjw2aYHJWFIHPrFjoqlQ188oSGsz9gySmh9Bk1tDyMq90RISJd3/0owmWxQDA7kLOJmKvCnaMGTIE5rNlRI1OkW3CCcQzaNPmaZQ/tsgvW3amW/u 98n4KkpuSvmTlVoJ1y2RVsw==&downloadAs=NETGEAR Genie Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.grabpresentapplication.com/c?x=rMDkcGB000nH/gBDs06SeAUnHkgTRLBrTbCG/I6w6iw=&c=6RfAIZoUztYcRsuKgPDkBS0u/6ngz 2C4p01f9ulnX9T2lpKTmiSm6dhs0FxlBoYSeDUjH1ANB7KdHjkX2uC4pdgwAHQIIZKmAGECWiBkGBaZzH37EnnOxkoTGj8iB AaenUw/lUypNJkR6aDYv7Rg==&downloadAs=NETGEAR Genie Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.grabpresentapplication.com/c?x=BIbpzFGKpWuX0v4JilqdcJ0cPBimbY4i/G5RBuGrXIc=&c=k2HhGYI7eRjN1t3xH1R3UUybqIJWeg/ijkkLjSdEDWjyOqbKPC6NjA8FNaxNulqQw7hrTwUGWgryJaKMWypVkbwsKqBswrLx7D5CyirkdPsC32Nge jBMJ rgmlAVL5qEsFlLq1FAvjlw5C8lnuOFg==&downloadAs=NETGEAR Genie Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

Remove netgear genie setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.