home

office-2010-programas-gratis-net.exe

Installer Internet Web

AgileMax (New Media Holdings Ltd.)

The application office-2010-programas-gratis-net.exe, “Installer Internet Web Setup ” by AgileMax (New Media Holdings) has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The file has been seen being downloaded from www.sendtowersnew.com and multiple other hosts.
Publisher:
Software   (signed by AgileMax (New Media Holdings Ltd.))

Product:
Installer Internet Web

Description:
Installer Internet Web Setup

Version:
3.4.4.8

MD5:
ee5317c88e3f4a15361fe79cfa3c0af5

SHA-1:
1ffc2f5fcd1d7433c4ac1b513783d187c45e0fe7

SHA-256:
ef082ada1e93016d113729b963ebf247952fc7615e33bb06589ae042944a41dd

Scanner detections:
1 / 68

Status:
Adware

Note:
Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Description:
This 'download manager' is also considered bundleware, a utility designed to download software (possibly legitimate or opensource) and bundle it with a number of optional offers including ad-supported utilities, toolbars, shopping comparison tools and browser extensions.

Analysis date:
11/15/2024 2:41:22 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.NewMedia.Installer.Installer (M)
16.1.13.8

File size:
958.3 KB (981,304 bytes)

Product version:
3.1.5

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Common path:
C:\users\{user}\downloads\office-2010-programas-gratis-net.exe

Digital Signature
Signed by:
AgileMax (New Media Holdings Ltd.)

Authority:
GlobalSign nv-sa

Valid from:
12/16/2015 6:04:31 AM

Valid to:
10/30/2016 9:53:45 AM

Subject:
CN=AgileMax (New Media Holdings Ltd.), O=AgileMax (New Media Holdings Ltd.), L=Tel Aviv, C=IL

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
112186313590F7C0AF7C143BC6BDE6200476

File PE Metadata
Compilation timestamp:
6/19/1992 5:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:NKSxgTgYTb5VISBjR4+UL5WwuLCv9yUQ3YuEjHyq8pU:NreTgmVVH/U9WwWCv9yJ3aZI

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, BF, A9, FF, FF, E8, 5E, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, 24, CE, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, 24, CE...
 
[+]

Entropy:
7.9306

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file office-2010-programas-gratis-net.exe has been seen being distributed by the following 26 URLs.

http://www.sendtowersnew.com/c?x=/3MnYnJ5fTrV8G5T0lxKhGFSP/A6llZ SUUmGMV4nlw=&c=diygG 9Ly4qTa zNwLrKCnb954p2EmJnFVxlWwwgi43njQUOjKAKKg5NuWA6TLT5NqcQn245ZzvWpaHRdtTlBMBoCTtS1QJTEqT4LFDh84TXvOBUexkIBIrI kKurIE59vtqAR1ftYhFGfgMh009W1FfNQ3T9OeKU9CdPP2TbedtLg4xBfoa4Z 28jtfhbzC&downloadAs=office-2010-programas-gratis-net.exe&fallback_url=http://.../MicrosoftOffice2010.exe

http://www.tourstagranch.com/c?x=F4dTs2nZY/anK96AfzmPuXtH1xVghF19xoW63kFi4/4=&c=o9Fl5 b09o4BLNtWWudwFDGkm6iolyMysdTGC erm562tJZYPhUJHez8Z0D8UA16pMv Z/KDvrvv5RH6hoVyXNZrnG4g48hgNS4DfpyKhpwxZeWe4vN 7sZD br46w8C&downloadAs=office-2010-programas-gratis-net.exe&fallback_url=http://.../MicrosoftOffice2010.exe

http://www.sendtowersnew.com/c?x=bBANv54I8Q8IB4p0Xo/c/Tkm6jlqn3pL4oh9oefwUWQ=&c=rZe9mbAe5x7AJbg R9CXHDtwZxEtmOqWjmmoU3EK csTrwaIYkoL0RLFY/dOviW5oBL yFsXZaH7srCoKJuXxOuhfQ8k3asP6FxLn 5L6JcwOAE6LX6g98jD7kN95dF5PgHOyq2m2XkPd/LoHD19oTPsrvRGOEk iochsberaAs=&downloadAs=office-2010-programas-gratis-net.exe&fallback_url=http://.../MicrosoftOffice2010.exe

http://www.sendtowersnew.com/c?x=isMsLIqSMpvzheTyMCuBSNsK0Gr8Zo1IX72Dki4yJxs=&c=RxngnZssAdmMGWpgLCDc1bwqGKN1SSo5TilIprAIEd09BNIRF1Ujr0VgxDCEVV5Wo4dn9P77z6unEj1 tynw0vQWfzqNwDrZMuLmjGSM8TfTzMGiAAhICT2BEMg9nE9j&downloadAs=office-2010-programas-gratis-net.exe&fallback_url=http://.../MicrosoftOffice2010.exe

http://www.sendtowersnew.com/c?x=qzj1DV0S1sD NPj G3sNYk6NVchhtYF3dPxTWVm6ewo=&c=cWlheZgmv5uZbZp9/RjWCOPr7sGEEnjPw1B8qiPebJcGWvMSba6x5wuaoCig/EcVDMZkwFlKdTG5lhR0rW9g96tuho9QqDOWxtJXFlzVU4YE3RrZHVfGObn0nLTJdMfVv3AVLcy8Ah1CvlzyOJfG/AkoP0qT74MetkrNL7tGBEY=&downloadAs=office-2010-programas-gratis-net.exe&fallback_url=http://.../MicrosoftOffice2010.exe

http://www.besttoursvaults.com/c?x=LOkYRy47Z xM5frdndInrOMwgL01861Azb4LFLGeMW8=&c=oD1cmKjRS1 yvbhRNsfnQGdLHyOqy1M7aXW4R9k62WmhiXrv0sjSNBIcjouOEYeNL6 PxjBh9XnFFtgnMQPPIwf68m/6yZaWJUQcD5lxRL0XFNV0J856FyyG30MHgUlGYI3zu57Ahx5AG4pGITwSD sm5RBoCIsDUGb9Xo/ClIU=&downloadAs=office-2010-programas-gratis-net.exe&fallback_url=http://.../MicrosoftOffice2010.exe

http://www.sendtowersnew.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

http://www.tourstagranch.com/c?x=VWp0eKrbxD0qDtSAcQn0HoZK/0I3RC4EQi8iBilLGi4=&c=BlV8ztvDn6344W74uHd5h9xNHqRb0 4hK 7qQqad9CUrhh7it1riSCIg5/K kr3Xf87yAR8mgalxMIcWjTFiTXlFB93XTyOdGP5JgASfKbHo8Psnla8d0DY/MmzPZ6pr&downloadAs=office-2010-programas-gratis-net.exe&fallback_url=http://.../MicrosoftOffice2010.exe

http://www.sendtowersnew.com/c?x=leUjuWbAdLpJd71lc72LzNtxAG3e9D7Gq/zvrFpKPvw=&c=EzN0PFeQU5BKKAV82nB yky60oeVvG1E8hJiIVPmXXbpT2973DG2GDMj1TKFGP ATndIh4j/d e6UrTek/RtESrAspC9m/2ndMCMXG9VPRdknHfP/O d5jOagNY WLSj&downloadAs=office-2010-programas-gratis-net.exe&fallback_url=http://.../MicrosoftOffice2010.exe

http://www.sendtowersnew.com/c?x=iCFcukCM0exjV1uG2Wnzuv6CMBBymUPMEUsWIW3/i10=&c=RR7WPj2MX4l9xCBjJV6GfrJrvQY0DoBbraZCxh7ucW19jo z35IR1Gh4aQru G4nc8w5jhre2z2ghFkXs7t02nEZ9ZCJf4vpm0Wk5DxorwTJvVoB4r oGnpL5fUZvB/S&downloadAs=office-2010-programas-gratis-net.exe&fallback_url=http://.../MicrosoftOffice2010.exe

http://www.megavaultconecpt.com/c?x=AZo4PnwrjPZ2jQ5kk7U2g3sEAAnpLCFgGvcsbGxjWFI=&c=1XKI2MEqaKRsUnEwquvpxZCy7XRjhrrVC2 r7XaAcEKt6sNG7Y8dyqa ZVOdp08nXNoV/qE18AhQvmaUdFjyBzhYW1WXHsVQcGwHZuvJlaox/wkPGt7Z76D7wmhMNksQ&downloadAs=office-2010-programas-gratis-net.exe&fallback_url=http://.../MicrosoftOffice2010.exe

http://www.sendtowersnew.com/c?x=hcW1OTV67GuROj/rbloAdH/aY/VKlFuVIcEqJ4TZoLk=&c=hPfDHuH6zaVjWHFXvHLmv8Ziuv79/bUbszE5wlTeL4hHBjWkEGExhRkQ0jjbFKg x94Jv93VgVIwYd/rltfujXzDboCfDQeFx3rU6rQ1lXUiL0ITsqTvZLgDGBKjoztF&downloadAs=office-2010-programas-gratis-net.exe&fallback_url=http://.../MicrosoftOffice2010.exe

http://www.sendtowersnew.com/c?x=kEZDW5/mLRGs3l 2Eud34pMroCgrfjaQdk6Qt2SvAWw=&c=9DAT3jr49v3mZr3gDjVyvCiqnQIrSWw/6TRX3jB8PoWLOElwGghrbuORnLd0QMVzYSZ0MYPclieXo0bIige6IuMrg2Iz zIJGUuxctHOsi1tJTfksa1grwJ4gxChNEE/&downloadAs=office-2010-programas-gratis-net.exe&fallback_url=http://.../MicrosoftOffice2010.exe

http://www.deliveryfactoryvaults.com/c?x=dmSO1n70uaPv3bXd/H Ua5J73rNuqfovQiGkEzTzQVY=&c=PWMljP2UAun4oI2nuyPGPBaXaVJppIcZtHXbFGAwLxLSv pW6E14O7BZszyIC4 OEZf3Nk4qWi7ni2MS9E/LxmSUZz7cozomUMepKA3Ez3PZdm4nJ0oKKGAgYhOEEWqS&downloadAs=office-2010-programas-gratis-net.exe&fallback_url=http://.../MicrosoftOffice2010.exe

http://www.farmflashtour.com/c?x=GZ CrOm6vKfRy7gZrnmwesVG10Ce5heHe9/CASSO250=&c=ndc8vKAp5mZZ07a IT8pXJp4ZRcyvd1EkawbRgamRjgG2T19mOWMnadr2TfgTgL8vnRI kPp/8eAIZ4T5nFm02YD0XskeAjgb9lKk6nR3slPMAftRQLXPeuIsZMunxLQ&downloadAs=office-2010-programas-gratis-net.exe&fallback_url=http://.../MicrosoftOffice2010.exe

http://www.giftbulkstock.com/c?x=HrBu1A/G/kbFp s2dB7osBRCskRcujuUTu1wIHnEXvU=&c=JLulq/N98K ONm3j/gCdkPH2hHP3v5DpG4q2McXaJgzRMte92Mrbi/YWi3LM9Eukoo1oOIyViYz7CB8GKQ33mUAQnlC0N0Ws/2wyVWk4Kzez 2zbjfH1ecCWR/LRqMsq&downloadAs=office-2010-programas-gratis-net.exe&fallback_url=http://.../MicrosoftOffice2010.exe

http://www.giftbulkstock.com/c?x= Pc6nZZ8PyiI2tBoOnwpt4I0mLkwE9Mo6dkRswwfCiM=&c=snDQoUDzD3FLjYeHcgy qQfUVy3uQ8Z6d0B2awD/N9m5sJedOb9ztYFBkkmMP6kPnlrQWQ9DVh0q60u0Sr2GkvZeoCAUAMEvCuSypBL86O7dcFCJJAyyVSReP8zY4NyE&downloadAs=office-2010-programas-gratis-net.exe&fallback_url=http://.../MicrosoftOffice2010.exe

http://www.giftbulkstock.com/c?x=EyPgSfFLAgXLctx6rYsYYla22//6vwLFXfQsgj/YOFg=&c=bnrSvh0M7ZLjGSJvESyeqOYTx/aya7zgVS2nUfLgdjc5ji1XNaT3K3tN3mUlKkGm8pb219dQON78TAv9ztF3FwFk93QiIaRSYEZYfhvAw9kPHOYhngmAj70AKfW 9nSw&downloadAs=office-2010-programas-gratis-net.exe&fallback_url=http://.../MicrosoftOffice2010.exe

http://www.newsendtag.com/c?x=Z9x1WSHFjuuoqQsYb8/iGRx/4sNtu43S2AxJmOw2sVk=&c=nsI7kijCt6JL5J9jBoAOaEKqboh of0qbNUhu16OUIQopQG2osz0hBGW5sTTwXUa5rRSvTwNJwj94pGVVCWIfOa8PA4nC7AnXFl866JfrcTgDXVcbBVIJow7oBuZ4F3p&downloadAs=office-2010-programas-gratis-net.exe&fallback_url=http://.../MicrosoftOffice2010.exe

http://www.tourstagranch.com/c?x=5JizeGGIFh17BB5dGxGl7NogTWEK8S7J4 feXVVm NQ=&c=m15MUIi8MjB4VihVjp00pCLnHYh8 gu86qDeyJdAroqp3 R2PMJtA4/7gzHJWd 3y5t9gxQpjJ5lwQ9Subf0OVcCeriINXqp3N0GzEnDnVlZ hfs2R9lHcpu7P/pg2SS&downloadAs=office-2010-programas-gratis-net.exe&fallback_url=http://.../MicrosoftOffice2010.exe

http://www.tourstagranch.com/c?x=sVaQL8FZzhcxtlBcfT4LKkbfynFTaT7j2d0Nyc9aTP4=&c=bwPWdBv5W2uOGmmC3NVCVYgypqLUUdCZ81T3jAiXsOI9u2vu2QrpfqCGOUND4mI6p6gIj72g2opnuyiAhVzt6PP747KiCNsQ W5bw3jcSQSlDL4Bcjy2T4lXrByfpoe&downloadAs=office-2010-programas-gratis-net.exe&fallback_url=http://.../MicrosoftOffice2010.exe

http://www.tourstagranch.com/c?x=saRLTd9yVnSg NWEAMCeEnXv5nbs4GDudCCKtAYmE5U=&c=Mdec6LjbWf4Mq6vE69UCARPXXzIv6Wu1jJE0qhF6k0qQZvsm3NbqMotsIUHibNgDh3RRs0C2Png0dT09eeZ0glPqjXurgiNdlnSOO447SWjEOhFg46zAEIPOHQd8H/2c&downloadAs=office-2010-programas-gratis-net.exe&fallback_url=http://.../MicrosoftOffice2010.exe

http://www.tourstagranch.com/c?x=9jSte4sQZ1uJLHaDnw hTS5cce3MPvaNgkLrVcJ9 7Q=&c=sxrHGfa5ihVKSh/n37HmZsnhWAOEbmW7btwIb 3JoedSx8Q3TPz8aUDzbvDFmM3iuwCNnDQ0pux5LTQTQA5hCmXRNQ2wQ/ajMtIIc0/6qurL8 263RMfV0z/j8TTBKJt&downloadAs=office-2010-programas-gratis-net.exe&fallback_url=http://.../MicrosoftOffice2010.exe

http://www.tourstagranch.com/c?x=paZvieW4048EkH4KGrvtRYkHO9TiLLGwOcbJ4BnsUW8=&c=cwPsqrvp1G1jUnKAVyn8zaSWWnRSX/zu3lxtcmavbWp/K1JTPjczAe2mDySrtTY80TdPjdwlowl/Cu WPdeAF4Xf6dREfjVEDoZpelu2UtVIK38oRhfDfAQJ05HM57uD&downloadAs=office-2010-programas-gratis-net.exe&fallback_url=http://.../MicrosoftOffice2010.exe

http://www.tourstagranch.com/c?x=UPpIt/niGCh3tBq4WoSAZ0V3P0SZuSwQkpWhcjuCpn8=&c=QnP/8ybkLp03S6P0mKID4ZOOMXSak89HB2lgTi4nHK6j1jU6pGryuuVVNiR0Ks8Strw1FjF1nfH1Ytqk9uJTXtHH6bQ7pT2PsnfSEjCEQmmVdvI XcgDOvGwDuSKoiD4&downloadAs=office-2010-programas-gratis-net.exe&fallback_url=http://.../MicrosoftOffice2010.exe

http://www.starsourcefilesnow.com/c?x=bcwwkTEBiLnQ302xDfKMF7U3RFmuISu5owSS2B7w3iI=&c=q/J7 2F3 p3qs5XjGckYB3SnZZzq2neb2R1G1hIgZVpgUkllDPMmyiTmHzzfJDAGLvfGmc0dB4VmMnvuPYR4XNpHkC uUchRWUtd3Nbi1VDbJetySMt xpHUCU9d pRz&downloadAs=office-2010-programas-gratis-net.exe&fallback_url=http://.../MicrosoftOffice2010.exe

Remove office-2010-programas-gratis-net.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.