home

pixelmon-minecraft-programmesetjeux-com.exe

installer web

MediaProgramas SL

The installer utilizes the installCore download manager which may bundle additional offers for various ad-supported toolbars, extensions and utilities. The application pixelmon-minecraft-programmesetjeux-com.exe, “installer web Setup ” by MediaProgramas SL has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. With this installer, users are expecting to download Minecraft but before that occurs they may be presented with additional offers, mostly potentially unwanted software or adware.
Publisher:
MediaProgramas SL  (signed and verified)

Product:
installer web

Description:
installer web Setup

Version:
4.7.2.1

MD5:
9821c350e569de562ff9711c3e68f23e

SHA-1:
babd4ff283d50a7d0584860edfa371c6da2d20e4

SHA-256:
a8eb206f1f3d969e7eaaef58f62ba044f309bf3dcf67264d1c8a4e59f5e0d336

Scanner detections:
1 / 68

Status:
Adware

Note:
Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Description:
This is also known as bundleware, or downloadware, which is an downloader designed to simply deliver ad-supported offers in the setup routine of an otherwise legitimate software.

Analysis date:
11/24/2024 9:59:32 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.installCore.MediaProgramas.Installer (M)
16.2.27.18

File size:
1 MB (1,063,208 bytes)

Product version:
2.5.9

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\pixelmon-minecraft-programmesetjeux-com.exe

Digital Signature
Signed by:
MediaProgramas SL

Authority:
GlobalSign nv-sa

Valid from:
1/19/2016 11:45:23 AM

Valid to:
1/19/2017 11:45:23 AM

Subject:
CN=MediaProgramas SL, O=MediaProgramas SL, L=Caceres, C=ES

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121D99693421A43CAD4725D8372A3D12E34

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:rkbattjombUPazD2PyycG2DbQkUhuutZ7uo7xma9wc7:rYItIiv+yi2DbXiu4Z7XxmCr

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, BF, A9, FF, FF, E8, 5E, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, 24, CE, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, 24, CE...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file pixelmon-minecraft-programmesetjeux-com.exe has been seen being distributed by the following 12 URLs.

http://www.bundlesafevault.com/c?x=wgpXpl2hg5qeeZbj3A3jRDmNbc8 vJMQj IYLY8PYM=&c=M7vz5yYB894vO2 yrwYxWHb2H4uIjHCiP1XlIqWeWlQq47XuMOg JXFef7Du0bCG5k8CoheHJWg4clhKJTM5Z1TYvWBabPCOx9fxnwYsrtYM56qdldXRFHnJ5nrXdVFL8ZARaz5um6s4e4mefMIKZf43K zWvEkwFa 6bFKknqE=&e=0&downloadAs=pixelmon-minecraft-programmesetjeux-com.exe&fallback_url=http://.../PixelmonMinecraft_1_8_3.zip

http://www.softwarebodyconecpt.com/c?x=DlFk1IH3gw2XqKdZ cnm8Ly/lV9CkPxWCcRWu/k53c4=&c=xSjgKf/BOcsEE/bo1Bh31wlufYQgPNjffPm6H4GMhmVnWnRvvkr7K8nqjG/xzScEsShmwQZ6 b/etZK58eHmSxqJ007gracAr0OK41A061aUQX5XvebL3f1kqBLS6Tklj5VObuuw0uFm2cFNDWRv3NOs0Br2T7U8Dlw c6UoN11g geAv2LwomEtAM8tpZzN&e=0&downloadAs=pixelmon-minecraft-programmesetjeux-com.exe&fallback_url=http://.../PixelmonMinecraft_1_8_3.zip

http://www.softwarebodyconecpt.com/c?x=eiT3MkX8Qopvn4rnrGiHMI7VzojckzHa8AV4jkdxIAg=&c=FYWlz72khxvZYfW7RGoNKlkBMmZVZ1vjTwTw S7haLsboc5IAQKEsAEJSTPOOwAXDBVlbt9Zv22N59xB9LnrrpM0Wt7bDCpNr oNfaqO4rBHZSxy9SnjROktqTkl VkSG634TYWSi0T/NrvLApuf1rRFDWGYyZcXSySNeyxK b2d5Z4FCwRpJMjJgyeFJQd2&e=0&downloadAs=pixelmon-minecraft-programmesetjeux-com.exe&fallback_url=http://.../PixelmonMinecraft_1_8_3.zip

http://www.bundlesafevault.com/c?x=rKBA1CpOZnFDKmA7x0O/5pTCPoyYA9r4IcgQZRhR5iw=&c=IVbNpD50tbESYqFS4Rab4LDrJT6s/3WfOSMBu9G9QNwvbbppAISjEr9ZixQDfdHElLknK/X4zBhuUPzqOcFNu 6QkO3UP4z6dHJTw7zZ/geje5NccbEEgIsLDdwtSRk6bIC4rsrj3 IDBaLKxyderTMleAHHiR9WkHpjfWABpwg=&e=0&downloadAs=pixelmon-minecraft-programmesetjeux-com.exe&fallback_url=http://.../PixelmonMinecraft_1_8_3.zip

http://www.bundlesafevault.com/c?x=7u0vEjEgAhopUIM69D8CLdKRN5BfLpx0nZAT2K04wZA=&c=VBLgiyEdpQKRgYuH30 xj w8Y8BjctyxDM0HXsaVVOfrogvXxZTgGsqgoKAoRchFw08riKbjgWNZkQsMq2BpAQmGJfr/wwTY0wBjWBrwqgnU1Qvf4SigOxtCvtE sFO1a9H 4Y0Syk7fGefTPTW2rlcVv4YNxruXFYCQTqGidIo=&e=0&downloadAs=pixelmon-minecraft-programmesetjeux-com.exe&fallback_url=http://.../PixelmonMinecraft_1_8_3.zip

http://www.softwarebodyconecpt.com/c?x=WEPzMEYSlewey9mvfHQ7e6/JAYWBWBrCqFEfmlQskiM=&c=q6jxYWCdzuqU1cTmfUkvPTzl/hDirt4z5012Y7Pqfa0lcP1WP94K9WJ0s2DTToA/gzTDdqOCTkFHLNLj7KXlJMIcEypPvEBGEcdt KCTBn/W52lC2pIzRI8EJIK4DDsjZtnuEMj8b7lR30ZT4QtdQMUnC1l8HbdoBLhrcl1JIVtc4AHClSZ/J4kgLAAKlgwe&e=0&downloadAs=pixelmon-minecraft-programmesetjeux-com.exe&fallback_url=http://.../PixelmonMinecraft_1_8_3.zip

http://www.bundlesafevault.com/c?x=0/HiS le5c/sCRqFo9bEzHKc89NZTfqYgWSvGdKlxnw=&c=QnDR9WALBUm0YLNCuO0okRUA1z2AD9NBHIt9nSnV5fhijAZgjuE2x1D ySoAKqlmXN6QqKVoiEquESNXtkNUUUDZAMf5Px7IrGZ5Niz9Rsz3CJ EZSVfdmBp9VzqdYqnP7jIu3pdT9AbwMWuSJjmkDloIouVPo6NJN8qPLUC11KCTPHplVEVdoMbgNdczzhA&e=0&downloadAs=pixelmon-minecraft-programmesetjeux-com.exe&fallback_url=http://.../PixelmonMinecraft_1_8_3.zip

http://www.bundlesafevault.com/c?x=WCsvk76eb5nU8Sjahb0NIzYUkPRPPfn0KoPFOIA7Z w=&c=nkl k6cCsigLK7YJpkIkbBwWDZnyZHFiBc15da79 001yjbT1xqL8J766Meq5AKI94MROjiiPD7XSytgiCEVIGinEkv8sdJQ2IgAN1HmZ/eQ0FJAGntVlyDtT8OA7rybQofOuXqePIa 7Ma6LsjsuqwUQXtg9KfVpIGs9aLtq1c=&e=0&downloadAs=pixelmon-minecraft-programmesetjeux-com.exe&fallback_url=http://.../PixelmonMinecraft_1_8_3.zip

http://www.softwarebodyconecpt.com/c?x=ic2XDcimFv4ggMAUVB8h9YHUnO93ETlebcBFJ1q0NU8=&c=2/OV4rSzjE GHdwHx4uhRxTYm4qBCVmk1Dxxa9dlNTotKdlsJV8a86ueL36t6CEf5QonS8Wkkb61ccxLyqBvfj7IPGmV Wb1q9i4G7d2U3mQFFb07PgUfyaMNIbw4XDdKE9cfDrfMFhjLoTlBhAt8Z8NVynps1xYWYpyYgMwAr3njjGLC0u Hcc/Ss9SutYm&e=0&downloadAs=pixelmon-minecraft-programmesetjeux-com.exe&fallback_url=http://.../PixelmonMinecraft_1_8_3.zip

http://www.softwarebodyconecpt.com/c?x=7iLYXB2sN9wHmwbV43YnhH3y07cJrJbDraPXnVtwYAo=&c=tLefdKGzgZU4J0Wm1eWZPML9d40uaxhB1IvfL0aEniTQ7uMG mENy6Nxw1UbX7Dph eGWUj3KvFD iwYrfNlMHrRwkRPqCrjtH4UCLQKqN03u0aht4ZmtFp xYWbfmeqmmySd6yZmQz4Ck6sS9ihy2Tl6mJA8EUfdxFANbhHXWs=&e=0&downloadAs=pixelmon-minecraft-programmesetjeux-com.exe&fallback_url=http://.../PixelmonMinecraft_1_8_3.zip

http://www.softwarebodyconecpt.com/c?x=75bRx6dL/oPnJey5/1sw1BRYunaMjLK QEKeyWbQSIE=&c=3jsgWcqlg6o LXGstXecAHF0WUkRoCb9OKEiintFzQ7WyGi3RgQsQ5mugUuLm8AJhwFeGjDv/B92bHrDXa1bwjdHoeBxQVlXE3Vq/QJkX66OwJ/jVBraje 6a8aC3NKX6lmQCgjEli39W3KPLZT2WYKhKaTqHqrQMIs5hBHhsxJx4yglbdb53xSuWX3K3Dus&e=0&downloadAs=pixelmon-minecraft-programmesetjeux-com.exe&fallback_url=http://.../PixelmonMinecraft_1_8_3.zip

http://www.besttourssign.com/c?x=vjHLW8pLZ1jMxPjGhrWKcqqwZQhqvlFaFlnNq85SXdw=&c=cbDn7TkWmcVTMqIihZW/BoDxSOw30t5HrlsxGkP7SpFJsNavg3aEjUV O1opxHi 2j0JFHhn7H202sPN8bJG96MoDh3LH6ltOWlbFRfV lQ/OvzZjQh0pSTs38HECF4zeovBIUfeyFr2mTH4SrITJNx2LYoTDVweshjEty0alobc4c8j/b3xQGOH5JLdO8Ll&downloadAs=pixelmon-minecraft-programmesetjeux-com.exe&fallback_url=http://.../PixelmonMinecraft_1_8_3.zip

Remove pixelmon-minecraft-programmesetjeux-com.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.