home

pixelmon-minecraft-softwareandgames-com.exe

installer web

MediaProgramas SL

The installer utilizes the installCore download manager which may bundle additional offers for various ad-supported toolbars, extensions and utilities. The file pixelmon-minecraft-softwareandgames-com.exe, “installer web Setup ” by MediaProgramas SL has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The installer is marketed through download protals and search ads as Minecraft but will also install additional software offers which include adware, PUPs and browser toolbars.
Publisher:
MediaProgramas SL  (signed and verified)

Product:
installer web

Description:
installer web Setup

Version:
4.7.2.1

MD5:
3f54326b1f30841d1d42fb571b1c699d

SHA-1:
af28165c578dfb7ce4d3356d7ba5fee112bd8eea

SHA-256:
81684347a355344f39ae003de392b173a2fefa5bc6ca60aecd8757780eb1ef65

Scanner detections:
1 / 68

Status:
Adware

Note:
Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Description:
This 'download manager' is also considered bundleware, a utility designed to download software (possibly legitimate or opensource) and bundle it with a number of optional offers including ad-supported utilities, toolbars, shopping comparison tools and browser extensions.

Analysis date:
12/28/2024 6:41:49 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.installCore.MediaProgramas.Installer (M)
16.2.28.22

File size:
1 MB (1,063,208 bytes)

Product version:
2.5.9

Bundler/Installer:
installCore (using Inno Setup)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\microsoft\windows\inetcache\ie\{random}\pixelmon-minecraft-softwareandgames-com.exe.f7ifowt.partial

Digital Signature
Signed by:
MediaProgramas SL

Authority:
GlobalSign nv-sa

Valid from:
1/19/2016 4:15:23 PM

Valid to:
1/19/2017 4:15:23 PM

Subject:
CN=MediaProgramas SL, O=MediaProgramas SL, L=Caceres, C=ES

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121D99693421A43CAD4725D8372A3D12E34

File PE Metadata
Compilation timestamp:
6/20/1992 3:52:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:6kbattjombUPazD2PyycG2DbQkUhuutZ7uo7xma9wc7:6YItIiv+yi2DbXiu4Z7XxmCr

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, BF, A9, FF, FF, E8, 5E, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, 24, CE, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, 24, CE...
 
[+]

Entropy:
7.9285

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file pixelmon-minecraft-softwareandgames-com.exe has been seen being distributed by the following 12 URLs.

http://www.bundlesafevault.com/c?x=5sx7niZ0w6tZWC4/mwxjpkk4Plm9Us4HsQCE4RqYo1Q=&c=Bnh/EZMP2pRI7QYAi0gE2QiQn9etdvX80/U1LDnOrBRC7zyDAVqnZwpXDD//xDIg6HvKp7iTsYUrSNfMncEcOt4hAkRowRGdjr0 sNXWGJ2k4aekEPodMDjA1opiiQXq/bX3i9t85/ifLesOO33cFqWlHVS0E0si4hoXkE5FJz0=&e=0&downloadAs=pixelmon-minecraft-softwareandgames-com.exe&fallback_url=http://.../PixelmonMinecraft_1_8_3.zip

http://www.bundlesafevault.com/WVl6OTRQVEJwVkRsQ05pVXlSbmx2U3pCUFYyRkRPWE5UYkRWdFR6TlpjbFpIUWxKSWFGTlBKVEpHVDNwV2NrWjNKVEpHZHpRbE0wUW1ZejFhYm0wd1ptNUlkMVY2TkZOMWIxaDZkVGREVTBWVWJVWnNNelZ4YjB4cmRHbDBPVkppU2xaM1VsaHROalV6U1hKa2IyRjVibnBPUTFkMFlqaHJlbWwzVlhnM2FtaFlZbEJWUW5OTVZISktiMVE1UzJ4T2NGSkpURVZCSlRKR1QyZE9ZVTF2Yms5UFFWSnRXVWw1TlRSSlZYaDZkRXd5VjNCcWREQndWbmxGVFhnMWEwOW5Uek5VT0VSUlFWTkViRU0zVFRWR2VERmlkeVV6UkNVelJDWmxQVEFtWkc5M2JteHZZV1JCY3oxd2FYaGxiRzF2YmkxdGFXNWxZM0poWm5RdGMyOW1kSGRoY21WaGJtUm5ZVzFsY3kxamIyMHVaWGhsSm1aaGJHeGlZV05yWDNWeWJEMW9kSFJ3SlROQkpUSkdKVEpHWm1sc1pYTXVaRzkzYm14dllXUndjbTluY21GdFlYTXVZMjl0SlRKR1VHbDRaV3h0YjI1TmFXNWxZM0poWm5SZk1WODRYek11ZW1sdw==

http://www.bundlesafevault.com/c?x=LOhX3ddyT406pqED5DJP VWRtOodrKDbs2E3s5xcC8U=&c=hLH6SDM5aizmtpPGr4mA6QcvUYfsW3pFvjhH7hS/knofSO7 ZV6OLeAjmR3OWXPzTBaByWUrlwxoK08IrTaDZYxdWb6uTOFjtwJre0VFlJFmwSbLC8MmI6IjzI2NDv/64wMYhDdFJ ZlFuMzWCqX PCGPRZ1Ldm0vVzFbqDcToE=&e=0&downloadAs=pixelmon-minecraft-softwareandgames-com.exe&fallback_url=http://.../PixelmonMinecraft_1_8_3.zip

http://www.bundlesafevault.com/c?x=qo6SGHUXF2ftmQ1sWZfU5hglRLvUNPjeFZdpIir5s2c=&c=JvEgRkmdBBE8r0BrUpuntZgKYYdwnZki0Ax5RIyrfzvB2 Dc2RI n0l4GkRHY/edJ 8eqgQvdJv0jn6ctlX1Sodv7B/8v PLx8Ge1rE68jjWv1LdSHmdMD6KDA/nFRC dE4jURgiINieScasEniUvN29AIKjN6ZSKChSjxh4POluttRlVFUib3fa9hPqrWxB&e=0&downloadAs=pixelmon-minecraft-softwareandgames-com.exe&fallback_url=http://.../PixelmonMinecraft_1_8_3.zip

http://www.softwarebodyconecpt.com/c?x=K44qXEfYu1v3KL4KVWAOWb5Bz6BWSmn1uQ0SchdcJl0=&c=MM8ZmZS8WiXYneTIkLPeZZ8DswGpLQRnLSAncbG4zzD2D IZ4djKAUzvsQea0LJKef8okTT9cXXEWH/PJa1w8J5ShcbtR1orcsYWEphQ0HdLIiZfyzFZENhipxSZQ89GDDSj1wRv1Mxg730j9sx FLoFPD1Dukq4Y2d mp04LY8xKwSChT20flAFoYzVk1zE&e=0&downloadAs=pixelmon-minecraft-softwareandgames-com.exe&fallback_url=http://.../PixelmonMinecraft_1_8_3.zip

http://www.bundlesafevault.com/c?x=OAkxiati7C1mZ5 jjQKi22dQet E7IkRIcvI884DDl8=&c=41bqMxCU3ROdnnZE4B4P zROj3al0ieq4v Vt4BCkqAeePSDGucxbXjhs6gYy 3uJD2S0DGeBuE/mwvse8oYQLv/vnBaa5nh5YU81OD7At5KVHQYRMmJqaNlzl/uPTxK/wCF3FQaDv3kzuyuus2oJrCuL6bu1QZGsjZvEtHWFayIaOEMj0TKL0ZIZHRNGaok&e=0&downloadAs=pixelmon-minecraft-softwareandgames-com.exe&fallback_url=http://.../PixelmonMinecraft_1_8_3.zip

http://www.softwarebodyconecpt.com/c?x=pcQB1oabZiUCRQowxk2qWtLtsKccDcuLKyk8qe4/VYA=&c=MrhCBlTSAOnk7wzASKP/98w4AN1vIbnO bfIG3QPStn9sG/wg9qrtoqGduk8RXoH9q9NJrN1vTcdWgEtfL8jWwInQRc6S/GbXqPG5gkx8lpbYDfiFcGaJEZ65HNhS ib7jghxdnAPOyljFBROvUbsWsipY n6EZygOjNV7Pzk8Y=&e=0&downloadAs=pixelmon-minecraft-softwareandgames-com.exe&fallback_url=http://.../PixelmonMinecraft_1_8_3.zip

http://www.softwarebodyconecpt.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

http://www.softwarebodyconecpt.com/c?x=8n4Gqh5KlL M3nQboxWy0HdF elCzskNS6c47RvNczc=&c=YNkEyWP//UAGZ1Tc8PUcS6nY3534C/gFggCsBhkbt938m8yRbHiIhZbXTQ5F1PYt9zmHf7xAGU6TuRU2mKmOvJsSEex06bHCFKJvQSAJkbZ15Tf8AZkrT/Jd/ dmZW9eGEHo6xwkuldEWxqUluOK 1QT/8NcG0tahGPzyxy8f2lIXfckrRvJEOwM966H92Ro&e=0&downloadAs=pixelmon-minecraft-softwareandgames-com.exe&fallback_url=http://.../PixelmonMinecraft_1_8_3.zip

http://www.besttourssign.com/c?x=hwsUDmsrhZa2EWlcBX Wgf2olUkHPerv08tZK2zft c=&c=ZUYWAk75RT0 HwFJRLqdxQmhCxGjGOS2F9YcfMILEb3RkAv5TMOAF9ej42KWfd/HHAw9kT6EeCZFS1cLGnubSa7Nc31PflimAa4YWlooHd/DbA/8A3D1TkUgpGp2QrfMjXNKw L vaSKgkhmfqvyp0CrykGXgPE4SefWq7otuKqO/pU3kk57T9iB znLbl1u&downloadAs=pixelmon-minecraft-softwareandgames-com.exe&fallback_url=http://.../PixelmonMinecraft_1_8_3.zip

http://www.softwarebodyconecpt.com/c?x=ghfOAf6FX4pYYLFdL3oNSa4CWsVfRszkFZZrSni9HV0=&c= p4OM94YoV8Tmj3l7wPATvZNf3PYOu3Eh8YhNv3M8zuYSk9ybADbgaK9nCTjyb6RqDIthUL37PdtjK9mISK78wH2HsanRxczK68lPkrlq1x9QkBW96wkEQw Jfqa0m9OZg4Bim0Gs gbpzB0qLw1QNx044qIVqdMI/MJCKbHlplBVVBJdnd2nqggWzbrOzDb&e=0&downloadAs=pixelmon-minecraft-softwareandgames-com.exe&fallback_url=http://.../PixelmonMinecraft_1_8_3.zip

http://www.softwarebodyconecpt.com/c?x=N6E611PYJdAyR6HHIEUs1XYykAWBe5TGb0YaTKUZR3o=&c=Hz0a4C1dXLDZBnQQSB6 PWkEEwYRrq582EsoZ g/ZyfHtFVamccG9wBKOotq4laTaMvwvJg6T18McnIr7YAkQ 9tLMynCrGbzZQt2FwXhYinbHEUWhzA2z/Sil36KkOxmEpA7M6nvzDqx6NiXiiSwA k9i3dS2H85LwC4bcHSe7Po/Lvc/irBQXV8KIu2MXg&e=0&downloadAs=pixelmon-minecraft-softwareandgames-com.exe&fallback_url=http://.../PixelmonMinecraft_1_8_3.zip

Remove pixelmon-minecraft-softwareandgames-com.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.