playstation-2-emulator-programas-gratis-net.exe

Installer Internet Web

AgileMax (New Media Holdings Ltd.)

The application playstation-2-emulator-programas-gratis-net.exe, “Installer Internet Web Setup ” by AgileMax (New Media Holdings) has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. It is also typically executed from the user's temporary directory. The file has been seen being downloaded from www.sendtowersnew.com and multiple other hosts.
Publisher:
Software   (signed by AgileMax (New Media Holdings Ltd.))

Product:
Installer Internet Web

Description:
Installer Internet Web Setup

Version:
3.4.4.8

MD5:
f48ee6bd68c25b4a29e102a058ced281

SHA-1:
22fe99b7347feca9468cc881d74ae66506645253

SHA-256:
855fff21002f49f685ee1fee2b31a22dffdd68abb818091450e924ff4e7506ab

Scanner detections:
1 / 68

Status:
Adware

Note:
Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Description:
This 'download manager' is also considered bundleware, a utility designed to download software (possibly legitimate or opensource) and bundle it with a number of optional offers including ad-supported utilities, toolbars, shopping comparison tools and browser extensions.

Analysis date:
11/15/2024 2:19:29 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.NewMedia.Installer.Installer (M)
16.1.29.5

File size:
958.3 KB (981,304 bytes)

Product version:
3.1.5

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\playstation-2-emulator-programas-gratis-net.exe

Digital Signature
Authority:
GlobalSign nv-sa

Valid from:
12/16/2015 6:04:31 AM

Valid to:
10/30/2016 9:53:45 AM

Subject:
CN=AgileMax (New Media Holdings Ltd.), O=AgileMax (New Media Holdings Ltd.), L=Tel Aviv, C=IL

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
112186313590F7C0AF7C143BC6BDE6200476

File PE Metadata
Compilation timestamp:
6/19/1992 4:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:pKSxgTgYTb5VISBjR4+UL5WwuLCv9yUQ3YuEjHyq8pU:preTgmVVH/U9WwWCv9yJ3aZI

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, BF, A9, FF, FF, E8, 5E, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, 24, CE, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, 24, CE...
 
[+]

Entropy:
7.9306

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file playstation-2-emulator-programas-gratis-net.exe has been seen being distributed by the following 24 URLs.

http://www.sendtowersnew.com/c?x=AFi8VnoUyIXtq49bDO5VWDwSLMibhUGwwayrQMLRyWo=&c=r73W3mmJlgkk WFmJXbg y 4w4wuE6aJM7lXVTiFvl71bMKMXiIAxz3oo76mRi6vhlTIhDI7D4GLAaa nZjR6q8GTAsDb7Fd2aJz9H tNxVhlWsKJxxf28nfDwkrIGg2G3zDcniWjAV2Gn8p2WjtZQyXR99zBYNxqGXcRqgoRz0=&e=0&downloadAs=playstation-2-emulator-programas-gratis-net.exe&fallback_url=http://.../playstation2emu10048.exe

http://www.sendtowersnew.com/c?x=oUbI573IABw55qyfwws9vxFX p7LxwnxDtK70guW99Q=&c=xrPW0D9wo7Yyk9ZWGEPaw2vEWunPh1MuHlan/G9U2MP3WC5psUK/gYlaj/2ZGNssCl26ag1XlPZIkYbLOoPssisFXdgvOIv/s7yPogrsSNdkQIGJb9ZQWv3IB9c2 hSCqKpbOrleIpdVHIeEfI cYYTXv4BZirXkY1F5SdMy zY=&e=0&downloadAs=playstation-2-emulator-programas-gratis-net.exe&fallback_url=http://.../playstation2emu10048.exe

http://www.sendtowersnew.com/c?x=8WnfhFxEDX8sMBTOVO0Pnl41LT ALHEi9V lb5Yonzc=&c=gbA4XWhO54yILyHUK6x8uHrvgdToTXBbyex95W7Dhgl54BpvsO5kjKrftSiDoIHgUn GBtH2sDiODA Uecozi3oZnjphJcJls2eWbTRHxL6FreH7UY AZAV0xx9FNiMw3ntXlKkPx4e1TJjtWGxC74FZkYR5ceEsHl3HXr37YPywMBFxVN7x3J0M/MfEdXEi&e=0&downloadAs=playstation-2-emulator-programas-gratis-net.exe&fallback_url=http://.../playstation2emu10048.exe

http://www.bundlecentralbulk.com/WVl6OTRQVzkwSlRKQ2JFbFFSa3RxYW1GclFubHZkemR0VVRsc0pUSkNjMDF0WVhjbE1rWkJVMEZyU0V4SVdYaHlVbXB2WVdzbE0wUW1ZejF1ZWxOUWFHVkRZU1V5Um1jMWNIRnBXRnBGY3psRmVXUkpUWEp1TlVwNWFGZ3pRVTF4UjFSaldXeHZNamhZTjJreVpITTBlVTh6VlZweU9XdDJOMmxCSlRKQ1ZIbFdZM0k0VjFwNFpFOXVKVEpHTVhkTE4xZFRhM2w1UTJjeU56bGpNVzQ1V1ZwTlRuVmFUak4yV1VOak5DVXlRamxwVW10b2ExUkpZVXhWTVdwaFFuZ2xNa1pvVTBKbmNYQTVTVFJWVW1GYWNFcGlWRmh3V2lVeVFrdHdjVUVsTTBRbE0wUW1aVDB3Sm1SdmQyNXNiMkZrUVhNOWNHeGhlWE4wWVhScGIyNHRNaTFsYlhWc1lYUnZjaTF3Y205bmNtRnRZWE10WjNKaGRHbHpMVzVsZEM1bGVHVW1abUZzYkdKaFkydGZkWEpzUFdoMGRIQWxNMEVsTWtZbE1rWm1hV3hsY3k1a2IzZHViRzloWkhCeWIyZHlZVzFoY3k1amIyMGxNa1p3YkdGNWMzUmhkR2x2YmpKbGJYVXhNREEwT0M1bGVHVT0=