home

snow-bros-descargarjuegos-com.exe

installer web

MediaProgramas SL

The installer utilizes the installCore download manager which may bundle additional offers for various ad-supported toolbars, extensions and utilities. The application snow-bros-descargarjuegos-com.exe, “installer web Setup ” by MediaProgramas SL has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The file has been seen being downloaded from www.softwarebodyconecpt.com and multiple other hosts.
Publisher:
MediaProgramas SL  (signed and verified)

Product:
installer web

Description:
installer web Setup

Version:
4.7.2.1

MD5:
9aeeae88d668ce8ee3b9819d636b8818

SHA-1:
865a0cebd66118dfbd655cf5631698a4dbd61649

SHA-256:
56676a4710b4680e8969f3583c53bde113585680525553b5ccb763e8016b1d39

Scanner detections:
1 / 68

Status:
Adware

Note:
Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Description:
This is also known as bundleware, or downloadware, which is an downloader designed to simply deliver ad-supported offers in the setup routine of an otherwise legitimate software.

Analysis date:
11/24/2024 1:44:48 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.installCore.MediaProgramas.Installer (M)
16.2.29.10

File size:
1 MB (1,063,208 bytes)

Product version:
2.5.9

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\inetcache\ie\{random}\snow-bros-descargarjuegos-com.exe

Digital Signature
Signed by:
MediaProgramas SL

Authority:
GlobalSign nv-sa

Valid from:
1/19/2016 4:45:23 AM

Valid to:
1/19/2017 4:45:23 AM

Subject:
CN=MediaProgramas SL, O=MediaProgramas SL, L=Caceres, C=ES

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121D99693421A43CAD4725D8372A3D12E34

File PE Metadata
Compilation timestamp:
6/19/1992 5:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:akbattjombUPazD2PyycG2DbQkUhuutZ7uo7xma9wc7:aYItIiv+yi2DbXiu4Z7XxmCr

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, BF, A9, FF, FF, E8, 5E, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, 24, CE, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, 24, CE...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file snow-bros-descargarjuegos-com.exe has been seen being distributed by the following 22 URLs.

http://www.softwarebodyconecpt.com/c?x=3wTIl3QuCL0 iJij6GMQKawEtY1NCTu3u5HN3OG3vdk=&c=oq3j V2VqqYgBXgVgZALc7zXCg9zdhXWOwxPiDYdbImBSvFIoolBnltNh8/gVYTdq/OzMxzs8lmVRsFt9kE2rKaCLitKJCZh3aKclPYHMKp5pHII2NMkfszusSGWlqSRNsYNIq9hceaiwxU2eN/ jv ZdwBslxme/b6i3k mvas=&e=0&downloadAs=snow-bros-descargarjuegos-com.exe&fallback_url=http://www.gamefabrique.com/.../snow_brothers.exe

http://www.softwarebodyconecpt.com/c?x=OtXkYQtAyq5Pomd3N0d/i10O67hZM/pVc723RUvS/jI=&c=kTtdKHcWwgC0r8SOh3qdCi5/PQ8jD2jGJB V0Y0mzO6xBA4l5hpMcpEnzin0i8ERFpmmH949/dKVwwOywH/tNjtckvJsnYt9iu8Y3wuyd9/qN8RZtFuL7G2cGuEyp9xyKIkghWsLS4QoFjmrkmyrBYlf1vcAEeQDGz4w93kyDDI=&e=0&downloadAs=snow-bros-descargarjuegos-com.exe&fallback_url=http://www.gamefabrique.com/.../snow_brothers.exe

http://www.softwarebodyconecpt.com/c?x=UnPHKJ2O/kWoAuU3NNRXzRpGVkX QBTqjiWvex3RLlE=&c=tX9xEpnwF3t6lMnbFW32PzB2nyZ4jNBuqwOar76CA440gOOyhGsbhbbVEQlExSF0MlMg/Ppqf45TRXHKSqJPF26SdEB/O9klVkH9rk7mjHh3c1BoaeVDp3ewosdUQ1VAAJ70AIMm Ja0xVsetuvUR5QtZMBWXlKF4kCwu9xS19c=&e=0&downloadAs=snow-bros-descargarjuegos-com.exe&fallback_url=http://www.gamefabrique.com/.../snow_brothers.exe

http://www.bundlesafevault.com/c?x=ibkvCprzSAPlF40C61n1rPeXiEVh6it5bQaXf5bIsN8=&c=os/HjmRVxe8mCNgxsoU4kwe Z4MD4IMgrGxrrpFSMW0zCeo4oVz41/P9U6tFtgcxqVtq2HAAaS7c5t6EHiMYXAb3rsAJpx/ttcXy3uGVnXGA6jtJ3id eZVueTI lsbvVziZLr4Zpgdd1lRbC9tCDa5d9ELZUCDxZkC4lBLWgvzUIkTvGNs12PudyvmQ9jkY&e=0&downloadAs=snow-bros-descargarjuegos-com.exe&fallback_url=http://www.gamefabrique.com/.../snow_brothers.exe

http://www.bundlesafevault.com/c?x=blkcMA07MngB z1vDp3I3WvCjt0me0WIAA33u FJVLM=&c=Suxg8A7EMsdLRz2eFqfPA65LsZSrnBTqSNntFyNCKeLs4JUKgOMb5dXviL7BwG/eB7GdtTob8p81zTVh8AAs/nGF3P1p1C4feEFhbK2IzXQWCnJ2XyrrhUtJjI5pdK7PIGjf3dpj/PeCWj3V9dUzh8MrpiS6qQg YetuUjhjJ1xiLsZc1uPyzTAoZPDzfxAV&e=0&downloadAs=snow-bros-descargarjuegos-com.exe&fallback_url=http://www.gamefabrique.com/.../snow_brothers.exe

http://www.bundlesafevault.com/c?x=qCLkYOxmYjqnJnTXKA0TE60dplaGfNyk6pAAd2OlcXw=&c=UyBBhymyXQUS0Fqval0AmDsUu8zH9j9tGcUCFOUI48 VoKOS7HRBxq3uETtxrCIoy9Y hzA0VCaW3OO8nN50jYORdCcdorjoPnep5R KFHKOSQTJZwK3NbgWM4B/RsS14 vtS5wxTfciYr9GOBQwWLWUzJET/kCItyoJmsmTmpOjpgvTO0cVq6ii4JeGIEYT&e=0&downloadAs=snow-bros-descargarjuegos-com.exe&fallback_url=http://www.gamefabrique.com/.../snow_brothers.exe

http://www.bundlesafevault.com/c?x=LykOTa3TrTdSd7Wybt1TJCzGaeV/K3uRY88Lm5nC13M=&c=xAQfHL9yo0Jrl/CFPsBkVFCcQv0CANWfPAXvOk419xGnrIkHdNpQZX8mc1zwkLb0rgWQr6Zhp8EnD1th5yvD2 8AzCKpKpnH/C3YKsAmLzbaxVQcyynbPRS2EaKqboB m3kf1nNZxX5Q/YyKcW/OodXp4o5axLK0dPaUGfMNfsQ=&e=0&downloadAs=snow-bros-descargarjuegos-com.exe&fallback_url=http://www.gamefabrique.com/.../snow_brothers.exe

http://www.bundlesafevault.com/c?x=0iphrkwoWQPjqWkWLPQBolxlz6JPbIPCNQWJLX/5ZJ4=&c=rNcRGtksa3X7DCvvocjxd0STi92bOoW99Nj1mHUFGOJWObmvGfXLWWfNvH8Z2LO/qcAKeEmmNRJNwuBKdlZL0RaV9yzaJ8wWkEQJZ1IZbalPK3PB VjBorSMG9UupUX1TS78W5ZzV945/iKrmnbEIYLMt7UFx4mntSry3 hqvDI=&e=0&downloadAs=snow-bros-descargarjuegos-com.exe&fallback_url=http://www.gamefabrique.com/.../snow_brothers.exe

http://www.bundlesafevault.com/c?x=ssZXIlq4j8UXZfQE48GAb /n6on3pvWzBdUQPfr2DGI=&c=/Eh1c3S N7wTsCP/K4ZxY9F/PwfMvXou4zxWwzhAyOJoCrQZxYvls6CSpudENhxxpNfD6PvHS2ZUGYcZLWZ4SlhwnveE6IDftnErZR8Kd3jfNDIAmJcsOMoEU27NXJopi2kxs/lIxwaCaI/zaM4txXkX9qmCpX stCvCYBFaqtev6n Q66eCMJJQhzgSzYYj&e=0&downloadAs=snow-bros-descargarjuegos-com.exe&fallback_url=http://www.gamefabrique.com/.../snow_brothers.exe

http://www.bundlesafevault.com/c?x=12HQc/r6qFvmzbDsk/aj0WESMx433yxudT/3VAU24EA=&c=n1fLsWuxxg283v9o323FM1MpLKolovW8GNqwmpoalUW1rO/5vafCuJWo9LqANBwzDDeXrhIFoTOMkeuUd vnecTK3M64huVhXjME36MmgTnOB6e4yiezRcfYb2UI1zniggRLPeIohXKgjoMv1w9ipOjQxbc/hBCaflZVNs15A8lGErbKI3XXg9RtkmUt5YC2&e=0&downloadAs=snow-bros-descargarjuegos-com.exe&fallback_url=http://www.gamefabrique.com/.../snow_brothers.exe

http://www.bundlesafevault.com/c?x=/n1VqtkMekJAdkqtjsVnOjfVGz3VdSmdvylCNhL/Je0=&c=gmDdJS0f48fjF5FQAXDcWAEeZ0Nzstubjvh3K3q8JWgAFsZmAvuqRqjuDv2Ynxbokq8yk7pIXaA uTI0axPUT7RQk8ji0Y1AIF3DWtmUkxgyWMfCYzTrnLqe7l nmSgJpLN1vksjJmFdWuGQ/6Hfgv5wOOCyJmwT696VkHQUFYg=&e=0&downloadAs=snow-bros-descargarjuegos-com.exe&fallback_url=http://www.gamefabrique.com/.../snow_brothers.exe

http://www.bundlesafevault.com/c?x=fVpavKfaGmfKx3FtbjYZIfuFLACdNS581ipeO6P Abo=&c=GyYTNtuWLg4oZWj6gqhezwwy8Uw5xSW9RVl9ZOyyiSxThm7zzQPxY07by97Jw1ecTomL2avtZmOgOnE VdhJaW2aFPD3K43W4mq2KOoFMBok7xw2iHg4Ok9MP QP6UwMiQ24V5ZvDo5Xngm017FN9looKWowJFB7/OEazs75GNXueqMYNxS8gpAGZ5TIHYb1&e=0&downloadAs=snow-bros-descargarjuegos-com.exe&fallback_url=http://www.gamefabrique.com/.../snow_brothers.exe

http://www.bundlesafevault.com/c?x=wyyJ JlofQ8oZGMI/rJ/VAQJUezJa 6OyKrdLarSwS0=&c=exy2fTTCfQsyIwYJgP EgaLNS6BVye0WwMNMzX9fij ej58nwYBOuQtr utqgECQeIbWXaDWLHq7HvhZIIKv6ohWxqTBGXs7JaiZAmzE5eb77BFWDZvZLUdIiQ2QhCu7nWjlXXzWbqoWIx74h9AWPQfbSfchFYC2p1a8A5bS4WPXK kPiyxA n p7YrxguAr&e=0&downloadAs=snow-bros-descargarjuegos-com.exe&fallback_url=http://www.gamefabrique.com/.../snow_brothers.exe

http://www.bundlesafevault.com/c?x=InTXE8 XhhJlyBjm5ln7hWTaik4cehWDo2dq5I7 Hbk=&c=C1fbR2AFYNpivDZzx5A5IGRIyLyfgz0qFjHuibMmqHyvndZyu4z1ANjhtZ8QL/HPZBTGqY6Xz54oH oJqxcL8ov0X154yuVlPzo2KTNhxytbLTMRcuLtfPy7W6h1/MTiWj FacdLU/2w2NiBECJJ30FH819izTMqku3mdOfQBfw=&e=0&downloadAs=snow-bros-descargarjuegos-com.exe&fallback_url=http://www.gamefabrique.com/.../snow_brothers.exe

http://www.bundlesafevault.com/c?x=z2YUL6k5ODWHTQTfF JtKqLmG9nt6PXM/3BTNsI1sG0=&c=Tad5hXH3i3/RczMUjsZPC4FkGrVdJya5Rq8F01oRJvcg4/bjxLeiJ5TsWBJvN1evfy2 ezdUmNPyE2xC7Phfczf03w6MNkl4yA3UcbKJacPwIig/h9pX6eZVOzYrYVYwf1rXNwS3yqw03Wdbr7u9AbY93DVL4zupHT7DVNNKicI=&e=0&downloadAs=snow-bros-descargarjuegos-com.exe&fallback_url=http://www.gamefabrique.com/.../snow_brothers.exe

http://www.softwarebodyconecpt.com/c?x=R73Xy6Z4oorRYQ2zzCK3Q2SykHIZA83m5 144t9Nr3I=&c=B6/rc6gf7 3yQ5xh8LrH37B/KuoqOSLofB2D QtsKOFw6Gpx/HJNiTeH9W0DzQLKb2EeQrtkU 46Mh94D2Q WTaDPe07UTF8RHvJ1knbOwHeUObhGvUWyeNpUoWk7Kci5Kq3DvOy7Z7CnW9qnKxSCBmV61kDWV59QT /D2TJvx8=&e=0&downloadAs=snow-bros-descargarjuegos-com.exe&fallback_url=http://www.gamefabrique.com/.../snow_brothers.exe

http://www.softwarebodyconecpt.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

http://www.softwarebodyconecpt.com/c?x= 5JaVk1a8P7UI7Xmubm3JN0ePT7YPCePPxPLzQBJGF8=&c=Hexx0XuN5MMWko eIvLMffE5rMpUial9dGPYOUHdTJ2y2We6yzlbj0Ncno0GduCKJ0OkCI hEEns9THOcCUeyqX463I V duyh ZLK1rjV7GfCTtncBq/cKhaYifLwD870bbnWQupl bR5owGfiW/2xQEvJECwOOKCX/UyHhnzfSb6qez9WgCQkB67 pJe9&e=0&downloadAs=snow-bros-descargarjuegos-com.exe&fallback_url=http://www.gamefabrique.com/.../snow_brothers.exe

http://www.softwarebodyconecpt.com/c?x=N8Ot3GsoqaiWPIfaCVFQ6NMeQXp6c1 IJMzarl/zkNM=&c=06zVds7nLkytBodxXstnhOGgO4sWOx2rSDIk0C5EhkM82z/1dAklqDBBSLteSvjl1IyPI6XFHb8qZ74cgY8GudjoxkqYQqS3V7LO2Csvs3fS7pr3cJ4LGKjsbB4AAiRRFKaNl9pxIB3fpi3GPO7XhhqjpyX7EhoWmukggPVuIOw=&e=0&downloadAs=snow-bros-descargarjuegos-com.exe&fallback_url=http://www.gamefabrique.com/.../snow_brothers.exe

http://www.softwarebodyconecpt.com/c?x=lekQKrQP5G9xr4xCvtzZMmN1muYIy4X5IqM NNCFGXU=&c=JlcjwJs5J1VSHDY/DvzNJLLS5pXEHOAHzzySJWt/QYGDW KHt9uspnT3k827k90QvgNP/G2gHbxRdS/X2pdAn5w7L0A1vqhO2mgj7HuYuE98t2JwZo8DvReKkONtuE9G4Kt7EfySdm5QXLkRZbi1kGMFvzPGNtrYjGWiVLqJ5SCYmyard0hb8uN2liEL0VN/&e=0&downloadAs=snow-bros-descargarjuegos-com.exe&fallback_url=http://www.gamefabrique.com/.../snow_brothers.exe

http://www.softwarebodyconecpt.com/c?x=Kvbe630HjJdGuGy//D4grtnhKDRWkWNIITkDMyir0rY=&c=k6EbyWw34C3q54yca0YABbQ9cZ6TwIypfaYdaGQTzrJvLf7ZIWtKroags4YdtrcGkW2VC7cNKClfqALw0eSE6suT 6FEZJImnNmci4Tcuu9hCfKH6/pcaPyFewFZdnYKAOuAxGSoyfWrMSsYmVtKUq/OwKaCaYOfZwOUkWJEyq/wbeyj17opmWPdQyYtMIHe&e=0&downloadAs=snow-bros-descargarjuegos-com.exe&fallback_url=http://www.gamefabrique.com/.../snow_brothers.exe

http://www.besttourssign.com/c?x=7BTnaHwkeIiYQwAbyggZbXrv4g2yGnosfTBmU7XORbs=&c=HpeiTJjXnpf9iOJAaApguPvNt4glM469Yb2D3v5/LYtuGirvhNk8YUXsjCeidHudVswDG2kQHBFrMKp4idSBsRrNeKEoLpDKWCeBTvAKD62i6 Wymkn2lAwJn4oEn9OUyvANe2LiCrqaTZCAsK5qpMrBTqtuhqcJHocBmIehaXV7Wz0YmOiO3QpA7h71t1m&downloadAs=snow-bros-descargarjuegos-com.exe&fallback_url=http://www.gamefabrique.com/.../snow_brothers.exe

Remove snow-bros-descargarjuegos-com.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.