home

counter-strike-programas-gratis-net.exe

Installer Internet Web

AgileMax (New Media Holdings Ltd.)

The application counter-strike-programas-gratis-net.exe, “Installer Internet Web Setup ” by AgileMax (New Media Holdings) has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The file has been seen being downloaded from www.bundlecentralbulk.com and multiple other hosts.
Publisher:
Software   (signed by AgileMax (New Media Holdings Ltd.))

Product:
Installer Internet Web

Description:
Installer Internet Web Setup

Version:
3.4.4.8

MD5:
34e4b03440785980e97c813fb732c5fb

SHA-1:
ba3cc5e5a4cf4dd23a799d3ac9f534b722ecb891

SHA-256:
b68455ef6cb52653963364f898b2ad435014a600fc34ed92bd7963918f35e302

Scanner detections:
1 / 68

Status:
Adware

Note:
Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Description:
This is also known as bundleware, or downloadware, which is an downloader designed to simply deliver ad-supported offers in the setup routine of an otherwise legitimate software.

Analysis date:
5/19/2024 9:50:36 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.NewMedia.Installer.Installer (M)
16.1.15.2

File size:
958.3 KB (981,304 bytes)

Product version:
3.1.5

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Common path:
C:\users\{user}\downloads\counter-strike-programas-gratis-net.exe

Digital Signature
Signed by:
AgileMax (New Media Holdings Ltd.)

Authority:
GlobalSign nv-sa

Valid from:
12/16/2015 1:04:31 PM

Valid to:
10/30/2016 4:53:45 PM

Subject:
CN=AgileMax (New Media Holdings Ltd.), O=AgileMax (New Media Holdings Ltd.), L=Tel Aviv, C=IL

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
112186313590F7C0AF7C143BC6BDE6200476

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:IKSxgTgYTb5VISBjR4+UL5WwuLCv9yUQ3YuEjHyq8pU:IreTgmVVH/U9WwWCv9yJ3aZI

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, BF, A9, FF, FF, E8, 5E, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, 24, CE, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, 24, CE...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file counter-strike-programas-gratis-net.exe has been seen being distributed by the following 13 URLs.

http://www.bundlecentralbulk.com/c?x=W358XjlAQvIuwVg6krLNIYqcdUyAMmGBY 0uRXUDjz8=&c=ls8w4fYhQbjYk2Hfxc4BXaaEQsayhbe3ilGAoPNKDRAmUf6RwqJGENHbfA3ugs1M4iiQe XaoPWvNiHHSpsVMIEsk6/VYbrEpJN Hr80gC9ZHhjD192EnrTYGGYzFmh0O7kCRasyGWtc4/NYEM qRmPIBJIpVpUwdJvP ebqQqA=&downloadAs=counter-strike-programas-gratis-net.exe&fallback_url=http://.../CounterStrike.exe

http://www.sendtowersnew.com/c?x=x2w2/MgD9BUlEiEwIe33gC0bBLaHLjBgT4szTTKU1fg=&c=3P67LQzfi9aFRS9i2Zcrques7ZssQZyOiBCCEdRTZscxjersg /kJLwP0jU8dSihXCAmoLT69JHFXha3NKcgvd5UKDCDlHtyLqiEQXJKiX/CzB181frHZ5xL9jDU7wYJ3Y7IZEzcLJZ63iRoucfIV1elY0ZD5Sg6JcWJC8CwSK48mgnpR9IPZR9CvLcZzUeR&downloadAs=counter-strike-programas-gratis-net.exe&fallback_url=http://.../CounterStrike.exe

http://www.besttoursvaults.com/c?x=CEs WhsuOC8G3EHan6WmcGNac0u6C7kOnE2KJbG/mLo=&c=ZmsvhYyH4wAV24/TOmZGRRM/I6B 0Pl2VFIzmgOoswqNAPy3ZB7FncgUcxTyGLjmLS5EeP5atCtkD3i7pti458 9iZ54Y5p8ilVTM9FZvXluq4wX6wPtDOywr41tYV5Ir9AntcTAxRGvGkCZNhfcPYLmB4tXrV8QNUpowuyrQMU=&downloadAs=counter-strike-programas-gratis-net.exe&fallback_url=http://.../CounterStrike.exe

http://www.bundlecentralbulk.com/c?x=6ohC6SKqOy7EELcjn8a71KuI5jycxJqD2bjh3r ydbc=&c=C7eYczu2MbVu4omgmXIhh/l8qp7zZjxYTN9lF/EbI0fm9KRfn UrN9CV4JNndR/Lg dRdSFQuUgR7cAYUBpJCDzzBL94SZOtH6vdmsHv5TN phyxd8sLqbJaoWstMMmMpAbpu9lVtmwb1nnaTMW9SPFsFqXSZnHT7viIgDe0vL4=&downloadAs=counter-strike-programas-gratis-net.exe&fallback_url=http://.../CounterStrike.exe

http://www.bundlecentralbulk.com/c?x=gZSIALXbQMzz4Mkkj8RjX6IyLin6Z1sTlmBG9ShlHCo=&c=vk491 G ybAGW4PxeSRumH8bHUoD8rrnu T32wmzolOXDsSVvTcO7Lb/0JGl4LNDpnf7aakhCOnVrwGkJYIe45mdLAc3SdA cezNNG3XbTmTyukz/xFN24f9DHTBDYCWS2grURmpPvRL 5RXnzl07hEuO53t1H7fAbKG 76WmHc=&downloadAs=counter-strike-programas-gratis-net.exe&fallback_url=http://.../CounterStrike.exe

http://www.sendtowersnew.com/c?x=CCm2H219S0PZqbaigZnBDwEuu8sIUwsvbiUTTxyia40=&c=i2A4DjtAWoq9I/H8ese57VlWThmndV50sy0lNFlNCGNITfmSqHoreG8YV1YDYLi77Teo1MhTjSliceXb8WzwAjCA8ytR288 TLnWOM8oz92bkMpgVRkePwUCTWe9GtViQTxX4pr0c0hRhRuV9EmQiUf5dev7HR3 AqaHqUWSe1M=&downloadAs=counter-strike-programas-gratis-net.exe&fallback_url=http://.../CounterStrike.exe

http://www.besttoursvaults.com/c?x=GWsNiP7U8xOMzj2DlIXYDasLEcwG3Zd3Q796dHklmzE=&c=aFN7 5nHYXkvT60WxvIJJ6 QoU4zF g0GFL xFq1uDTKbgBamOkiz mRPFRE2t lZOmlvGKgvGUfBkNIfd9YdAI4J2Uqaz2Q/mzi3ztD8oBMrZv7MmNdzCpY59bgAsfN&downloadAs=counter-strike-programas-gratis-net.exe&fallback_url=http://.../CounterStrike.exe

http://www.sendtowersnew.com/c?x=7S7MmFjtmxaLkkCPCDu5kzWWhYby4TqtxzBFDpSJcZs=&c=ROttmsOzjlzDSrKVzFX1G5JGCA5atDNoqnylWCYgn2IGkmOxW94I r4ub GqWfcZCAousI6Uiaasxcqel5M0zFiRbdii8ON6PDAc h8kYNQ4BGne2LqeHr97GinnNHTq&downloadAs=counter-strike-programas-gratis-net.exe&fallback_url=http://.../CounterStrike.exe

http://www.sendtowersnew.com/c?x=/OG7MmLVVFR31FZ99oG7m9taJGefGrGNPMIz10EubYw=&c=DUVeFh0LHH1bR1CYTLL0g PY9mQSNg6Q4JQZ5lXR/51H7uIW9tteV7DaHhl3GF93zD0m2W GsrinMi5glArUGzMRUz8OkR5uefm0Daq1oyyML8nfq00ms4jfTau62 zn&downloadAs=counter-strike-programas-gratis-net.exe&fallback_url=http://.../CounterStrike.exe

http://www.sendtowersnew.com/c?x=Y9e4l1tdSCJUJJ/ow0s9I6gLIcfGVFUQw35fdcC52Dw=&c=U 2qS7ZTVPHekajLD8SNDbhgBpY6CDV 5nySwA9LDPUaCZFg1rtgg0HVUNgudrxI94ER8oSVbsk9bpcbeS3vCnjE5eQdNVUZH1Hm3X0cSHaVhDdv1WQY BEGjDLikVrQ&downloadAs=counter-strike-programas-gratis-net.exe&fallback_url=http://.../CounterStrike.exe

http://www.sendtowersnew.com/c?x=02qmEbWIHtxfo7v/36 nZ9ODhREiz2EFnPm5baV3dIM=&c=Rmp3qu qCOnJxQSRMoH8boUhrwxLXBjUCjZNIzFweya2RhlX6UHS6g7ypZzTGozxXqZY3HpnBc zwLIWljwil5ct99mNCKUoTAFkPL D7tAV1R74jx6ReEloss1NX8xa&downloadAs=counter-strike-programas-gratis-net.exe&fallback_url=http://.../CounterStrike.exe

http://www.sendtowersnew.com/c?x=eLplZd4NzjEs6rzolkeEdslwU5WzuhKPWHxDZq3t2hc=&c=CYdw6W2BwOdRRpYOpH4b2z1RKupy89pPdiemW/Ae27AfDUMSacbVY9EtXP6p4GT51CcvtJjNGz9QBQiWCC8UGk5DtLbFyP8SWbBuyB HKg m8OZZjQc1sybBAsp6rws32 WApXEiFQqeRZSLeiZn2WgXgswXkh/S6r6YQJXT22I=&downloadAs=counter-strike-programas-gratis-net.exe&fallback_url=http://.../CounterStrike.exe

http://www.sendtowersnew.com/c?x=aqvNDMtflLgKrHAISAqVZmXjUAu8S125sRgKnzGcn5Y=&c=AQ13eF4e3TXjAkRq0DZ3hW2pt1RaPT jonvTUVc7OBBmEIeW1qWtlcu8IkeCGCEceCARiRV3 6pCkJGpaf1g4zojC2P/jXCcfq9BmmweZu7on/pNw855pcFZhz7JX/GIIrmO5EP7j3mnS5KBBRI7BTIu9gtYw7rX8j7pEq05t34=&downloadAs=counter-strike-programas-gratis-net.exe&fallback_url=http://.../CounterStrike.exe

Remove counter-strike-programas-gratis-net.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.