home

halo-4-programas-gratis-net.exe

Installer Internet Web

AgileMax (New Media Holdings Ltd.)

The application halo-4-programas-gratis-net.exe, “Installer Internet Web Setup ” by AgileMax (New Media Holdings) has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The file has been seen being downloaded from www.headsignchuckle.com and multiple other hosts.
Publisher:
Software   (signed by AgileMax (New Media Holdings Ltd.))

Product:
Installer Internet Web

Description:
Installer Internet Web Setup

Version:
3.4.4.8

MD5:
d73ae1f72d1f03cc91be79b2fc1d8064

SHA-1:
e74b9005e7cf7c224e0937d8f7dc7bf7f0f7850f

SHA-256:
ea122500e1374b24b0460e5f15f9dd95f34e02f665e167d855387ddb31a83a16

Scanner detections:
1 / 68

Status:
Adware

Note:
Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Description:
This 'download manager' is also considered bundleware, a utility designed to download software (possibly legitimate or opensource) and bundle it with a number of optional offers including ad-supported utilities, toolbars, shopping comparison tools and browser extensions.

Analysis date:
5/5/2024 12:39:10 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.NewMedia.NMH.Bundler (M)
16.6.7.0

File size:
958.3 KB (981,304 bytes)

Product version:
3.1.5

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Common path:
C:\users\{user}\downloads\halo-4-programas-gratis-net.exe

Digital Signature
Signed by:
AgileMax (New Media Holdings Ltd.)

Authority:
GlobalSign nv-sa

Valid from:
12/16/2015 7:04:31 AM

Valid to:
10/30/2016 10:53:45 AM

Subject:
CN=AgileMax (New Media Holdings Ltd.), O=AgileMax (New Media Holdings Ltd.), L=Tel Aviv, C=IL

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
112186313590F7C0AF7C143BC6BDE6200476

File PE Metadata
Compilation timestamp:
6/19/1992 5:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:lKSxgTgYTb5VISBjR4+UL5WwuLCv9yUQ3YuEjHyq8pU:lreTgmVVH/U9WwWCv9yJ3aZI

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, BF, A9, FF, FF, E8, 5E, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, 24, CE, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, 24, CE...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file halo-4-programas-gratis-net.exe has been seen being distributed by the following 19 URLs.

http://www.headsignchuckle.com/c?x=z8pm/wG5IwMAz87Y3G1mCCGSjawJsfPAoBuljESog8Q=&c=LNQUa2/tlehRdkvyiIW4Rr2x8RAYXvjsh7 lzAhgSxswezcYF7S4tTEK7f4fyfBiN9jvR00tYQgk2bY9uPmdB/ay/K89GGQV0MoRltjrm8DboGg1SwAE8J45VoxWvxMbp2IFUkadBVrope8UZh7NT69o18Kj9ZIv6oLjamXeX30=&e=0&downloadAs=halo-4-programas-gratis-net.exe&fallback_url=http://.../Halo4.zip

http://www.bundlecentralbulk.com/c?x=nFT4ik6U8hNMxd16jKQAuRnkd0FjJSqu/2bvKEVz34w=&c=kc3pZ9yJXkpDcKWhQ VgJTiMIUs1HXaZoJ2 AMUSmHRO6mf0PYsaA5JJTnOMht9JcQDPgDw50nlyuujXZzEHdHGKYB22HrtvNbIAHwsr68YEvGpqJtQMdF5xQtNDn/SuYO6Pqv2lhD8FtXvZr/tH2sB1/Q7PTbd2ZCUoKeIeXOk=&e=0&downloadAs=halo-4-programas-gratis-net.exe&fallback_url=http://.../Halo4.zip

http://www.bundlecentralbulk.com/c?x=3xJzZv8epZKO06tcPMI rW Xp0VIz3Vza6cB/W7SHCo=&c=dPoK0isDgu//s9wR u u7UUtMFUBN7M3afW yzLt4DH0JxOWtY2PHMM4ClFceWmVTc2c2aRwj5oWpwsJLpKgXODE14bX109vtSdWhb5ZocTPP/fdk5kgHDJlRqeQsi9VZmQQxZtk/AXdcEDcMxyMp1MH0pU7m57NL82uAq59YLs=&e=0&downloadAs=halo-4-programas-gratis-net.exe&fallback_url=http://.../Halo4.zip

http://www.headsignchuckle.com/c?x=flgKcKOKESFtu7wXsIZg5 ZBewhJWL2AXSdvGbXj3Nk=&c=cLexTrlEVL0SBi9HPYUZmy7jyOxUJtncY5WfQUjvOR94olcFrj4HuMs7nUnsBo8JdLw6jrSFvFC3dKmiPP8Ot DMLkPri iFTpx2S4VXae9lzbOmjdTIJBp5naTUC ZUS7iCwJcHhYSsXIs0HYQOfaeWciGxN4YvVK mo8Ty0Xg=&e=0&downloadAs=halo-4-programas-gratis-net.exe&fallback_url=http://.../Halo4.zip

http://www.bundlecentralbulk.com/c?x=nwr6yi2E6ZVzV4Y8T0ddNm17J9goKt27hiki3K8nNrc=&c=fvFEGe9jjegVy TnVU9edXIFJC7e9AjnA3j3jzzMypvyVUORw x8y0q2M86CaI0vwUcwCstNBbaj7F0GTrmhjixmXMBO2pGpcF8I6p3tS/UCF18/3Lj/oVvzUM/H4dkeqlha3L0k kNEVufaw3NMtqSbTDesfQu7a8uU VzT1z8=&e=0&downloadAs=halo-4-programas-gratis-net.exe&fallback_url=http://.../Halo4.zip

http://www.bundlecentralbulk.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

http://www.bundlecentralbulk.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

http://www.bundlecentralbulk.com/c?x=gs7vEcpJ9E09JnRkT6XF3RidnpcfdqI473GyO6sxfjs=&c=VdrUuFxOukIMXK4MUhmaIGkI0VCn16fWxG0i0EjC2eWasWl7vbhiG5a4X2XB7GCHBCDI/J10u4uYmfoSs RhnsxQKOE6JpeSPJ5 XCj2gkeFQ915PkA dlUyBrLGSnEYbS227ywTJEs0nQKjj03wLpBu6towOpMqku8InqaERx8=&e=0&downloadAs=halo-4-programas-gratis-net.exe&fallback_url=http://.../Halo4.zip

http://www.headsignchuckle.com/c?x=Md uE05lAzrZytZrTEFv6nC52fJuZW53bl8FbJfSd38=&c=cocX4XAybAdXfi1ZJz/wGl54pNz6wyyUZqLTN4tvbZHOLUZlGYaFWnmoPxVwDQV/ePgB/Dccc/M/XrdILJS1cPWwOeAXehTalFNkECdOphg0JhAW27rBCWH 0As 8b9mjGj8kgze2pO5eM0D9pPCsGZI0YEixDJvzP8ZC/gI/0w=&e=0&downloadAs=halo-4-programas-gratis-net.exe&fallback_url=http://.../Halo4.zip

http://www.besttoursvaults.com/c?x=GJSU1VEEHzg3EjZb1Qq7Ku10i4pIc35bfZI7DGcwuro=&c=P8rRUpc1QPIy7Y38l2m97rHhUNu0jD243ugxGrOSO2tV6aw6TCWvyoH/CxMMeNahlsHebKN4 Z7LnrCz7Nt6VgTHjupO4cFhi7 z1hd20Whzm4ASJ5alAdn0iZ5Olvk7 2A5cu0xOHsUtaActSNSwCjFn uupYkjHNN/iw LJCc=&e=0&downloadAs=halo-4-programas-gratis-net.exe&fallback_url=http://.../Halo4.zip

http://www.bundlecentralbulk.com/c?x=ojwZKf8xrehHNdn2ptHZGS8OlCmMHf3rbHZzTV6llC8=&c=uoYN4ncbyAQWr4qRToZAnF72hagNdx2ttXgQwOr4xW8fCnCU9LVSjA92dmgOd1746aWeq6NsisOxwillhwxzLgG7HJqQzu9OcGml4VdkrI/ FqeYnf NBqz9ZCATiRejAs9avpacjRGCKHeGz8A cHC3rAKhxDM5FNUB n0HUwk=&e=0&downloadAs=halo-4-programas-gratis-net.exe&fallback_url=http://.../Halo4.zip

http://www.bundlecentralbulk.com/c?x=GLB6qg53 lIDBbRS5y5Z8SpiPunctCRs1eMW9AL9ggU=&c=jKcoYFP kE5zzwP9UuskSJzt/Fcx788W7tdhHm5RZ7lkwi1a53rvZC1EHXLcY1GjX9TlP7yMX/hpl/teIc07zMizLSJdY/AfMdnInDbcX/H/uM4T/9RnKF9QYFry0Nku3u36cH2tZJjjoI55JnY37uCsD/OsT6lxw1BkuSYmS8g=&e=0&downloadAs=halo-4-programas-gratis-net.exe&fallback_url=http://.../Halo4.zip

http://www.bundlecentralbulk.com/c?x=YFhVyTVCIV2lx23PdoznjXzSl9KOubjPsJ0U0qV4Rsc=&c=zSRAuBb /yvD sLdVtWIivNJ6JIUHDGQ9A0mSOvcqts1acsSSHHynndFnOgDKygMd8GwmSjJirmZnwJyF0byJa5CPYeK9DgYF32QIihaSgxPomsrzUCEuPvQKRT6RlUJuEzIeZKEOzAn2b HVRuzwjTNfiQpi/757SfsFKClVo=&e=0&downloadAs=halo-4-programas-gratis-net.exe&fallback_url=http://.../Halo4.zip

http://www.bundlecentralbulk.com/c?x=4TYctsHnFt8bkYML1FlVd FMAhCwlfX/pDtPsHxEaU8=&c=iZ/wlPkY0LzXcUlSjmu29pJVRdEG7zAx5ob7pciocDIopBHTwWJQ/lbEwr8dFKCVAFDqy26qKUW ufKuE39ME6plmdmlB5abRumOB3s7qdy/fNxAw6wuj3PeecvyMtERgBhcdSHs/r7PqPLvaUz4ug==&e=0&downloadAs=halo-4-programas-gratis-net.exe&fallback_url=http://.../Halo4.zip

http://www.bundlecentralbulk.com/WVl6OTRQVWhvUVZWbkpUSkNRa3NsTWtKR1prcDFjbE52Wm5WbFdXeHVSRmRUZW5admR6ZFFOaVV5Um1SaWRtbGpXVEJPUTJzbE0wUW1ZejAzWWpGeVpuSXhWSFp2VmtnNFJXcHBPSFV5V0dadGNFb3hRblYxWlNVeVFrRTRVMVZ3VDBOU1YyeG1PVXcwZGxkak4zaFVSWGMwZUhWTGN5VXlSbEV4Tm5aUFYzaFdNbWRoTUdKaFMycHpaV1ZSYWpSbVRVdHBTak5zZFhKMldFcGxlbHBoYTNOb2QyOTNTemhPWkU5M2NubHZPVGhRT0hJeVpXcFFlRVJxVjFaSGJHcFRObkpyTWxoWVIwWkVZME5QYkhvNVVIQkNhVWxSSlRORUpUTkVKbVU5TUNaa2IzZHViRzloWkVGelBXaGhiRzh0TkMxd2NtOW5jbUZ0WVhNdFozSmhkR2x6TFc1bGRDNWxlR1VtWm1Gc2JHSmhZMnRmZFhKc1BXaDBkSEFsTTBFbE1rWWxNa1ptYVd4bGN5NWtiM2R1Ykc5aFpIQnliMmR5WVcxaGN5NWpiMjBsTWtaSVlXeHZOQzU2YVhBPQ==

http://www.bundlecentralbulk.com/c?x=frfMIB8PWQeWrxk x44gLoSDZYnL3h4tdRMKE/IJ4Lc=&c=VxmHKg1zUjoM8mFI2u9YkkW3BaX4wvNvffBe1E08/JGoxDunmhvHHA3AY5fSRwsrZrIvFVWyZv1j88INdILtPb9J4/OUObZz4qQPRN7CpnATWE4OZtoQchTt/qD/4i873N9TU7G2tri5PDZGE1NwJ1MFNnpYLkziP nk8OPOwzc=&e=0&downloadAs=halo-4-programas-gratis-net.exe&fallback_url=http://.../Halo4.zip

http://www.besttoursvaults.com/c?x=IMIUK8zIu1Cbf6YJ1QkydXynnUngRGPXyvyuJS24njI=&c=Ow/TJ2FYaXeR0TaesqOMX5ryKWlUakJj cwfZkyehFxPRhNTj9o7gUtqEtK4Wih/mT6SU4 eV8hn4JXdIsxeDF0op8Wu3q9rt3Oq3pghy9JGQLQIMAccgfL8Swc2VRI1BT/wRCeE1I7agwI lwPcllXl/Nw52xQJX8z8ub02AOs=&e=0&downloadAs=halo-4-programas-gratis-net.exe&fallback_url=http://.../Halo4.zip

http://www.headsignchuckle.com/c?x=ZoEaf7AWx2iAIy/uWnw81Wo8z69auyzq2SZNDjninBg=&c=ruDXIjXldmW/IqlFpkBbcVjLQohwH5G/EgfG3yHsy GoU57sJf6wi1duBN2DAeFzMa42IXnL5TRNPwGJMWv8PNWZoM4iL86Ydm4OGpM6h7 k2g6wTKUGgMqqGzGmh31w1xLcKU9/ajbK1VsRoDEihc FdDyYE8WpBN1QIAidD I=&e=0&downloadAs=halo-4-programas-gratis-net.exe&fallback_url=http://.../Halo4.zip

http://www.besttoursvaults.com/c?x=n8fhYDbfakGtaGU9Ii2mMKkv3kT1VsZk9aUnl2/lEfs=&c=tacAyeclGie082sNL1oUlq4qtRXVQsjwLbJxrslIHZn BwgVcipF1x6KhtbuHsbix0E0ik7KYd/fmeQzz3ta 0lX/pa2WDQUE38dL9kU3tkKwBN04NyGIJ5UuwWCOHhMMqTamYyEGXiaUlu1FQrRbSlBgYGhcarEd4FeH/yx4/o=&e=0&downloadAs=halo-4-programas-gratis-net.exe&fallback_url=http://.../Halo4.zip

Remove halo-4-programas-gratis-net.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.