icreinstall_los-sims-4-programas-gratis-net.exe

Installer Internet Web

AgileMax (New Media Holdings Ltd.)

The installer utilizes InstallCore which may bundle about 3-4 offers for various ad-supported toolbars, extensions and utilities. The application icreinstall_los-sims-4-programas-gratis-net.exe, “Installer Internet Web Setup ” by AgileMax (New Media Holdings) has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. It is also typically executed from the user's temporary directory. The file has been seen being downloaded from www.sendtowersnew.com and multiple other hosts. While running, it connects to the Internet address os.solvefile.com on port 80 using the HTTP protocol.
Publisher:
Software   (signed by AgileMax (New Media Holdings Ltd.))

Product:
Installer Internet Web

Description:
Installer Internet Web Setup

Version:
3.4.4.8

MD5:
2e776c1e594169619f45c739e92ff1c3

SHA-1:
8465faafa4ea5aa29f65874cd01994d3053cd179

SHA-256:
2da4730257179b578d7390eaf610c65ee7882b60f34bc4dc9bd7febdcc7e42a9

Scanner detections:
1 / 68

Status:
Adware

Explanation:
Utilizes the InstallCore download manager that may bundle various adware-type offers.

Description:
This 'download manager' is also considered bundleware, a utility designed to download software (possibly legitimate or opensource) and bundle it with a number of optional offers including ad-supported utilities, toolbars, shopping comparison tools and browser extensions.

Analysis date:
6/16/2024 1:08:16 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.NewMedia.Installer.Installer (M)
16.1.10.6

File size:
958.3 KB (981,304 bytes)

Product version:
3.1.5

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Common path:
C:\users\{user}\appdata\local\temp\icreinstall_los-sims-4-programas-gratis-net.exe

Digital Signature
Authority:
GlobalSign nv-sa

Valid from:
12/16/2015 9:04:31 AM

Valid to:
10/30/2016 12:53:45 PM

Subject:
CN=AgileMax (New Media Holdings Ltd.), O=AgileMax (New Media Holdings Ltd.), L=Tel Aviv, C=IL

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
112186313590F7C0AF7C143BC6BDE6200476

File PE Metadata
Compilation timestamp:
6/19/1992 7:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:kKSxgTgYTb5VISBjR4+UL5WwuLCv9yUQ3YuEjHyq8pU:kreTgmVVH/U9WwWCv9yJ3aZI

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, BF, A9, FF, FF, E8, 5E, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, 24, CE, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, 24, CE...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file icreinstall_los-sims-4-programas-gratis-net.exe has been seen being distributed by the following 50 URLs.

http://www.sendtowersnew.com/c?x=EC6jf9SdO14UklZ1o3wHgjyAI1f5WHMKPd8bLiE4ch4=&c=6UvFJ7cq/cmFK3vggP2wdfSpOTFPrCvUdsxHPsQer62fTfVHZPBeiw5sU mrQKGOOT3KVbNxCg/7XqaHrIiX5Buwk1BHHUY7j/KXmXQPe3voLyhpgm/FSLZWWPrtJWAdnC2FqzkP/mVb50HuF/lalxSkm8qwSi4WrMlnzT9Chyt/eIdWMgwu gyozxvCBg0I&e=0&downloadAs=los-sims-4-programas-gratis-net.exe&fallback_url=http://.../LosSims4Wallpaper.zip

http://www.headsignchuckle.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

http://www.besttoursvaults.com/c?x=bav0Fg/YHhytMMMZOMESWwLkFY7rdRw4k0DVob6T6O0=&c=p0FyoWhmv17NT3GMXcrvBvYfUcjYCtynq7O5wOt6MeExKrAUOOdWTVMPKgH0ytmz1xFxoVP3Womt1YjwXfIZ1hHOxmN5hWmBJD02VuggNqdPNhENWGRKpaxWBsjtiy2yzfEaTDSwnPjJpgWj9UDH4IGZCBrJgfIUolOpZyjLnD0=&e=0&downloadAs=los-sims-4-programas-gratis-net.exe&fallback_url=http://.../LosSims4Wallpaper.zip

http://www.bundlecentralbulk.com/c?x=PAs7D3efFxT2cdCgPc1bRDXuQra/FX4BUjZbQjQZJfE=&c=r4iyFvxQCE/QSknywcsWHmyYAep 3ylbOZyW5hNilUruTWjBuXwJr5VP90InA8kRuFImKWWm56APqtC2bAnmLfTpaHMjN24z9UCqRr4vfMfmAaBMyQzB3h27YZiEWi03OsNQLJPee4OExJUpr7hFdfFywkoOOD s1A92ktgmVbs=&e=0&downloadAs=los-sims-4-programas-gratis-net.exe&fallback_url=http://.../LosSims4Wallpaper.zip

http://www.sendtowersnew.com/c?x=jH/Vulj3WyL2YlvqxigycK0omX29e55TMUnN85jaKj4=&c=Xazlyfqm/bv1o9guMTG0M6IHpgGhuqnXqS2nyUC9TIbFexbFlYAeOrj9tHNo JEa5qeTD5zMJMEPXcHRQZUGwpYUzAnoM uHBG o97OtQW5lUlvApewG1fKgwqB97bfDz5Kn80UFJ6X9paRbDOJ11Bxavgs7MdRFseVif18lkVc=&e=0&downloadAs=los-sims-4-programas-gratis-net.exe&fallback_url=http://.../LosSims4Wallpaper.zip

http://www.bundlecentralbulk.com/c?x=QaPqVvxQxQgdKCJI79bWCMkUPd08EqKuHSV7IWdwGWI=&c=YXERuoFy044P8p92CqCj6oPQF3T7XRZmJqTBcQ2ncJOf1zo1m8C5B8K5ZwpzrbhhKgySgY HggLXgiFXbyKzmh/ yGAPsyIi1uzj2b/wB9ZejF4vQ8C4cSpSTGkZMTVXwdwo5HF11HVggqWGXjXYqVHq3SpOb5p99rJmxesJI o=&e=0&downloadAs=los-sims-4-programas-gratis-net.exe&fallback_url=http://.../LosSims4Wallpaper.zip

http://www.besttoursvaults.com/c?x=tgT5fqr24OjJuN CXDoSvo7r3tvy349GbdBitcG9EJE=&c=7CybCbbSOynBEQPZLyYnhqZz/DQmVwjlMP/m4hrQRGfHYCak1QPtAAQgoi8woVmtT4HViqzomRRgrfSwgiDuGAtw72IJ3Ba7vUWGjZs/i lVq gErotUa5RrAL7j/EdQoJzew8ogvFwr 6CBq3Bu38GfrbJqhNwxmj80FaCAtgM=&e=0&downloadAs=los-sims-4-programas-gratis-net.exe&fallback_url=http://.../LosSims4Wallpaper.zip

http://www.bundlecentralbulk.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

http://www.headsignchuckle.com/c?x=zD1PwEijVMp5xge9fLQCpieYLPQbOGiacNpWX 8uuGM=&c=Zt5Me8IqbRYHxdIhposKEShLmBaZYU01GWaiCI/7aPpD9uuTSWH7P3vGzJiD2jO 68ocRZ3XLcJu5YTqgOtMd5Ovo7p21PDQcRHTYY2FZDpM44/OMD1YYz2vQlv w5u2CCrG5KcSoVrMv/2Wa60UwdmqhGoLAGUQJQupoQQs7yM=&e=0&downloadAs=los-sims-4-programas-gratis-net.exe&fallback_url=http://.../LosSims4Wallpaper.zip

http://www.bundlecentralbulk.com/c?x=3zU urLucIz1yMzxOWNHZQJjRy6nJgZH2mIKR9VISF0=&c=Utx0rKDgdpzc8rcq2lAZOmGkIBwzx3kZQvjfh9o2zYS0IIoQBd3LzFacRJPrg5hXX43U447i4XBXlXT01VMJmQWkEVBHdco yJYif08n8L9IfLo9kNeBiwgQXc2TE/R4ZOTFTx6tUBDOHjyChr 26C8qNgVFqxYYPYRk6VAr9js=&e=0&downloadAs=los-sims-4-programas-gratis-net.exe&fallback_url=http://.../LosSims4Wallpaper.zip

http://www.headsignchuckle.com/c?x=uEDGL0sQ nxCLesjEdVi2V7ca9oFBMYaR4hdzeSNcWk=&c=xWaRJKVixvPjMkMAw5VwTMWHKTHCGCthi24YSbLizGPUXJdJTU2 QrxnpYOWIZ6gNeU0QeUWt3iKItGepBA3GLgD0OiQ09wde8Wnz75QKi3E5tsdk5S 6tSKUSMRMRFpdNk1lO9GB08pBoSN3iRo0rHXN3wcotqOFbzHoj4 n48=&e=0&downloadAs=los-sims-4-programas-gratis-net.exe&fallback_url=http://.../LosSims4Wallpaper.zip

http://www.sendtowersnew.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

http://www.bundlecentralbulk.com/c?x=AbQX6bda 8JlPUNStIgTLsJJl1U4MavA /5ZxIQ1u9Q=&c=Xa5nbDNaJ6PaxYhfKwR8MkKiav90m7PBkKMgPY5KFOLgp8nmsLNZipVnc1mIjNWsLlGxt/Y0YQchTijuWEzoUXJwVSFrRnF9FDj1m7BNPm689oPqkkYvEn z77bAgcwXtlLZrKWmIDqGc lNp4Ar/X p24F3OdRHnr8NOogedyE=&e=0&downloadAs=los-sims-4-programas-gratis-net.exe&fallback_url=http://.../LosSims4Wallpaper.zip

http://www.bundlecentralbulk.com/c?x=jVTuVqUM93Pf0Z23EfGxZ9Y4pwqkuM3c18W5Jl4M1cE=&c=SxBvo1m3MCRuzdvbdXvX8hL/hMt3KUt3FQM77ky4gQhZmnKESO32IXpfbSahhrdOUvA0Ehux2IeLJtbyF2BXNgSoep7MLMbGF PTOOq83nXI3ZcqShUab2tizjixWeYs/kUHwz5y1lDTUB8V/iPg4B4ZAZQdQfHENl9/2F0tLqs=&e=0&downloadAs=los-sims-4-programas-gratis-net.exe&fallback_url=http://.../LosSims4Wallpaper.zip

http://www.sendtowersnew.com/c?x=tOWwb8fZXpksp9tQ5oUr4klNkEsAnzUBKYey6YmoSEY=&c=nqyy5iVA6YT5m638w8y9HSOCY5eigQ 7RhN1Z4VDrPUddOLYl1ton9vZtboB1Y2njIJSi Rk9TJAIBiCrsWVFZ9At9ngKlnQwbUBRcyx8/QSPGkn00uBoaR6DL EeK3S&downloadAs=los-sims-4-programas-gratis-net.exe&fallback_url=http://.../LosSims4Wallpaper.zip

http://www.sendtowersnew.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

http://www.bundlecentralbulk.com/c?x=YeE1FrJnGa48byK2TDqZBq0Us9NxVDjBoR188B/L0bs=&c=ODNGfkPptjwBLSTU/O3K PevKcG2HMPoIoKbPxbgOwA F9XwE1cGRQ/CoR4hF/bqMqC/y3s4ULtjO1LU1AI4M9EwwcTaQA5JLqBDbq5McU v/RDHLj8ahM wk/40wVrU00MC5rSkMsIrFJdCVdhUECe9xWC28pTTYcj/iBBANRw=&e=0&downloadAs=los-sims-4-programas-gratis-net.exe&fallback_url=http://.../LosSims4Wallpaper.zip

http://www.bundlecentralbulk.com/c?x=3zvSMbU8z2pAQL9toYQ zTxoWWR8Eg3eqx4flGlwv4c=&c=gwSOjqdVI5YPGmhf9HWewWrSHJq4OwkTZOfGgz0zso0pJJ913bZ0MScFcNuw6SUYozU6q G55iqOYwYkqWh /RM8c5JgCtIMJpAv0IA6qt3dlHuGnyoKI/ITXIrUVY3tJq yNGdO4FcM9cEaaFq5xhpdbRb6XG6JwqUQ2krXaHo=&e=0&downloadAs=los-sims-4-programas-gratis-net.exe&fallback_url=http://.../LosSims4Wallpaper.zip

http://www.sendtowersnew.com/c?x=wz3tZweZWUNBaXUQENj/wotKCdTJnGv84fshvBmjn/0=&c=8qY1V0Wknce7xX6gP/jKUqeyhKYgjt3s6jIoJFFZVHjgY5Rd/CnNdYNjqF8fqH1T5mFY/ nHcu6DFA6OVODCToYDJLZpoJXS04coCLRlul9nSXdCyZ0TUikI7mIION5Z/2lHzKrN1wkYP8m9p9Uolw/a6 AhN8E0qGPTgNZonHGYxncGBWQmck7hqZ7rcLsm&e=0&downloadAs=los-sims-4-programas-gratis-net.exe&fallback_url=http://.../LosSims4Wallpaper.zip

http://www.besttoursvaults.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

http://www.bundlecentralbulk.com/c?x=QAQf OQRQs3UiAp3sUE2xIQUyQLsq6hcSyZW 3LfHqM=&c=Cqp12wL20nwhZ7fXgfrp rqXLLmbXsaNnPxVhijyjk4BkEbRDTgw/c5f2xp u2Nd3bpBO1COBTjVc544 T PCmjxLlRs6sdwFx IwthE1IkUlg3bcMXBXkdROFqzf7NrpwIDTM2YyBc0LHZ tM2imFuspzP7k4W53ENU17AR3Q=&e=0&downloadAs=los-sims-4-programas-gratis-net.exe&fallback_url=http://.../LosSims4Wallpaper.zip

Latest 30 of 130 download URLs

The executing file has been seen to make the following network communications in live environments.

TCP (HTTP):
Connects to os.solvefile.com  (207.189.109.121:80)

TCP (HTTP):
Connects to cdnus.solvefile.com  (207.189.109.121:80)