» sims-4-go-to-school-programas-gratis-net.exe
Overview
Analysis
File Details
Downloads (15)

sims-4-go-to-school-programas-gratis-net.exe

Installer Internet Web

AgileMax (New Media Holdings Ltd.)

The application sims-4-go-to-school-programas-gratis-net.exe, “Installer Internet Web Setup ” by AgileMax (New Media Holdings) has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. It is also typically executed from an Internet Explorer cache folder. The file has been seen being downloaded from www.sendtowersnew.com and multiple other hosts.

File name:

Publisher:

Software (signed by AgileMax (New Media Holdings Ltd.))

Product:

Installer Internet Web

Description:

Installer Internet Web Setup

Version:

3.4.4.8

MD5:

fe0dd0d391f7a0e9533c76547fd1eb08

SHA-1:

42bc22d66f69912825fb9804c7a2d6b1ee83482a

SHA-256:

754ec3f8dff889320b2563faabca1cb2e09e664361913339b32d673f5427ff7e

Scanner detections:

1 / 68

Status:

Adware

Note:

Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Description:

This 'download manager' is also considered bundleware, a utility designed to download software (possibly legitimate or opensource) and bundle it with a number of optional offers including ad-supported utilities, toolbars, shopping comparison tools and browser extensions.

Analysis date:

6/16/2024 2:21:43 AM UTC (today)

Scan engine

Detection

Engine version

Reason Heuristics

PUP.NewMedia.Installer.Installer (M)

16.2.1.13

File size:

958.3 KB (981,304 bytes)

Product version:

3.1.5

File type:

Executable application (Win32 EXE)

Bundler/Installer:

installCore (using Inno Setup)

Common path:

C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\sims-4-go-to-school-programas-gratis-net.exe

Digital Signature

Signed by:

AgileMax (New Media Holdings Ltd.)

Authority:

GlobalSign nv-sa

Valid from:

12/16/2015 1:04:31 PM

Valid to:

10/30/2016 4:53:45 PM

Subject:

CN=AgileMax (New Media Holdings Ltd.), O=AgileMax (New Media Holdings Ltd.), L=Tel Aviv, C=IL

Issuer:

CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:

112186313590F7C0AF7C143BC6BDE6200476

File PE Metadata

Compilation timestamp:

6/20/1992 12:22:17 AM

OS version:

1.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

24576:6KSxgTgYTb5VISBjR4+UL5WwuLCv9yUQ3YuEjHyq8pU:6reTgmVVH/U9WwWCv9yJ3aZI

Entry address:

0x9C40

Entry point:

55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, BF, A9, FF, FF, E8, 5E, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, 24, CE, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, 24, CE... 
[+]

Packer / compiler:

Inno Setup v5.x - Installer Maker

Code size:

37 KB (37,888 bytes)

The file sims-4-go-to-school-programas-gratis-net.exe has been seen being distributed by the following 15 URLs.

http://www.sendtowersnew.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

http://www.bundlecentralbulk.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

http://www.bundlecentralbulk.com/c?x=4ae7AV/BVK/a1hMXx1yhf5 P8C54 blYUF9mE6A0DBY=&c=j/l3xhaq1H2d1ZA5mJwRq8ur1 zPHfEtHSzvdZzcjB2EvcpHvyixkyzwm9/ca9 cpD3FQqMllVMDAjCya/IUOeeRnq2cT8FdG0nrM5ZdjSIbvQdwjvmAq5hpctD6rI9nui2JhvH0LMjg5xSAtNP6maTyT4G1rOk9 zY/1xUBfvs=&e=0&downloadAs=sims-4-go-to-school-programas-gratis-net.exe&fallback_url=http://descargas.downloadspg.com/.../TheSims4GoToSchool_2_0.zip

http://www.bundlecentralbulk.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

http://www.bundlecentralbulk.com/c?x=VJOFruRwDRuZU2DAR2caU6A/2Gxzf1OSrxoG8OlRSM0=&c=uAJ5WuZTzPOtlyRvrb754n1mD7aaJDOx6MZEAxmdXeEXNsUgxOmexqV3IC7Pt/S5QjF9chKuAMai2VVy/RKbxxxyA4tETm7olHbwh FO7X1YMl0MCdoGZAVmmHZaqnMa5sJhp10K1xbAzUfvBe3znQqztml3b7j 9xXwSMTmGOA=&e=0&downloadAs=sims-4-go-to-school-programas-gratis-net.exe&fallback_url=http://descargas.downloadspg.com/.../TheSims4GoToSchool_2_0.zip

http://www.headsignchuckle.com/c?x=zju6UkRlw 5lYEVCqvaEJ6GWU5YUh0FPJNmYzyBxSSA=&c=OwCMZaz2ZwJuuD8DJTyHliVKmgeawI59A Kbe9OsF N26sXwRsYJ/6Bvsaj7qne4FCQ9KOUenNEWXMyVaVZqJH/8JLF2HDT7FAvr3lafGt jNG8coc6ErXOY22y7fBCmoXjU85kQY/NHbX4J4ncSCeAc9YCpDIJcMgFOpI/pgkI=&e=0&downloadAs=sims-4-go-to-school-programas-gratis-net.exe&fallback_url=http://descargas.downloadspg.com/.../TheSims4GoToSchool_2_0.zip

http://www.sendtowersnew.com/c?x=cz4BAwD5fL vfCrtuj6SnuKEYizKpGhi6MkAGLKteos=&c=0DXfbRGWs6ZJDXfp49X6e0LholdkKzsnXOV8YVWef1tr/8CzDF3y3bceToC9lqMewWR1n8Sj/u nhpANGJPdyNynIxxWdCCPBcdIByBYzy0E9EyMyPJj1MfGtXa2tWGStwqw41Q5qClzDtTFhsR7hcT/xPYwtHZjC/jtHG FNGY=&e=0&downloadAs=sims-4-go-to-school-programas-gratis-net.exe&fallback_url=http://descargas.downloadspg.com/.../TheSims4GoToSchool_2_0.zip

http://www.sendtowersnew.com/c?x=CZHcZdmyTmm0/6BApCu7jLa19yqOQTQJ03xj6CFnrZY=&c=zjUYiif3o/qStzl/uG4zpUVBj3iX2pmOXmrZ4q7kv4l xgeHgpGQASg Gh7QaWugG3QquyS0NCsUaHk8MHDAEJDISBIes9Mwbs0CTuCuRxg PQ6f9eREK8EqH89dHp6QkXWZByHmV3qJGnN1eJPwugIGX829/SFgMVyPW42r7DU=&e=0&downloadAs=sims-4-go-to-school-programas-gratis-net.exe&fallback_url=http://descargas.downloadspg.com/.../TheSims4GoToSchool_2_0.zip

http://www.sendtowersnew.com/c?x=I59QZHoM5om5fQAK338qnzDJhR4xHceUNbCgOcNr3ok=&c=zqd4aTAHO4ZF 9WmifBTiMc/o1FmO/FvO9TERNMD2AAAvg4Au7MAb oCjIU9hdNbRfWxH1B8n9ubJGIXNd8d9JhX7o3M AgF/bjq9Ug764sJrYceWr11GcMzj2SnLv7DCaw 2iFfrsbV 5W6q/xKCR/8RuSWFvMMkjL6dS97GHA=&e=0&downloadAs=sims-4-go-to-school-programas-gratis-net.exe&fallback_url=http://descargas.downloadspg.com/.../TheSims4GoToSchool_2_0.zip

http://www.sendtowersnew.com/c?x=RBQjgG0U80f5MHmbC/LitQmK2AMxqrdRfOEugf/4Vng=&c=xM noOHQ3CGMq7M/Q1YgfatzWM7/z86aagmtsN5aNax7/8vZ9AggSCImmgOcBMnw3hfR6AsBhC4GjAuwH9SpfxLW5yxlcuUF WJHZ4SFzsQOs5R2q91Sza9SC86L3GCloVkLDpk2BrQEYrAwu44iQ7gly/A1i4If0ESpA5DQz3U=&e=0&downloadAs=sims-4-go-to-school-programas-gratis-net.exe&fallback_url=http://descargas.downloadspg.com/.../TheSims4GoToSchool_2_0.zip

http://www.sendtowersnew.com/c?x=yRKIJ8iEEq3za9mOgz3ybjsGXHlj0fJYt770oYIPaXQ=&c=M3XhBigXIxljCkuc6GvSy7jpnCJGK77A4RC1C9bFYrdXAdvuyXGswE1ldqEIog7MinNfHPXP4Iu3Ki6T2abKH3XYFFO4/B 87cly4w8GrKxx4/XqeLzWwHPHFeVVfqLJ/VlVI9cTWY ybbroqBGeyGr6zv/wUIUpcLysR6C7lD6Ht65 0JcpM8p5eOKGUNlA&e=0&downloadAs=sims-4-go-to-school-programas-gratis-net.exe&fallback_url=http://descargas.downloadspg.com/.../TheSims4GoToSchool_2_0.zip

http://www.sendtowersnew.com/c?x=9h2Dj5sFuw5k4n6QyFFq10LI5w2AIWWH3JszrsbOR0c=&c=ndcnJekvsDuw1IGZNPixez/na2p458Kpc3PNEZJ7/RinOhc2b0QumS8xk1E/tgr0TcFkA6/jYwHteNT5F/Fmy8YIsdm 57Xll5SJFlOcGwOphI xsEok6V84cq zVJKy2Zae4BGB VvpuJJkjQaemKZ/j6yjHhuDUIrMM69NYqE=&e=0&downloadAs=sims-4-go-to-school-programas-gratis-net.exe&fallback_url=http://descargas.downloadspg.com/.../TheSims4GoToSchool_2_0.zip

http://www.giftbulkstock.com/c?x=Q9VuGp6UgOx/dIA6OAmoapJR/W4mF2nOBUVH/qrxPGo=&c=miBDXfsCIR0GEKKCcyMF9vwTree8BK0nP8jyQnbiZGMKB0tqg87t7WMhyRF7h3hbqKtK5GqXVKOYXU7pQuUwe4hi3NtmnZ4CVobze3/2bqD34AR43ecZKclbNxh4cY35JybPx219Kvh2htvk0TxHsuwpU9EqoUODhvuY9B7hZVtUASq2S1PiiJweIXLWSB0y&e=0&downloadAs=sims-4-go-to-school-programas-gratis-net.exe&fallback_url=http://descargas.downloadspg.com/.../TheSims4GoToSchool_2_0.zip

http://www.giftbulkstock.com/c?x=iNwd04bPyHVGKuM5oU/P/gEQ/7b8jZMFCfNFpGk1WeY=&c=vNXewKjFf4pT8dn1YcWgN5S4xookfZLEQKplW1cJv9j3Fj5k7wFMJhbrQDcLmCNr3Xy5jrNME8UsgysCH21crzFyKnesScoTDd0Rd48yT1DLXS5SRMXrSpE4EHN8HSGRplHbRwJR2DVZe0eexy7r1bHOMC3D8qrTNFlF/gWkusc=&e=0&downloadAs=sims-4-go-to-school-programas-gratis-net.exe&fallback_url=http://descargas.downloadspg.com/.../TheSims4GoToSchool_2_0.zip

http://www.newsendtag.com/c?x=JCMRPUNDC8M19/lL 5Yhb7FM0OvLyo4pvYJ9cMHfnF0=&c=3FjBJ13/l2/3m9F560CRrVekxBn3umkrX cRUrsjDXelqhP3YNBn6 W7IF9fiUzKyGwicIVM7acw9iwB67VK9azAeD0Cte2bQPiJ8R OzCjVn/IJbS0OPY 7f7xY24kLcM059toNuWz63kx0Zkw KQ==&downloadAs=sims-4-go-to-school-programas-gratis-net.exe&fallback_url=http://descargas.downloadspg.com/.../TheSims4GoToSchool_2_0.zip

Remove sims-4-go-to-school-programas-gratis-net.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.