Multi-License Discount Quote

Change Region

English Français 日本語
Threat Database Potentially Unwanted Programs netGamer Start

netGamer Start

By GoldSparrow in Potentially Unwanted Programs
Translate To:

Threat Scorecard

Threat Level: 100 % (High)
Infected Computers: 1
First Seen: April 19, 2023
Last Seen: May 28, 2026
OS(es) Affected: Windows

The netGamer Start software is developed by programmers associated with Medianetnow.com. The site is a platform where you can find various browser extensions for Google Chrome dedicated to music, videos, online games, radio, sports and news. As its name suggests, the netGamer Start extension is aimed at PC users who like to play online games. The netGamer Start app can be obtained from the Chrome Web Store via Chrome.google.com/webstore/detail/netgamer-start/nfkdcjgohmakdojfkjjobbmppjfonjom. You should take into consideration that the netGamer Start extension requires access to the data exchanged with their parties through your Web browser and it is tailored to change your new tab page to a custom HTML page that has shortcuts to popular Web services.

The netGamer Start extension from Medianetnow.com is an ad-supported product that is deemed as a Potentially Unwanted Program (PUP) by cybersecurity experts. The netGamer Start app is designed to change your Internet settings and read usage statistics to help marketers deliver optimized advertisements within the Yahoo platform. The netGamer Start extension is observed to perform browser redirects via play.eanswers.com to search.yahoo.com. The netGamer Start software has connections to Eanswers.com, which is a partner of Yahoo. The Eanswers.com domain is associated with a plethora of platforms that offer almost identical products. We have been tracking Medianetnow.com, Superappbox.com, Mixplugin.com, Ienjoyapps.com, Bettersearchtools.com, Theappjunkies.com, Bettersearchtools.com, Goamuze.com, Playmediacenter.com, Myappline.com, Searchalgo.com, Friendlyappz.com, Myappline.com, Getappsonline.com, Playmediacenter.com, and Cantstopplaying.com that welcome users to download clones of netGamer Start and similar tools. You may want to avoid the products promoted by the sites mentioned above. Eanswers.com is known for using proxy sites to collect Web usage data from PC users and earn ad revenue through Yahoo Ads. The practice is not illegal by any means. However, Web surfers may not be satisfied with how Eanswers.com is treating them and collecting their browsing history. We have found that netGamer Start has the following clones published by Njoyapps.com, Getappsonline.com, Medianetnow.com, Ienjoyapps.com, Mixplugin.com, Playmediacenter.com and Bettersearchtools.com:

  • GamesHub Now by Mixplugin.com and Chrome.google.com/webstore/detail/gameshub-now/kkldhhkcedmlemmeioafpfccfnnhlhdi
  • betterGames Home by Bettersearchtools.com and Chrome.google.com/webstore/detail/bettergames-home/gclieechnehlcjnjepdnmloclfcfmiba
  • browserGamer Now by Njoyapps.com and Chrome.google.com/webstore/detail/browsergamer-now/gllnfhbnopmjpifodjcgcbfcandfkjoj
  • browserGames Now by Njoyapps.com and Chrome.google.com/webstore/detail/browsergames-now/koadafnlijadikflcccnekcehikbdoej
  • gamingZone Start by Medianetnow.com and Chrome.google.com/webstore/detail/gamingzone-start/nhhboodmfnbbdoibnnikbchlocibjhbh
  • getGames Start by Getappsonline.com and Chrome.google.com/webstore/detail/getgames-start/koaejgofaegnifpbkeldkehnbnomldbd
  • iGames Start by Ienjoyapps.com and Chrome.google.com/webstore/detail//bphpacmkampgoflghiahciljapjaneda
  • playCenter Home by Playmediacenter.com and Chrome.google.com/webstore/detail/playcenter-home/kamdefopmcpnkpomihddfnelophmppej

Analysis Report

General information

Family Name: Filecoder.FBC Ransomware
Signature status: No Signature

Known Samples

MD5: 2ef5f44d4ae251d90d70efea78502aa6
SHA1: 3381593718bb723a0947ce619f9ac12e08f52246
SHA256: 6036757D1511F14276FD533982B90B705E352F1E2EE230AC3C76012082C3D71E
File Size: 5.71 MB, 5706144 bytes

Windows Portable Executable Attributes

  • File doesn't have "Rich" header
  • File doesn't have debug information
  • File doesn't have exports table
  • File doesn't have security information
  • File has TLS information
  • File is 32-bit executable
  • File is console application (IMAGE_SUBSYSTEM_WINDOWS_CUI)
  • File is either console or GUI application
  • File is Native application (NOT .NET application)
  • File is not packed
Show More
  • IMAGE_FILE_DLL is not set inside PE header (Executable)
  • IMAGE_FILE_EXECUTABLE_IMAGE is set inside PE header (Executable Image)

File Icons

Windows PE Version Information

Name Value
Company Name BGEmpire
File Description BGArmor: BGE and UPBGE game packer and launcher.
File Version 0.1.1
Legal Copyright MIT
Original Filename BGArmor.exe
Product Name BGArmor
Product Version 0.1.1

File Traits

  • big overlay
  • GetConsoleWindow
  • x86

Block Information

Total Blocks: 10,776
Potentially Malicious Blocks: 2,529
Whitelisted Blocks: 5,995
Unknown Blocks: 2,252

Visual Map

0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 x x x x x x x 0 x x x x x x x x x x x x x x 0 ? 0 0 ? ? x ? ? 0 0 0 ? ? 0 ? ? ? ? ? ? 0 0 0 0 ? 0 0 0 ? ? ? 0 ? 0 ? 0 ? 0 0 0 0 ? 1 1 0 1 0 0 0 x 0 x 1 0 1 0 1 0 1 x 1 1 0 x 0 0 0 1 0 0 ? ? 0 0 x x x ? ? x x 0 0 x x x 0 0 0 0 ? ? ? 0 0 0 ? ? 1 ? 0 0 x 0 0 x 0 0 0 0 0 ? 1 0 ? ? x x x x 0 0 x x 0 x x 0 1 0 x 0 x 0 ? ? ? ? ? ? ? ? ? ? ? 0 x x 0 0 0 x 0 0 0 0 0 0 ? ? ? ? ? ? ? ? 0 0 ? ? ? 0 0 1 1 1 1 1 0 0 0 0 0 0 1 0 1 0 0 x 0 0 ? ? 1 0 0 0 0 ? 0 0 ? 0 0 0 0 x ? 0 0 0 ? ? ? 0 0 0 0 x ? 0 0 0 ? ? ? 0 ? 0 ? 0 0 ? ? ? ? ? ? ? ? ? ? ? ? 0 ? 0 ? ? ? 0 ? ? ? ? ? 0 ? ? ? ? 0 0 0 ? ? ? ? ? ? 0 0 ? 0 ? x ? ? 0 0 0 0 0 ? 1 0 0 0 0 0 ? ? 0 ? 0 0 0 ? x 0 ? 0 0 0 0 0 ? 0 0 0 0 ? 0 1 0 0 0 0 0 0 0 0 0 1 0 0 1 ? 0 ? ? ? 0 0 0 0 ? ? x x 0 0 0 ? ? x 1 0 ? 0 0 0 1 1 1 0 0 0 0 0 0 0 0 0 0 0 0 0 ? ? ? x ? ? ? 0 0 ? 0 0 0 ? x 0 ? 0 0 0 0 0 x ? 0 0 0 x ? 0 0 0 x 0 x ? ? ? ? 0 0 x 0 0 0 ? 0 ? ? ? 0 0 0 0 x 0 0 ? ? x 0 0 0 x x 0 0 0 ? ? x 0 ? 0 ? 0 ? x x ? ? ? ? ? ? 0 ? 0 0 ? 0 ? 0 ? 0 ? ? 0 0 0 x 0 0 0 0 0 0 ? ? 0 x 0 0 ? ? x 0 0 0 0 0 ? ? ? 0 0 x 0 1 1 ? 0 0 0 ? 0 ? 0 0 ? ? 0 1 0 0 ? ? x 0 0 0 ? x 0 0 0 0 0 0 ? ? 0 0 0 0 x ? 0 0 0 ? x 0 ? 0 0 0 0 ? ? ? ? x ? ? x ? ? x ? ? ? 0 ? 0 ? ? ? 0 0 ? ? ? 0 0 ? ? ? ? ? 0 ? ? ? ? 0 0 ? 0 ? 0 ? ? ? ? ? ? 0 0 x ? ? ? ? 0 0 x ? 0 0 ? 0 0 0 0 0 0 ? 0 0 0 0 0 x 0 x x 0 0 0 x x ? x ? ? 1 x 0 0 x 0 x 0 0 0 0 ? 0 ? 0 0 0 0 x 0 0 ? 0 0 0 ? x 0 ? ? ? 0 0 0 0 ? ? ? 0 ? ? ? ? 0 ? 0 0 0 0 ? ? ? ? 0 ? 0 ? 0 ? 0 ? ? ? 0 ? 0 0 ? 0 0 ? ? ? 0 ? 0 ? ? 0 x ? ? ? x 0 ? ? ? 0 ? ? ? ? ? ? ? x ? ? ? x ? 0 ? 0 ? 1 0 ? 0 0 0 x 0 0 0 0 ? x 0 ? ? ? 0 0 ? x ? ? x ? ? x 0 ? 0 0 0 ? 0 ? ? x 0 ? ? ? 0 ? ? 0 ? x x x x 0 ? 0 ? 0 ? x 0 0 0 0 0 0 0 0 0 0 x ? ? x ? ? ? ? 0 0 ? 0 0 0 ? x 0 ? ? ? ? ? ? ? ? ? 0 ? 0 ? ? 0 0 1 1 1 0 ? 0 ? 0 0 ? 0 x 0 0 x 0 0 ? 0 x 0 ? ? ? ? x 0 0 x ? 0 ? 0 x 0 ? ? 0 ? ? ? ? x ? ? ? ? 0 0 ? ? 0 ? ? 0 ? 0 ? 0 0 ? x ? ? 0 ? ? 0 ? 0 0 x ? ? ? 0 0 ? ? x x 0 1 0 x 0 0 x ? ? ? ? ? 0 0 0 0 ? ? 1 1 ? ? ? ? ? ? ? x x 0 0 0 1 0 1 1 ? 0 0 0 0 0 x 0 0 0 0 ? 0 0 0 0 ? 0 ? ? 0 ? 0 ? ? 0 ? 0 0 ? 0 0 ? 0 x x x x x x x ? x ? x x x x x x x x x 0 x x x x x x x x 0 0 0 ? 0 0 ? 0 0 ? ? ? 0 ? ? 0 ? ? ? ? 0 ? 0 ? ? ? ? 0 ? 0 ? ? ? ? 0 ? 0 ? ? ? ? 0 ? ? 0 ? ? ? 0 ? ? ? 0 ? 0 0 0 ? ? ? ? 0 ? ? ? ? ? ? 0 ? ? ? ? ? ? 0 ? ? ? ? ? ? ? ? ? ? ? ? 0 ? 0 ? ? ? ? ? ? ? ? 0 ? ? ? 0 ? ? ? ? ? ? ? 0 0 0 0 0 0 ? 0 0 0 0 0 0 0 0 0 0 1 ? x 0 0 ? ? ? ? 0 0 ? 0 0 0 0 ? 0 ? ? ? 0 0 0 0 0 ? 0 0 ? ? ? ? ? ? ? 0 ? 0 0 ? 0 0 ? ? 0 0 0 0 0 0 0 ? 0 ? 0 ? 0 ? 0 ? 0 0 ? ? ? 0 ? ? ? 0 ? 0 0 0 0 ? ? 0 0 0 ? ? ? 0 ? 0 0 0 0 0 ? 0 ? ? 0 ? ? ? 0 ? 0 ? ? ? ? ? 0 0 0 0 ? 0 0 0 0 ? ? ? 0 0 0 0 ? ? 0 ? 0 0 0 0 ? ? ? 0 0 0 0 ? ? 0 ? 0 0 0 0 ? ? ? 0 0 0 0 ? ? ? ? 0 0 0 ? ? ? ? 0 0 0 ? ? ? 0 ? ? 0 0 ? ? ? ? 0 0 ? ? 0 ? ? 0 0 ? ? ? ? 0 0 ? ? 0 ? 0 0 0 ? ? ? 0 0 0 ? ? 0 ? 0 0 0 0 ? ? ? 0 0 0 0 ? ? ? ? ? 0 ? 0 ? ? 0 ? 0 0 ? 0 0 0 ? ? ? 0 0 0 ? ? 0 ? ? 0 0 0 0 0 0 0 0 ? ? 0 0 1 0 0 ? 0 0 0 0 0 0 ? 1 1 0 0 0 0 0 0 0 0 0 0 ? ? ? ? ? ? 0 0 1 ? 0 0 ? 0 0 0 ? 0 0 0 0 ? ? 0 0 0 0 0 ? ? 0 ? 0 0 ? ? ? ? 0 0 ? 0 ? 0 0 ? 0 0 ? ? ? ? 0 ? 0 ? 0 ? 0 ? x 0 0 0 ? 0 0 ? 0 ? ? ? 0 ? ? ? ? 0 0 0 0 0 ? ? ? ? ? 0 ? ? ? ? 0 0 0 0 0 ? ? ? ? ? 0 ? ? ? ? 0 0 0 0 0 ? ? ? ? ? 0 ? ? ? ? 0 0 0 0 0 ? ? ? ? ? 0 ? 0 0 ? ? ? 0 0 0 0 0 0 0 ? ? ? ? 0 0 ? ? ? 0 0 0 0 0 0 ? ? ? 0 0 0 ? ? ? 0 0 0 0 0 ? ? ? 0 0 0 ? ? ? ? ? 0 0 ? 0 0 x x x x x x x x x x 0 x 0 x x x 0 ? ? ? ? ? ? 0 0 0 0 0 0 0 x 0 ? ? ? ? ? ? 0 0 0 0 0 0 0 x ? 0 0 ? ? 0 0 0 0 ? 0 0 ? ? 0 0 0 0 x 0 ? ? 0 ? 0 0 0 0 0 ? 0 0 ? 0 0 0 ? 0 0 ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? 0 ? ? ? ? 0 0 0 0 0 0 ? ? 0 0 ? ? ? ? ? 0 ? ? 0 ? ? ? 0 ? ? 0 0 0 ? ? ? ? ? ? ? x ? ? 0 0 x 0 0 0 ? ? ? 0 0 0 ? ? 0 ? ? 0 ? ? 0 0 ? ? ? ? ? 0 0 ? ? 0 ? ? 0 0 x x x ? ? 0 0 ? ? ? ? ? ? 0 0 ? ? 0 ? ? 0 0 ? ? ? ? ? ? ? 0 ? ? ? ? 0 0 0 0 0 0 0 0 0 ? ? ? 0 ? ? ? ? ? 0 ? x ? ? 0 0 ? ? 0 0 x x 0 0 0 0 ? ? ? ? 0 0 0 0 x 0 x 0 0 0 ? 0 ? 0 x ? ? 0 x ? 0 0 ? 0 0 0 0 0 0 0 0 0 ? ? ? 1 1 0 0 1 0 0 ? 0 x x ? 0 0 ? 0 ? ? x ? ? ? ? ? x 0 0 0 0 x 0 0 0 0 ? x ? ? ? ? ? x ? x ? 0 0 x 0 x 0 0 x 0 x ? ? ? ? ? ? ? ? ? 0 ? 0 0 ? ? ? ? ? ? ? ? 0 ? ? ? ? 0 0 0 ? 0 0 0 0 ? 1 0 ? ? ? ? 0 ? 0 ? x 0 0 0 0 x 0 ? ? 0 0 x 0 ? ? 0 0 0 0 0 ? 0 0 ? ? x ? 0 ? x 0 0 x 0 ? 0 0 x ? ? ? 0 ? ? 0 ? ? 0 0 ? 0 ? 0 0 0 ? ? 0 ? 0 ? x ? 0 ? ? ? ? 0 0 ? ? 0 0 ? 0 x ? ? 0 0 ? 0 ? ? ? 0 ? ? x ? 0 x x 0 0 ? x 0 0
... Data truncated
0 - Probable Safe Block
? - Unknown Block
x - Potentially Malicious Block

Related Posts

Trending

Most Viewed

Loading...