active hdl 8.1 crack.rar__3515_i279624241_il1617939.exe

Installer

Shetef Solutions & Consulting (1998) Ltd.

This is the Amonetize download manager which bundles applications with offers for additional 3rd party software, mostly unwanted adware, and may be installed with minimal consent. The application active hdl 8.1 crack.rar__3515_i279624241_il1617939.exe by Shetef Solutions & Consulting (1998) has been detected as adware by 14 anti-malware scanners. The program is a setup application that uses the Amonetize Downloader installer. The installer uses the InstallMonetizer platform which will donwload and install adware toolbars and other potentially unwanted software offers during setup.
Publisher:
Amônétízé Ltd  (signed by Shetef Solutions & Consulting (1998) Ltd.)

Product:
Installer

Version:
1.1.5.98

MD5:
840c22594669fa81e8d74e7b0996b929

SHA-1:
790f72c0634eccea04698062a0c44cd9beff2c3f

SHA-256:
3fa0831d6fed226c7c828794964f3b86196109244530e53dfc49362b5cbfbf3e

Scanner detections:
14 / 68

Status:
Adware

Explanation:
Uses the InstallMonetizer distribution platform to bundle adware.

Description:
This 'download manager' is also considered bundleware, a utility designed to download software (possibly legitimate or opensource) and bundle it with a number of optional offers including ad-supported utilities, toolbars, shopping comparison tools and browser extensions.

Analysis date:
11/2/2024 3:29:45 PM UTC  (today)

Scan engine
Detection
Engine version

Agnitum Outpost
PUA.Downware
7.1.1

AhnLab V3 Security
PUP/Win32.Amonetiz
2014.01.31

Avira AntiVirus
ADWARE/Adware.Gen2
7.11.128.28

avast!
Win32:Amonetize-E [PUP]
2014.9-140203

Dr.Web
Adware.Downware.1575
9.0.1.034

ESET NOD32
Win32/Amonetize.AD (variant)
8.9360

Fortinet FortiGate
Riskware/Amonetize
2/3/2014

IKARUS anti.virus
not-a-virus:Downloader.Win32.Agent
t3scan.2.2.29

Malwarebytes
PUP.Optional.InstallMonetizer
v2014.02.03.09

McAfee
Artemis!840C22594669
5600.7230

Qihoo 360 Security
HEUR/Malware.QVM01.Gen
1.0.0.1015

Reason Heuristics
PUP.Installer.ShetefSolutionsConsulting1998.r
14.8.8.3

Trend Micro House Call
TROJ_GEN.F47V0121
7.2.34

VIPRE Antivirus
Amonetize
25988

File size:
149.6 KB (153,216 bytes)

Product version:
2.1.12

Copyright:
(c) Amônétízé Ltd, 2012,2013. All rights reserved.

Original file name:
Installer.exe

File type:
Executable application (Win32 EXE)

Bundler/Installer:
Amonetize Downloader

Language:
English (United States)

Common path:
C:\Documents and Settings\{user}\Local settings\temp\active hdl 8.1 crack.rar__3515_i279624241_il1617939.exe

Digital Signature
Authority:
Thawte, Inc.

Valid from:
7/22/2013 5:00:00 PM

Valid to:
7/23/2014 4:59:59 PM

Subject:
CN=Shetef Solutions & Consulting (1998) Ltd., O=Shetef Solutions & Consulting (1998) Ltd., L=Rannana, S=Israel, C=IL

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
7C23DBB97FAFBB9D28D413F836202024

File PE Metadata
Compilation timestamp:
1/21/2014 7:26:56 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
3072:JdhdW7tQ7XjcS+++BUrxw4rDMCgmO8kDJdtGTvbfbeVdSaD1GoFBcvFF:Jdhd6tMjcDg/QCcODDEdr5vLiFF

Entry address:
0x59B60

Entry point:
60, BE, 00, A0, 43, 00, 8D, BE, 00, 70, FC, FF, 57, 83, CD, FF, EB, 10, 90, 90, 90, 90, 90, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, 0B, 75, 28, 8B, 1E, 83, EE, FC, 11, DB, 72, 1F, 48, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, EB, D4, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, EB, 52, 31, C9, 83, E8, 03, 72, 11, C1, E0, 08, 8A, 06, 46, 83, F0, FF, 74, 75, D1, F8, 89...
 
[+]

Entropy:
7.7915

Packer / compiler:
UPX 2.90LZMA]

Code size:
128 KB (131,072 bytes)

The file active hdl 8.1 crack.rar__3515_i279624241_il1617939.exe has been seen being distributed by the following 4 URLs.

The executing file has been seen to make the following network communications in live environments.

TCP (HTTP):
Connects to www.softologic.com  (174.37.181.31:80)

TCP (HTTP SSL):
Connects to www.ibbalance.com  (173.192.190.227:443)