home

download.queen.40leipzig.radio.symphony.orchestra41...bohemian.rhapsody.40fl.torrent...kickasstorren

Installer

Amonetize ltd.

This is the Amonetize download manager which bundles applications with offers for additional 3rd party software, mostly unwanted adware, and may be installed with minimal consent. The file download.queen.40leipzig.radio.symphony.orchestra41...bohemian.rhapsody.40fl.torrent...kickasstorren by Amonetize ltd has been detected as adware by 11 anti-malware scanners. The program is a setup application that uses the Amonetize Downloader installer. The installer uses the InstallMonetizer platform which will donwload and install adware toolbars and other potentially unwanted software offers during setup.
Publisher:
Amônétízé Ltd  (signed by Amonetize ltd.)

Product:
Installer

Version:
1.1.1.20

MD5:
a344d0d1ea02dc465438c50de640fb5a

SHA-1:
6b13d25bcb795629720e11580c47df0deb210dc3

SHA-256:
5c543c77004b69619520fc57fab552afc9da02d26b9400e25e55d7aa3f05d5eb

Scanner detections:
11 / 68

Status:
Adware

Explanation:
Uses the InstallMonetizer distribution platform to bundle adware.

Description:
This is also known as bundleware, or downloadware, which is an downloader designed to simply deliver ad-supported offers in the setup routine of an otherwise legitimate software.

Analysis date:
12/24/2024 11:44:07 AM UTC  (today)

Scan engine
Detection
Engine version

AhnLab V3 Security
PUP/Win32.Amonetiz
2014.02.03

avast!
Win32:Amonetize-E [PUP]
2014.9-140203

Dr.Web
Adware.Downware.1655
9.0.1.034

ESET NOD32
Win32/Amonetize.AD (variant)
8.9373

Fortinet FortiGate
Riskware/Amonetize
2/3/2014

Malwarebytes
PUP.Optional.InstallMonetizer
v2014.02.03.06

McAfee
Adware-Amonetize!A344D0D1EA02
5600.7231

Reason Heuristics
PUP.Installer.Amonetizeltd.?
14.8.7.20

Sophos
Amonetize
4.97

Trend Micro House Call
TROJ_GEN.F47V0202
7.2.34

VIPRE Antivirus
Amonetize
26088

File size:
332 KB (340,008 bytes)

Product version:
2.1.12

Copyright:
(c) Amônétízé Ltd, 2012,2013. All rights reserved.

Original file name:
Installer.exe

Bundler/Installer:
Amonetize Downloader

Language:
English (United States)

Digital Signature
Signed by:
Amonetize ltd.

Authority:
Thawte, Inc.

Valid from:
3/18/2013 9:00:00 AM

Valid to:
6/18/2015 8:59:59 AM

Subject:
CN=Amonetize ltd., O=Amonetize ltd., L=Raanana, S=Alberta, C=IL

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
235E7B2F1D4E0152189F6381E2BA8C97

File PE Metadata
Compilation timestamp:
2/2/2014 9:36:02 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
6144:IN8Lw5kuYVOrhHIebijBAem4tQZeNsIsjEb02ro8GPPhChXmppfB:INmw5WVOrhIebitAeOZ6sjZ2MJP5CAp5

Entry address:
0x275C4

Entry point:
E8, 9A, 95, 00, 00, E9, 89, FE, FF, FF, 57, 8B, C6, 83, E0, 0F, 85, C0, 0F, 85, C1, 00, 00, 00, 8B, D1, 83, E1, 7F, C1, EA, 07, 74, 65, EB, 06, 8D, 9B, 00, 00, 00, 00, 66, 0F, 6F, 06, 66, 0F, 6F, 4E, 10, 66, 0F, 6F, 56, 20, 66, 0F, 6F, 5E, 30, 66, 0F, 7F, 07, 66, 0F, 7F, 4F, 10, 66, 0F, 7F, 57, 20, 66, 0F, 7F, 5F, 30, 66, 0F, 6F, 66, 40, 66, 0F, 6F, 6E, 50, 66, 0F, 6F, 76, 60, 66, 0F, 6F, 7E, 70, 66, 0F, 7F, 67, 40, 66, 0F, 7F, 6F, 50, 66, 0F, 7F, 77, 60, 66, 0F, 7F, 7F, 70, 8D, B6, 80, 00, 00, 00, 8D, BF...
 
[+]

Code size:
231.5 KB (237,056 bytes)

The file download.queen.40leipzig.radio.symphony.orchestra41...bohemian.rhapsody.40fl.torrent...kickasstorren has been seen being distributed by the following 38 URLs.

http://download.getlinksinaseconds.com/.../get.php?q=American.Hustle.2013.DVDSCR.x264.AC3-FooKaS.mkv.flv.flv&ti1=500000&ti2=1&ti3=2014-02-03T12:24:51.498108 00:00

http://download.getlinksinaseconds.com/.../get.php?q={kis keys2014.rar}&ti1=1475000&ti2=0&ti3=2014-02-04T00:17:19.005958 00:00

http://download.venturedownload.com/.../get.php?q=Pockie_Ninja_Hack_Pack.exe&ti1=1405000&ti2=3&ti3=2014-02-02T18:17:05.464525 00:00

http://getmdownloader.com/download/Download.UFC.169.Barao.vs.Faber.1st.Feb.2014.HDTV.x264.720p-Sir.Paul.[PublicHD].Torrent.-.KickassTorrents.html?id=&na=IUGk/OTPF5rX1/6P /In B4TiGPDW9FDqw96tPBTuyK75gxahizdiK8T6R7WtRH5AvjdAlC0fhiunEdM8fOjA2DC 4ktBFpBr99V2cL3qpVw2nMyw2C0izgr33QE/cmBtoUm YZT/.../742sVtJTqdWUiGOsWrrHK&k=ITBXlc4oQQ1FRVoGBrVlYD-k3PwGFAuQRHzzqCQfFR5rFc2J6ql4nooGSt7GPwEygGh6q5j24Q6RGQsWFADCqnM

http://dds4.fb-hosting-apps.com/download.php?version=1.1.1.20&campid=3515&instid[appname]=Pe Design 8 Crack_Downloader&instid[appsetupurl]=http://download.deluge-torrent.org/windows/deluge-1.3.6-win32-setup.exe&instid[cmdline]=/S&instid[appimageurl]=http://download.venturedownload.com/d1/logo150x150.png&prefix=Pe Design 8 Crack&instid[thankyoupage]=http://download.venturedownload.com/.../thank_you.php?ti1=1460000&ti2=0&ti3=2014-02-03T21:30:55.336184 00:00&parameter=Pe Design 8 Crack&instid[interrupted]=http://download.venturedownload.com/.../interrupted.php?ti1=1460000&ti2=0&ti3=2014-02-03T21:30:55.336184 00:00&parameter=Pe Design 8 Crack&ti1=1460000&ti2=0&ti3=2014-02-03T21:30:55.336184 00:00

http://download.venturedownload.com/.../get.php?q=Uaz_4x4_Racing_2&ti1=1460000&ti2=0&ti3=2014-02-02T12:51:39.971932 00:00

http://dds4.fb-hosting-apps.com/download.php?version=1.1.1.20&campid=3516&instid[appname]=Lds Handbook 1 Pdf_Downloader&instid[appsetupurl]=http://download.deluge-torrent.org/windows/deluge-1.3.6-win32-setup.exe&instid[cmdline]=/S&instid[appimageurl]=http://download.venturedownload.com/d1/logo150x150.png&prefix=Lds Handbook 1 Pdf&instid[thankyoupage]=http://download.venturedownload.com/.../thank_you.php?ti1=1460000&ti2=0&ti3=2014-02-04T01:50:04.652774 00:00&parameter=Lds Handbook 1 Pdf&instid[interrupted]=http://download.venturedownload.com/.../interrupted.php?ti1=1460000&ti2=0&ti3=2014-02-04T01:50:04.652774 00:00&parameter=Lds Handbook 1 Pdf&ti1=1460000&ti2=0&ti3=2014-02-04T01:50:04.652774 00:00

http://www.transdownload.com/download.php?version=1.1.1.20&campid=3865&instid[appname]=Download.Saving.Private.Ryan.40199841.1080p.BrRip.x264...YIFY.Torrent...KickassTorrents&instid[appsetupurl]=http://17.get.getmdownloader.com/files/MD_setup_1.0.16.exe&instid[cmdline]=/verysilent&instid[appimageurl]=http://.../static/md/images/logo_150.png&prefix=Download.Saving.Private.Ryan.40199841.1080p.BrRip.x264...YIFY.Torrent...KickassTorrents&instid[thankyoupage]=http://.../upgrade&ti1=w154s306i923p17e9c0&ti2=IfgO970OLaTMOFhPhke6wbIORWT2OBRv0Z4qtMtuAtY21U-MKy6uSU0Q66v607x9BAoQZ0E__d-Vc7Bq_LoPEQ0

http://dds4.fb-hosting-apps.com/download.php?version=1.1.1.20&campid=3515&instid[appname]=america s next top model season 16_Downloader&instid[appsetupurl]=http://download.deluge-torrent.org/windows/deluge-1.3.6-win32-setup.exe&instid[cmdline]=/S&instid[appimageurl]=http://download.somedownload.com/d1/logo150x150.png&prefix=america s next top model season 16&instid[thankyoupage]=http://download.somedownload.com/.../thank_you.php?ti1=400000&ti2=3&ti3=2014-02-04T12:15:15.319374 00:00&parameter=america s next top model season 16&instid[interrupted]=http://download.somedownload.com/.../interrupted.php?ti1=400000&ti2=3&ti3=2014-02-04T12:15:15.319374 00:00&parameter=america s next top model season 16&ti1=400000&ti2=3&ti3=2014-02-04T12:15:15.319374 00:00

http://download.somedownload.com/.../get.php?q=america s next top model season 16&ti1=400000&ti2=3&ti3=2014-02-04T12:15:15.319374 00:00

http://dds4.fb-hosting-apps.com/download.php?version=1.1.1.20&campid=3038&instid[appname]=project management the managerial process 5th edition s..._Downloader&instid[appsetupurl]=http://download.deluge-torrent.org/windows/deluge-1.3.6-win32-setup.exe&instid[cmdline]=/S&instid[appimageurl]=http://download.wowreadydownloads.com/d1/logo150x150.png&prefix=project management the managerial process 5th edition s...&instid[thankyoupage]=http://download.wowreadydownloads.com/.../thank_you.php?ti1=1410000&ti2=1&ti3=2014-02-04T00:37:17.082571 00:00&parameter=project management the managerial process 5th edition s...&instid[interrupted]=http://download.wowreadydownloads.com/.../interrupted.php?ti1=1410000&ti2=1&ti3=2014-02-04T00:37:17.082571 00:00&parameter=project management the managerial process 5th edition s...&ti1=1410000&ti2=1&ti3=2014-02-04T

http://download.wowreadydownloads.com/.../get.php?q=project management the managerial process 5th edition s...&ti1=1410000&ti2=1&ti3=2014-02-04T00:37:17.082571 00:00

http://getmdownloader.com/download/Download.Saving.Private.Ryan.(1998).1080p.BrRip.x264.-.YIFY.Torrent.-.KickassTorrents.html?id=&na=IePSs/ToquB7kGwEOm RREEekBBaaROkyrWnNXZT xaCAG1C0ap2ZYC1SftKr6d d4nqgom2CqVbHEb6vLl3sm99mBdvd5zgfleI84w/.../zJh5ORUOvqu0QqRM2g==&k=IXrm9_LhvsAmpGizEVSvx_LKcuN0S3Q1CG2-9JMSPEv3P0YvPcNCqcn6-QoqDGpQn0gR-Gc5gaKdPgnQzs0tqBY

http://dds4.fb-hosting-apps.com/download.php?version=1.1.1.20&campid=3515&instid[appname]=Dennis Roddy Satellite Communication Ebook_Downloader&instid[appsetupurl]=http://download.deluge-torrent.org/windows/deluge-1.3.6-win32-setup.exe&instid[cmdline]=/S&instid[appimageurl]=http://download.venturedownload.com/d1/logo150x150.png&prefix=Dennis Roddy Satellite Communication Ebook&instid[thankyoupage]=http://download.venturedownload.com/.../thank_you.php?ti1=1460000&ti2=0&ti3=2014-02-03T20:33:56.698431 00:00&parameter=Dennis Roddy Satellite Communication Ebook&instid[interrupted]=http://download.venturedownload.com/.../interrupted.php?ti1=1460000&ti2=0&ti3=2014-02-03T20:33:56.698431 00:00&parameter=Dennis Roddy Satellite Communication Ebook&ti1=1460000&ti2=0&ti3=2014-02-03T20:33:56.698431 00:00

http://dds4.fb-hosting-apps.com/download.php?version=1.1.1.20&campid=3039&instid[appname]=Dennis Roddy Satellite Communication Ebook_Downloader&instid[appsetupurl]=http://download.deluge-torrent.org/windows/deluge-1.3.6-win32-setup.exe&instid[cmdline]=/S&instid[appimageurl]=http://download.venturedownload.com/d1/logo150x150.png&prefix=Dennis Roddy Satellite Communication Ebook&instid[thankyoupage]=http://download.venturedownload.com/.../thank_you.php?ti1=1460000&ti2=0&ti3=2014-02-03T20:33:56.698431 00:00&parameter=Dennis Roddy Satellite Communication Ebook&instid[interrupted]=http://download.venturedownload.com/.../interrupted.php?ti1=1460000&ti2=0&ti3=2014-02-03T20:33:56.698431 00:00&parameter=Dennis Roddy Satellite Communication Ebook&ti1=1460000&ti2=0&ti3=2014-02-03T20:33:56.698431 00:00

http://dds4.fb-hosting-apps.com/download.php?version=1.1.1.20&campid=3038&instid[appname]=Dennis Roddy Satellite Communication Ebook_Downloader&instid[appsetupurl]=http://download.deluge-torrent.org/windows/deluge-1.3.6-win32-setup.exe&instid[cmdline]=/S&instid[appimageurl]=http://download.venturedownload.com/d1/logo150x150.png&prefix=Dennis Roddy Satellite Communication Ebook&instid[thankyoupage]=http://download.venturedownload.com/.../thank_you.php?ti1=1460000&ti2=0&ti3=2014-02-03T20:33:56.698431 00:00&parameter=Dennis Roddy Satellite Communication Ebook&instid[interrupted]=http://download.venturedownload.com/.../interrupted.php?ti1=1460000&ti2=0&ti3=2014-02-03T20:33:56.698431 00:00&parameter=Dennis Roddy Satellite Communication Ebook&ti1=1460000&ti2=0&ti3=2014-02-03T20:33:56.698431 00:00

http://download.venturedownload.com/.../get.php?q=Dennis_Roddy_Satellite_Communication_Ebook&ti1=1460000&ti2=0&ti3=2014-02-03T20:33:56.698431 00:00

http://dds4.fb-hosting-apps.com/download.php?version=1.1.1.20&campid=3516&instid[appname]=Exotic Options And Hybrids_Downloader&instid[appsetupurl]=http://download.deluge-torrent.org/windows/deluge-1.3.6-win32-setup.exe&instid[cmdline]=/S&instid[appimageurl]=http://download.venturedownload.com/d1/logo150x150.png&prefix=Exotic Options And Hybrids&instid[thankyoupage]=http://download.venturedownload.com/.../thank_you.php?ti1=1460000&ti2=0&ti3=2014-02-03T18:58:39.038376 00:00&parameter=Exotic Options And Hybrids&instid[interrupted]=http://download.venturedownload.com/.../interrupted.php?ti1=1460000&ti2=0&ti3=2014-02-03T18:58:39.038376 00:00&parameter=Exotic Options And Hybrids&ti1=1460000&ti2=0&ti3=2014-02-03T18:58:39.038376 00:00

http://download.venturedownload.com/.../get.php?q=Exotic_Options_And_Hybrids&ti1=1460000&ti2=0&ti3=2014-02-03T18:58:39.038376 00:00

http://dds3.fb-hosting-apps.com/download.php?version=1.1.1.20&campid=3038&instid[appname]=Twitter Spam Bot_Downloader&instid[appsetupurl]=http://download.deluge-torrent.org/windows/deluge-1.3.6-win32-setup.exe&instid[cmdline]=/S&instid[appimageurl]=http://download.venturedownload.com/d1/logo150x150.png&prefix=Twitter Spam Bot&instid[thankyoupage]=http://download.venturedownload.com/.../thank_you.php?ti1=1405000&ti2=3&ti3=2014-02-03T05:19:57.199068 00:00&parameter=Twitter Spam Bot&instid[interrupted]=http://download.venturedownload.com/.../interrupted.php?ti1=1405000&ti2=3&ti3=2014-02-03T05:19:57.199068 00:00&parameter=Twitter Spam Bot&ti1=1405000&ti2=3&ti3=2014-02-03T05:19:57.199068 00:00

http://download.venturedownload.com/.../get.php?q=Twitter_Spam_Bot&ti1=1405000&ti2=3&ti3=2014-02-03T05:19:57.199068 00:00

http://dds3.fb-hosting-apps.com/download.php?version=1.1.1.20&campid=3516&instid[appname]=Character Development In Blender 2.5_Downloader&instid[appsetupurl]=http://download.deluge-torrent.org/windows/deluge-1.3.6-win32-setup.exe&instid[cmdline]=/S&instid[appimageurl]=http://download.venturedownload.com/d1/logo150x150.png&prefix=Character Development In Blender 2.5&instid[thankyoupage]=http://download.venturedownload.com/.../thank_you.php?ti1=1405000&ti2=3&ti3=2014-02-03T14:01:45.323246 00:00&parameter=Character Development In Blender 2.5&instid[interrupted]=http://download.venturedownload.com/.../interrupted.php?ti1=1405000&ti2=3&ti3=2014-02-03T14:01:45.323246 00:00&parameter=Character Development In Blender 2.5&ti1=1405000&ti2=3&ti3=2014-02-03T14:01:45.323246 00:00

http://download.venturedownload.com/.../get.php?q=Character_Development_In_Blender_2.5&ti1=1405000&ti2=3&ti3=2014-02-03T14:01:45.323246 00:00

http://dds3.fb-hosting-apps.com/download.php?version=1.1.1.20&campid=3039&instid[appname]=Character Development In Blender 2.5_Downloader&instid[appsetupurl]=http://download.deluge-torrent.org/windows/deluge-1.3.6-win32-setup.exe&instid[cmdline]=/S&instid[appimageurl]=http://download.venturedownload.com/d1/logo150x150.png&prefix=Character Development In Blender 2.5&instid[thankyoupage]=http://download.venturedownload.com/.../thank_you.php?ti1=1405000&ti2=3&ti3=2014-02-03T13:58:33.707731 00:00&parameter=Character Development In Blender 2.5&instid[interrupted]=http://download.venturedownload.com/.../interrupted.php?ti1=1405000&ti2=3&ti3=2014-02-03T13:58:33.707731 00:00&parameter=Character Development In Blender 2.5&ti1=1405000&ti2=3&ti3=2014-02-03T13:58:33.707731 00:00

http://download.venturedownload.com/.../get.php?q=Character_Development_In_Blender_2.5&ti1=1405000&ti2=3&ti3=2014-02-03T13:58:33.707731 00:00

http://www.conductdownload.com/download.php?version=1.1.1.20&campid=4000&instid[appname]=Download.Breaking.Bad.S03.Season.3.720p.BRRip.x264.VisionX.Torrent...KickassTorrents&instid[appsetupurl]=http://16.get.getmdownloader.com/files/MD_setup_1.0.16.exe&instid[cmdline]=/verysilent&instid[appimageurl]=http://.../static/md/images/logo_150.png&prefix=Download.Breaking.Bad.S03.Season.3.720p.BRRip.x264.VisionX.Torrent...KickassTorrents&instid[thankyoupage]=http://.../upgrade&ti1=w154s306i923p15e9c0&ti2=IYAdhBh-yxqmFn_IHrbDip-ivEi7Q_ThS8J9E2RlYL3dAAmwDnl_nW2r40oAeHZTBuVNA5bcL-JiGld0iDOR0yE

http://getmdownloader.com/.../Download.Breaking.Bad.S03.Season.3.720p.BRRip.x264-VisionX.Torrent.-.KickassTorrents.html?id=&na=IbmRy1fFwAAlU9vndRh1Ebkw9O QDBZFOKkxm2rRoTpNpFtYyjizuHJllrN7IUf1euvAGc7KCgkRUexI4 DUv9 wsDRRdXQbu7Uk1XNx90NO2cDRD2QlDa02 m85n3d3QA==&k=IVykqFz1hoEC7uV4GToSvo0JrmGnSLGYUhDF13JpOv7dyEsPptDw43lTYvFXV7wuIhyFO60-MGBFkYITv5bjLmY

http://dds3.fb-hosting-apps.com/download.php?version=1.1.1.20&campid=3515&instid[appname]=Nfs World Hack V3.zip_Downloader&instid[appsetupurl]=http://download.deluge-torrent.org/windows/deluge-1.3.6-win32-setup.exe&instid[cmdline]=/S&instid[appimageurl]=http://download.venturedownload.com/d1/logo150x150.png&prefix=Nfs World Hack V3.zip&instid[thankyoupage]=http://download.venturedownload.com/.../thank_you.php?ti1=1405000&ti2=0&ti3=2014-02-03T16:26:26.583588 00:00&parameter=Nfs World Hack V3.zip&instid[interrupted]=http://download.venturedownload.com/.../interrupted.php?ti1=1405000&ti2=0&ti3=2014-02-03T16:26:26.583588 00:00&parameter=Nfs World Hack V3.zip&ti1=1405000&ti2=0&ti3=2014-02-03T16:26:26.583588 00:00

http://download.venturedownload.com/.../get.php?q=Nfs_World_Hack_V3.zip&ti1=1405000&ti2=0&ti3=2014-02-03T16:26:26.583588 00:00

http://dds4.fb-hosting-apps.com/download.php?version=1.1.1.20&campid=3516&instid[appname]=Suitcase Fusion 3 Crack_Downloader&instid[appsetupurl]=http://download.deluge-torrent.org/windows/deluge-1.3.6-win32-setup.exe&instid[cmdline]=/S&instid[appimageurl]=http://download.venturedownload.com/d1/logo150x150.png&prefix=Suitcase Fusion 3 Crack&instid[thankyoupage]=http://download.venturedownload.com/.../thank_you.php?ti1=1460000&ti2=0&ti3=2014-02-04T11:44:33.625753 00:00&parameter=Suitcase Fusion 3 Crack&instid[interrupted]=http://download.venturedownload.com/.../interrupted.php?ti1=1460000&ti2=0&ti3=2014-02-04T11:44:33.625753 00:00&parameter=Suitcase Fusion 3 Crack&ti1=1460000&ti2=0&ti3=2014-02-04T11:44:33.625753 00:00

Latest 30 of 38 download URLs

The executing file has been seen to make the following network communication in live environments.

TCP (HTTP):
Connects to server-54-230-202-13.fra50.r.cloudfront.net  (54.230.202.13:80)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.