home

flashplayer__4587_i229470056_il382.exe

Installer

Amonetize ltd.

This is the Amonetize download manager which bundles applications with offers for additional 3rd party software, mostly unwanted adware, and may be installed with minimal consent. The application flashplayer__4587_i229470056_il382.exe by Amonetize ltd has been detected as adware by 12 anti-malware scanners. The program is a setup application that uses the Amonetize Downloader installer. The installer uses the InstallMonetizer platform which will donwload and install adware toolbars and other potentially unwanted software offers during setup. With this installer, users are expecting to download the free Adobe Flash Player but before that occurs they may be presented with additional offers, mostly potentially unwanted software or adware.
Publisher:
Amônétízé Ltd  (signed by Amonetize ltd.)

Product:
Installer

Version:
1.1.5.86

MD5:
a19450707f8471b6f4aa1e2a822b5c47

SHA-1:
5356822ce11b43a831ffdd38ddc931be17c850bc

SHA-256:
9d9b784319e3fa7106360199523d6e589b222b7a4f915ffae645d71cdfbe144d

Scanner detections:
12 / 68

Status:
Adware

Explanation:
This setup file is a re-distribution of the original program that bundles various adware offers during installation including toolbars and browser search extensions.

Description:
This is also known as bundleware, or downloadware, which is an downloader designed to simply deliver ad-supported offers in the setup routine of an otherwise legitimate software.

Analysis date:
12/24/2024 2:00:33 AM UTC  (today)

Scan engine
Detection
Engine version

Bkav FE
W32.Clode67.Trojan
1.3.0.4613

Dr.Web
Adware.Downware.1655
9.0.1.010

ESET NOD32
Win32/Amonetize.AA (variant)
8.9274

K7 AntiVirus
Unwanted-Program
13.175.10794

Kaspersky
not-a-virus:Downloader.Win32.Agent
14.0.0.4487

Malwarebytes
PUP.Optional.InstallMonetizer
v2014.01.10.02

McAfee
Artemis!A19450707F84
5600.7254

Reason Heuristics
PUP.Installer.Amonetizeltd.c
14.8.7.19

Sophos
Amonetize
4.96

Trend Micro House Call
TROJ_GEN.F47V0102
7.2.10

Vba32 AntiVirus
Downloader.Agent
3.12.24.3

VIPRE Antivirus
Amonetize
25284

File size:
393 KB (402,472 bytes)

Product version:
2.1.12

Copyright:
(c) Amônétízé Ltd, 2012,2013. All rights reserved.

Original file name:
Installer.exe

File type:
Executable application (Win32 EXE)

Bundler/Installer:
Amonetize Downloader

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\flashplayer__4587_i229470056_il382.exe

Digital Signature
Signed by:
Amonetize ltd.

Authority:
Thawte, Inc.

Valid from:
3/19/2013 1:00:00 AM

Valid to:
6/19/2015 1:59:59 AM

Subject:
CN=Amonetize ltd., O=Amonetize ltd., L=Raanana, S=Alberta, C=IL

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
235E7B2F1D4E0152189F6381E2BA8C97

File PE Metadata
Compilation timestamp:
1/2/2014 6:34:29 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
12288:Vcg5gN9w8Ulu1ye55MvGHtgnKvoqmJ0ftRrpxu:iWVwM5K1mJ0vrpxu

Entry address:
0x26933

Entry point:
E8, 74, 96, 00, 00, E9, 89, FE, FF, FF, 57, 8B, C6, 83, E0, 0F, 85, C0, 0F, 85, C1, 00, 00, 00, 8B, D1, 83, E1, 7F, C1, EA, 07, 74, 65, EB, 06, 8D, 9B, 00, 00, 00, 00, 66, 0F, 6F, 06, 66, 0F, 6F, 4E, 10, 66, 0F, 6F, 56, 20, 66, 0F, 6F, 5E, 30, 66, 0F, 7F, 07, 66, 0F, 7F, 4F, 10, 66, 0F, 7F, 57, 20, 66, 0F, 7F, 5F, 30, 66, 0F, 6F, 66, 40, 66, 0F, 6F, 6E, 50, 66, 0F, 6F, 76, 60, 66, 0F, 6F, 7E, 70, 66, 0F, 7F, 67, 40, 66, 0F, 7F, 6F, 50, 66, 0F, 7F, 77, 60, 66, 0F, 7F, 7F, 70, 8D, B6, 80, 00, 00, 00, 8D, BF...
 
[+]

Code size:
228.5 KB (233,984 bytes)

The file flashplayer__4587_i229470056_il382.exe has been seen being distributed by the following 42 URLs.

http://www.winmediaplayer.com/direct-download.html?version=1.1.5.86&iaff1=10118&ci=4119&capp=MediaPlayer&ti1=iS71GvvmCBGxrDx9GktKrNESEtanRMtEahcDQdrRdrQWIEzv4MAwPuEYNtE3yGyv5SQhPbgb_UCusZwiOOpXH1FS9DLKc6OgHhPC29USQ0yvh3mxVedmhIlHPW-C0J9Jo88KaIeEZ9CMFy1mr_PoSxJekRJ3ucmVdnLM8xVXF1BfErND22nU6qGOq5b81DiqdQwLGpKisZJPCfvi9dt6U0E-4RIg4snR8_39POoOpcBUT0sHKn6v96WpSaVLCqo8E1hDE-U0pNXZTnZg6b1Zvnk1GMIpgwb0hqiFY9Y83wRKrcsfB5353DuV9rVkHErr3J6ObPWE4UX0mG1PdOB9M20HKJEkeShm_GgoBMIZlsfFCJPyzK-LReFi-sMYNSM

http://nym1.ib.adnxs.com/click?UfaWcr5Y4D8qenXIrCLbPylcj8L1KOw_Knp1yKwi2z9R9pZyvljgP4iuJAeq1Yo5Hmej-DIeB0IBCMdSAAAAAII0IAA_AQAAdgIAAAIAAAA9gpYAem0EAAAAAQBVU0QAVVNEAKAAWALK3AAAy7QAAQUCAQIAAIoAlCbYggAAAAA./cnd=!hAZAPAjRvaABEL2E2gQY-toRIAA./referrer=http://www.kizii.net/63-Fireboy-and-Watergirl-3.html/clickenc=http://.../direct-download.html?version=1.1.5.86&iaff1=9886&ci=3720&&capp=FlashPlayer&ti1=nym1CJ7OjcWvxseDQhACGIjdkrmgtbXFOSIONjYuMTM4LjE4Mi4yMjAoAQ..&til2=2110594&til3=${APN}

http://www.winmediaplayer.com/direct-download.html?version=1.1.5.86&iaff1=10118&ci=4119&capp=MediaPlayer&ti1=zjLZ09ovD5cX5CfJ_H2bKweVgN88BdVHUNSRSUqaCOyYql5dkq8L-Axa2z8KiikXlQWHdh2kvI1so3z1bvuJwRPymYYjaYXyaUpDA8Dws8jC-lJpEMevbBbW7p7eRsFTINcJWgZTwyERS4rGXo4tnteGL8qarJw0LpvN1KewgnEHLt7RpHoYussSgrfMAf4OEQKyktNdrY9LyNGFPepPLMpJ_EshDLIy-xW2k7QmyAlPgGMiNNBUJ9bYIj5ASO3R-BO7zWrP5Ew9xG9M_OSRwHxAY9GY2EkcUJOxRQUz57eWca8eEP-L0yFTI4CRBaf0qlswqiqeC3aHJRgrn7rTjmTrG58l16Zu9JCPBYkf-Pf6I8wAdH4aFCDi2n3_0i0El0hXvXcILN3_kEnE

http://www.winmediaplayer.com/direct-download.html?version=1.1.5.86&iaff1=10118&ci=4119&capp=MediaPlayer&ti1=3y0tdggVWGNZj5FyWuAbZQ2ci_1hzmWksLsb29qcQp2GiAwupexoTippmuJ5D6zHVCBK4nFytCGWT_g8G5bdQLqgXrEN_sauYjBX-v63Ry_HBciWrOPsfW5py_2HiNxKptPMluLE3K6WmzGKEWwMm1RP922tfQea4EfLa8CCWjh9Dc8I48QIWSRT8ennYQpdZL-FBi6nG_G1_KYbPoVEaXEKjGkFv6t4fEs94BHaKZTicr2AFLyV9c5uPf9w7AKjvunXUJw2KDH6jz6mLx7CbW_Ao2saUePL4bbYsEjLuMgEWC0B46m8AXV87yiQ-AdPr8mCbq9V1xME83jG3v7C9k4EXwJRDGQi5b-ciOyhU3NmMg4wa4XDCjrnT1IuwAVl

http://nym1.ib.adnxs.com/click?m5mZmZmZyT90aJHtfD_FP0Jg5dAi2-0_dGiR7Xw_xT-amZmZmZnJP0hqjpaGjvZzU8TCs02k-yYxHsZSAAAAAIM0IAA_AQAAdgIAAAIAAABGgpYAem0EAAAAAQBVU0QAVVNEACwB-gDL3AAA9rMAAQUCAQIAAIoACSu27gAAAAA./cnd=!7wYfQgj69qABEMaE2gQY-toRIAA./referrer=http://www.tagged.com/edit_profile.html?dataSource=profileEditProfile&ll=1/clickenc=http://.../direct-download.html?version=1.1.5.86&iaff1=9886&ci=3720&&capp=FlashPlayer&ti1=nym1CNOIi57bien9JhACGMjUubTp0KP7cyINMTAwLjQwLjE3MC4zNSgB&til2=2110595&til3=${APN}

http://a.ad-sys.com/.../click?tenant=AD&context=LqOPtmbfswtzww-iOaa8naFEbGfa_F8avbac-VF_J-baBdHfmQ9KOjNYOOt9ing9tip1KA1pang1Bsys0uq9gnqJupaaAyKArtzOmngeA0ttmbnbLbyAFhBVsgx7KBSV-3K7fIgdVowsTCXaPkd98hF6c7nPYoojkHGeiKXMsvaSkmmahiRHR5XaBTWSBPrrJi9fbj0fqCIE4IzMqwdwffbOri8KQyo0Kl0yTmcF0L7MiQcukihhGjS7aRTcQvLU1aRAHJ2LlXmh-ZyZhdkGjCAUwkj_aToAP-WlnZF4TPABpW2HivyIawNN1znwJK9W3PJJ8zid2ls26Mv4ZHOYcvvjqL1iggBRIyglhTHW-A5RqjjK5IiZjAYIvdnvyfz1Mdnr1cGbSd85iFSkvGswVp3_XnYDtrqHgK-iOa8&fwd=&log_click_as=click

http://nym1.ib.adnxs.com/click?tyQH7Gryzj8npiROm6_JP42XbhKDwO4_J6YkTpuvyT-3JAfsavLOP7xPu4Rg1CZyTxGEZLps1FuNUsdSAAAAAKM0IAA_AQAAdgIAAAIAAABGgpYA27gEAAAAAQBVU0QAVVNEACwB-gDX3AAAX7IAAgUCAQIAAIoAUCgx0AAAAAA./cnd=!fgbWOwi5zaABEMaE2gQY2_ESIAA./referrer=http://www.autotrader.com/clickenc=http://clickus.datropy.com/st?cipid=161010&ttype=1&crid=526568&dast=Ym89MSZjaXBpZD0xNjEwMTAmY2lzaWQ9REFBRDRCNTQyRjQ2ODI3MzUzNjQ0MTgyJmNpcmlkPURBQUQ0QjU0MkY0NjgyODEzNDYxNjMzMDgmc3ViaWQ9MTAzNyZjaXVpZD0tMTE3MjYwMjY4MTA4MDU3MTQwMiZzbz0xJmNyaWQ9NTI2NTY4JmV4Y2lkPTIyJmNudHJ5PTIyNyZjaWNtcD02NzMzOCZwdWJpZD0xNzAw&cmcv=${CMCV}&tgtf=http://.../direct-download.html?version=1.1.5.86&iaff1=9886&ci=3720&&capp=FlashPlayer&ti1=nym1CM-ikKSml5vqWxACGLyf7aWIjLWTciINNzEuMTk1LjI5LjIyMygB&til2=2110627&til3=${APN}

http://www.winmediaplayer.com/direct-download.html?version=1.1.5.86&iaff1=10118&ci=4119&capp=MediaPlayer&ti1=Vgal1DEafyoun7kmDhOL_m26PY4cModzH4Awd9JiMlDW4v27MCsL0t0t2M5ZruIuka1l9opSteNan_wiqWlFH9xmalAnEwsHMFU5zWG_47bGTu-SKykOovw2Jef9lLa523iGTEswu399eZE8JruxRd-5HqNr0EIsQiPv8zd2tItM1X-Zpe6wqBo6EeSurcHu7zHnJAgn7WQEe43PTVet5SY_86BGDR1hJO3YcsZtm9fZ2mUAhx_-4m1j9mKvTv_q1zSv5zGfuBAHnaDs0bKqV7c1Qp--6TJepIQwOkJ_xm7R366DkPj9aNYrKpmX9ay0mqK_tIaDsKEzoBc943Hw0x4i05CFR8oEb6zz0tGA6ibmgRYBtPdSuG5HXod2x62ja5wbRNJtvlgdjzBu

http://nym1.ib.adnxs.com/click?kZkLXB5rxD92v44ogvLAP42XbhKDwO4_dr-OKILywD-RmQtcHmvEP2VjBS_S--FJitT26dZ_HByp_MdSAAAAAKM0IAA_AQAAdgIAAAIAAABGgpYA27gEAAAAAQBVU0QAVVNEACwB-gDX3AAAP8gAAgUCAQIAAIoAfCnBGwAAAAA./cnd=!fgbWOwi5zaABEMaE2gQY2_ESIAA./referrer=http://movies.netflix.com/clickenc=http://clickus.datropy.com/st?cipid=161010&ttype=1&crid=526568&dast=Ym89MSZzdWJpZD0xMDA4JnNvPTEmY2ljbXA9NjczMzgmcHViaWQ9NDMwMCZjaXBpZD0xNjEwMTAmY2lzaWQ9NUE2QjlGQjdGMzcwNTI3MzQxMzM3NzQxJmNpcmlkPTVBNkI5RkI3RjM3MDUyODE2OTI2MzY2MzAmY2l1aWQ9ODM2NjAyMzExMDE0OTIwNTAyNCZjcmlkPTUyNjU2OCZleGNpZD0yMiZjbnRyeT0yMjc=&cmcv=${CMCV}&tgtf=http://.../direct-download.html?version=1.1.5.86&iaff1=9886&ci=3720&&capp=FlashPlayer&ti1=nym1CIqp28_u-p-OHBACGOXGlfii-v7wSSIONzUuMTcwLjEzNi4yMTIoAQ..&til2=2110627&til3=${APN}

http://lax1.ib.adnxs.com/click?-iXirfNvwz9IlfZACiLAP23n-6nx0u0_SJX2QAoiwD_6JeKt82_DP46y8w4PthxUYdHrVo1MKSv7LsZSAAAAAKI0IAA_AQAAdgIAAAIAAAA9gpYA27gEAAAAAQBVU0QAVVNEAKAAWALV3AAAJsUAAgUCAQIAAIoAgCre8wAAAAA./cnd=!XwZrOgjWoJoBEL2E2gQY2_ESIAA./referrer=http://www.cheapoair.com/clickenc=http://clickus.datropy.com/st?cipid=161010&ttype=1&crid=526538&dast=Ym89MSZzdWJpZD0xMTU0JnNvPTEmY2ljbXA9NjczMzgmcHViaWQ9MTA2MCZjaXBpZD0xNjEwMTAmY2lzaWQ9QjRBNTUyOUMyNDQ0NDQzODI4NTc5MTU2JmNpcmlkPUI0QTU1MjlDMjQ0NDQ0NDIxMjE1MTI2NjkmY2l1aWQ9LTgzNDYyMjkyMzYzNjk4NDkzMDYmY3JpZD01MjY1MzgmZXhjaWQ9MjImY250cnk9MjI3&cmcv=${CMCV}&tgtf=http://.../direct-download.html?version=1.1.5.86&iaff1=9886&ci=3720&&capp=FlashPlayer&ti1=lax1COGir7fVkdOUKxACGI7lzvfwwa2OVCIOMTA4Ljc0LjEyNi4xNzgoAQ..&til2=2110626&til3=${APN}

http://ams1.ib.adnxs.com/click?Os_Yl2w8wj8UBm2LlUW-P0Jg5dAi2-0_FAZti5VFvj86z9iXbDzCP11nyyntyoJkw92PaKY2nwGltcZSAAAAAIM0IAA_AQAAdgIAAAIAAABGgpYAem0EAAAAAQBVU0QAVVNEACwB-gDL3AAAlmgAAQUCAQIAAIoAgyfNlQAAAAA./cnd=!gAbEOwjCuqQBEMaE2gQY-toRIAE./referrer=http://www.whufc.com/page/Home/clickenc=http://.../direct-download.html?version=1.1.5.86&iaff1=9886&ci=4566&capp=FlashPlayer&ti1=ams1CMO7v8Tm1M3PARACGN3Orc7S3bLBZCIMODIuMzEuMjI3Ljk5KAE.&til2=2110595&til3=${APN}

http://www.winmediaplayer.com/direct-download.html?version=1.1.5.86&iaff1=10118&ci=4119&capp=MediaPlayer&ti1=77bBWHaOqIvtHn4zDXPTr3JqZz8xB-a-S228ju3DLrxXsurO8-WGfVHh0h4oSz04fP3CfdqR6ipaDK3n8EqZAmrXxLudMu0_1m6WX3O3RwSFBxrHovLcuUXg66zg_TM0QH8cNMdjCHwqNM4yqjN38AwJ5IzblYluCT2hw1MsZ48q3S_wjJeo5kqxjQ4gd2daQOapEtLAWH2d8nEfUpSHXaAW74WZD2ZLQgPkLWJt9ogs0AoRohQAbP0XRsKXV8ZhbiZkIIGrYnRlZqe21zlCje0gA7I__FBZHImVM5zN8vbDorEK6Z6t1J4RbOgJhrw8V4xn4kZmGnB5SULHKl8E9brlaANysxQIXnobnRyq8tql89twGaem7vVQwl-n6yM-D1z8c9yG8Ib5bWo0

http://lax1.ib.adnxs.com/click?ezVAaajR4j83lurhTz3fPylcj8L1KOw_N5bq4U893z96NUBpqNHiPwoE3UuC4phOUhgKr-pW-jf5B8ZSAAAAAII0IAA_AQAAdgIAAAIAAAA9gpYAem0EAAAAAQBVU0QAVVNEAKAAWALK3AAAPsUAAQUCAQIAAIoAlScr1gAAAAA./cnd=!hAZAPAjRvaABEL2E2gQY-toRIAA./referrer=http://petgames.my-pet-care.com/cat-games//clickenc=http://.../direct-download.html?version=1.1.5.86&iaff1=9886&ci=3720&&capp=FlashPlayer&ti1=lax1CNKwqPiq3ZX9NxACGIqI9N6k0LjMTiIMOTkuOTguMjAwLjI2KAE.&til2=2110594&til3=${APN}

http://www.winmediaplayer.com/direct-download.html?version=1.1.5.86&iaff1=10118&ci=4119&capp=MediaPlayer&ti1=X2jWWdh98UqZzpq4GGLD2Vz5_kwM2FiMr1gt1zQ-e22SIJQJV9WJpQKKKQUnQNtDVr_mKBWMsnR47K1f8_MbIFBhYtIed8MeqnH1dRs3jgDpzF-8bjF2jJ2NXJwK-BSVFP3ogHOHHpIppFRorCdcTzUUz0tDx9doBvmdE4DryFKqQ7IuGZnTvXk0auIbUT0m0a0T-L8Iv8gf6YYJg-M4-hZBbntBYLEVxBdT-amZEs1vDgeJTq2uwOc6f7Z8WPH29iUxlNv2PaGrmG-_tUrO0GnOJJxV2Ygd6uhN2eJqYXlHBUbVcch9OPh5hHwd6OnWwXM5kqjh5xxkd3fpBsyAvmJfXEMTXwaVhISUfUUm_0qC2o39QjwxUIyXQb7mLreg3FYsroEGRDS1ZcOK

http://nym1.ib.adnxs.com/click?TRO2n4zxvT-z1_XqZ9q4P0Jg5dAi2-0_s9f16mfauD9NE7afjPG9P_HFA16lqvt9T9V49NmvSWW2JsdSAAAAAIM0IAA_AQAAdgIAAAIAAABGgpYAem0EAAAAAQBVU0QAVVNEACwB-gDL3AAALqgAAQUCAQIAAIoApC3KLAAAAAA./cnd=!ewZVOwiU6J8BEMaE2gQY-toRIAE./referrer=http://www.iowaworkforce.org/ui/file1.htm/clickenc=http://.../direct-download.html?version=1.1.5.86&iaff1=9886&ci=3720&&capp=FlashPlayer&ti1=nym1CM-q46Of--ukZRACGPGLj_DV1Or9fSINNjcuMjI0LjQzLjEwOCgB&til2=2110595&til3=${APN}

http://lax1.ib.adnxs.com/click?0q3X9KCg2D-2DYqD13DUP7bz_dR46e4_tg2Kg9dw1D_Rrdf0oKDYP6C12hR4URwyvUFzAp7WZjvx3MhSAAAAAKI0IAA_AQAAdgIAAAIAAAA9gpYA27gEAAAAAQBVU0QAVVNEAKAAWALV3AAA3sMAAgUCAQIAAIoAvi6UbAAAAAA./cnd=!dQZ8Owi5zaABEL2E2gQY2_ESIAA./referrer=http://www.sofamer.com/clickenc=http://clickus.datropy.com/st?cipid=161010&ttype=1&crid=526538&dast=Ym89MSZjaXBpZD0xNjEwMTAmY2lzaWQ9NTE3QUFFQTlCODgzNzcxMDA2OTg4NTc0JmNpcmlkPTUxN0FBRUE5Qjg4Mzc4MTg0ODYwODQ1MCZzdWJpZD0zMDUwJmNpdWlkPS0xOTUwOTY1MzYxOTExNzA2NzA0JnNvPTEmY3JpZD01MjY1MzgmZXhjaWQ9MjImY250cnk9MjI3JmNpY21wPTY3MzM4JnB1YmlkPTEwNjA=&cmcv=${CMCV}&tgtf=http://.../direct-download.html?version=1.1.5.86&iaff1=9886&ci=3720&&capp=FlashPlayer&ti1=lax1CL2DzZPg07WzOxACGKDr6qaBr5SOMiIONzAuMjQxLjE0MC4xNzMoAQ..&til2=2110626&til3=${APN}

http://www.eachdownload.com/download.php?version=1.1.5.86&direct=1&prefix=FlashPlayersetup&campid=4566&ti1=nym1CJGB16Lxj5COLRACGL6P3uCOjevkUSINMTc0LjkxLjI1LjE1MSgB&iaff1=9886&capp=FlashPlayer

http://www.hdplugindownload.com/direct-download.html?version=1.1.5.86&iaff1=9886&ci=4566&capp=FlashPlayer&ti1=nym1CJGB16Lxj5COLRACGL6P3uCOjevkUSINMTc0LjkxLjI1LjE1MSgB&til2=1049999&til3=${APN}

http://nym1.ib.adnxs.com/click?Xyo25nXEzT9Tq3UDgaXDP4cW2c73U-c_U6t1A4Glwz9eKjbmdcTNP76HF-xorMlRkcBVFH9AHC0EFsdSAAAAAI8FEABNBQAAdgIAAAIAAABKgpYAQF8EAAAAAQBVU0QAVVNEANgCWgBffwAA1qoAAQUCAQIAAIQAniXkRwAAAAA./cnd=!EQaXOAiH2qMBEMqE2gQYwL4RIAA./referrer=http://www.pokerstars.com/poker/promotions/january-jumpstart//clickenc=http://.../direct-download.html?version=1.1.5.86&iaff1=9886&ci=4566&capp=FlashPlayer&ti1=nym1CJGB16Lxj5COLRACGL6P3uCOjevkUSINMTc0LjkxLjI1LjE1MSgB&til2=1049999&til3=${APN}

http://www.eachdownload.com/download.php?version=1.1.5.86&direct=1&prefix=MediaPlayer&campid=4119&ti1=uTfohZiFRWuyKqGuIJGoleeF-FjHH5NMB1SEdp7en1QXoUs9Et9apqmY9KgprkV2FYlsqaxK6YpLvWQehivilz89boziG5OkGoRgQkxPdv_K33WiPRNeoHfIjgzWSAV8sfiT00jfE-KNZeDTUHXlWznBMFjbHlinwMnI_fiFf5CSPgq0d5WmKaySGN4h1dH5Pydo5m763OjzVNxitCVDUqVKfS__tuArHTcaAm1tW7fT4Rj-gPAzfF0CT_pvvrzSwPRZ_eLSzqJ9ovBOjT9M1JFrZchgHPLp_ofqHWlfJku0dEVw5D4OvaoGgYh24DG20E1JQSmXbzeNZdQnXAAlthjYKkcr1SsJ9wjyEurW5vv7Ep43pmdwYYwkb9kqSuElsIk1L1DTQQFXt_Pz&iaff1=10118&capp=MediaPlayer

http://www.winmediaplayer.com/direct-download.html?version=1.1.5.86&iaff1=10118&ci=4119&capp=MediaPlayer&ti1=uTfohZiFRWuyKqGuIJGoleeF-FjHH5NMB1SEdp7en1QXoUs9Et9apqmY9KgprkV2FYlsqaxK6YpLvWQehivilz89boziG5OkGoRgQkxPdv_K33WiPRNeoHfIjgzWSAV8sfiT00jfE-KNZeDTUHXlWznBMFjbHlinwMnI_fiFf5CSPgq0d5WmKaySGN4h1dH5Pydo5m763OjzVNxitCVDUqVKfS__tuArHTcaAm1tW7fT4Rj-gPAzfF0CT_pvvrzSwPRZ_eLSzqJ9ovBOjT9M1JFrZchgHPLp_ofqHWlfJku0dEVw5D4OvaoGgYh24DG20E1JQSmXbzeNZdQnXAAlthjYKkcr1SsJ9wjyEurW5vv7Ep43pmdwYYwkb9kqSuElsIk1L1DTQQFXt_Pz

http://www.eachdownload.com/download.php?version=1.1.5.86&direct=1&prefix=MediaPlayer&campid=4119&ti1=zr271obTMYGoWcdVPR3AhyqNrxdtRQCwOsJwOZlIjgTNMt0IDnCyb2e_YUCP7VoIiUaqmhn0AeEi49e0CHZHKDDebKMu2qa6ZOTiAMg5ZAvf5Jn5LbAPQsh2wF4GGWv6IBBJ36E-ZT_paCIC2qF0WwEyF0AzJg6s0-5UwCWeEtUfA9U5k-ncaioDB4qm0Ghv2mlHMAo707avBiBbb24Tp9gsU-XBVLsJxwx8cszsJLXp6SQIgsHNloKGnVaTNyT9OOi2nhOvAPoH27wT-yik6dbXZ0B8kWiIBcpb72h54QkOM3mlOyZdPSqlbcWUChRnw6g8kXzz9O6zXOw7h8kYxHZBchyS4paZDGTZQ2ao0OSVIZmq3e-Oygd2FWA1OoJAGzThcSwODxDd-1wc&iaff1=10118&capp=MediaPlayer

http://www.winmediaplayer.com/direct-download.html?version=1.1.5.86&iaff1=10118&ci=4119&capp=MediaPlayer&ti1=zr271obTMYGoWcdVPR3AhyqNrxdtRQCwOsJwOZlIjgTNMt0IDnCyb2e_YUCP7VoIiUaqmhn0AeEi49e0CHZHKDDebKMu2qa6ZOTiAMg5ZAvf5Jn5LbAPQsh2wF4GGWv6IBBJ36E-ZT_paCIC2qF0WwEyF0AzJg6s0-5UwCWeEtUfA9U5k-ncaioDB4qm0Ghv2mlHMAo707avBiBbb24Tp9gsU-XBVLsJxwx8cszsJLXp6SQIgsHNloKGnVaTNyT9OOi2nhOvAPoH27wT-yik6dbXZ0B8kWiIBcpb72h54QkOM3mlOyZdPSqlbcWUChRnw6g8kXzz9O6zXOw7h8kYxHZBchyS4paZDGTZQ2ao0OSVIZmq3e-Oygd2FWA1OoJAGzThcSwODxDd-1wc

http://www.eachdownload.com/download.php?version=1.1.5.86&direct=1&prefix=MediaPlayer&campid=4119&ti1=JZztvfC3jNpUILX85BTggc-87JzDzk2umgR1BBNALTrzDEQQWYUpIXlzd2W3jDjMVmHMIhFBprSOZMYIqE5st9GseXepeUWxkNBCfjMSShgKxOtmfTNiCt-JE2iF_2F2dlYqSfpKvBKEBaPY2dcfCmZwXpOB3L9im8exEGypEo5GeTz_8SiD4yOZ1bF6R9bu6jeEndkWStGHbNNyZXVJMW76jP2sXWL80umzvtxizfWCMDrqRE3M9hvceFiw6aRvpYfgH_-tletgs6Z10YHYrI88HG0Up4pwgpxU_x8cBzsKxC1t1euiwcmPNJYDOP6kz3V_pO-5jno4k-oCnarTDRUj4qKj72f_xJh8vkefoZKyQBECU5biTvgvxgVj7ICP0Q1bqv4SCCHkTh7e&iaff1=10118&capp=MediaPlayer

http://www.winmediaplayer.com/direct-download.html?version=1.1.5.86&iaff1=10118&ci=4119&capp=MediaPlayer&ti1=JZztvfC3jNpUILX85BTggc-87JzDzk2umgR1BBNALTrzDEQQWYUpIXlzd2W3jDjMVmHMIhFBprSOZMYIqE5st9GseXepeUWxkNBCfjMSShgKxOtmfTNiCt-JE2iF_2F2dlYqSfpKvBKEBaPY2dcfCmZwXpOB3L9im8exEGypEo5GeTz_8SiD4yOZ1bF6R9bu6jeEndkWStGHbNNyZXVJMW76jP2sXWL80umzvtxizfWCMDrqRE3M9hvceFiw6aRvpYfgH_-tletgs6Z10YHYrI88HG0Up4pwgpxU_x8cBzsKxC1t1euiwcmPNJYDOP6kz3V_pO-5jno4k-oCnarTDRUj4qKj72f_xJh8vkefoZKyQBECU5biTvgvxgVj7ICP0Q1bqv4SCCHkTh7e

http://www.eachdownload.com/download.php?version=1.1.5.86&direct=1&prefix=MediaPlayer&campid=4119&ti1=XeKMhib-HUH9Nke7sejzgozsInU3qryObOhz3vKelpRKUny0vtwj6tHdIFmrdVnIoD33dstc5BHLseBsNg-MUT8ifomLbLUmwhVQp31YWGS8xSXtnnfcH-I9GAq4ml88l8_rocpXTOOZw8jUJweonnocKHnc2CPeEzEaWchsEIijWKUuuA7kJFHrMkRbicCu49r9BAIqVEoh_bIAcR9MbuZ6EkduCAgA4Sk__Vuzf-5hfX9D4SNMczo5JuTV55YiVcDd7RMnjL0iARW5edzFbmq0-PbmujGNWvBHoDUUJ5csy8zE7IsegwOewUEz-nY8RR3kHr1GThFxq58hVgBqBM825modOohQAR0TRuYHJskx0zHPnxA97MCHcCxSl5he0VDV3aK8W932slhX&iaff1=10118&capp=MediaPlayer

http://www.winmediaplayer.com/direct-download.html?version=1.1.5.86&iaff1=10118&ci=4119&capp=MediaPlayer&ti1=XeKMhib-HUH9Nke7sejzgozsInU3qryObOhz3vKelpRKUny0vtwj6tHdIFmrdVnIoD33dstc5BHLseBsNg-MUT8ifomLbLUmwhVQp31YWGS8xSXtnnfcH-I9GAq4ml88l8_rocpXTOOZw8jUJweonnocKHnc2CPeEzEaWchsEIijWKUuuA7kJFHrMkRbicCu49r9BAIqVEoh_bIAcR9MbuZ6EkduCAgA4Sk__Vuzf-5hfX9D4SNMczo5JuTV55YiVcDd7RMnjL0iARW5edzFbmq0-PbmujGNWvBHoDUUJ5csy8zE7IsegwOewUEz-nY8RR3kHr1GThFxq58hVgBqBM825modOohQAR0TRuYHJskx0zHPnxA97MCHcCxSl5he0VDV3aK8W932slhX

http://www.eachdownload.com/download.php?version=1.1.5.86&direct=1&prefix=FlashPlayersetup&campid=3720&ti1=lax1CJal0NeR65rDMhACGNuv9aWbr6TNcyIONjkuMTQyLjE3NC4xMTMoAQ..&iaff1=9886&capp=FlashPlayer

http://www.hdplugindownload.com/direct-download.html?version=1.1.5.86&iaff1=9886&ci=3720&&capp=FlashPlayer&ti1=lax1CJal0NeR65rDMhACGNuv9aWbr6TNcyIONjkuMTQyLjE3NC4xMTMoAQ..&til2=2069897&til3=${APN}

http://lax1.ib.adnxs.com/click?AAAAAAAA-D-uR-F6FK7vPwAAAAAAAPA_wnfuf3gk_T98Yp0q3xMGQNtXvbR5kZpzlhL0GllrhjLrAcdSAAAAAImVHwBNBQAAdgIAAAIAAABKgpYAGXwEAAAAAQBVU0QAVVNEANgCWgAoyQAANMIAAQUCAQIAAIoAgCHhSQAAAAA./cnd=!SAbiOgi3zKUBEMqE2gQYmfgRIAA./referrer=http://xfinity.comcast.net/tt2//clickenc=http://.../direct-download.html?version=1.1.5.86&iaff1=9886&ci=3720&&capp=FlashPlayer&ti1=lax1CJal0NeR65rDMhACGNuv9aWbr6TNcyIONjkuMTQyLjE3NC4xMTMoAQ..&til2=2069897&til3=${APN}

Latest 30 of 42 download URLs

The executing file has been seen to make the following network communications in live environments.

TCP (HTTP):
Connects to www.soledownload.com  (54.225.181.84:80)

TCP (HTTP):
Connects to www.activemonetizer.com  (23.23.96.46:80)

 
http://www.activemonetizer.com/index.php?Net2=v2.0.50727&Net4=&OSversion=NT5.1SP3&Slv=&Sysid=B21086083&Sysid1=B21086083&X64=N&admin=Y&browser=IEXPLORE.EXE&chver=&exe=ikjut__869972&offver=&lang_DfltUser=04

Remove flashplayer__4587_i229470056_il382.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.