» heroes and generals hack october 2014 no survey no password__10967_i1436325746_il311680.exe
Overview
Analysis
File Details
Downloads (64)

heroes and generals hack october 2014 no survey no password__10967_i1436325746_il311680.exe

EVROPLAST LLC

This is the Amonetize download manager which bundles applications with offers for additional 3rd party software, mostly unwanted adware, and may be installed with minimal consent. The application heroes and generals hack october 2014 no survey no password__10967_i1436325746_il311680.exe by EVROPLAST has been detected as adware by 10 anti-malware scanners. The program is a setup application that uses the Amonetize Downloader installer. The setup program bundles adware offers using the Amonetize, a Pay-Per-Install (PPI) monetization and distribution download manager. The software offerings provided are based on the PC's geo-location at the time of install.

File name:

Publisher:

EVROPLAST LLC (signed and verified)

Version:

1.1.5.26

MD5:

f23ebe58ee484df05966437a3ea1310e

SHA-1:

38f4ad40df6237214c6003b5d027da60bae9cce4

SHA-256:

684f3bbea5286d1a53a94f254dc9c101b0a409025c3f524d4d7ca4f0c699cea1

Scanner detections:

10 / 68

Status:

Adware

Description:

This is also known as bundleware, or downloadware, which is an downloader designed to simply deliver ad-supported offers in the setup routine of an otherwise legitimate software.

Analysis date:

12/25/2024 12:08:13 AM UTC (today)

Scan engine

Detection

Engine version

AhnLab V3 Security

PUP/Win32.Amonetiz

2015.01.01

avast!

Win32:Adware-gen [Adw]

2014.9-141231

Dr.Web

Trojan.Amonetize.341

9.0.1.0365

ESET NOD32

Win32/Amonetize.CK (variant)

8.10950

McAfee

Artemis!F23EBE58EE48

5600.6899

NANO AntiVirus

Riskware.Win32.Amonetize.dlgsuu

0.30.0.64448

Qihoo 360 Security

HEUR/QVM10.1.Malware.Gen

1.0.0.1015

Reason Heuristics

PUP.Installer.EVROPLAST.?

15.1.4.13

Sophos

Amonetize

4.98

Trend Micro House Call

Suspicious_GEN.F47V1231

7.2.365

File size:

563.2 KB (576,704 bytes)

Product version:

1.1.5.26

Original file name:

setup.exe

File type:

Executable application (Win32 EXE)

Bundler/Installer:

Amonetize Downloader

Language:

English (United States)

Common path:

C:\users\{user}\appdata\local\temp\heroes and generals hack october 2014 no survey no password__10967_i1436325746_il311680.exe

Digital Signature

Signed by:

EVROPLAST LLC

Authority:

thawte, Inc.

Valid from:

12/22/2014 1:00:00 AM

Valid to:

12/23/2015 12:59:59 AM

Subject:

CN=EVROPLAST LLC, O=EVROPLAST LLC, L=Donetsk, S=Alberta, C=UA

Issuer:

CN=thawte SHA256 Code Signing CA, O="thawte, Inc.", C=US

Serial number:

3A189EC1963AB0505C115175C20CD893

File PE Metadata

Compilation timestamp:

12/26/2014 7:07:40 PM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

10.0

CTPH (ssdeep):

12288:x/XnAkWrjaaxDPYD9ZAa/BFNZTtxrQ+KlOcJR2eogxF0T+i:x/wkWKaZYTAaLtxr4gbeoAF3i

Entry address:

0xB0FA

Entry point:

E8, 1A, 3E, 00, 00, E9, 89, FE, FF, FF, 8B, FF, 55, 8B, EC, 83, 7D, 08, 00, 74, 2D, FF, 75, 08, 6A, 00, FF, 35, C4, 5B, 39, 00, FF, 15, A4, E0, 38, 00, 85, C0, 75, 18, 56, E8, 50, 2D, 00, 00, 8B, F0, FF, 15, 84, E0, 38, 00, 50, E8, 00, 2D, 00, 00, 59, 89, 06, 5E, 5D, C3, 8B, FF, 55, 8B, EC, 56, 8D, 45, 08, 50, 8B, F1, E8, 9A, ED, FF, FF, C7, 06, C0, EB, 38, 00, 8B, C6, 5E, 5D, C2, 04, 00, C7, 01, C0, EB, 38, 00, E9, DE, ED, FF, FF, 8B, FF, 55, 8B, EC, 56, 8B, F1, C7, 06, C0, EB, 38, 00, E8, CB, ED, FF, FF... 
[+]

Code size:

115.5 KB (118,272 bytes)

The file heroes and generals hack october 2014 no survey no password__10967_i1436325746_il311680.exe has been seen being distributed by the following 50 URLs.

http://www.slow-download.com/download.php?version=1.1.5.26&campid=3687&instid[appname]=Saunders Q Downloader&instid[appsetupurl]=http://fastmediadownloads.com/download/Prompt-Downloader-1824835527.exe&instid[cmdline]=&instid[appimageurl]=http://.../logo.png&prefix=Saunders Q Downloader&instid[interrupted]=http://.../?cancel&ti1=1824835527&instid[thankyoupage]=http://.../?success

http://www.our-hurricane-file.net/.../FIFA15KeyGeneratorSetup__6196_il552.exe

http://www.your-tsunami-file.net/allddT.html?myref=dm&campid=7630&version=1.1.5.26&instid[appname]=Windows 7 Loader By Daz&instid[appsetupurl]=https://copy.com/tujXgWpcpL7Y2Asr?download=1&instid[appimageurl]=http://i1088.photobucket.com/albums/i336/frankonlinenet/7load_zps6a68f76b.png&prefix=Windows 7 Loader&instid[thankyoupage]=http://ppvline.com/.../Windows7.html&AMt=1420407638654&AMh=7fn2b4gxIWmb09igS84d2Ie2zMXUjQgM3KAUfCzDKPbVydo5QZMSwcespsmVBC1AtdCH3iBb48loOaw3

http://letshareus.com/download.php?aff=10451&name=wpman&file=Download.Setup

http://www.our-hurricane-file.net/.../NBA Jam__3435_il80204.exe

http://www.your-tsunami-file.net/allddT.html?myref=dm&campid=3435&version=1.1.5.26&instid[appname]=V Rally Edition 99&instid[appimageurl]=http://www.gamefabrique.com/i/.../v-rally-edition-99.png&prefix=V Rally Edition 99&AMt=1420379900338&AMh=7fn2b4gxIWmb09igS84d2Ie2zMXUjQgM3KAUfCzDKPbVydo5QZMSwcespsmVBC1AtdCH3iBb48loOaw3

http://free-updates2.pl/lp10/installer.php?aff=100&subaff=423&exename=FL_VideoPlugin.exe&title=FL Video Plugin&description=FL Video Plugin&downloadurl=http://.../VLX_Player.exe&tid=

http://www.slow-download.com/download.php?version=1.1.5.26&campid=3687&instid[appname]=Swap Magic Exe Downloader&instid[appsetupurl]=http://fastmediadownloads.com/download/Prompt-Downloader-1091820885.exe&instid[cmdline]=&instid[appimageurl]=http://.../logo.png&prefix=Swap Magic Exe Downloader&instid[interrupted]=http://.../?cancel&ti1=1091820885&instid[thankyoupage]=http://.../?success

http://www.funnier-download.com/download.php?campid=11476&version=1.1.5.26&instid[appname]=nuevo_mix_prince_royce_2014.mp3&instid[appsetupurl]=http://static.convertonmp3.com/downloads/08/3b/nuevo_mix_prince_royce_2014.mp3?h=t5l-mzNICcGa0orGwkNzVw&e=1420198897&instid[cmdline]=%temp%/Download&instid[appimageurl]=http://youtubemp4s.com/apple-touch-icon.png&prefix=nuevo.mix.prince.royce.2014.mp3&instid[thankyoupage]=http://convertonmp3.com

http://hqhub.net/download_player.php?a=97600&f=1

http://letshareus.com/download.php?aff=10892&name=fbchat&file=Download Game Onet 2 For PC Windows Xp 7 8 dan 9 Gratis

http://www.slow-download.com/download.php?version=1.1.5.26&campid=3687&instid[appname]=File381112 Downloader&instid[appsetupurl]=http://fastmediadownloads.com/download/Prompt-Downloader-1525601232.exe&instid[cmdline]=&instid[appimageurl]=http://.../logo.png&prefix=File381112 Downloader&instid[interrupted]=http://.../?cancel&ti1=1525601232&instid[thankyoupage]=http://.../?success

http://download-cdn.com/direct/.../mediaplayer_setup.php?a=12355&s=0&t=1&fv=7

http://fixdownloadz.com/4/download.php?i=37&soft_name=PSG Update&soft_version=2.57&soft_url=https://.../gws=57_445526Ps

http://myfreedownloadsnow.com/download_direct.php?id=1592&name=file381112

http://www.slow-download.com/download.php?version=1.1.5.26&campid=3687&instid[appname]=Document Id 237614 Zip Downloader&instid[appsetupurl]=http://fastmediadownloads.com/download/Prompt-Downloader-1028482516.exe&instid[cmdline]=&instid[appimageurl]=http://.../logo.png&prefix=Document Id 237614 Zip Downloader&instid[interrupted]=http://.../?cancel&ti1=1028482516&instid[thankyoupage]=http://.../?success

http://www.freedirectdownload.ru/?watch=colanti si buci la timisoara

http://www.earthquake-file.com/.../MicrosoftOffice2013ProPlusx86x64FullSerialKey,LicenseFreeDownload__11057_il2355.exe

http://www.our-hurricane-file.net/.../File.Downloader__9581_il263.exe

http://www.your-tsunami-file.net/allddT.html?myref=dm&campid=11384&version=1.1.5.26&instid[appname]=GetSkype&instid[appsetupurl]=http://ask.fm/yani777&instid[appimageurl]=http://s3.amazonaws.com/.../downloadall.png&prefix=setup&instid[thankyoupage]=&ti1=96fd891c39909de59157229f8dbd0a32&ti2=5cdd6aa35ae1b366df99f475a10b8d0e&ti3=&AMt=1420493609815&AMh=7fn2b4gxIWmb09igS84d2Ie2zMXUjQgM3KAUfCzDKPbVydo5QZMSwcespsmVBC1AtdCH3iBb48loOaw3

http://www.slow-download.com/download.php?version=1.1.5.26&campid=3687&instid[appname]=Nutty Bavarian Nut Roaster For Sale Downloader&instid[appsetupurl]=http://fastmediadownloads.com/download/Prompt-Downloader-1088774356.exe&instid[cmdline]=&instid[appimageurl]=http://.../logo.png&prefix=Nutty Bavarian Nut Roaster For Downloader&instid[interrupted]=http://.../?cancel&ti1=1088774356&instid[thankyoupage]=http://.../?success

http://www.slow-download.com/download.php?version=1.1.5.26&campid=3687&instid[appname]=Despicable Me 2010 1080p BR 600MB ALL Single L Downloader&instid[appsetupurl]=http://fastmediadownloads.com/download/Prompt-Downloader-1875309272.exe&instid[cmdline]=&instid[appimageurl]=http://.../logo.png&prefix=Despicable Me 2010 1080p BR Downloader&instid[interrupted]=http://.../?cancel&ti1=1875309272&instid[thankyoupage]=http://.../?success

http://www.slow-download.com/download.php?version=1.1.5.26&campid=5160&instid[appsetupurl]=http://www.datafilehost.com/.../2bb57363&instid[cmdline]=/S&instid[appimageurl]=http://oi59.tinypic.com/2ew18b5.jpg&prefix=GTA V Key Generator&instid[appname]=GTA V Key Generator&instid[thankyoupage]=http://www.datafilehost.com/.../2bb57363&ti1=0

http://www.our-hurricane-file.net/.../Rather Be__11081_il206885.exe

http://www.slow-download.com/download.php?version=1.1.5.26&campid=3687&instid[appname]=God Star Downloader&instid[appsetupurl]=http://fastmediadownloads.com/download/Prompt-Downloader-1375030941.exe&instid[cmdline]=&instid[appimageurl]=http://.../logo.png&prefix=God Star Downloader&instid[interrupted]=http://.../?cancel&ti1=1375030941&instid[thankyoupage]=http://.../?success

http://www.slow-download.com/download.php?version=1.1.5.26&campid=3687&instid[appname]=Adobe PhotoShop LightRoom 5 Keygen Downloader&instid[appsetupurl]=http://fastmediadownloads.com/download/Prompt-Downloader-1869762348.exe&instid[cmdline]=&instid[appimageurl]=http://.../logo.png&prefix=Adobe PhotoShop LightRoom 5 Ke Downloader&instid[interrupted]=http://.../?cancel&ti1=1869762348&instid[thankyoupage]=http://.../?success

http://www.your-tsunami-file.net/allddT.html?myref=dm&campid=9660&version=1.1.5.26&instid[appname]=iCloud Killer&instid[appsetupurl]=http://ge.tt/api/1/files/4LuuPA32/0/blob?download&instid[appimageurl]=http://2.bp.blogspot.com/-ADrAbD-rHBY/VFFmt07h8MI/AAAAAAAAACk/sWC5QC2wK20/.../icloudkiller.png&prefix=iCloud.Killer.Setup&instid[thankyoupage]=&AMt=1420503285053&AMh=7fn2b4gxIWmb09igS84d2Ie2zMXUjQgM3KAUfCzDKPbVydo5QZMSwcespsmVBC1AtdCH3iBb48loOaw3

http://www.autojuly181-dm-download.biz/tdownload.php?s1=e28cb457bf5c809d270d799b72297a87c8f7d58a&t1=1432209363&myref=dm

http://www.funnier-download.com/tdownload.php?s1=7961d09a8c993e55c5b759d7f58b8ee57432bd87&t1=1420381505&myref=dm&campid=10967&version=1.1.5.26&instid[appname]=Adobe Creative Cloud keygen DEC 2014 crack free download new&instid[appsetupurl]=http://files.jymbi.in/hck/Setup.exe&instid[cmdline]=/S&instid[appimageurl]=http://s3.amazonaws.com/.../downloadall.png&prefix=Adobe Creative Cloud keygen DEC 2014 crack free download new&AMt=1420381323993&AMh=7fn2b4gxIWmb09igS84d2Ie2zMXUjQgM3KAUfCzDKPbVydo5QZMSwcespsmVBC1AtdCH3iBb48loOaw3

http://www.your-tsunami-file.net/allddT.html?myref=dm&campid=10967&version=1.1.5.26&instid[appname]=Adobe Creative Cloud keygen DEC 2014 crack free download new&instid[appsetupurl]=http://files.jymbi.in/hck/Setup.exe&instid[cmdline]=/S&instid[appimageurl]=http://s3.amazonaws.com/.../downloadall.png&prefix=Adobe Creative Cloud keygen DEC 2014 crack free download new&AMt=1420381323993&AMh=7fn2b4gxIWmb09igS84d2Ie2zMXUjQgM3KAUfCzDKPbVydo5QZMSwcespsmVBC1AtdCH3iBb48loOaw3

Latest 30 of 64 download URLs

Remove heroes and generals hack october 2014 no survey no password__10967_i1436325746_il311680.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.