» htc unlock codes calculator__3515_i1371393195_il390615.exe
Overview
Analysis
File Details
Downloads (5)

htc unlock codes calculator__3515_i1371393195_il390615.exe

Ukra-2006 LLC

This is the Amonetize download manager which bundles applications with offers for additional 3rd party software, mostly unwanted adware, and may be installed with minimal consent. The application htc unlock codes calculator__3515_i1371393195_il390615.exe by Ukra-2006 has been detected as adware by 20 anti-malware scanners. The program is a setup application that uses the TUGUU DomaIQ Setup installer. The setup program bundles adware offers using the Amonetize, a Pay-Per-Install (PPI) monetization and distribution download manager. The software offerings provided are based on the PC's geo-location at the time of install.

File name:

Publisher:

Ukra-2006 LLC (signed and verified)

Version:

1.1.8.22

MD5:

4a43e344866803653a850de75a6fed05

SHA-1:

2ac1bb6bff5c265757720fbdfa4e8b679dd734ad

SHA-256:

1f679b509427f25f64eb2483d9cadcead0308d1cbb6cbc8d6c24278b57964ef2

Scanner detections:

20 / 68

Status:

Adware

Description:

This is also known as bundleware, or downloadware, which is an downloader designed to simply deliver ad-supported offers in the setup routine of an otherwise legitimate software.

Analysis date:

12/25/2024 4:42:32 AM UTC (today)

Scan engine

Detection

Engine version

Lavasoft Ad-Aware

Gen:Variant.Kazy.472536

815

Agnitum Outpost

PUA.Amonetize

7.1.1

AhnLab V3 Security

PUP/Win32.Amonetize

2014.10.14

Avira AntiVirus

ADWARE/Adware.Gen4

7.11.179.192

AVG

Ukra

2015.0.3322

Baidu Antivirus

Adware.Win32.Amonetize

4.0.3.141013

Bitdefender

Gen:Variant.Kazy.472536

1.0.20.1575

Dr.Web

Adware.Downware.8798

9.0.1.0286

Emsisoft Anti-Malware

Gen:Variant.Kazy.472536

8.14.11.11.11

ESET NOD32

Win32/Amonetize.BT (variant)

8.10589

Fortinet FortiGate

Riskware/Amonetize

11/11/2014

F-Secure

Gen:Variant.Kazy.472536

11.2014-11-11_3

G Data

Gen:Variant.Kazy.472536

14.11.24

Kaspersky

not-a-virus:AdWare.Win32.Amonetize

14.0.0.3106

Malwarebytes

PUP.Optional.Amonetize

v2014.10.13.07

MicroWorld eScan

Gen:Variant.Kazy.472536

15.0.0.945

NANO AntiVirus

Riskware.Win32.Downware.dgtmls

0.28.2.62671

Reason Heuristics

PUP.Installer.Ukra2006.w

14.10.13.19

Sophos

Amonetize

4.98

Zillya! Antivirus

Adware.Amonetize.Win32.1404

2.0.0.1960

File size:

413.2 KB (423,120 bytes)

Product version:

1.1.8.22

Original file name:

setup.exe

File type:

Executable application (Win32 EXE)

Bundler/Installer:

TUGUU DomaIQ Setup

Language:

English (United States)

Common path:

C:\users\{user}\downloads\htc unlock codes calculator__3515_i1371393195_il390615.exe

Digital Signature

Signed by:

Ukra-2006 LLC

Authority:

Thawte, Inc.

Valid from:

7/1/2014 2:00:00 AM

Valid to:

7/2/2015 1:59:59 AM

Subject:

CN=Ukra-2006 LLC, O=Ukra-2006 LLC, L=Kharkiv, S=Harkivska obl, C=UA

Issuer:

CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:

2B3200D1AF3CAC4253C00F000EF4BAB9

File PE Metadata

Compilation timestamp:

10/8/2014 4:00:28 PM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

10.0

CTPH (ssdeep):

12288:YEZXnngobbb0fE1encIVT988LyIv656Lu2h:DZnngobCcMTfHQb2h

Entry address:

0x11EEA

Entry point:

E8, E9, 69, 00, 00, E9, 89, FE, FF, FF, 8B, FF, 55, 8B, EC, 83, 3D, 9C, 5E, 3C, 00, 00, 75, 18, E8, C7, 5E, 00, 00, 6A, 1E, E8, 11, 5D, 00, 00, 68, FF, 00, 00, 00, E8, 7C, F3, FF, FF, 59, 59, 8B, 45, 08, 85, C0, 75, 01, 40, 50, 6A, 00, FF, 35, 9C, 5E, 3C, 00, FF, 15, 04, A1, 3B, 00, 5D, C3, 8B, FF, 55, 8B, EC, 53, 8B, 5D, 08, 83, FB, E0, 77, 6F, 56, 57, 83, 3D, 9C, 5E, 3C, 00, 00, 75, 18, E8, 7D, 5E, 00, 00, 6A, 1E, E8, C7, 5C, 00, 00, 68, FF, 00, 00, 00, E8, 32, F3, FF, FF, 59, 59, 85, DB, 74, 04, 8B, C3... 
[+]

Code size:

163.5 KB (167,424 bytes)

The file htc unlock codes calculator__3515_i1371393195_il390615.exe has been seen being distributed by the following 5 URLs.

http://www-squid.cluster12.fb-hosting-apps.com/download.php?version=1.1.8.22&campid=3039&instid[appname]=give peace a chance_Downloader&instid[appsetupurl]=http://go.edgydownload.com/getfast/download.cgi?9&ti1=1460000&ti2=0&ti3=DD1_2014-10-13T17:42:45.833409 00:00&instid[cmdline]=/S /PERFORMINSTALL /NORUN&instid[appimageurl]=http://download.edgydownload.com/d1/logo150x150.png&prefix=give peace a chance&instid[thankyoupage]=http://download.edgydownload.com/.../thank_you.php?ti1=1460000&ti2=0&ti3=DD1_2014-10-13T17:42:45.833409 00:00&parameter=give peace a chance&instid[interrupted]=http://download.edgydownload.com/.../interrupted.php?ti1=1460000&ti2=0&ti3=DD1_2014-10-13T17:42:45.833409 00:00&parameter=give peace a chance&ti1=1460000&ti2=0&ti3=DD1_2014-10-13T17:42:45.833409 00:00

http://www-squid.cluster12.fb-hosting-apps.com/download.php?version=1.1.8.22&campid=3038&instid[appname]=hdtv calibration wizard_Downloader&instid[appsetupurl]=http://go.edgydownload.com/getfast/download.cgi?9&ti1=1405000&ti2=0&ti3=DD1_2014-10-13T18:43:35.299936 00:00&instid[cmdline]=/S /PERFORMINSTALL /NORUN&instid[appimageurl]=http://download.edgydownload.com/d1/logo150x150.png&prefix=hdtv calibration wizard&instid[thankyoupage]=http://download.edgydownload.com/.../thank_you.php?ti1=1405000&ti2=0&ti3=DD1_2014-10-13T18:43:35.299936 00:00&parameter=hdtv calibration wizard&instid[interrupted]=http://download.edgydownload.com/.../interrupted.php?ti1=1405000&ti2=0&ti3=DD1_2014-10-13T18:43:35.299936 00:00&parameter=hdtv calibration wizard&ti1=1405000&ti2=0&ti3=DD1_2014-10-13T18:43:35.299936 00:00

http://www-squid.cluster12.fb-hosting-apps.com/download.php?version=1.1.8.22&campid=3039&instid[appname]=sony ericsson simlock calculator v1.0.1.exe_Downloader&instid[appsetupurl]=http://go.edgydownload.com/getfast/download.cgi?9&ti1=1405000&ti2=2&ti3=DD1_2014-10-13T20:18:35.403183 00:00&instid[cmdline]=/S /PERFORMINSTALL /NORUN&instid[appimageurl]=http://download.edgydownload.com/d1/logo150x150.png&prefix=sony ericsson simlock calculator v1.0.1.exe&instid[thankyoupage]=http://download.edgydownload.com/.../thank_you.php?ti1=1405000&ti2=2&ti3=DD1_2014-10-13T20:18:35.403183 00:00&parameter=sony ericsson simlock calculator v1.0.1.exe&instid[interrupted]=http://download.edgydownload.com/.../interrupted.php?ti1=1405000&ti2=2&ti3=DD1_2014-10-13T20:18:35.403183 00:00&parameter=sony ericsson simlock calculator v1.0.1.exe&ti1=1405000&ti2=2&ti3=DD1_2014-10-13T20:18:35.403183 00:00

http://www-squid.cluster12.fb-hosting-apps.com/download.php?version=1.1.8.22&campid=3515&instid[appname]=htc unlock codes calculator_Downloader&instid[appsetupurl]=http://go.edgydownload.com/getfast/download.cgi?9&ti1=1405000&ti2=2&ti3=DD1_2014-10-13T19:59:15.298144 00:00&instid[cmdline]=/S /PERFORMINSTALL /NORUN&instid[appimageurl]=http://download.edgydownload.com/d1/logo150x150.png&prefix=htc unlock codes calculator&instid[thankyoupage]=http://download.edgydownload.com/.../thank_you.php?ti1=1405000&ti2=2&ti3=DD1_2014-10-13T19:59:15.298144 00:00&parameter=htc unlock codes calculator&instid[interrupted]=http://download.edgydownload.com/.../interrupted.php?ti1=1405000&ti2=2&ti3=DD1_2014-10-13T19:59:15.298144 00:00&parameter=htc unlock codes calculator&ti1=1405000&ti2=2&ti3=DD1_2014-10-13T19:59:15.298144 00:00

Remove htc unlock codes calculator__3515_i1371393195_il390615.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.