home

idiocracy__4000_i377978578_il2339921.exe

Installer

Amonetize ltd.

This is the Amonetize download manager which bundles applications with offers for additional 3rd party software, mostly unwanted adware, and may be installed with minimal consent. The application idiocracy__4000_i377978578_il2339921.exe by Amonetize ltd has been detected as adware by 19 anti-malware scanners. The program is a setup application that uses the Amonetize Downloader installer. The setup program bundles adware offers using the Amonetize, a Pay-Per-Install (PPI) monetization and distribution download manager. The software offerings provided are based on the PC's geo-location at the time of install.
Publisher:
Amonetize ltd.  (signed and verified)

Product:
Installer

Version:
1.1.1.20

MD5:
75b5f2e2a99a2517e25853f57d0a9e41

SHA-1:
91a76604b2f44c54854f4aaabbe16e2fa32df8fc

SHA-256:
58dbc5122935727fba5cc835b568d93c0bc9e74523b2bb2434cd49ebacfbdbf8

Scanner detections:
19 / 68

Status:
Adware

Explanation:
This setup file is a re-distribution of the original program that bundles various adware offers during installation including toolbars and browser search extensions.

Description:
This is also known as bundleware, or downloadware, which is an downloader designed to simply deliver ad-supported offers in the setup routine of an otherwise legitimate software.

Analysis date:
12/24/2024 11:50:14 AM UTC  (today)

Scan engine
Detection
Engine version

Agnitum Outpost
PUA.Amonetize
7.1.1

AhnLab V3 Security
PUP/Win32.Amonetiz
2014.03.06

Avira AntiVirus
ADWARE/Adware.Gen2
7.11.135.30

avast!
Win32:Adware-BJY [PUP]
2014.9-140407

AVG
MalSign.Generic
2015.0.3511

Comodo Security
ApplicUnwnt
17892

Dr.Web
Adware.Downware.1655
9.0.1.097

ESET NOD32
Win32/Amonetize.AG (variant)
8.9506

Fortinet FortiGate
Riskware/Amonetize
4/7/2014

G Data
Win32.Application.Amonetize
14.4.24

K7 AntiVirus
Unwanted-Program
13.176.11351

Kaspersky
not-a-virus:HEUR:Adware.Win32.Amonetize
14.0.0.4052

Malwarebytes
PUP.Optional.Amonetize
v2014.04.07.03

McAfee
Adware-Amonetize!75B5F2E2A99A
5600.7167

NANO AntiVirus
Trojan.Win32.Downware.ctxdan
0.28.0.58101

Reason Heuristics
PUP.Installer.Amonetizeltd.e
14.8.7.20

Sophos
Amonetize
4.98

Trend Micro House Call
TROJ_GEN.F47V0220
7.2.97

VIPRE Antivirus
Amonetize
27128

File size:
329 KB (336,936 bytes)

Product version:
2.1.12

Copyright:
Copyright(c), All Rights Reserved.

Original file name:
Installer.exe

File type:
Executable application (Win32 EXE)

Bundler/Installer:
Amonetize Downloader

Language:
English (United States)

Common path:
C:\users\{user}\downloads\idiocracy__4000_i377978578_il2339921.exe

Digital Signature
Signed by:
Amonetize ltd.

Authority:
Thawte, Inc.

Valid from:
3/18/2013 6:00:00 PM

Valid to:
6/18/2015 5:59:59 PM

Subject:
CN=Amonetize ltd., O=Amonetize ltd., L=Raanana, S=Alberta, C=IL

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
235E7B2F1D4E0152189F6381E2BA8C97

File PE Metadata
Compilation timestamp:
2/19/2014 11:28:47 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
6144:Snz86bZ+fKKy9uqlj8x0KBOBLtmTB0eeOWV5nRIP3UZTbPTUxIKIfkLPnXRVpSW:Snw6bZ+CKy9Hlj8x0KBuLtCeyPeTbTUJ

Entry address:
0x27244

Entry point:
E8, BC, 95, 00, 00, E9, 89, FE, FF, FF, 57, 8B, C6, 83, E0, 0F, 85, C0, 0F, 85, C1, 00, 00, 00, 8B, D1, 83, E1, 7F, C1, EA, 07, 74, 65, EB, 06, 8D, 9B, 00, 00, 00, 00, 66, 0F, 6F, 06, 66, 0F, 6F, 4E, 10, 66, 0F, 6F, 56, 20, 66, 0F, 6F, 5E, 30, 66, 0F, 7F, 07, 66, 0F, 7F, 4F, 10, 66, 0F, 7F, 57, 20, 66, 0F, 7F, 5F, 30, 66, 0F, 6F, 66, 40, 66, 0F, 6F, 6E, 50, 66, 0F, 6F, 76, 60, 66, 0F, 6F, 7E, 70, 66, 0F, 7F, 67, 40, 66, 0F, 7F, 6F, 50, 66, 0F, 7F, 77, 60, 66, 0F, 7F, 7F, 70, 8D, B6, 80, 00, 00, 00, 8D, BF...
 
[+]

Entropy:
6.4540

Code size:
229.5 KB (235,008 bytes)

The file idiocracy__4000_i377978578_il2339921.exe has been seen being distributed by the following 40 URLs.

http://www.singulardownload.com/download.php?version=1.1.1.20&campid=4000&instid[appname]=Camp.Takota.Movie&instid[appsetupurl]=http://19.get.getmdownloader.com/files/MD_setup_1.0.16.exe&instid[cmdline]=/verysilent&instid[appimageurl]=http://.../static/md/images/logo_150.png&prefix=Camp.Takota.Movie&instid[thankyoupage]=http://.../upgrade&ti1=w10042s0i923p15e9c0&ti2=IbSpsrfmpNqZUucuB8CEf0ONZ6HFA09c8xYec0TZgDGUK26AOsQ5Gvyi1tGuCtUYpAy3vmn48vF-hNYULl6pZQE

http://getmdownloader.com/download/Camp.Takota.Movie.html?id=&na=IS8tu E/.../HCR6V24AXB&k=IQfanAB-qRvqsIusK1JwGl9DsQix1rcg8G1A4XV27VWsmMruST8e0T_XpAR8NIxeVlkPpJVp5qWtu8cPLWXJRpU

http://www.singulardownload.com/download.php?version=1.1.1.20&campid=4000&instid[appname]=Camp.Takota.Movie&instid[appsetupurl]=http://16.get.getmdownloader.com/files/MD_setup_1.0.16.exe&instid[cmdline]=/verysilent&instid[appimageurl]=http://.../static/md/images/logo_150.png&prefix=Camp.Takota.Movie&instid[thankyoupage]=http://.../upgrade&ti1=w10042s0i923p15e9c0&ti2=IS-lWDYLdoDtl5d4BtskqCNRDE6o0H9TL02meBuNnGY82BuPc05_ZF0rRoge2MJt5asUC2hSaManpXehzK-zTmw

http://getmdownloader.com/download/Camp.Takota.Movie.html?id=&na=IS8tu E/.../HCR6V24AXB&k=IcODbsyF0DTc6ukzR8GKR9tpihzIBfgsKoxHSZnSFM4xeKyonSA7L41P_nMUnfwKE3h1oF7SwimmPhWJwsIBEsY

http://www.singulardownload.com/download.php?version=1.1.1.20&campid=4000&instid[appname]=VA.Ministry.Of.Sound.Running.Trax.40201441&instid[appsetupurl]=http://17.get.getmdownloader.com/files/MD_setup_1.0.16.exe&instid[cmdline]=/verysilent&instid[appimageurl]=http://.../static/md/images/logo_150.png&prefix=VA.Ministry.Of.Sound.Running.Trax.40201441&instid[thankyoupage]=http://.../upgrade&ti1=w197s0i923p15e9c0&ti2=IRAufHJpEWgX8W3it_E_9QOZEXxEz746aLtXdJjfD1B2unO3IzmVm_UVXrog4ZYOLpLRPkmtwT62AP1Lsu0xs3o

http://getmdownloader.com/download/.../EJEuPQm71A2QbGa8jTZw2dZGo91hRk=&k=IQqkh-V-wvA1z6OjvnzkAU8gg8WEiYuKO4U_Ji7-gt3ZfAzVBuPD1DHGaxMvvwca79Nngk2o6Ysl3pZlFe52bY4

http://www.singulardownload.com/download.php?version=1.1.1.20&campid=5547&instid[appname]=VA.Ministry.Of.Sound.Presents.Running.Trax.2014.3CD.40201441.wAx&instid[appsetupurl]=http://19.get.getmdownloader.com/files/MD_setup_1.0.16.exe&instid[cmdline]=/verysilent&instid[appimageurl]=http://.../static/md/images/logo_150.png&prefix=VA.Ministry.Of.Sound.Presents.Running.Trax.2014.3CD.40201441.wAx&instid[thankyoupage]=http://.../upgrade&ti1=w197s0i923p16e9c0&ti2=Id3WIwvfFrUbk9VluEXKxFP-k_eFLCcT7ZcF3Q1peGAj-E-G_WoPc85V2B12Xg36_4DK4_SE0lS3af2W4eSuXTI

http://getmdownloader.com/.../VA.Ministry.Of.Sound.Presents.Running.Trax.2014.3CD.(2014).wAx.html?id=&na=IUKboIejSAXQS2Bzi4efqDD2EHvVuvnqFUhFX DZBAEOICrynHIBoVZHfglwpefWM2QrrLtTSejpR7xdbo8MNGTMCtemZ9OVdHAco6OxhpUCp3aBnGpa02HFuQHvKY0E0w==&k=IYw-hZBZu02gLA29hxy3wU1bQKVt0N1u6UkxUHogN9eBbUd-Zlg06FI4tMqtQEbEoULT9vL0fPSVNmGD2aebIs0

http://www.singulardownload.com/download.php?version=1.1.1.20&campid=5547&instid[appname]=Download.40201341.Rudimental...Home.5BFLAC5D.7B100.XY7D.Torrent...KickassTorrents&instid[appsetupurl]=http://19.get.getmdownloader.com/files/MD_setup_1.0.16.exe&instid[cmdline]=/verysilent&instid[appimageurl]=http://.../static/md/images/logo_150.png&prefix=Download.40201341.Rudimental...Home.5BFLAC5D.7B100.XY7D.Torrent...KickassTorrents&instid[thankyoupage]=http://.../upgrade&ti1=w200s306i923p16e9c0&ti2=IcTudIU46N7HRfvmYQX5M2oIkG1oPR9xoqyA_PLM-rpgszbXQYIfIIsdfWN7Mtb_pRuJPnfMrR-pIY1CccSu1KY

http://getmdownloader.com/download/Download.(2013).Rudimental.-.Home.[FLAC].{100.XY}.Torrent.-.KickassTorrents.html?id=&na=IaN37eGPHqO/T0O88TRFpUGNo2PIVGZGbLbnfuPGUMg1mdhmTnRnj/.../OcyU4nEiJatqh2qlno2AoaOrSaeiTNSyGiVg==&k=IYKe4MgKrVPoiKlXG0h3bpYkL2FBCaxGnLZgELtzmRMr53B54FOtrzsN9tzhgixXrBcu-vQbc5jVPGZUm7Re-fU

http://www.singulardownload.com/download.php?version=1.1.1.20&campid=4000&instid[appname]=Skye.Evans.MyFreeCams.MFC.Boy.Girl.Sex.Video.2.mp4&instid[appsetupurl]=http://19.get.getmdownloader.com/files/MD_setup_1.0.16.exe&instid[cmdline]=/verysilent&instid[appimageurl]=http://.../static/md/images/logo_150.png&prefix=Skye.Evans.MyFreeCams.MFC.Boy.Girl.Sex.Video.2.mp4&instid[thankyoupage]=http://.../upgrade&ti1=w165s1i923p15e9c0&ti2=Ic1qxA-jAw9fW7tsFWSfR8DRnFgOEG_R18cnIBSQPgvmWkzhMlovC9vhb9v09JomGlZF6BINbsUlIcwCjL_e8Zw

http://www.singulardownload.com/download.php?version=1.1.1.20&campid=3865&instid[appname]=Download.Dexter.S01E04.Let27s.Give.the.Boy.a.Hand.720.BRrip.H264.AAC.ITS.Torrent...KickassTorrents&instid[appsetupurl]=http://16.get.getmdownloader.com/files/MD_setup_1.0.16.exe&instid[cmdline]=/verysilent&instid[appimageurl]=http://.../static/md/images/logo_150.png&prefix=Download.Dexter.S01E04.Let27s.Give.the.Boy.a.Hand.720.BRrip.H264.AAC.ITS.Torrent...KickassTorrents&instid[thankyoupage]=http://.../upgrade&ti1=w200s306i923p17e9c0&ti2=IXx1T_JqRdklM52bbDkhhMxFOqNCID3hQtrpXpiG1xZGoNwX7zSR4dLRtenf_zog4Ntkn1sCxORbXi5-mOHG_kA

http://getmdownloader.com/download/Download.Dexter.S01E04.Let's.Give.the.Boy.a.Hand.720.BRrip.H264.AAC.ITS.Torrent.-.KickassTorrents.html?id=&na=Ib26jhmfB6z73n9DV1XFEk75LdRl VYF5rkvir6jhWX8hG 1MQfAeSt5E2FIeu9NQJx3XV0j6OG3hadhC7SAfTfG6OAXGbzQBmhLnCnTTI2ikwxDotjF3ad7QWq5p4NnL Wj/fS97 jt2/.../SlSK2K6ggCRafplF0t4fPUV&k=IZoLktir3R0XY-qSjty24CJxFCL6M6a-dOjnBAi7wIF6BVUCC620HdhNxD_XwITc96Sko2cmeWvtwESN5V4hrOs

http://www.singulardownload.com/download.php?version=1.1.1.20&campid=4000&instid[appname]=eminem.the.marshall.mathers.lp2.deluxe.2013.album&instid[appsetupurl]=http://17.get.getmdownloader.com/files/MD_setup_1.0.16.exe&instid[cmdline]=/verysilent&instid[appimageurl]=http://.../static/md/images/logo_150.png&prefix=eminem.the.marshall.mathers.lp2.deluxe.2013.album&instid[thankyoupage]=http://.../upgrade&ti1=w200s304i923p15e9c0&ti2=IVgakzy52PAv6jhWDzqygNH46o5QL6NkvazaO5-V_nZVlWAyPBVSL_u7PNRgATmFwV1w2O143OGZul-MNKSsM7E

http://getmdownloader.com/.../eminem-the-marshall-mathers-lp2-deluxe-2013-album.html?id=&na=ISn2WBRcKi2ylnE9iDiwHjHXA1f0eRjxTOaPF38KovvWgg5rlObIyEYo6bHvUAsUkxdekZvdDbeNr03VfRp8Mgw=&k=IRfWyudKE8PoCW-xFH1Hv1QGoEWEVvtdaXAdrF8Bt4IVi2GZhGSqprSzBKGc8elE2-_-gxHUA7_BU2sgA5sjO6k

http://www.singulardownload.com/download.php?version=1.1.1.20&campid=3865&instid[appname]=The.Other.Boleyn.Girl.40200341.DVDRip.XviD.SPRiNTER&instid[appsetupurl]=http://19.get.getmdownloader.com/files/MD_setup_1.0.16.exe&instid[cmdline]=/verysilent&instid[appimageurl]=http://.../static/md/images/logo_150.png&prefix=The.Other.Boleyn.Girl.40200341.DVDRip.XviD.SPRiNTER&instid[thankyoupage]=http://.../upgrade&ti1=w197s0i923p17e9c0&ti2=IdD48_WqMCrYnIiCQ30GOeaCfNooN3oEhoVsDBdRm5SMn8DWkPvsIFzmX1IDbV2tVaiFaTCYkAVASgEw6QM61IE

http://getmdownloader.com/download/.../QJOPyTahBvW2kRxS7VoxumEZ9OKeXaeLChBM8DCE7sXl rNmaxCg=&k=IVu-LeuxWIkg9DcAC1S__gJeO79sFO8j1Cw_3ThSFCyh_MmLJbtCextX4J9XfYWqtAbjMf-jMFZqZ-k_OdZ1Tjc

http://www.singulardownload.com/download.php?version=1.1.1.20&campid=3865&instid[appname]=Download.Space.Jamp.40199641.720p.HDDVD.x264.500MB.YIFY.Torrent...KickassTorrents&instid[appsetupurl]=http://16.get.getmdownloader.com/files/MD_setup_1.0.16.exe&instid[cmdline]=/verysilent&instid[appimageurl]=http://.../static/md/images/logo_150.png&prefix=Download.Space.Jamp.40199641.720p.HDDVD.x264.500MB.YIFY.Torrent...KickassTorrents&instid[thankyoupage]=http://.../upgrade&ti1=w200s306i923p17e9c0&ti2=Ifuf58MlRKsYl_WZJEUdD6a45OaFYTcNG63euoUsefncObJP7haMeKUsavek5VWsS1k3cO35tGp7u3PMlIf8Eks

http://getmdownloader.com/.../Download.Space-Jamp-(1996)-720p-HDDVD-x264--500MB--YIFY.Torrent.-.KickassTorrents.html?id=&na=ITH3rv0kJ3TuLqNQH9F0XLIc8vAhsRk1Ium4z9sf6pC1bxwZHVgj7seu757OynDbduaMD6SCq8XUciEteKR0EU1imOKVHJDlhpZpR BWAksVsO1H6xlaUh0JAiBTb8oKEA==&k=IdTNIKdFQs5H3L05dw6sRl3BwuMLLLVKf3Mnv5Zkl0VVyJ_SgUsxZ_LmUPXd76EfaCq-gnBa79joZst6m6gQ6k4

http://getmdownloader.com/.../Skye-Evans.MyFreeCams.MFC.Boy.Girl.Sex.Video.2.mp4.html?id=&na=Iefz78blv57REBgujPaiNk9Qr6joB2EjvMDO4WQJGOTeGcSSWIguCaV6ip5rZUmXvkfZj5iS9rSMPfWfuxBMuJU=&k=IQfoivTNJc7h-mTh_tu7jIVA9bfEZy7Hvo5K_2xGrxwvGDjHyh4NzCjsT6LolF8xvDMeYeo4yUZyz4Y7X_6NRws

http://www.singulardownload.com/download.php?version=1.1.1.20&campid=3865&instid[appname]=OneRepublic.Native.Deluxe.Edition.40201341.WwW.ZoNaToRReNT.CoM&instid[appsetupurl]=http://17.get.getmdownloader.com/files/MD_setup_1.0.16.exe&instid[cmdline]=/verysilent&instid[appimageurl]=http://.../static/md/images/logo_150.png&prefix=OneRepublic.Native.Deluxe.Edition.40201341.WwW.ZoNaToRReNT.CoM&instid[thankyoupage]=http://.../upgrade&ti1=w197s0i923p17e9c0&ti2=IbKU5E3H2_TbVzmU_hyo4w8w-_z9j6fqtkFc5k91VklGrU0br_R7gbkxDYKsB3d7emYkqV_9IYaumVktcjDZp7o

http://www.singulardownload.com/download.php?version=1.1.1.20&campid=3865&instid[appname]=OneRepublic.Native.Deluxe.Edition.40201341.WwW.ZoNaToRReNT.CoM&instid[appsetupurl]=http://19.get.getmdownloader.com/files/MD_setup_1.0.16.exe&instid[cmdline]=/verysilent&instid[appimageurl]=http://.../static/md/images/logo_150.png&prefix=OneRepublic.Native.Deluxe.Edition.40201341.WwW.ZoNaToRReNT.CoM&instid[thankyoupage]=http://.../upgrade&ti1=w197s0i923p17e9c0&ti2=IbKU5E3H2_TbVzmU_hyo4w8w-_z9j6fqtkFc5k91VklGrU0br_R7gbkxDYKsB3d7emYkqV_9IYaumVktcjDZp7o

http://www.singulardownload.com/download.php?version=1.1.1.20&campid=5547&instid[appname]=OneRepublic.Native.Deluxe.Edition.40201341.WwW.ZoNaToRReNT.CoM&instid[appsetupurl]=http://19.get.getmdownloader.com/files/MD_setup_1.0.16.exe&instid[cmdline]=/verysilent&instid[appimageurl]=http://.../static/md/images/logo_150.png&prefix=OneRepublic.Native.Deluxe.Edition.40201341.WwW.ZoNaToRReNT.CoM&instid[thankyoupage]=http://.../upgrade&ti1=w197s0i923p16e9c0&ti2=IbKU5E3H2_TbVzmU_hyo4w8w-_z9j6fqtkFc5k91VklGrU0br_R7gbkxDYKsB3d7emYkqV_9IYaumVktcjDZp7o

http://getmdownloader.com/download/OneRepublic.Native.Deluxe.Edition.(2013).WwW.ZoNaToRReNT.CoM.html?id=&na=Ib47u6FT9IO2 sOh6r0qx9OR0jGv904AZym/LcGUBIQNLm9RCbFQEduFKLKEtO shvF38u/0IU/.../E0fV7He6VjmzfmJVe2iV3xkho5BA==&k=Ie-y_b5HGsv_MSIUboAwE8Mxgx98Z2GcqygiVmDIrnXeziF2Ha5PrIq3X9A4iYdMnWTETDKxbBIYjsEXObZXxAE

http://www.singulardownload.com/download.php?version=1.1.1.20&campid=3865&instid[appname]=OneRepublic.Native.Deluxe.Version&instid[appsetupurl]=http://16.get.getmdownloader.com/files/MD_setup_1.0.16.exe&instid[cmdline]=/verysilent&instid[appimageurl]=http://.../static/md/images/logo_150.png&prefix=OneRepublic.Native.Deluxe.Version&instid[thankyoupage]=http://.../upgrade&ti1=w197s0i923p17e9c0&ti2=ISb1EJvxy9OGpqK6EXXn5BsSGKw35c2jgJ1eECgenQYd8hmpu6P6Mt8jfSM53gkU4SVgV5kbUH8UkGdmWgKNkMA

http://www.singulardownload.com/download.php?version=1.1.1.20&campid=5547&instid[appname]=OneRepublic.Native.Deluxe.Version&instid[appsetupurl]=http://19.get.getmdownloader.com/files/MD_setup_1.0.16.exe&instid[cmdline]=/verysilent&instid[appimageurl]=http://.../static/md/images/logo_150.png&prefix=OneRepublic.Native.Deluxe.Version&instid[thankyoupage]=http://.../upgrade&ti1=w197s0i923p16e9c0&ti2=ISb1EJvxy9OGpqK6EXXn5BsSGKw35c2jgJ1eECgenQYd8hmpu6P6Mt8jfSM53gkU4SVgV5kbUH8UkGdmWgKNkMA

http://getmdownloader.com/download/OneRepublic.Native.Deluxe.Version.html?id=&na=Icbf4XiDoNHUwk K8dkQ6hJwX4bRGZ/.../UCF2JBPRFJbyY=&k=ITYdJHBahrAwxLZnthqUCnZG6VOh-Uzzx4fs1g3wKy-bU-XNxi46zRR7tep1kH0wCxbW4KVYMXnaRX7WIlaHQ-I

http://www.singulardownload.com/download.php?version=1.1.1.20&campid=4000&instid[appname]=One.Republic.Can.t.Stop.mp3&instid[appsetupurl]=http://16.get.getmdownloader.com/files/MD_setup_1.0.16.exe&instid[cmdline]=/verysilent&instid[appimageurl]=http://.../static/md/images/logo_150.png&prefix=One.Republic.Can.t.Stop.mp3&instid[thankyoupage]=http://.../upgrade&ti1=w197s0i923p15e9c0&ti2=IQ5We-R2awCbCJoXKbUsjjSpqPfPSaF9pjOT6LEkqG812BFy0_XvQOCJ5RUWzV6MwqNN8dKrMPcjK8CJEX99s1c

http://getmdownloader.com/download/One.Republic.Can.t.Stop.mp3.html?id=&na=IcsZkUpSlnVTPtmSeINcmD3/.../DjIWVaNuKF6u&k=IWzhwOUgh4jLvw3mEU6XkwmlGKRcju0f4VwiTQno49Cas04aEsEVvpaYukEjjEeSyBSUvQqYMYVvL7YqZDWd4tE

http://www.singulardownload.com/download.php?version=1.1.1.20&campid=4000&instid[appname]=Peter.Collier...A.Most.Incomprehensible.Thing.Notes.Towards.a.Very.Gentle.Introduction.to.the.Mathematics.of.Relativity&instid[appsetupurl]=http://16.get.getmdownloader.com/files/MD_setup_1.0.16.exe&instid[cmdline]=/verysilent&instid[appimageurl]=http://.../static/md/images/logo_150.png&prefix=Peter.Collier...A.Most.Incomprehensible.Thing.Notes.Towards.a.Very.Gentle.Introduction.to.the.Mathematics.of.Relativity&instid[thankyoupage]=http://.../upgrade&ti1=w137s1247i923p15e9c0&ti2=IbBtnN6W1RWG0uK88pLvjPsmqMsxS4SaRvizVPbKIm3kP-kWvTrM38Jq5fYxcyCVqhIc5Egq7sxHZop_v8PUKNE

Latest 30 of 40 download URLs

The executing file has been seen to make the following network communications in live environments.

TCP (HTTP):
Connects to www.soledownload.com  (54.225.181.84:80)

TCP (HTTP):
Connects to www.activemonetizer.com  (23.23.96.46:80)

 
http://www.activemonetizer.com/index.php?Net2=v2.0.50727&Net4=&OSversion=NT5.1SP3&Slv=&Sysid=B23927863&Sysid1=B23927863&X64=N&admin=Y&browser=IEXPLORE.EXE&chver=&exe=ikjut__3711752&offver=&lang_DfltUser=04

Remove idiocracy__4000_i377978578_il2339921.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.