internetturbosetup__1814_i1675065_il1537.exe
Installer
Amonetize ltd.
This is the Amonetize download manager which bundles applications with offers for additional 3rd party software, mostly unwanted adware, and may be installed with minimal consent. The application internetturbosetup__1814_i1675065_il1537.exe by Amonetize ltd has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the Amonetize Downloader installer. The setup program bundles adware offers using the Amonetize, a Pay-Per-Install (PPI) monetization and distribution download manager. The software offerings provided are based on the PC's geo-location at the time of install.
File name:
internetturbosetup__1814_i1675065_il1537.exe
Publisher:
Amonetize (signed by Amonetize ltd.)
MD5:
27e8399a59bdb0a7ff500460c46cd209
SHA-1:
8716792a3e435efceb58ea537cfebf3a5a62fa03
SHA-256:
0d0906c101371659089e26435e2cc98bb07770ebcdaeb7d2e2c6a421523083e5
Scanner detections:
1 / 68
Explanation:
This setup file is a re-distribution of the original program that bundles various adware offers during installation including toolbars and browser search extensions.
Description:
This is also known as bundleware, or downloadware, which is an downloader designed to simply deliver ad-supported offers in the setup routine of an otherwise legitimate software.
Analysis date:
11/23/2024 5:11:31 AM UTC (today)
Scan engine
Detection
Engine version
Reason Heuristics
PUP.Amonetize (M)
16.9.12.16
File size:
149 KB (152,608 bytes)
Copyright:
(c) Amonetize ltd., 2012,2013. All rights reserved.
Original file name:
Launcher.exe
File type:
Executable application (Win32 EXE)
Bundler/Installer:
Amonetize Downloader
Common path:
C:\users\{user}\downloads\internetturbo-bittorrent-a\internetturbosetup__1814_i1675065_il1537.exe
Valid from:
5/15/2012 9:00:00 AM
Valid to:
5/16/2013 8:59:59 AM
Subject:
CN=Amonetize ltd., O=Amonetize ltd., L=Raanana, S=Israel, C=IL
Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US
Serial number:
47256A10E8986C45AD869252DE4204AC
Compilation timestamp:
2/7/2013 2:28:28 PM
CTPH (ssdeep):
1536:8Z6bJDqRNJO4Xkl2XBk7/4UZgzg7yHJSE8bgJ/py6S9Rvhjh:8obJDqBO4pXBUQUMRibABzS9thV
Code size:
128 KB (131,072 bytes)
The executing file has been seen to make the following network communications in live environments.
http://www.activemonetizer.com/index.php?Net2=v2.0.50727&Net4=&OSversion=NT5.1SP3&Slv=&Sysid=B2368010625&Sysid1=B2368010625&X64=N&admin=Y&browser=IEXPLORE.EXE&chver=&exe=ikjut__367794514&offver=&lang_DfltUser=04