home

setup.exe

Amonetize ltd.

This is the Amonetize download manager which bundles applications with offers for additional 3rd party software, mostly unwanted adware, and may be installed with minimal consent. The application setup.exe by Amonetize ltd has been detected as adware by 12 anti-malware scanners. The program is a setup application that uses the Amonetize Downloader installer. The setup program bundles adware offers using the Amonetize, a Pay-Per-Install (PPI) monetization and distribution download manager. The software offerings provided are based on the PC's geo-location at the time of install.
Publisher:
Amonetize ltd.  (signed and verified)

Version:
1.1.5.26

MD5:
988a9b6fdbd6c645835bb591997e7ce6

SHA-1:
da1006dc433e5c545c5a98418abf5acba120fbd1

SHA-256:
e7a9984ab88a82838624ba433bc6cd26a67df0ff636ad71896502d028cf4b1b3

Scanner detections:
12 / 68

Status:
Adware

Explanation:
This setup file is a re-distribution of the original program that bundles various adware offers during installation including toolbars and browser search extensions.

Description:
This is also known as bundleware, or downloadware, which is an downloader designed to simply deliver ad-supported offers in the setup routine of an otherwise legitimate software.

Analysis date:
11/23/2024 7:54:32 AM UTC  (today)

Scan engine
Detection
Engine version

Avira AntiVirus
ADWARE/Adware.Gen2
7.11.142.70

avast!
Win32:Amonetize-AM [PUP]
2014.9-140409

Dr.Web
Adware.Downware.2467
9.0.1.099

ESET NOD32
Win32/Amonetize.AJ (variant)
8.9657

Kaspersky
not-a-virus:HEUR:AdWare.Win32.Amonetize
14.0.0.4041

Malwarebytes
PUP.Optional.Amonetize.A
v2014.04.09.07

NANO AntiVirus
Riskware.Win32.Amonetize.cwccgl
0.28.0.59048

Qihoo 360 Security
Win32/Trojan.Adware.37e
1.0.0.1015

Reason Heuristics
PUP.Installer.Amonetizeltd.F
14.8.7.20

Sophos
Amonetize
4.98

Trend Micro House Call
TROJ_GEN.F47V0409
7.2.99

VIPRE Antivirus
Amonetize
28174

File size:
349.9 KB (358,248 bytes)

Product version:
1.1.5.26

Original file name:
setup.exe

File type:
Executable application (Win32 EXE)

Bundler/Installer:
Amonetize Downloader

Language:
English (United States)

Common path:
C:\users\{user}\downloads\setup.exe

Digital Signature
Signed by:
Amonetize ltd.

Authority:
VeriSign, Inc.

Valid from:
10/28/2013 8:00:00 PM

Valid to:
10/29/2014 7:59:59 PM

Subject:
CN=Amonetize ltd., OU=Amonetize ltd., OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Amonetize ltd., L=Raanana, S=Israel, C=IL

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
72A9E57303DC103CAE5E2F5A83513E22

File PE Metadata
Compilation timestamp:
4/9/2014 11:26:51 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
6144:3Jqd8aimjlDhFmNvxvnJsBTcwZApdeVCCY56hfhgbEJJel9oKMCuLUABZ3:3Jqd8aiilDh6vxvnJETchB69hgbiLB9

Entry address:
0x29C81

Entry point:
E8, C6, 97, 00, 00, E9, 89, FE, FF, FF, CC, CC, CC, CC, CC, 53, 56, 8B, 44, 24, 18, 0B, C0, 75, 18, 8B, 4C, 24, 14, 8B, 44, 24, 10, 33, D2, F7, F1, 8B, D8, 8B, 44, 24, 0C, F7, F1, 8B, D3, EB, 41, 8B, C8, 8B, 5C, 24, 14, 8B, 54, 24, 10, 8B, 44, 24, 0C, D1, E9, D1, DB, D1, EA, D1, D8, 0B, C9, 75, F4, F7, F3, 8B, F0, F7, 64, 24, 18, 8B, C8, 8B, 44, 24, 14, F7, E6, 03, D1, 72, 0E, 3B, 54, 24, 10, 77, 08, 72, 07, 3B, 44, 24, 0C, 76, 01, 4E, 33, D2, 8B, C6, 5E, 5B, C2, 10, 00, 57, 8B, C6, 83, E0, 0F, 85, C0, 0F...
 
[+]

Entropy:
6.4783

Code size:
245 KB (250,880 bytes)

The file setup.exe has been seen being distributed by the following 50 URLs.

http://www.specificdownload.com/download.php?version=1.1.5.26&campid=2299&instid[appsetupurl]=&instid[appname]=DownloadSetup&instid[appimageurl]=http://.../dl.png&prefix=DownloadSetup&ti1=p191.res.0.result.4924677b22&ti2=5381517751

http://www.generallydownload.com/download.php?version=1.1.5.26&campid=3687&instid[appname]=Lenovo Motion Control Downloader&instid[appsetupurl]=http://fastmediadownloads.com/download/Prompt-Downloader-1174838014.exe&instid[cmdline]=&instid[appimageurl]=http://.../logo.png&prefix=Lenovo Motion Control Downloader&instid[thankyoupage]=http://.../?success&instid[interrupted]=http://.../?cancel&ti1=1174838014

http://www.generallydownload.com/download.php?campid=6666&version=1.1.5.26&instid[appname]=$$CUSTOM_PARAM(pt)$$&instid[appsetupurl]=http://www.myutility.com/setup.exe&instid[cmdline]=/S&instid[appimageurl]=http://downloadforall.net/.../downloadall.png&prefix=$$CUSTOM_PARAM(pt)$$&instid[thankyoupage]=http://www.downloadforall.net/.../thankyou.php&ti1=MTE3N3wzNzA2fFRSfDN8MXx8|6cb23ca7a52948f5ea92efd9176a5bd7

http://www.rulerdownload.com/download.php?version=1.1.5.26&campid=3687&instid[appname]=German Made Simple Learn To Speak And Understand Downloader&instid[appsetupurl]=http://fastmediadownloads.com/download/Prompt-Downloader-1175743561.exe&instid[cmdline]=&instid[appimageurl]=http://.../logo.png&prefix=German Made Simple Learn To S Downloader&instid[thankyoupage]=http://.../?success&instid[interrupted]=http://.../?cancel&ti1=1175743561

http://www.rulerdownload.com/download.php?version=1.1.5.26&campid=3687&instid[appname]=Chemistry Raymond Chang 11th Edition Pdf Downloader&instid[appsetupurl]=http://fastmediadownloads.com/download/Prompt-Downloader-1245516604.exe&instid[cmdline]=&instid[appimageurl]=http://.../logo.png&prefix=Chemistry Raymond Chang 11th E Downloader&instid[thankyoupage]=http://.../?success&instid[interrupted]=http://.../?cancel&ti1=1245516604

http://www.amoninst.com/download.php?version=1.1.5.26&campid=2496&instid[appname]=Java&instid[appsetupurl]=http://download.forfreeminecraft.com/javasetup.exe&instid[cmdline]=&instid[appimageurl]=http://download.forfreeminecraft.com/javaicon.jpg&prefix=Java&instid[thankyoupage]=http://download.forfreeminecraft.com/.../

http://www.accuratedownload.com/download.php?version=1.1.5.26&campid=2265&instid[appname]=Download Manager&instid[appsetupurl]=http://files.dlfnow.info/manager/setup.exe&instid[cmdline]=setup.exe&instid[appimageurl]=http://www.dlfnow.info/manager/150.png&prefix=Launcher&instid[thankyoupage]=http://www.downloadfiles.us.com/manager/dlty.php&ti1=DLDR__1415085&instid[interrupted]=http://www.downloadfiles.us.com/.../rdr.php

http://www.transdownload.com/download.php?version=1.1.5.26&campid=2496&instid[appname]=Minecraft&instid[appsetupurl]=http://minecraftcrackeddownload.com/minecraftsetup.exe&instid[cmdline]=&instid[appimageurl]=http://minecraftcrackeddownload.com/icon.png&prefix=MinecraftInstaller&instid[thankyoupage]=http://download.forfreeminecraft.com/.../

http://www.transdownload.com/download.php?version=1.1.5.26&campid=2299&instid[appsetupurl]=&instid[appname]=DownloadSetup&instid[appimageurl]=http://.../dl.png&prefix=DownloadSetup&ti1=p191.dw3.0.download3.251312e012&ti2=3583037571

http://www.rulerdownload.com/download.php?version=1.1.5.26&campid=3687&instid[appname]=8 Ball Pool Hack Tool Downloader&instid[appsetupurl]=http://fastmediadownloads.com/download/Prompt-Downloader-1724746093.exe&instid[cmdline]=&instid[appimageurl]=http://.../logo.png&prefix=8 Ball Pool Hack Tool Downloader&instid[thankyoupage]=http://.../?success&instid[interrupted]=http://.../?cancel&ti1=1724746093

http://www.transdownload.com/download.php?version=1.1.5.26&campid=3687&instid[appname]=Prompt Downloader&instid[appsetupurl]=http://yourmediadownloads.com/download/Prompt-Downloader-1722626484.exe&instid[cmdline]=&instid[appimageurl]=http://.../logo.png&prefix=Prompt Downloader&instid[thankyoupage]=&ti1=1722626484

http://www.transdownload.com/download.php?version=1.1.5.26&campid=2299&instid[appsetupurl]=&instid[appname]=DownloadSetup&instid[appimageurl]=http://.../dl.png&prefix=DownloadSetup&ti1=p191.dw3.0.download3.225e5471e15&ti2=4116556557

http://www.rulerdownload.com/download.php?version=1.1.5.26&campid=3687&instid[appname]=The Ultimate Guide To Backpacking Australia Downloader&instid[appsetupurl]=http://fastmediadownloads.com/download/Prompt-Downloader-1605420865.exe&instid[cmdline]=&instid[appimageurl]=http://.../logo.png&prefix=The Ultimate Guide To Backpack Downloader&instid[thankyoupage]=http://.../?success&instid[interrupted]=http://.../?cancel&ti1=1605420865

http://www.eachdownload.com/download.php?version=1.1.5.26&campid=4150&instid[appname]=mp3sfinder.com&instid[appsetupurl]=http://.../download.php?mp3=233bbf1b745c722116be5b7939331d66/ro_yksopp_running_to_the_sea_ft_susanne_sundfr_seven_lions_remix_320.mp3&instid[cmdline]=Music&instid[appimageurl]=http://mp3sfinder.com/mp3.jpg&prefix=Ro Yksopp Running To The Sea Ft Susanne Sundfr Seven Lions Remix.mp3&instid[thankyoupage]=http://.../thanks.php

http://www.burstingdownload.com/download.php?version=1.1.5.26&campid=5215&instid[appname]=Jonwayne Bowser 2011 Rar&instid[appsetupurl]=http://www.supremedownloader.com/am_SupremeDownloader.exe&instid[cmdline]=&instid[appimageurl]=http://supremedownloader.com/sdicon.jpg&prefix=jonwayne bowser 2011 rar&instid[thankyoupage]=&ti1=ozd&instid[interrupted]=http://www.downloadthesefiles.com/.../?ci=5408&q=Jonwayne Bowser 2011 Rar

http://www.averagedownload.com/download.php?version=1.1.5.26&campid=4958&instid[appname]=maine o sanam tujhse pyar kiya tune o sanam mujhe dhoka diya.mp3&instid[appsetupurl]=http://mp3-free-songs.com/xLoad/maine_o_sanam_tujhse_pyar_kiya_tune_o_sanam_mujhe_dhoka_diya.mp3&instid[appimageurl]=https://s3.amazonaws.com/.../Rounded-Download-Button-150x150.jpg&prefix=maine o sanam tujhse pyar kiya tune o sanam mujhe dhoka diya.mp3&instid[cmdline]=Music

http://www.amoninst.com/download.php?version=1.1.5.26&campid=3055&instid[appname]=great-motivational-speeches_(FreeMP3.fm).mp3&instid[appsetupurl]=http://download.freemp3.fm/exe/u6lJB2K2JvA/great-motivational-speeches_(FreeMP3.fm).exe&instid[appimageurl]=http://freemp3.fm/.../logo_150.png&prefix=great motivational speeches

http://www.amoninst.com/download.php?version=1.1.5.26&campid=2087&instid[appname]=Full Speed Internet Speed Booster&instid[appsetupurl]=http://.../Full-Speed-v5.1a1.exe&instid[cmdline]=&instid[appimageurl]=http://.../images/FullSpeed-logo.jpg&prefix=Full-Speed-setup&instid[thankyoupage]=http://.../thanks2.htm

http://www.amoninst.com/download.php?version=1.1.5.26&campid=3339&instid[appname]=A.Good.Day.To.Die.Hard.2013.WEB DL.XviD BiDA.avi&prefix=A.Good.Day.To.Die.Hard.2013.WEB DL.XviD BiDA.avi&instid[appsetupurl]=http://secure-fastfile.com/f/Prompt_Downloader_setup.exe&instid[cmdline]=/S&instid[appimageurl]=http://secure-fastfile.com/f/logo150x150.png&instid[thankyoupage]=http://secure-fastfile.com/.../index.php?dp=206643.2764&fn=A.Good.Day.To.Die.Hard.2013.WEB DL.XviD BiDA.avi&fs=702.8 MB&instid[interrupted]=http://secure-fastfile.com/.../index.php?dp=206643.2764&fn=A.Good.Day.To.Die.Hard.2013.WEB DL.XviD BiDA.avi&fs=702.8 MB&ti1=206643.2764&ti2=&ti3=

http://www.amoninst.com/download.php?version=1.1.5.26&campid=3063&instid[appname]=WallpaperManagerApp&instid[appsetupurl]=http://d2fkuweqq6fkoa.cloudfront.net/cmli/Wallpaper_Manager_App1.0.exe&instid[cmdline]=/VERYSILENT url=http://wallpaperan.com/.../3125-fjord-in-norway.jpg&instid[appimageurl]=http://wallpaperan.com/.../3125-fjord-in-norway-medium-290x200.jpg&prefix=WallpaperManagerApp&instid[thankyoupage]=&ti1=[ClickID]

http://www.amoninst.com/download.php?version=1.1.5.26&campid=3055&instid[appname]=Capital_Cities_-_Capital_Cities_-_Safe_and_Sound_DiscoTech_Remix_(xMusic.me).mp3.mp3&instid[appsetupurl]=http://file.xmusic.me/listen/141853680/69588644/1318719527/08bcdeeb1c/Capital_Cities_-_Capital_Cities_-_Safe_and_Sound_DiscoTech_Remix_(xMusic.me).mp3&instid[appimageurl]=http://xmusic.me/.../he-logo.jpg&prefix=Capital Cities Capital Cities Safe and Sound DiscoTech Remix

http://www.accuratedownload.com/download.php?version=1.1.5.26&campid=3339&instid[appname]=Atlantis Milo s Return.flv.mp4&prefix=Atlantis Milo s Return.flv.mp4&instid[appsetupurl]=http://secure-fastfile.com/f/Prompt_Downloader_setup.exe&instid[cmdline]=/S&instid[appimageurl]=http://secure-fastfile.com/f/logo150x150.png&instid[thankyoupage]=http://www.fhserve.com/www/.../apu.php?n=&zoneid=1991&popunder=1&direct=1&instid[interrupted]=http://www.fhserve.com/www/.../apu.php?n=&zoneid=1991&popunder=1&direct=1&ti1=237449.4974&ti2=&ti3=&__cookie=__atuvc=1|51

http://www.accuratedownload.com/download.php?version=1.1.5.26&campid=3435&instid[appname]=Michael Jacksons Moonwalker&instid[appsetupurl]=http://www.gamefabrique.com/download/.../michael_jacksons_moonwalker.exe&instid[appimageurl]=http://www.gamefabrique.com/i/.../michael-jacksons-moonwalker.png&prefix=Michael Jacksons Moonwalker

http://www.accuratedownload.com/download.php?version=1.1.5.26&campid=3435&instid[appname]=Aladdin&instid[appsetupurl]=http://www.gamefabrique.com/download/.../aladdin.exe&instid[appimageurl]=http://www.gamefabrique.com/i/.../aladdin.png&prefix=Aladdin

http://www.accuratedownload.com/download.php?version=1.1.5.26&campid=3339&instid[appname]=The Wolf of Wall Street 2013 DVDSCR.mp4&prefix=The Wolf of Wall Street 2013 DVDSCR.mp4&instid[appsetupurl]=http://secure-fastfile.com/f/Prompt_Downloader_setup.exe&instid[cmdline]=/S&instid[appimageurl]=http://secure-fastfile.com/f/logo150x150.png&instid[thankyoupage]=http://www.fhserve.com/www/.../apu.php?n=&zoneid=1991&popunder=1&direct=1&instid[interrupted]=http://www.fhserve.com/www/.../apu.php?n=&zoneid=1991&popunder=1&direct=1&ti1=253628.4974&ti2=&ti3=

http://www.accuratedownload.com/download.php?version=1.1.5.26&campid=3339&instid[appname]=The Devils Rejects 5BEng 5D 5B2005 5D.avi.mp4&prefix=The Devils Rejects 5BEng 5D 5B2005 5D.avi.mp4&instid[appsetupurl]=http://secure-fastfile.com/f/Prompt_Downloader_setup.exe&instid[cmdline]=/S&instid[appimageurl]=http://secure-fastfile.com/f/logo150x150.png&instid[thankyoupage]=http://www.fhserve.com/www/.../apu.php?n=&zoneid=1991&popunder=1&direct=1&instid[interrupted]=http://www.fhserve.com/www/.../apu.php?n=&zoneid=1991&popunder=1&direct=1&ti1=253628.4974&ti2=&ti3=

http://www.accuratedownload.com/download.php?version=1.1.5.26&campid=3339&instid[appname]=Jeff Dunham Controlled Chaos 2011 DVDRip XviD Uncensored ExtraTorrentRG.avi.mp4&prefix=Jeff Dunham Controlled Chaos 2011 DVDRip XviD Uncensored ExtraTorrentRG.avi.mp4&instid[appsetupurl]=http://secure-fastfile.com/f/Prompt_Downloader_setup.exe&instid[cmdline]=/S&instid[appimageurl]=http://secure-fastfile.com/f/logo150x150.png&instid[thankyoupage]=http://www.fhserve.com/www/.../apu.php?n=&zoneid=1991&popunder=1&direct=1&instid[interrupted]=http://www.fhserve.com/www/.../apu.php?n=&zoneid=1991&popunder=1&direct=1&ti1=253628.4974&ti2=&ti3=

http://www.accuratedownload.com/download.php?version=1.1.5.26&campid=2736&instid[appname]=Advanced ID Creator Personal&instid[appsetupurl]=http://www.advancedidcreator.com/download/AID_Personal_Setup.exe&instid[appimageurl]=https://s3.amazonaws.com/free-sw/Rounded-Download-Button-150x150.jpg&instid[thankyoupage]=http://www.download.hr/.../thank-you.html&prefix=Advanced ID Creator Personal

http://www.amoninst.com/download.php?version=1.1.5.26&campid=3339&instid[appname]=happily.divorced.s01e02.dsr.xvid.avi.mp4&prefix=happily.divorced.s01e02.dsr.xvid.avi.mp4&instid[appsetupurl]=http://secure-fastfile.com/f/Prompt_Downloader_setup.exe&instid[cmdline]=/S&instid[appimageurl]=http://secure-fastfile.com/f/logo150x150.png&instid[thankyoupage]=http://secure-fastfile.com/.../index.php?dp=204981.2764&fn=happily.divorced.s01e02.dsr.xvid.avi.mp4&fs=61.4 MB&instid[interrupted]=http://secure-fastfile.com/.../index.php?dp=204981.2764&fn=happily.divorced.s01e02.dsr.xvid.avi.mp4&fs=61.4 MB&ti1=204981.2764&ti2=&ti3=

http://getdl.net/?id=ta6b&sub=MNG&name=VIA-VT1617&url=

Latest 30 of 71 download URLs

Remove setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.