» Amonetize ltd.
Digital Signature
Analysis
Files (73)
Downloads (16)
Domains (30)
Distribution (7)
Related (26)

Amonetize ltd.

Publisher Information

Amonetize ltd. is a software publisher located in Raanana, Israel*. The company is a primary distributor of unwanted software. Amonetize is a pay-per-insall monetization and distribution platform that utilizes a custom downloader/installer to distribute various adware offers. Typiclaly the installer bundles open source and widely used legitimate products with advertising offers of affiliate partners in the setup process. "Amonetize is a Pay-Per-Install (PPI) performance driven advertising network for software product offerings. We deliver thousands of installs on a daily basis to millions of users on a global scale." - www.amonetize.com Thre are 3 additional code signing certificates issued to this publisher.

Authority:

VeriSign, Inc.

Valid from:

9/16/2014 3:00:00 AM

Valid to:

11/16/2015 2:59:59 AM

Subject:

CN=Amonetize ltd., OU=Amonetize ltd., O=Amonetize ltd., L=Raanana, S=Israel, C=IL

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

4552f20fb38c60df270f59c4a71b833f

Scanner detections:

Detections (100% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.Installer.Amonetizeltd.h, PUP.Amonetize.Bundler, PUP.Amonetize.Bundler (M), PUP.Amonetize (M)

100.00%

VIPRE Antivirus

Threat.4785227, Amonetize

8.00%

Dr.Web

Adware.Downware.8564

8.00%

avast!

Win32:Amonetize-EF [PUP]

8.00%

AVG

Trojan horse Downloader.Generic14.ASR

8.00%

McAfee

PUP-FQT, Program.PUP-FQT

8.00%

Malwarebytes

PUP.Optional.Amonetize

8.00%

Zillya! Antivirus

Adware.Amonetize.Win32.1260

8.00%

NANO AntiVirus

Riskware.Win32.Amonetize.dffaha

8.00%

F-Prot

W32/A-2cc77b1b

8.00%

1 / 68 (Adware)

six guns hack downloader__3687_i1328692092_il2781187.exe (9f2b32ceb4ebd2d3cf4afcb7fa09b987)

1 / 68 (Adware)

ssd__3472_i1324433718_il19.exe (8bb22d6daf8493928d2671fc66f0cde0)

1 / 68 (Adware)

flashplayer__6353_i1324258931_il209.exe (e844b1ba77b5d8a3502bfb2ef8fb8e48)

1 / 68 (Adware)

setup__3061_il662.exe (35056152e566ac3fb4388a7204b244fc)

1 / 68 (Adware)

não confirmado 747556.crdownload (390fecb295cc522011ec645cec9a243e)

1 / 68 (Adware)

onaylanmayan 169939.crdownload (0c67e6060184c1a0cf916c61335a67c9)

1 / 68 (Adware)

burgershop2__6771_i1326443254_il458.exe (8b772a695b761a97b3586633faca896d)

1 / 68 (Adware)

flashplayersetup__5462_i1324956986_il20.exe (2a15caac3e73da0201ac2cc4242475ac)

1 / 68 (Adware)

flashplayersetup__4743_i1318901511_il20.exe (34531fb934ccb5f06594f4fae1c3ec5f)

1 / 68 (Adware)

ssd__3472_i1325885549_il19.exe (84897d401a325c02d83db7751b040089)

1 / 68 (Adware)

flashplayersetup__7343_i1325828038_il2.exe (8407e2ccb079436d91b3b58a8ee93864)

1 / 68 (Adware)

mecanet__2415_il6841.exe (d046913a84f088b2b766d2c2b138b5f9)

1 / 68 (Adware)

setup__3061_il662.exe (228d482e4d18d929665b37674120bfc5)

1 / 68 (Adware)

autocad2015v203__5542_il2006339.exe (1da298a1633ff6faedc34a96634aa1e1)

1 / 68 (Adware)

ssd__3472_i1325507399_il19.exe (f00f23cf9c1af1aab91825c254aa90df)

1 / 68 (Adware)

flashplayersetup__3720_i1326276108_il40.exe (bfebd4302a4770b532901ee3b60ef34b)

1 / 68 (Adware)

flashplayersetup__3720_i1325756092_il40.exe (d6befec7c9a9ec6ff4423a00d094fb11)

1 / 68 (Adware)

flashplayersetup__3720_i1325479581_il40.exe (595252251272b8fa76d3b8abdcf7ca6e)

1 / 68 (Adware)

mediaplayer__9251_i1326075595_il2119.exe (49541d1872c0f9b4de468806221cdf22)

1 / 68 (Adware)

software crack__9169_il2063241.exe (d6c46177190b02026f79853a8d60658c)

1 / 68 (Adware)

не подтвержден 615781.crdownload (1356b243b9642059cf7c4762ab3287e1)

1 / 68 (Adware)

flashplayersetup__5462_i1323429459_il20.exe (60a33b76ed7bae2c8451d1f211381cff)

1 / 68 (Adware)

flashplayersetup__5462_i1323551196_il20.exe (7cc59c442ebd74c15978952719eb5dcb)

1 / 68 (Adware)

flashplayersetup__5462_i1318135522_il20.exe (8ee2e65c8f1a8a479a4b76b72e5a55ca)

1 / 68 (Adware)

flashplayersetup__5462_i1321663867_il20.exe (a48c47c8dfcc61d97609e0d3a2633631)

1 / 68 (Adware)

www_inspectdownload_com (721f38359749038bb7826c6490ce5205)

1 / 68 (Adware)

flashplayer__6741_i1328653501_il37.exe (27a2484acac3fc35d2e8e6a49bb64fd6)

1 / 68 (Adware)

flashplayersetup__5563_i1326475925_il20.exe (65688b2a04b7cb55b98fd2d9be8659a6)

1 / 68 (Adware)

flashplayersetup__5462_i1324362758_il20.exe (663cd11f80b9902699dd8373b831681b)

1 / 68 (Adware)

flashplayersetup__5462_i1327238418_il20.exe (89d329646116f2331fa5e87207945ad0)

Latest 30 of 73 files

Downloads URLs for files signed by Amonetize ltd..

1 / 68 (Adware)

http://www.amoninst.com/download.php?version=1.1.5.26&campid=9367&instid[appname]=Construction Machines 2014 Kurulum&instid[appsetupurl]=http://www.tvce.net/dosyalar/kurulumyeni.exe&instid[cmdline]=&instid[appimageurl]=http://.../resim/files.png&prefix=Construction Machines 2014&instid[thankyoupage]=http://.../git.php?k=tamoyun.web.tr (772069c4e61009d896aec96c0e00f31c)

1 / 68 (Adware)

http://ams1.ib.adnxs.com/click?ehSuR-F6lD_Sb18HzhmRP7gehetRuJ4_0m9fB84ZkT97FK5H4XqUP_AV1Deko9JfjdfsSgCADi4bYBtUAAAAAI3KJwDIAQAAdgIAAAIAAABdFisBL9UFAAAAAQBVU0QAVVNEANgCWgCUwwAAhbwAAgUAAQIAAI4AuiWnFQAAAAA./cnd=!7AWTNwiqg74CEN2srAkYr6oXIAA./referrer=http://market.yandex.ru/?clid=505/clickenc=http://.../direct-download.html?version=1.1.1.72&ci=5462&capp=FlashPlayer&ti1=ams1CI2vs9eEgKCHLhACGPCr0L7D9KjpXyINODMuMjM3LjU2LjE2OCgBMJvA7aAF&ti2=2607757&ti3=${APN} (flashplayersetup__5462_i1323429459_il20.exe)

1 / 68 (Adware)

http://ams1.ib.adnxs.com/click?ehSuR-F6lD_Sb18HzhmRP7gehetRuJ4_0m9fB84ZkT97FK5H4XqUP-ctAPQ4FcQM2ixg8x19JE6G8BtUAAAAAI3KJwDIAQAAdgIAAAIAAABdFisBL9UFAAAAAQBVU0QAVVNEANgCWgCUwwAAG8EAAgUAAQIAAI4A_CTG4gAAAAA./cnd=!7AWTNwiqg74CEN2srAkYr6oXIAA./referrer=http://instagramm.ru/instagram-dlya-kompyutera//clickenc=http://.../direct-download.html?version=1.1.1.72&ci=5462&capp=FlashPlayer&ti1=ams1CNrZgJvfo5-SThACGOfbgKCPp4XiDCIOODkuMjQ5LjEyOC4yMDUoATCG4e-gBQ..&ti2=2607757&ti3=${APN} (flashplayersetup__5462_i1324362758_il20.exe)

1 / 68 (Adware)

http://152media.adk2x.com/click/VKHW00T2_5HCjOU_hPG7xHKNaWdTLglsGCm07zn1kfzrAPOTKeWNBE08_IUysfOxN0eAh0L1J-lH2pFbz91sBPcT6nWDgTktm5IRMJHiqAR-pjmBJh6QE10Op1GWdvyYx16HM6CLS4YoWD0Kyz510OJpGWnd5mor4YUwnQD-VKZTGvpD79Ckduzj-htXm0NdAsu3E80zotFE6thcHTW9Mi6Yte4BaMKkpI4NwwF7fEh2D4BAzcvQUZsP8g_vm505gw//http://www.freeplayflashgames.com/.../burgershop2-v2-dd.html?ver=1.1.1.72&epu=no&ci=6771&ti1=VKHW00T2_5HCjOU_hPG7xHKNaWdTLglsGCm07zn1kfzrAPOTKeWNBE08_IUysfOxN0eAh0L1J-lH2pFbz91sBPcT6nWDgTktm5IRMJHiqAR-pjmBJh6QE10Op1GWdvyYx16HM6CLS4YoWD0Kyz510OJpGWnd5mor4YUwnQD-VKZTGvpD79Ckduzj-htXm0NdAsu3E80zotFE6thcHTW9Mi6Yte4BaMKkpI4NwwF7fEh2D4BAzcvQUZsP8g_vm505gw (burgershop2__6771_i1326443254_il458.exe)

1 / 68 (Adware)

http://xdisc.biz/tracking202/.../dl.php?t202id=7583&c1=369163461411157721&c2=null&t202kw=787 POP 155066 (ssd__3472_i1325885549_il19.exe)

1 / 68 (Adware)

http://www.download-more-files.com/allddT.html?myref=www.livesoccer2014.com&version=1.1.5.89&prefix=TVapp&campid=8821&capp=TvAppMondial&ti1=14508046881411232699&AMt=1411232711453&AMh=7fn2b4gxIWmb09igS84d2Ie2zMXUjQgM3KAUfCzDKPbVydo5QZMSwcespsmVBC1AtdCH3iBb48loOaw3 (flashplayer__6741_i1328260085_il37.exe)

1 / 68 (Adware)

http://www.download-more-files.com/allddT.html?myref=www.livesoccer2014.com&version=1.1.5.89&prefix=TVapp&campid=8821&capp=TvAppMondial&ti1=15903659591411231223&AMt=1411231237136&AMh=7fn2b4gxIWmb09igS84d2Ie2zMXUjQgM3KAUfCzDKPbVydo5QZMSwcespsmVBC1AtdCH3iBb48loOaw3 (flashplayer__6741_i1328260085_il37.exe)

1 / 68 (Adware)

http://ams1.ib.adnxs.com/click?ehSuR-F6lD_Sb18HzhmRP7gehetRuJ4_0m9fB84ZkT97FK5H4XqUPwWmm1jWe5kUMbf58UU7WRh5eBtUAAAAAI3KJwDIAQAAdgIAAAIAAABdFisBL9UFAAAAAQBVU0QAVVNEANgCWgCUwwAAXrUAAgUAAQIAAI4AgyUtBAAAAAA./cnd=!7AWTNwiqg74CEN2srAkYr6oXIAA./referrer=http://tv.yandex.ru/2//clickenc=http://.../direct-download.html?version=1.1.1.72&ci=5462&capp=FlashPlayer&ti1=ams1CLHu5o_f6M6sGBACGIXM7sTl-t7MFCINNzguMjUuMTIxLjI1NCgBMPnw7aAF&ti2=2607757&ti3=${APN} (flashplayersetup__5462_i1323429459_il20.exe)

22 / 68 (Adware)

http://www.file-gate.net/.../allddT.html?myref=www.livesoccer2014.com&version=1.1.5.89&prefix=TVapp&campid=8821&capp=TvAppMondial&ti1=15498701571411203895&AMt=1411203907628&AMh=7fn2b4gxIWmb09igS84d2Ie2zMXUjQgM3KAUfCzDKPbVydo5QZMSwcespsmVBC1AtdCH3iBb48loOaw3 (tvapp__8821_i1326804903_il14.exe)

1 / 68 (Adware)

http://ams1.ib.adnxs.com/click?wBv0u0G_mz8bL90kBoGVPxsv3SQGgZU_b3RfdHgimT-znV50RTegP_iatfbw_qw8KueTQ_iiJCNBph1UAAAAADyEKgByBwAAdgIAAAIAAAArEykBg48GAAAAAQBVU0QAVVNEANgCWgDBMQAAibwAAgUAAQIAAJIAxiQfxQAAAAA./cnd=!8QXsOgjL3rsCEKumpAkYg58aIAA./referrer=http://cdn.sharedaddomain.com/ancbanner_general4_728x90_195.htm?cat=48&clientId=a020161a-d4d8-4a4f-a627-8270eec7dbc6&l=http://www.sweet-page.com/?type=hppp&ts=1409337200&from=cor&uid=WDCXWD2500BEVS-22UST0_WD-WXEY0716426664266&r=/clickenc=http://.../direct-download.html?version=1.1.5.89&ci=7343&capp=FlashPlayer&ti1=ams1CKrOz5yE36iSIxACGPi11rWP3r_WPCIOMjEyLjIzMi40My4yNTQoATDBzPagBQ..&ti2=PMZ&ti3=2786364 (flashplayer__6741_i1328260085_il37.exe)

1 / 68 (Adware)

http://www.file-gate.net/.../allddT.html?myref=www.livesoccer2014.com&version=1.1.5.89&prefix=TVapp&campid=8821&capp=TvAppMondial&ti1=15499450551411193287&AMt=1411193302615&AMh=7fn2b4gxIWmb09igS84d2Ie2zMXUjQgM3KAUfCzDKPbVydo5QZMSwcespsmVBC1AtdCH3iBb48loOaw3 (flashplayersetup__4651_i1326617824_il2.exe)

1 / 68 (Adware)

http://ams1.ib.adnxs.com/click?kCNceHBKdz_2AeH24wxyP3npJjEIrKw_9gHh9uMMcj-QI1x4cEp3P3czHhsCdWZfAYXk2Kly-QaN-xtUAAAAADdDMAByBwAAdgIAAAIAAABdFisBBvkGAAAAAQBVU0QAVVNEANgCWgB-AwAAj8YAAgUAAQIAAJQAVyPddgAAAAA./cnd=!DwbyNwiqg74CEN2srAkYhvIbIAA./referrer=http://www.avito.ru/sankt-peterburg/rezume/hudozhestvennye_risunki_293086378/clickenc=http://.../direct-download.html?version=1.1.1.72&ci=5462&capp=FlashPlayer&ti1=ams1CIGKksed1dz8BhACGPfm-NihoJ2zXyINMjEzLjMzLjI1My4xMCgBMI3376AF&ti2=3162935&ti3=${APN} (flashplayersetup__5462_i1324362758_il20.exe)

1 / 68 (Adware)

http://ams1.ib.adnxs.com/click?ehSuR-F6lD_Sb18HzhmRP7gehetRuJ4_0m9fB84ZkT97FK5H4XqUP2NcaXUdbF8xG2is5jpH2hmwqB1UAAAAAI3KJwDIAQAAdgIAAAIAAABdFisBL9UFAAAAAQBVU0QAVVNEANgCWgCUwwAA8LcAAgUAAQIAAI4AYCXUzQAAAAA./cnd=!7AWTNwiqg74CEN2srAkYr6oXIAA./referrer=wartune.r2games.com/clickenc=http://.../direct-download.html?version=1.1.1.72&ci=5462&capp=FlashPlayer&ti1=ams1CJvQsbWu55HtGRACGOO4pavXg9uvMSINMjEzLjg3LjEzOC42MygBMLDR9qAF&ti2=2607757&ti3=${APN} (flashplayersetup__5462_i1328134222_il20.exe)

1 / 68 (Adware)

http://www.file-gate.net/.../allddT.html?myref=www.new-hdplugin.com&version=1.1.5.89&prefix=FlashPlayerSetup&campid=6595&capp=FlashPlayer&ti1=19337178081411195473&AMt=1411195474283&AMh=7fn2b4gxIWmb09igS84d2Ie2zMXUjQgM3KAUfCzDKPbVydo5QZMSwcespsmVBC1AtdCH3iBb48loOaw3 (flashplayersetup__4651_i1326617824_il2.exe)

28 / 68 (Adware)

http://www.winpdfreader.com/direct-download.html?ci=8195&version=1.1.5.55&capp=pdfReader& (pdfreader__8195_il1253.exe)

26 / 68 (Adware)

http://www.solicitdownload.com/tdownload.php?s1=48720cda1db183322835d7d07256c79911c07638&t1=1411169403&ref=www.winflashplayer.com&version=1.1.1.12&direct=1&prefix=FlashPlayersetup&campid=3720&ti1=nym1CLC0nJCyoOaCDRACGKnZ_ZLx57DWGyIPMTA4LjEyOC4yMjUuMTkxKAEwwffyoAU.&iaff1=9886&capp=FlashPlayer (flashplayersetup__3720_i1326157361_il40.exe)

Domains

Top-level domains owned by Amonetize ltd..

reliabletrusteddownloads.com

easyfiledownloads.net

30 of 30 domains

Distribution

The following websites host and distribute files published by Amonetize ltd..

152media.adk2x.com

www.winpdfreader.com

www.solicitdownload.com

www.download-more-files.com

www.file-gate.net

xdisc.biz

ams1.ib.adnxs.com

The certificates below are also signed by Amonetize ltd..

235E7B2F1D4E0152189F6381E2BA8C97 (Mar 18, 2013 to Jun 18, 2015)

72A9E57303DC103CAE5E2F5A83513E22 (Oct 29, 2013 to Oct 30, 2014)

47256A10E8986C45AD869252DE4204AC (May 14, 2012 to May 15, 2013)

The following publishers (by Authenticode signature organization name) are related.

Shetef Solutions & Consulting (1998) Ltd.

sam invest company 2009 ltd

Nanning weiwu Technology co.,ltd.

* Note, the details and description above are based on the code signing digital signature issued to Amonetize ltd. by VeriSign, Inc. on September 16, 2014 with the serial number '4552f20fb38c60df270f59c4a71b833f'.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.