tau+empire+codex+pdf+download_10924_i32331168_il345.exe.zip

The file tau+empire+codex+pdf+download_10924_i32331168_il345.exe.zip has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. It bundles adware offers using the Amonetize, a Pay-Per-Install (PPI) monetization and distribution download manager. The software offerings provided are based on the PC's geo-location at the time of install. The file has been seen being downloaded from downprov.red-9-small-button.com.
MD5:
3a97f3bff3f1dc4ba435cef0c1472530

SHA-1:
e995901dfa12fe06931da624bd4d0cc5fe7053c3

SHA-256:
a0fdf6917e433dcf1f140bf1904cbb5856f3267071873f3f90585797a5c14f05

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
1/12/2025 4:24:16 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
Adware.Amonetize (M)
16.7.31.9

File size:
1.4 MB (1,515,448 bytes)

Common path:
C:\users\{user}\downloads\tau+empire+codex+pdf+download_10924_i32331168_il345.exe.zip

The file tau+empire+codex+pdf+download_10924_i32331168_il345.exe.zip has been seen being distributed by the following URL.