» trojan killer activation code__3515_i339083141_il2529341.exe
Overview
Analysis
File Details
Downloads (44)
Network (2)

trojan killer activation code__3515_i339083141_il2529341.exe

Installer

Amonetize ltd.

This is the Amonetize download manager which bundles applications with offers for additional 3rd party software, mostly unwanted adware, and may be installed with minimal consent. The application trojan killer activation code__3515_i339083141_il2529341.exe by Amonetize ltd has been detected as adware by 14 anti-malware scanners. The program is a setup application that uses the Amonetize Downloader installer. The installer uses the InstallMonetizer platform which will donwload and install adware toolbars and other potentially unwanted software offers during setup.

File name:

Publisher:

Amônétízé Ltd (signed by Amonetize ltd.)

Product:

Installer

Version:

1.1.1.20

MD5:

815f42a154722484a7b44326e35a5eeb

SHA-1:

0de978708a06dce5395d7bf0f179b93dd8e38468

SHA-256:

755e61619e145b74c23a01cc7579711e374c62f14d720467e9e0a493074f0ba0

Scanner detections:

14 / 68

Status:

Adware

Explanation:

This setup file is a re-distribution of the original program that bundles various adware offers during installation including toolbars and browser search extensions.

Description:

This 'download manager' is also considered bundleware, a utility designed to download software (possibly legitimate or opensource) and bundle it with a number of optional offers including ad-supported utilities, toolbars, shopping comparison tools and browser extensions.

Analysis date:

12/24/2024 11:24:26 AM UTC (today)

Scan engine

Detection

Engine version

AhnLab V3 Security

PUP/Win32.Amonetiz

2014.02.09

Avira AntiVirus

ADWARE/Adware.Gen2

7.11.130.36

avast!

Win32:Amonetize-E [PUP]

2014.9-140208

AVG

Generic_r

2015.0.3570

Comodo Security

ApplicUnwnt

17752

Dr.Web

Adware.Downware.1655

9.0.1.039

ESET NOD32

Win32/Amonetize.AD (variant)

8.9397

Fortinet FortiGate

Riskware/Amonetize

2/8/2014

Malwarebytes

PUP.Optional.InstallMonetizer

v2014.02.08.08

McAfee

Adware-Amonetize!815F42A15472

5600.7226

Reason Heuristics

PUP.Installer.Amonetizeltd.y

14.8.7.19

Sophos

Amonetize

4.97

Trend Micro House Call

TROJ_GEN.F47V0206

7.2.39

VIPRE Antivirus

Amonetize

26260

File size:

331 KB (338,984 bytes)

Product version:

2.1.12

Original file name:

Installer.exe

File type:

Executable application (Win32 EXE)

Bundler/Installer:

Amonetize Downloader

Language:

English (United States)

Common path:

C:\users\{user}\downloads\trojan killer activation code__3515_i339083141_il2529341.exe

Digital Signature

Signed by:

Amonetize ltd.

Authority:

Thawte, Inc.

Valid from:

3/19/2013 3:30:00 AM

Valid to:

6/19/2015 3:29:59 AM

Subject:

CN=Amonetize ltd., O=Amonetize ltd., L=Raanana, S=Alberta, C=IL

Issuer:

CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:

235E7B2F1D4E0152189F6381E2BA8C97

File PE Metadata

Compilation timestamp:

2/6/2014 6:45:42 PM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

10.0

CTPH (ssdeep):

6144:Bct/ggEq9ipJwJ/IvL/AYBEvKlAJ/ehY2tlqREb0WP7EG1+QZTHVpo8:BcNggEq9cJwJwvL/7EvVa3qRZWjh1vZX

Entry address:

0x27344

Entry point:

E8, 9A, 95, 00, 00, E9, 89, FE, FF, FF, 57, 8B, C6, 83, E0, 0F, 85, C0, 0F, 85, C1, 00, 00, 00, 8B, D1, 83, E1, 7F, C1, EA, 07, 74, 65, EB, 06, 8D, 9B, 00, 00, 00, 00, 66, 0F, 6F, 06, 66, 0F, 6F, 4E, 10, 66, 0F, 6F, 56, 20, 66, 0F, 6F, 5E, 30, 66, 0F, 7F, 07, 66, 0F, 7F, 4F, 10, 66, 0F, 7F, 57, 20, 66, 0F, 7F, 5F, 30, 66, 0F, 6F, 66, 40, 66, 0F, 6F, 6E, 50, 66, 0F, 6F, 76, 60, 66, 0F, 6F, 7E, 70, 66, 0F, 7F, 67, 40, 66, 0F, 7F, 6F, 50, 66, 0F, 7F, 77, 60, 66, 0F, 7F, 7F, 70, 8D, B6, 80, 00, 00, 00, 8D, BF... 
[+]

Entropy:

6.4593

Code size:

230.5 KB (236,032 bytes)

The file trojan killer activation code__3515_i339083141_il2529341.exe has been seen being distributed by the following 44 URLs.

http://download.thankdownload.com/.../get.php?q=Download Bbm Beta Buat Android&ti1=945000&ti2=0&ti3=2014-02-07T19:23:17.671416 00:00

http://download.solvedownload.com/.../get.php?q=2012 dse ch lang 3 5&ti1=980000&ti2=0&ti3=2014-02-09T11:06:24.801935 00:00

http://download.wowreadydownloads.com/.../get.php?q=fifa 2013 isarcextract error&ti1=1410000&ti2=1&ti3=2014-02-09T10:26:43.928749 00:00

http://download.venturedownload.com/.../get.php?q=Multiloader_V5_62_Rar&ti1=1460000&ti2=0&ti3=2014-02-07T14:48:56.290984 00:00

http://download.venturedownload.com/.../get.php?q=Giggs_Talking_The_Hardest&ti1=1460000&ti2=0&ti3=2014-02-09T12:10:46.414853 00:00

http://download.somedownload.com/.../get.php?q=SFDK Los Veteranos por Wasi www riojatorrent com&ti1=400000&ti2=3&ti3=2014-02-06T18:37:08.219911 00:00

http://download.getitfastdownload.com/.../get.php?q=crackeddll_3_1_5_0&ti1=1240000&ti2=0&ti3=2014-02-07T00:38:43.976062 00:00

http://www.totalitydownload.com/download.php?version=1.1.1.20&campid=3038&instid[appname]=aqos thor.the.dark.world.2013.hdrip.xvid.avi.flv_Downloader&instid[appsetupurl]=http://cdn1.reliabletrusteddownloads.com/d1/MiniGetSetup.exe&instid[cmdline]=/S&instid[appimageurl]=http://download.getlinksinaseconds.com/d1/logo150x150.png&prefix=aqos thor.the.dark.world.2013.hdrip.xvid.avi.flv&instid[thankyoupage]=http://download.getlinksinaseconds.com/.../thank_you.php?ti1=500000&ti2=1&ti3=2014-02-09T02:53:55.532134 00:00&parameter=aqos thor.the.dark.world.2013.hdrip.xvid.avi.flv&instid[interrupted]=http://download.getlinksinaseconds.com/.../interrupted.php?ti1=500000&ti2=1&ti3=2014-02-09T02:53:55.532134 00:00&parameter=aqos thor.the.dark.world.2013.hdrip.xvid.avi.flv&ti1=500000&ti2=1&ti3=2014-02-09T02:53:55.532134 00:00

http://download.getlinksinaseconds.com/.../get.php?q=aqos-thor.the.dark.world.2013.hdrip.xvid.avi.flv&ti1=500000&ti2=1&ti3=2014-02-09T02:53:55.532134 00:00

http://www.conductdownload.com/download.php?version=1.1.1.20&campid=4000&instid[appname]=SmillaEnlarger.0.9.0.zip&instid[appsetupurl]=http://19.get.getmdownloader.com/files/MD_setup_1.0.16.exe&instid[cmdline]=/verysilent&instid[appimageurl]=http://.../static/md/images/logo_150.png&prefix=SmillaEnlarger.0.9.0.zip&instid[thankyoupage]=http://.../upgrade&ti1=w137s4i923p15e9c0&ti2=Ie3GnY1ZcVNDzPg-JZxi1IxP-JeAa9mslXV8rXfrakJgORGUlhq3ebFZ2FEuDV6XLvhpzTt1xckShpBAaz-rAdg

http://getmdownloader.com/.../SmillaEnlarger-0.9.0.zip.html?id=&na=IbzO21k2SySQYFR8bIAvSpZqrXyjhyMNoW6nnk9R5pEB&k=IVvYNws2brWPDD-egrk_Vu8wYff1L28uaTlCTZ4dc_8wGXj5rO4xGO30zKMqghNe5Tzw8G2W1kkfvql0woT52PM

http://www.totalitydownload.com/download.php?version=1.1.1.20&campid=3515&instid[appname]=The Red Market Ebook_Downloader&instid[appsetupurl]=http://cdn1.reliabletrusteddownloads.com/d1/MiniGetSetup.exe&instid[cmdline]=/S&instid[appimageurl]=http://download.venturedownload.com/d1/logo150x150.png&prefix=The Red Market Ebook&instid[thankyoupage]=http://download.venturedownload.com/.../thank_you.php?ti1=1405000&ti2=0&ti3=2014-02-09T04:00:45.042471 00:00&parameter=The Red Market Ebook&instid[interrupted]=http://download.venturedownload.com/.../interrupted.php?ti1=1405000&ti2=0&ti3=2014-02-09T04:00:45.042471 00:00&parameter=The Red Market Ebook&ti1=1405000&ti2=0&ti3=2014-02-09T04:00:45.042471 00:00

http://download.venturedownload.com/.../get.php?q=The_Red_Market_Ebook&ti1=1405000&ti2=0&ti3=2014-02-09T04:00:45.042471 00:00

http://www.totalitydownload.com/download.php?version=1.1.1.20&campid=3515&instid[appname]=BeInSportsV2By Zouhair.rar_Downloader&instid[appsetupurl]=http://cdn1.reliabletrusteddownloads.com/d1/MiniGetSetup.exe&instid[cmdline]=/S&instid[appimageurl]=http://download.wowreadydownloads.com/d1/logo150x150.png&prefix=BeInSportsV2By Zouhair.rar&instid[thankyoupage]=http://download.wowreadydownloads.com/.../thank_you.php?ti1=1400000&ti2=1&ti3=2014-02-09T13:22:51.363679 00:00&parameter=BeInSportsV2By Zouhair.rar&instid[interrupted]=http://download.wowreadydownloads.com/.../interrupted.php?ti1=1400000&ti2=1&ti3=2014-02-09T13:22:51.363679 00:00&parameter=BeInSportsV2By Zouhair.rar&ti1=1400000&ti2=1&ti3=2014-02-09T13:22:51.363679 00:00

http://www.totalitydownload.com/download.php?version=1.1.1.20&campid=3038&instid[appname]=BeInSportsV2By Zouhair.rar_Downloader&instid[appsetupurl]=http://cdn1.reliabletrusteddownloads.com/d1/MiniGetSetup.exe&instid[cmdline]=/S&instid[appimageurl]=http://download.wowreadydownloads.com/d1/logo150x150.png&prefix=BeInSportsV2By Zouhair.rar&instid[thankyoupage]=http://download.wowreadydownloads.com/.../thank_you.php?ti1=1400000&ti2=1&ti3=2014-02-09T13:22:51.363679 00:00&parameter=BeInSportsV2By Zouhair.rar&instid[interrupted]=http://download.wowreadydownloads.com/.../interrupted.php?ti1=1400000&ti2=1&ti3=2014-02-09T13:22:51.363679 00:00&parameter=BeInSportsV2By Zouhair.rar&ti1=1400000&ti2=1&ti3=2014-02-09T13:22:51.363679 00:00

http://download.wowreadydownloads.com/.../get.php?q=BeInSportsV2By Zouhair.rar&ti1=1400000&ti2=1&ti3=2014-02-09T13:22:51.363679 00:00

http://www.totalitydownload.com/download.php?version=1.1.1.20&campid=3515&instid[appname]=The.Lorax.2012.720p.BluRay.x264.YIFY.mp4_Downloader&instid[appsetupurl]=http://cdn1.reliabletrusteddownloads.com/d1/MiniGetSetup.exe&instid[cmdline]=/S&instid[appimageurl]=http://download.getlinksinaseconds.com/d1/logo150x150.png&prefix=The.Lorax.2012.720p.BluRay.x264.YIFY.mp4&instid[thankyoupage]=http://download.getlinksinaseconds.com/.../thank_you.php?ti1=500000&ti2=2&ti3=2014-02-08T19:35:57.339328 00:00&parameter=The.Lorax.2012.720p.BluRay.x264.YIFY.mp4&instid[interrupted]=http://download.getlinksinaseconds.com/.../interrupted.php?ti1=500000&ti2=2&ti3=2014-02-08T19:35:57.339328 00:00&parameter=The.Lorax.2012.720p.BluRay.x264.YIFY.mp4&ti1=500000&ti2=2&ti3=2014-02-08T19:35:57.339328 00:00

http://download.getlinksinaseconds.com/.../get.php?q=The.Lorax.2012.720p.BluRay.x264.YIFY.mp4&ti1=500000&ti2=2&ti3=2014-02-08T19:35:57.339328 00:00

http://www.totalitydownload.com/download.php?version=1.1.1.20&campid=3039&instid[appname]=Codex Gigas English Pdf_Downloader&instid[appsetupurl]=http://cdn1.reliabletrusteddownloads.com/d1/MiniGetSetup.exe&instid[cmdline]=/S&instid[appimageurl]=http://download.venturedownload.com/d1/logo150x150.png&prefix=Codex Gigas English Pdf&instid[thankyoupage]=http://download.venturedownload.com/.../thank_you.php?ti1=1405000&ti2=0&ti3=2014-02-09T07:12:16.062456 00:00&parameter=Codex Gigas English Pdf&instid[interrupted]=http://download.venturedownload.com/.../interrupted.php?ti1=1405000&ti2=0&ti3=2014-02-09T07:12:16.062456 00:00&parameter=Codex Gigas English Pdf&ti1=1405000&ti2=0&ti3=2014-02-09T07:12:16.062456 00:00

http://download.getitfastdownload.com/.../get.php?q=dpinst_exe_64_bit_windows_7&ti1=1240000&ti2=0&ti3=2014-02-08T20:41:09.594143 00:00

http://www.conductdownload.com/download.php?version=1.1.1.20&campid=4000&instid[appname]=Download.The.Wolf.Of.Wall.Street.2013.iTALiAN.MD.DVDSCR.XviD.THK.avi.Torrent...KickassTorrents&instid[appsetupurl]=http://16.get.getmdownloader.com/files/MD_setup_1.0.16.exe&instid[cmdline]=/verysilent&instid[appimageurl]=http://.../static/md/images/logo_150.png&prefix=Download.The.Wolf.Of.Wall.Street.2013.iTALiAN.MD.DVDSCR.XviD.THK.avi.Torrent...KickassTorrents&instid[thankyoupage]=http://.../upgrade&ti1=w200s306i923p15e9c0&ti2=IQEWE_YShH_ap7djWfdPpz1j-qAGWndPBBwcgMJwmpfzmn39QR08aHGmbPCsOACiZLHAk8_5E1wWf0PSQsidxMQ

http://getmdownloader.com/download/.../paMK0AVnCMTXJmKxiw==&k=IdjrjSLtwYwW63kzq8dDUxXKyeHE0jIsWsM1erAIoIj7qtNWOtOsKPJsrU_S33qwkzXBR66jpmsykN-z2yqeryA

http://www.totalitydownload.com/download.php?version=1.1.1.20&campid=3039&instid[appname]=neverwinter nights 2 cd key generator_Downloader&instid[appsetupurl]=http://cdn1.reliabletrusteddownloads.com/d1/MiniGetSetup.exe&instid[cmdline]=/S&instid[appimageurl]=http://download.getitfastdownload.com/d1/logo150x150.png&prefix=neverwinter nights 2 cd key generator&instid[thankyoupage]=http://download.getitfastdownload.com/.../thank_you.php?ti1=1240000&ti2=0&ti3=2014-02-09T11:18:38.946777 00:00&parameter=neverwinter nights 2 cd key generator&instid[interrupted]=http://download.getitfastdownload.com/.../interrupted.php?ti1=1240000&ti2=0&ti3=2014-02-09T11:18:38.946777 00:00&parameter=neverwinter nights 2 cd key generator&ti1=1240000&ti2=0&ti3=2014-02-09T11:18:38.946777 00:00

http://download.getitfastdownload.com/.../get.php?q=neverwinter_nights_2_cd_key_generator&ti1=1240000&ti2=0&ti3=2014-02-09T11:18:38.946777 00:00

http://download.tunydownloadsfast.com/.../get.php?q=Ufc Undisputed 3 Pc Skidrow Extract Password&ti1=990000&ti2=0&ti3=2014-02-07T17:04:27.571234 00:00

http://download.quadownload.com/.../get.php?q=the little black book of neuropsychology pdf&source=500&campaign=2789&ti3=

http://dds5.fb-hosting-apps.com/download.php?version=1.1.1.20&campid=3039&instid[appname]=Edius 4 free download full version_Downloader&instid[appsetupurl]=http://cdn1.reliabletrusteddownloads.com/d1/MiniGetSetup.exe&instid[cmdline]=/S&instid[appimageurl]=http://download.futuresdownload.com/d1/logo150x150.png&prefix=Edius 4 free download full version&instid[thankyoupage]=http://download.futuresdownload.com/.../thank_you.php?ti1=700000&ti2=0&ti3=2014-02-07T03:06:35.403581 00:00&parameter=Edius 4 free download full version&instid[interrupted]=http://download.futuresdownload.com/.../interrupted.php?ti1=700000&ti2=0&ti3=2014-02-07T03:06:35.403581 00:00&parameter=Edius 4 free download full version&ti1=700000&ti2=0&ti3=2014-02-07T03:06:35.403581 00:00

http://download.futuresdownload.com/.../get.php?q=Edius 4 free download full version&ti1=700000&ti2=0&ti3=2014-02-07T03:06:35.403581 00:00

http://www.totalitydownload.com/download.php?version=1.1.1.20&campid=3516&instid[appname]=Fame Academy Pc Game_Downloader&instid[appsetupurl]=http://cdn1.reliabletrusteddownloads.com/d1/MiniGetSetup.exe&instid[cmdline]=/S&instid[appimageurl]=http://download.venturedownload.com/d1/logo150x150.png&prefix=Fame Academy Pc Game&instid[thankyoupage]=http://download.venturedownload.com/.../thank_you.php?ti1=1460000&ti2=0&ti3=2014-02-08T13:17:12.913265 00:00&parameter=Fame Academy Pc Game&instid[interrupted]=http://download.venturedownload.com/.../interrupted.php?ti1=1460000&ti2=0&ti3=2014-02-08T13:17:12.913265 00:00&parameter=Fame Academy Pc Game&ti1=1460000&ti2=0&ti3=2014-02-08T13:17:12.913265 00:00

Latest 30 of 44 download URLs

The executing file has been seen to make the following network communications in live environments.

TCP (HTTP):

Connects to www.soledownload.com (54.225.181.84:80)

TCP (HTTP):

Connects to www.activemonetizer.com (23.23.96.46:80)

http://www.activemonetizer.com/index.php?Net2=v2.0.50727&Net4=&OSversion=NT5.1SP3&Slv=&Sysid=B22295704&Sysid1=B22295704&X64=N&admin=Y&browser=IEXPLORE.EXE&chver=&exe=ikjut__2079593&offver=&lang_DfltUser=04

Remove trojan killer activation code__3515_i339083141_il2529341.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.