home

90a9e711.exe

Shetef Solutions & Consulting (1998) Ltd.

This is the Amonetize download manager which bundles applications with offers for additional 3rd party software, mostly unwanted adware, and may be installed with minimal consent. The application 90a9e711.exe by Shetef Solutions & Consulting (1998) has been detected as adware by 9 anti-malware scanners. The program is a setup application that uses the Amonetize Downloader installer. The setup program bundles adware offers using the Amonetize, a Pay-Per-Install (PPI) monetization and distribution download manager. The software offerings provided are based on the PC's geo-location at the time of install.
Publisher:
Shetef Solutions & Consulting (1998) Ltd.  (signed and verified)

MD5:
f00efc01a18638632b3c5f06fef42260

SHA-1:
fc9fdaf74f86ba1b321b8a154411cbb6e38bc0a8

SHA-256:
437164dd15a15d32c73cdc05eaa6051f6a0bad9ae6a4d7d4070d1077dfeef3ac

Scanner detections:
9 / 68

Status:
Adware

Description:
This 'download manager' is also considered bundleware, a utility designed to download software (possibly legitimate or opensource) and bundle it with a number of optional offers including ad-supported utilities, toolbars, shopping comparison tools and browser extensions.

Analysis date:
4/26/2024 6:25:40 PM UTC  (today)

Scan engine
Detection
Engine version

Agnitum Outpost
PUA.Amonetize
7.1.1

avast!
Win32:Amonetize-FK [PUP]
2014.9-141025

AVG
Generic
2015.0.3310

Baidu Antivirus
Adware.Win32.Amonetize
4.0.3.141025

ESET NOD32
Win32/Amonetize.BQ (variant)
8.10620

Kaspersky
not-a-virus:RiskTool.Win32.Agent
14.0.0.3046

NANO AntiVirus
Riskware.Win32.Agent.dgiplb
0.28.2.62841

Qihoo 360 Security
Win32/Virus.RiskTool.e92
1.0.0.1015

Reason Heuristics
PUP.ShetefSolutionsConsulting1998.I
14.10.25.21

File size:
142.3 KB (145,680 bytes)

File type:
Executable application (Win32 EXE)

Bundler/Installer:
Amonetize Downloader

Digital Signature
Signed by:
Shetef Solutions & Consulting (1998) Ltd.

Authority:
Thawte, Inc.

Valid from:
7/19/2014 8:00:00 PM

Valid to:
8/19/2015 7:59:59 PM

Subject:
CN=Shetef Solutions & Consulting (1998) Ltd., O=Shetef Solutions & Consulting (1998) Ltd., L=Raanana, S=Raanana, C=IL

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
4F0762A0FB4E2EA75260E9E77B74473E

File PE Metadata
Compilation timestamp:
10/23/2014 8:11:50 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
3072:4QIQfVGuao2a6a0RXV0LxQSOrrv6zsJqIvWkiZXkV:4QIQfVGuao2dXV0LxUrrv6YWJ5kV

Entry address:
0x8863

Entry point:
E8, 5A, 6E, 00, 00, E9, 89, FE, FF, FF, 8B, FF, 55, 8B, EC, 83, EC, 20, 8B, 45, 08, 56, 57, 6A, 08, 59, BE, E4, A2, 41, 00, 8D, 7D, E0, F3, A5, 89, 45, F8, 8B, 45, 0C, 5F, 89, 45, FC, 5E, 85, C0, 74, 0C, F6, 00, 08, 74, 07, C7, 45, F4, 00, 40, 99, 01, 8D, 45, F4, 50, FF, 75, F0, FF, 75, E4, FF, 75, E0, FF, 15, EC, A0, 41, 00, C9, C2, 08, 00, 8B, FF, 55, 8B, EC, 81, EC, 28, 03, 00, 00, A3, A8, 07, 42, 00, 89, 0D, A4, 07, 42, 00, 89, 15, A0, 07, 42, 00, 89, 1D, 9C, 07, 42, 00, 89, 35, 98, 07, 42, 00, 89, 3D...
 
[+]

Entropy:
6.4978

Code size:
99.5 KB (101,888 bytes)

Remove 90a9e711.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.