home

commonsdll.dll

TECHNOINOX LTD

This is the Amonetize download manager which bundles applications with offers for additional 3rd party software, mostly unwanted adware, and may be installed with minimal consent. The module commonsdll.dll by TECHNOINOX has been detected as adware by 21 anti-malware scanners. The program is a setup application that uses the Amonetize Downloader installer. The setup program bundles adware offers using the Amonetize, a Pay-Per-Install (PPI) monetization and distribution download manager. The software offerings provided are based on the PC's geo-location at the time of install.
Publisher:
TECHNOINOX LTD  (signed and verified)

MD5:
ed453112ba2f8dac3a8254431fe6c1f1

SHA-1:
a748a9f1d133588e1ab4ecee573a14950776d1df

SHA-256:
d9ede5e0e7e883552564fce7b0a79b3b9ac341c69abd34468f7850877ed94236

Scanner detections:
21 / 68

Status:
Adware

Description:
This is also known as bundleware, or downloadware, which is an downloader designed to simply deliver ad-supported offers in the setup routine of an otherwise legitimate software.

Analysis date:
4/23/2024 6:33:38 PM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Gen:Variant.Application.Bundler.Amonetize.23
655

Avira AntiVirus
Adware/AgentCV.A.119
7.11.206.68

AVG
Generic
2016.0.3133

Bitdefender
Gen:Variant.Application.Bundler.Amonetize.23
1.0.20.555

Dr.Web
Trojan.Amonetize.435
9.0.1.0111

ESET NOD32
Win32/Amonetize.CW potentially unwanted (variant)
9.11104

Fortinet FortiGate
Adware/Amonetize
4/21/2015

F-Prot
W32/S-265fe587
v6.4.7.1.166

F-Secure
Gen:Variant.Application.Bundler
11.2015-21-04_3

G Data
Gen:Variant.Application.Bundler.Amonetize.23
15.4.25

IKARUS anti.virus
AdWare.AgentCV
t3scan.1.8.6.0

K7 AntiVirus
Unwanted-Program
13.193.14818

Kaspersky
not-a-virus:HEUR:AdWare.Win32.Amonetize
14.0.0.2159

McAfee
Artemis!ED453112BA2F
5600.6789

MicroWorld eScan
Gen:Variant.Application.Bundler.Amonetize.23
16.0.0.333

NANO AntiVirus
Riskware.Win32.Amonetize.dmgnrg
0.30.0.65070

Qihoo 360 Security
Win32/Virus.Adware.ab8
1.0.0.1015

Reason Heuristics
Threat.Amonetize.Bundler
15.4.21.0

Sophos
Amonetize
4.98

Trend Micro House Call
TROJ_GEN.R021H07AS15
7.2.111

VIPRE Antivirus
Trojan.Win32.Generic
37142

File size:
253.5 KB (259,600 bytes)

File type:
Dynamic link library (Win32 DLL)

Bundler/Installer:
Amonetize Downloader

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\commonsdll.dll

Digital Signature
Signed by:
TECHNOINOX LTD

Authority:
Thawte, Inc.

Valid from:
11/9/2014 7:00:00 PM

Valid to:
11/10/2015 6:59:59 PM

Subject:
CN=TECHNOINOX LTD, O=TECHNOINOX LTD, L=Novomoskovsk, S=Novomoskovsk, C=UA

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
289382C761C954AB4B4868F20770B328

File PE Metadata
Compilation timestamp:
1/11/2015 4:02:54 PM

OS version:
6.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
12.0

CTPH (ssdeep):
3072:xq4YV49lXTb1aTEjQGYGnyfxdsdtgNvKmavGRqmmgCsEZUpQmpRCxq4q8UBD6ZaH:xq4YVAcGYKypxJKSWVs1pJ5JKcb

Entry address:
0x1A0CB

Entry point:
55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, BC, 93, 00, 00, FF, 75, 10, FF, 75, 0C, FF, 75, 08, E8, 07, 00, 00, 00, 83, C4, 0C, 5D, C2, 0C, 00, 6A, 0C, 68, E8, 9F, 03, 10, E8, F6, 3D, 00, 00, 33, C0, 40, 8B, 75, 0C, 85, F6, 75, 0C, 39, 35, 84, E0, 03, 10, 0F, 84, E4, 00, 00, 00, 83, 65, FC, 00, 83, FE, 01, 74, 05, 83, FE, 02, 75, 35, 8B, 0D, AC, 09, 03, 10, 85, C9, 74, 0C, FF, 75, 10, 56, FF, 75, 08, FF, D1, 89, 45, E4, 85, C0, 0F, 84, B1, 00, 00, 00, FF, 75, 10, 56, FF, 75, 08, E8, 11, FE, FF, FF, 89, 45, E4...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
183 KB (187,392 bytes)

Remove commonsdll.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.