home

crazy craft downloader.rar

The file crazy craft downloader.rar has been detected as a potentially unwanted program by 2 anti-malware scanners. It bundles adware offers using the Amonetize, a Pay-Per-Install (PPI) monetization and distribution download manager. The software offerings provided are based on the PC's geo-location at the time of install. The file has been seen being downloaded from mymediadownloadstwentyfive.com.
MD5:
dc946e27c272fb9c8b3c36e77bde6592

SHA-1:
791d1b29ace23ebdf2073a7754b4d8b7a57475bd

SHA-256:
d5fcf661b98ab239e05dbfa69353af4624437f4137bff7942423578ea24a800e

Scanner detections:
2 / 68

Status:
Potentially unwanted

Analysis date:
1/2/2026 11:08:57 PM UTC  (a few moments ago)

Scan engine
Detection
Engine version

Dr.Web
infected with Trojan.Amonetize.11609
9.0.1.05190

ESET NOD32
Win32/Amonetize.MZ potentially unwanted application
7.0.302.0

File size:
625.2 KB (640,239 bytes)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\crazy craft downloader.rar

The file crazy craft downloader.rar has been seen being distributed by the following URL.

http://mymediadownloadstwentyfive.com/?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

Remove crazy craft downloader.rar - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.