home

download plants vs zombies 2 pc full version plus cheat__5328_il950.exe

Amonetize ltd.

This is the Amonetize download manager which bundles applications with offers for additional 3rd party software, mostly unwanted adware, and may be installed with minimal consent. The application download plants vs zombies 2 pc full version plus cheat__5328_il950.exe by Amonetize ltd has been detected as adware by 27 anti-malware scanners. The program is a setup application that uses the Amonetize Downloader installer. The setup program bundles adware offers using the Amonetize, a Pay-Per-Install (PPI) monetization and distribution download manager. The software offerings provided are based on the PC's geo-location at the time of install.
Publisher:
Amonetize ltd.  (signed and verified)

Version:
1.1.6.20

MD5:
a1bf083eb261278880d77e62588f2d34

SHA-1:
12480563ca9838fe26db6db8e25a14bd63164a3d

SHA-256:
7998cbe04eb673db8576e23d7830a66ddffddd3f91449239a634ba0083a9b666

Scanner detections:
27 / 68

Status:
Adware

Explanation:
This setup file is a re-distribution of the original program that bundles various adware offers during installation including toolbars and browser search extensions.

Description:
This 'download manager' is also considered bundleware, a utility designed to download software (possibly legitimate or opensource) and bundle it with a number of optional offers including ad-supported utilities, toolbars, shopping comparison tools and browser extensions.

Analysis date:
4/23/2024 11:15:03 AM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Gen:Variant.Application.Bundler.Amonetize.14
835

Agnitum Outpost
PUA.Amonetize
7.1.1

AhnLab V3 Security
PUP/Win32.Amonetiz
2014.10.20

Avira AntiVirus
ADWARE/Adware.Gen2
7.11.179.192

avast!
Win32:Amonetize-N [PUP]
2014.9-141022

AVG
Generic_r
2015.0.3313

Bitdefender
Gen:Variant.Application.Bundler.Amonetize.14
1.0.20.1475

Comodo Security
ApplicUnwnt
19854

Dr.Web
Adware.Downware.2250
9.0.1.0295

ESET NOD32
Win32/Amonetize.AJ (variant)
8.10589

Fortinet FortiGate
Riskware/Amonetize
10/22/2014

F-Prot
W32/Amonetize.A.gen
v6.4.7.1.166

F-Secure
Gen:Variant.Application.Bundler
11.2014-22-10_4

G Data
Gen:Variant.Application.Bundler.Amonetize.14
14.10.24

K7 AntiVirus
Trojan
13.184.13727

Kaspersky
not-a-virus:AdWare.Win32.Amonetize
14.0.0.3061

Malwarebytes
PUP.Optional.Amonetize
v2014.10.22.06

McAfee
Adware-Amonetize
5600.6969

MicroWorld eScan
Gen:Variant.Application.Bundler.Amonetize.14
15.0.0.885

NANO AntiVirus
Riskware.Win32.Amonetize.cvodil
0.28.2.62671

Quick Heal
AdWare.Amonetize.r5 (Not a Virus)
10.14.14.00

Reason Heuristics
PUP.Installer.Amonetizeltd.?
14.10.22.18

Rising Antivirus
PE:Trojan.Win32.Generic.169A02D3!379192019
23.00.65.141020

Sophos
Amonetize
4.98

Trend Micro
TROJ_SPNR.08H114
10.465.22

Vba32 AntiVirus
AdWare.Amonetize
3.12.26.3

VIPRE Antivirus
Amonetize
34094

File size:
328 KB (335,912 bytes)

Product version:
1.1.6.20

Original file name:
setup.exe

File type:
Executable application (Win32 EXE)

Bundler/Installer:
Amonetize Downloader

Language:
English (United States)

Common path:
C:\users\{user}\downloads\download plants vs zombies 2 pc full version plus cheat__5328_il950.exe

Digital Signature
Signed by:
Amonetize ltd.

Authority:
Thawte, Inc.

Valid from:
3/19/2013 12:00:00 AM

Valid to:
6/19/2015 12:59:59 AM

Subject:
CN=Amonetize ltd., O=Amonetize ltd., L=Raanana, S=Alberta, C=IL

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
235E7B2F1D4E0152189F6381E2BA8C97

File PE Metadata
Compilation timestamp:
3/20/2014 8:05:18 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
6144:3h8tNnS9JVn0ITxdlSG23fB1hqZiW9OelXxoqU4XZQ4PiQEwoMRGtaDs8EBS:3h8tNS9n0I1dlSGQZ1hBSosXe4PiQEwx

Entry address:
0x27174

Entry point:
E8, BC, 95, 00, 00, E9, 89, FE, FF, FF, CC, CC, 53, 56, 8B, 44, 24, 18, 0B, C0, 75, 18, 8B, 4C, 24, 14, 8B, 44, 24, 10, 33, D2, F7, F1, 8B, D8, 8B, 44, 24, 0C, F7, F1, 8B, D3, EB, 41, 8B, C8, 8B, 5C, 24, 14, 8B, 54, 24, 10, 8B, 44, 24, 0C, D1, E9, D1, DB, D1, EA, D1, D8, 0B, C9, 75, F4, F7, F3, 8B, F0, F7, 64, 24, 18, 8B, C8, 8B, 44, 24, 14, F7, E6, 03, D1, 72, 0E, 3B, 54, 24, 10, 77, 08, 72, 07, 3B, 44, 24, 0C, 76, 01, 4E, 33, D2, 8B, C6, 5E, 5B, C2, 10, 00, 57, 8B, C6, 83, E0, 0F, 85, C0, 0F, 85, C1, 00...
 
[+]

Entropy:
6.4594

Code size:
229 KB (234,496 bytes)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.