gbooks__1598_i1597587443_il207.exe.rar

The file gbooks__1598_i1597587443_il207.exe.rar has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. It bundles adware offers using the Amonetize, a Pay-Per-Install (PPI) monetization and distribution download manager. The software offerings provided are based on the PC's geo-location at the time of install. The file has been seen being downloaded from www.nice-cat.xyz.
MD5:
0a4b6b235e58e36b3aa59e87b1459263

SHA-1:
5453c9f8f1cc36020a7bffa30a36b47a103d218b

SHA-256:
0e1d0f5e5d7a67fa67c53dd80949ef8400fa1cc928c1b440754054814f937ff9

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
5/18/2024 11:17:28 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
Adware.Amonetize (M)
16.8.10.18

File size:
582.5 KB (596,482 bytes)

Common path:
C:\users\{user}\downloads\gbooks__1598_i1597587443_il207.exe.rar

The file gbooks__1598_i1597587443_il207.exe.rar has been seen being distributed by the following URL.

Remove gbooks__1598_i1597587443_il207.exe.rar - Powered by Reason Core Security