» myegy.com usb.safely.remove 5.2.2 by.maher.rar__3038_i529467468_il2297373.exe
Overview
Analysis
File Details
Downloads (39)

myegy.com usb.safely.remove 5.2.2 by.maher.rar__3038_i529467468_il2297373.exe

The application myegy.com usb.safely.remove 5.2.2 by.maher.rar__3038_i529467468_il2297373.exe has been detected as a potentially unwanted program by 14 anti-malware scanners. The program is a setup application that uses the Amonetize Downloader installer, however the file is not signed with an authenticode signature from a trusted source. The setup program bundles adware offers using the Amonetize, a Pay-Per-Install (PPI) monetization and distribution download manager. The software offerings provided are based on the PC's geo-location at the time of install.

File name:

Version:

1.1.5.90

MD5:

31eac5d0e8d7c413fc5c4e9445b62e53

SHA-1:

7f02e7b1a5a29685298fd13aee002ba5de4a2bc3

SHA-256:

d43eab06207395ae815ef210372e6fd0467472097561085d75e527de6c30cd8e

Scanner detections:

14 / 68

Status:

Potentially unwanted

Description:

This is also known as bundleware, or downloadware, which is an downloader designed to simply deliver ad-supported offers in the setup routine of an otherwise legitimate software.

Analysis date:

4/20/2024 6:55:30 AM UTC (today)

Scan engine

Detection

Engine version

AhnLab V3 Security

PUP/Win32.Amonetiz

14.04.05

Avira AntiVirus

ADWARE/Adware.Gen2

7.11.141.94

avast!

Win32:Amonetize-AK [PUP]

2014.9-140405

Baidu Antivirus

Adware.Win32.Amonetize

4.0.3.1445

Dr.Web

Adware.Downware.2467

9.0.1.095

ESET NOD32

Win32/Amonetize.AJ (variant)

8.9639

Fortinet FortiGate

Riskware/Amonetize

4/5/2014

K7 AntiVirus

Trojan

13.176.11663

Kaspersky

not-a-virus:AdWare.Win32.Amonetize

14.0.0.4063

Malwarebytes

PUP.Optional.Amonetize.A

v2014.04.05.09

McAfee

Artemis!31EAC5D0E8D7

5600.7170

Qihoo 360 Security

Win32/Virus.Adware.932

1.0.0.1015

Sophos

Amonetize

4.98

Trend Micro House Call

TROJ_GEN.R0CBH07D514

7.2.95

File size:

344 KB (352,256 bytes)

Product version:

1.1.5.90

Original file name:

setup.exe

File type:

Executable application (Win32 EXE)

Bundler/Installer:

Amonetize Downloader

Language:

English (United States)

Common path:

C:\users\{user}\appdata\local\temp\myegy.com usb.safely.remove 5.2.2 by.maher.rar__3038_i529467468_il2297373.exe

File PE Metadata

Compilation timestamp:

4/3/2014 4:28:24 PM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

10.0

CTPH (ssdeep):

6144:ZrrInBxmq0WDrW4K3rJpflBINpN9gPeNPvBpTPxrLTbLUYzLLoBZ:ZrrInBxn0WDi4K3rJpfvINAgTZrLTbLi

Entry address:

0x29EB1

Entry point:

E8, D6, 97, 00, 00, E9, 89, FE, FF, FF, CC, CC, CC, CC, CC, 53, 56, 8B, 44, 24, 18, 0B, C0, 75, 18, 8B, 4C, 24, 14, 8B, 44, 24, 10, 33, D2, F7, F1, 8B, D8, 8B, 44, 24, 0C, F7, F1, 8B, D3, EB, 41, 8B, C8, 8B, 5C, 24, 14, 8B, 54, 24, 10, 8B, 44, 24, 0C, D1, E9, D1, DB, D1, EA, D1, D8, 0B, C9, 75, F4, F7, F3, 8B, F0, F7, 64, 24, 18, 8B, C8, 8B, 44, 24, 14, F7, E6, 03, D1, 72, 0E, 3B, 54, 24, 10, 77, 08, 72, 07, 3B, 44, 24, 0C, 76, 01, 4E, 33, D2, 8B, C6, 5E, 5B, C2, 10, 00, 57, 8B, C6, 83, E0, 0F, 85, C0, 0F... 
[+]

Code size:

245.5 KB (251,392 bytes)

The file myegy.com usb.safely.remove 5.2.2 by.maher.rar__3038_i529467468_il2297373.exe has been seen being distributed by the following 39 URLs.

http://download.thankdownload.com/.../get.php?q=How To Get Zp On Lost Saga&ti1=945000&ti2=0&ti3=2014-04-05T13:14:09.137024 00:00

http://download.getitfastdownload.com/.../get.php?q=tes_construction_set_morrowind&ti1=1240000&ti2=13&ti3=2014-04-05T11:40:19.402809 00:00

http://www.transdownload.com/download.php?version=1.1.5.90&campid=2957&instid[appname]=CashAndFiles.Com&instid[appsetupurl]=http://dde.integration.storage.conduit-services.com/75/331/ct3318075/f5c2094f16424713807a20b5019ad3c3/Downloads/Prod/DDE1.3.8.6.131201.01/.../tb_inamsoftwares_brff.exe

http://dds10.fb-hosting-apps.com/download.php?version=1.1.5.90&campid=3515&instid[appname]=Adventure Time Game Psp_Downloader&instid[appsetupurl]=http://go.trustworthydownload.com/getfast/download.cgi?9&ti1=1145000&ti2=0&ti3=2014-04-03T17:27:32.895258 00:00&instid[cmdline]=/S /PERFORMINSTALL /NORUN&instid[appimageurl]=http://download.trustworthydownload.com/d1/logo150x150.png&prefix=Adventure Time Game Psp&instid[thankyoupage]=http://download.trustworthydownload.com/.../thank_you.php?ti1=1145000&ti2=0&ti3=2014-04-03T17:27:32.895258 00:00&parameter=Adventure Time Game Psp&instid[interrupted]=http://download.trustworthydownload.com/.../interrupted.php?ti1=1145000&ti2=0&ti3=2014-04-03T17:27:32.895258 00:00&parameter=Adventure Time Game Psp&ti1=1145000&ti2=0&ti3=2014-04-03T17:27:32.895258 00:00

http://dds10.fb-hosting-apps.com/download.php?version=1.1.5.90&campid=3038&instid[appname]=Adventure Time Game Psp_Downloader&instid[appsetupurl]=http://go.trustworthydownload.com/getfast/download.cgi?9&ti1=1145000&ti2=0&ti3=2014-04-03T17:27:32.895258 00:00&instid[cmdline]=/S /PERFORMINSTALL /NORUN&instid[appimageurl]=http://download.trustworthydownload.com/d1/logo150x150.png&prefix=Adventure Time Game Psp&instid[thankyoupage]=http://download.trustworthydownload.com/.../thank_you.php?ti1=1145000&ti2=0&ti3=2014-04-03T17:27:32.895258 00:00&parameter=Adventure Time Game Psp&instid[interrupted]=http://download.trustworthydownload.com/.../interrupted.php?ti1=1145000&ti2=0&ti3=2014-04-03T17:27:32.895258 00:00&parameter=Adventure Time Game Psp&ti1=1145000&ti2=0&ti3=2014-04-03T17:27:32.895258 00:00

http://download.trustworthydownload.com/.../get.php?q=Adventure Time Game Psp&ti1=1145000&ti2=0&ti3=2014-04-03T17:27:32.895258 00:00

http://q=http://.../1hcssaV

http://dds10.fb-hosting-apps.com/download.php?version=1.1.5.90&campid=3039&instid[appname]=Real Kanojo Full Eng.rar_Downloader&instid[appsetupurl]=http://go.venturedownload.com/getfast/download.cgi?9&ti1=1500000&ti2=0&ti3=2014-04-04T00:06:10.066972 00:00&instid[cmdline]=/S /PERFORMINSTALL /NORUN&instid[appimageurl]=http://download.venturedownload.com/d1/logo150x150.png&prefix=Real Kanojo Full Eng.rar&instid[thankyoupage]=http://download.venturedownload.com/.../thank_you.php?ti1=1500000&ti2=0&ti3=2014-04-04T00:06:10.066972 00:00&parameter=Real Kanojo Full Eng.rar&instid[interrupted]=http://download.venturedownload.com/.../interrupted.php?ti1=1500000&ti2=0&ti3=2014-04-04T00:06:10.066972 00:00&parameter=Real Kanojo Full Eng.rar&ti1=1500000&ti2=0&ti3=2014-04-04T00:06:10.066972 00:00

http://download.venturedownload.com/.../get.php?q=Real_Kanojo_Full_Eng.rar&ti1=1500000&ti2=0&ti3=2014-04-04T00:06:10.066972 00:00

http://dds10.fb-hosting-apps.com/download.php?version=1.1.5.90&campid=3038&instid[appname]=Best Xxx Games 4 U Page 2_Downloader&instid[appsetupurl]=http://go.trustworthydownload.com/getfast/download.cgi?9&ti1=1145000&ti2=0&ti3=2014-04-03T23:39:45.383784 00:00&instid[cmdline]=/S /PERFORMINSTALL /NORUN&instid[appimageurl]=http://download.trustworthydownload.com/d1/logo150x150.png&prefix=Best Xxx Games 4 U Page 2&instid[thankyoupage]=http://download.trustworthydownload.com/.../thank_you.php?ti1=1145000&ti2=0&ti3=2014-04-03T23:39:45.383784 00:00&parameter=Best Xxx Games 4 U Page 2&instid[interrupted]=http://download.trustworthydownload.com/.../interrupted.php?ti1=1145000&ti2=0&ti3=2014-04-03T23:39:45.383784 00:00&parameter=Best Xxx Games 4 U Page 2&ti1=1145000&ti2=0&ti3=2014-04-03T23:39:45.383784 00:00

http://download.trustworthydownload.com/.../get.php?q=Best Xxx Games 4 U Page 2&ti1=1145000&ti2=0&ti3=2014-04-03T23:39:45.383784 00:00

http://www.prudentdownload.com/download.php?version=1.1.5.90&campid=4006&instid[appname]=Onhax Downloader&instid[appsetupurl]=http://onhax.net/On HAX Direct Downloader.exe&instid[cmdline]=Onhax Downloader&instid[appimageurl]=http://cashandfiles.com/wp-content/uploads/2013/12/productlogo.png&prefix=Onhax Downloader&instid[thankyoupage]=http://cashandfiles.com/.../

http://www.singulardownload.com/download.php?version=1.1.5.90&campid=3865&instid[appname]=AUTODESK.SKETCHBOOK.PRO.V6.2.4&instid[appsetupurl]=http://16.get.getmdownloader.com/files/MD_setup_1.0.16.exe&instid[cmdline]=/verysilent&instid[appimageurl]=http://.../static/md/images/logo_150.png&prefix=AUTODESK.SKETCHBOOK.PRO.V6.2.4&instid[thankyoupage]=http://.../upgrade&ti1=w200s303i923p17e9c0&ti2=IYPJujeUloFHe0nPmrHwC94HahYudWqxf-JEW3iYA-LSw5amDVDL7DGfEer_7tdhvWJ78ATwZcBiPk_rNTET1fs

http://getmdownloader.com/.../AUTODESK.SKETCHBOOK.PRO.V6.2.4.html?id=&na=IfWj192PPNGbVUAkaG9VEXoTlaOjuIu6n1CBloKLR6Wg&k=ISkd89ghrwJN3pmvkTibXVSMvLeZEN8p3qPKXpvMwo6rUZzNY1sbzNNz3BwaQbJdyVmgCELQ04VPlajFhtZWy3U

http://www.v4download.com/download.php?id=karthick1&title=IOS-Hacktivate-Tool

http://dds10.fb-hosting-apps.com/download.php?version=1.1.5.90&campid=3039&instid[appname]=Amputea_Downloader&instid[appsetupurl]=http://go.trustworthydownload.com/getfast/download.cgi?9&ti1=1145000&ti2=0&ti3=2014-04-03T16:52:13.768414 00:00&instid[cmdline]=/S /PERFORMINSTALL /NORUN&instid[appimageurl]=http://download.trustworthydownload.com/d1/logo150x150.png&prefix=Amputea&instid[thankyoupage]=http://download.trustworthydownload.com/.../thank_you.php?ti1=1145000&ti2=0&ti3=2014-04-03T16:52:13.768414 00:00&parameter=Amputea&instid[interrupted]=http://download.trustworthydownload.com/.../interrupted.php?ti1=1145000&ti2=0&ti3=2014-04-03T16:52:13.768414 00:00&parameter=Amputea&ti1=1145000&ti2=0&ti3=2014-04-03T16:52:13.768414 00:00

http://download.trustworthydownload.com/.../get.php?q=Amputea&ti1=1145000&ti2=0&ti3=2014-04-03T16:52:13.768414 00:00

http://dds10.fb-hosting-apps.com/download.php?version=1.1.5.90&campid=3516&instid[appname]=alias maya 6_Downloader&instid[appsetupurl]=http://go.wowreadydownloads.com/getfast/download.cgi?9&ti1=1410000&ti2=1&ti3=2014-04-05T08:01:49.906837 00:00&instid[cmdline]=/S /PERFORMINSTALL /NORUN&instid[appimageurl]=http://download.wowreadydownloads.com/d1/logo150x150.png&prefix=alias maya 6&instid[thankyoupage]=http://download.wowreadydownloads.com/.../thank_you.php?ti1=1410000&ti2=1&ti3=2014-04-05T08:01:49.906837 00:00&parameter=alias maya 6&instid[interrupted]=http://download.wowreadydownloads.com/.../interrupted.php?ti1=1410000&ti2=1&ti3=2014-04-05T08:01:49.906837 00:00&parameter=alias maya 6&ti1=1410000&ti2=1&ti3=2014-04-05T08:01:49.906837 00:00

http://download.wowreadydownloads.com/.../get.php?q=alias maya 6&ti1=1410000&ti2=1&ti3=2014-04-05T08:01:49.906837 00:00

http://www.accuratedownload.com/download.php?version=1.1.5.90&campid=5648&instid[appname]=iLividSetup&instid[appsetupurl]=http://download-instantly.com/dl/9f6f0231edd50a05109b50f2b50bc3a6&instid[appimageurl]=http://.../150x150.jpg&prefix=iLividSetup

http://download-instantly.com/isn/js/http://.../iLividSetup.exe

http://dds10.fb-hosting-apps.com/download.php?version=1.1.5.90&campid=3515&instid[appname]=300.Rise.Of.An.Empire.HC.Webrip.x264.AC3.TiTAN.mkv_Downloader&instid[appsetupurl]=http://go.getlinksinaseconds.com/getfast/download.cgi?9&ti1=500000&ti2=1&ti3=2014-04-03T15:29:39.979188 00:00&instid[cmdline]=/S /PERFORMINSTALL /NORUN&instid[appimageurl]=http://download.getlinksinaseconds.com/d1/logo150x150.png&prefix=300.Rise.Of.An.Empire.HC.Webrip.x264.AC3.TiTAN.mkv&instid[thankyoupage]=http://download.getlinksinaseconds.com/.../thank_you.php?ti1=500000&ti2=1&ti3=2014-04-03T15:29:39.979188 00:00&parameter=300.Rise.Of.An.Empire.HC.Webrip.x264.AC3.TiTAN.mkv&instid[interrupted]=http://download.getlinksinaseconds.com/.../interrupted.php?ti1=500000&ti2=1&ti3=2014-04-03T15:29:39.979188 00:00&parameter=300.Rise.Of.An.Empire.HC.Webrip.x264.AC3.TiTA

http://download.getlinksinaseconds.com/.../get.php?q=300.Rise.Of.An.Empire.HC.Webrip.x264.AC3.TiTAN.mkv&ti1=500000&ti2=1&ti3=2014-04-03T15:29:39.979188 00:00&__cookie=guard=1

http://dds10.fb-hosting-apps.com/download.php?version=1.1.5.90&campid=3516&instid[appname]=oreimo ayase 0.4.2.part1.rar_Downloader&instid[appsetupurl]=http://go.verticdn.com/getfast/download.cgi?9&ti1=1585000&ti2=0&ti3=2014-04-03T18:44:13.150192 00:00&instid[cmdline]=/S /PERFORMINSTALL /NORUN&instid[appimageurl]=http://download.verticdn.com/d1/logo150x150.png&prefix=oreimo ayase 0.4.2.part1.rar&instid[thankyoupage]=http://download.verticdn.com/.../thank_you.php?ti1=1585000&ti2=0&ti3=2014-04-03T18:44:13.150192 00:00&parameter=oreimo ayase 0.4.2.part1.rar&instid[interrupted]=http://download.verticdn.com/.../interrupted.php?ti1=1585000&ti2=0&ti3=2014-04-03T18:44:13.150192 00:00&parameter=oreimo ayase 0.4.2.part1.rar&ti1=1585000&ti2=0&ti3=2014-04-03T18:44:13.150192 00:00

http://download.verticdn.com/.../get.php?q=oreimo-ayase-0.4.2.part1.rar&ti1=1585000&ti2=0&ti3=2014-04-03T18:44:13.150192 00:00

http://downloadlink.onhax.net/

http://dds10.fb-hosting-apps.com/download.php?version=1.1.5.90&campid=2789&instid[appname]=wizoo darbuka vst_Downloader&instid[appsetupurl]=http://go.quadownload.com/getfast/download.cgi?9&ti1=500&ti2=2014-04-03T15:00:04 00:00&ti3=&instid[cmdline]=/S /PERFORMINSTALL /NORUN&instid[appimageurl]=http://download.quadownload.com/d1/logo150x150.png&prefix=wizoo darbuka vst&instid[thankyoupage]=http://download.quadownload.com/.../thank_you.php?ti1=500&ti2=2014-04-03T15:00:04 00:00&ti3=&parameter=wizoo darbuka vst&instid[interrupted]=http://download.quadownload.com/.../interrupted.php?ti1=500&ti2=2014-04-03T15:00:04 00:00&ti3=&parameter=wizoo darbuka vst&ti1=500&ti2=2014-04-03T15:00:04 00:00&ti3=

http://download.quadownload.com/.../get.php?q=wizoo darbuka vst&source=500&campaign=2789&ti3=

Latest 30 of 39 download URLs

Remove myegy.com usb.safely.remove 5.2.2 by.maher.rar__3038_i529467468_il2297373.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.