home

sam__2268_il41583.exe

The application sam__2268_il41583.exe has been detected as a potentially unwanted program by 22 anti-malware scanners. This is a setup program which is used to install the application. The setup program bundles adware offers using the Amonetize, a Pay-Per-Install (PPI) monetization and distribution download manager. The software offerings provided are based on the PC's geo-location at the time of install. The file has been seen being downloaded from www.auto-sleepy-files-hurricane2.net.
Version:
1.1.5.26

MD5:
240144f3138b8036e9d55d71a56593d5

SHA-1:
33aeed025922cceca47f82548b1fb4359bad6936

SHA-256:
fefa0e1f9835b52028171c4ff570531b55438236cedf84d7a2b716136acb9f00

Scanner detections:
22 / 68

Status:
Potentially unwanted

Analysis date:
5/2/2024 5:20:52 AM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Gen:Variant.Application.Bundler.Amonetize.26
664

AhnLab V3 Security
PUP/Win32.Amonetize
2015.04.08

Avira AntiVirus
ADWARE/Adware.Gen2
3.6.1.96

Baidu Antivirus
PUA.Win32.Amonetize
4.0.3.15412

Bitdefender
Gen:Variant.Application.Bundler.Amonetize.26
1.0.20.510

Dr.Web
Trojan.Amonetize.2248
9.0.1.0102

Emsisoft Anti-Malware
Gen:Variant.Application.Bundler.Amonetize.26
9.0.0.4799

ESET NOD32
Win32/Amonetize.EA potentially unwanted application
7.0.302.0

Fortinet FortiGate
Riskware/Amonetize
4/12/2015

F-Secure
Riskware.Gen:Variant.Application.Bundler
11.2015-12-04_1

G Data
Gen:Variant.Application.Bundler.Amonetize.26
15.4.25

herdProtect (fuzzy)
variant of new blue titler pro 3 crack ac downloader__3687_i1493165573_il392235.exe (Adware)
2015.7.14.11

Kaspersky
not-a-virus:AdWare.Win32.Amonetize
14.0.0.2205

McAfee
Program.Artemis!240144F3138B
16.8.708.2

MicroWorld eScan
Gen:Variant.Application.Bundler.Amonetize.26
16.0.0.306

NANO AntiVirus
Riskware.Win32.Amonetize.dpzxbi
0.30.10.952

Panda Antivirus
Trj/Genetic.gen
15.04.12.12

Qihoo 360 Security
HEUR/QVM10.1.Malware.Gen
1.0.0.1015

Reason Heuristics
Threat.Win.Reputation.IMP
15.4.12.0

Sophos
Generic PUA DD
4.98

Trend Micro House Call
Suspicious_GEN.F47V0407
7.2.102

VIPRE Antivirus
Threat.4657539
38950

File size:
1.2 MB (1,283,072 bytes)

Product version:
1.1.5.26

Original file name:
setup.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\sam__2268_il41583.exe

File PE Metadata
Compilation timestamp:
4/7/2015 9:00:26 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
12288:Pbh48PixUVwnpjoyWH/bAt+HvttIuQJj0VREm/BsuD5H9qnGUD7NCbKchx2sC7VM:t48Vwntm/BJNUD7SK4FaIZHI

Entry address:
0xAA61B

Entry point:
E8, 07, 03, 01, 00, E9, 89, FE, FF, FF, 50, 64, FF, 35, 00, 00, 00, 00, 8D, 44, 24, 0C, 2B, 64, 24, 0C, 53, 56, 57, 89, 28, 8B, E8, A1, 74, 3E, 50, 00, 33, C5, 50, FF, 75, FC, C7, 45, FC, FF, FF, FF, FF, 8D, 45, F4, 64, A3, 00, 00, 00, 00, C3, 50, 64, FF, 35, 00, 00, 00, 00, 8D, 44, 24, 0C, 2B, 64, 24, 0C, 53, 56, 57, 89, 28, 8B, E8, A1, 74, 3E, 50, 00, 33, C5, 50, 89, 65, F0, FF, 75, FC, C7, 45, FC, FF, FF, FF, FF, 8D, 45, F4, 64, A3, 00, 00, 00, 00, C3, 50, 64, FF, 35, 00, 00, 00, 00, 8D, 44, 24, 0C, 2B...
 
[+]

Code size:
907.5 KB (929,280 bytes)

The file sam__2268_il41583.exe has been seen being distributed by the following URL.

http://www.auto-sleepy-files-hurricane2.net/.../inSSIDer 4.0.0.20 for Windows Full Version (Serial Number)__3613_il3627.exe

Remove sam__2268_il41583.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.