» Shetef Solutions & Consulting (1998) Ltd.
Digital Signature
Analysis
Files (81)
Downloads (4)
Distribution (3)
Related (10)

Shetef Solutions & Consulting (1998) Ltd.

Publisher Information

Shetef Solutions & Consulting (1998) Ltd. is a software developer located in Rannana, Israel*. The company is a primary distributor of unwanted software. Shetef uses the Amonetize is a pay-per-insall monetization and distribution platform to distribute adware installers as well as other potentially unwanted software, mostly wrapping legitimate programs in adware bundles. Thre are 4 additional code signing certificates issued to this publisher.

Authority:

COMODO CA Limited

Valid from:

9/26/2014 3:00:00 AM

Valid to:

9/27/2015 2:59:59 AM

Subject:

CN=Shetef Solutions & Consulting (1998) Ltd., O=Shetef Solutions & Consulting (1998) Ltd., POBox=43568, STREET=21 Hatlalim St., L=Rannana, S=Rannana, PostalCode=43568, C=IL

Issuer:

CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

009e472ea7b4adb461eb35f9f783da3438

Scanner detections:

Detections (100% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.ShetefSolutionsConsulting1998.Installer (M), PUP.Amonetize.ShetefSolutionsConsulting1998.Bundler (M), PUP.Amonetize.ShetefSo.Bundler (M), PUP.Amonetize (M)

100.00%

Malwarebytes

PUP.Optional.Amonetize

4.00%

Agnitum Outpost

PUA.Amonetize

4.00%

NANO AntiVirus

Riskware.Win32.Downware.dfqeij

4.00%

Dr.Web

Adware.Downware.8618

4.00%

Zillya! Antivirus

Adware.Amonetize.Win32.1272

4.00%

AhnLab V3 Security

PUP/Win32.Amonetiz

4.00%

ESET NOD32

Win32/Amonetize.BR (variant), Win32/Amonetize.BR potentially unwanted (variant)

4.00%

AVG

Generic_r

4.00%

Panda Antivirus

Trj/Genetic.gen, Trj/CI.A

4.00%

1 / 68 (Adware)

setupsetupfile__6338_il3723.exe (9332b174ca55dccee59f442d35e3779d)

1 / 68 (Adware)

smadav.setup__7780_i728999424_il13.exe (6f98441ee4cba301bd2d839ae01a8228)

1 / 68 (Adware)

office 2013 activator__7626_il657.exe (1de5f903d6fe88b73dff212a7c1d0768)

1 / 68 (Adware)

software crack launcher__9169_il316295.exe (8673d14496860d8dabb13d03688282ef)

1 / 68 (Adware)

acdsee.pro.7.full.keygen.download__6629_i1348978521_il601556.exe (ab1e60c36206c2e2e7f8eac9ea0d9d1f)

1 / 68 (Adware)

software crack launcher__9169_il25.exe (8651222199e734bd99f44f64d647c06b)

1 / 68 (Adware)

activation code downloader__9168_il170.exe (4c46bcc8eae0202660c6912d064fc59c)

1 / 68 (Adware)

software crack launcher__9169_il25.exe (b74e5a50bed4ad72112aa94234335da6)

1 / 68 (Adware)

activation code downloader__9168_il170.exe (ce2cee9a5bcd619c8f20e9dff561a26d)

1 / 68 (Adware)

ssd__3472_i1348148759_il126.exe (d5855987de13ba6fafafbf2101b251db)

1 / 68 (Adware)

setup.exe (c414b46ed820e12f63579fbc14e490c3)

1 / 68 (Adware)

tvapp__8821_i1349644379_il152.exe (74f831ed2c6cda05c8aeb2dab42050ef)

1 / 68 (Adware)

flashplayersetup__7343_i1343777583_il2.exe (fe1097d2ade90e210de1cb9fa2cde27e)

1 / 68 (Adware)

flashplayersetup__6802_i480498327_il31.exe (3dd777845ed672f6f904d58f5568e0ae)

1 / 68 (Adware)

mrhbotdz.exe (8ab6c7058fb420d15645f26f2d42d038)

1 / 68 (Adware)

gta 5__9396_il546.exe (6554a9bc8292185c368d3680f9624acb)

1 / 68 (Adware)

flashplayersetup__7343_i1341783090_il2.exe (14cc5ad1e90f828af06eba5d7d820291)

1 / 68 (Adware)

ssd__1_i1349120386_il554270.exe (7b31cb01d1180860bb592be4052d0435)

1 / 68 (Adware)

keygen installer__9167_il79.exe (e5130626301c020c235a9c79001456d9)

1 / 68 (Adware)

family guy the quest for stuff downloader__3687_i1349952460_il765308.exe (e06278040c5575a43410be0df6232458)

1 / 68 (Adware)

flashplayersetup__5462_i1345015842_il7.exe (70ad658319875853dc2d532135b587d1)

1 / 68 (Adware)

ssd__3472_i1343388159_il89.exe (c03473ccf0467e2674d81de95b534ed6)

1 / 68 (Adware)

flashplayersetup__5462_i1344578579_il7.exe (bfbd5b680c530c858fb708b55b507141)

1 / 68 (Adware)

flashplayersetup__5462_i1344255455_il7.exe (89c701e2ac30c73a68a8a9c609a220a1)

1 / 68 (Adware)

flashplayersetup__4607_i1344358986_il1576.exe (342309e7757898071a67d751299fa900)

1 / 68 (Adware)

flashplayersetup__4607_i1343948236_il1576.exe (a5bbba1d5e63175b70373c4c917f649f)

1 / 68 (Adware)

flashplayersetup__7343_i1344640614_il2.exe (2e2fe41b63bc5bb764e0ffa2ed3bbed4)

1 / 68 (Adware)

flashplayersetup__7343_i1341565452_il2.exe (63851d45a9c8e191cc40bd864916b6b6)

1 / 68 (Adware)

kmsnano v25 portable__7821_il3043.exe (c2bf71eb57e9214076266d70fb996f78)

1 / 68 (Adware)

flashplayersetup__7343_i1344814089_il2.exe (6f26fcdf5ce6f28a2b2b423645580373)

Latest 30 of 81 files

Downloads URLs for files signed by Shetef Solutions & Consulting (1998) Ltd..

1 / 68 (Adware)

http://ams1.ib.adnxs.com/click?HVYzMTb-oT8DA_eeXwyeP8uhRbbz_aQ_AwP3nl8Mnj8dVjMxNv6hPz55UTVD4ip38uKNm3ay8TZ0MyhUAAAAAI3KJwDIAQAAdgIAAAIAAADsMi0BL9UFAAAAAQBVU0QAVVNEANgCWgCUwwAADbUAAgUAAQIAAI4AHCXWpwAAAAA./cnd=!cQZaPQi4psICEOzltAkYr6oXIAA./referrer=http://vk.com/feed/clickenc=http://.../direct-download.html?version=1.1.5.89&ci=7343&capp=FlashPlayer&ti1=ams1CPLFt9zpzuz4NhACGL7yxaqzyLiVdyILNS4xOC4xNzYuNTcoATD05qChBQ..&ti2=PMZ&ti3=2607757 (flashplayersetup__7343_i1344640614_il2.exe)

1 / 68 (Adware)

http://xdisc.biz/tracking202/.../dl.php?t202id=1579&c1=18567584611411866503&c2=null&t202kw=2105 POP 318333 (ssd__3472_i1343388159_il89.exe)

34 / 68 (Adware)

http://best.download010.perso.sfr.fr/.../sam__2268_il1604.exe (152adcc13643290c16d3179ecb9c0ae8)

1 / 68 (Adware)

http://www.hdpluginnow.net/direct-download.html?version=1.1.5.55&ci=4607&capp=FlashPlayer&ti1=MzUxOXwzMDQ0fFRIfDN8MXx8|65b474ca1849c607456c55c89fa520c1|ba991710-4266-11e4-a63c-002590f00f96 (flashplayersetup__4607_i1344358986_il1576.exe)

Distribution

The following websites host and distribute files published by Shetef Solutions & Consulting (1998) Ltd..

best.download010.perso.sfr.fr

www.hdpluginnow.net

xdisc.biz

The certificates below are also signed by Shetef Solutions & Consulting (1998) Ltd..

4B1B72BCEFC0E8 (Oct 13, 2014 to Oct 13, 2015)

4F0762A0FB4E2EA75260E9E77B74473E (Jul 19, 2014 to Aug 19, 2015)

7C23DBB97FAFBB9D28D413F836202024 (Jul 22, 2013 to Jul 23, 2014)

40812DA0F7CB2ECD4955FD76E0A6C493 (Feb 21, 2012 to Feb 21, 2013)

The following publishers (by Authenticode signature organization name) are related.

Domains and hosting LLC

* Note, the details and description above are based on the code signing digital signature issued to Shetef Solutions & Consulting (1998) Ltd. by COMODO CA Limited on September 26, 2014 with the serial number '009e472ea7b4adb461eb35f9f783da3438'.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.