» SimilarWeb Ltd.
Digital Signature
Analysis
Files (32)
Downloads (7)
Distribution (5)
Related (17)

SimilarWeb Ltd.

Publisher Information

SimilarWeb Ltd. is a software developer located in Tel Aviv, Israel*. The publisher primarily developes software that can be classified as adware. There is one additional code signing certificate issued to this publisher.

Authority:

VeriSign, Inc.

Valid from:

3/20/2012 1:00:00 AM

Valid to:

3/21/2013 12:59:59 AM

Subject:

CN=SimilarWeb Ltd., OU=Digital ID Class 3 - Microsoft Software Validation v2, O=SimilarWeb Ltd., L=Tel Aviv, S=Israel, C=IL

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

437307139ab8798c2cf18a6b3a5ca054

Scanner detections:

Detections (100% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.SimilarWeb.W, PUP.Toolbar.SimilarWeb.M, PUP.SimilarWeb.M, PUP.SimilarWeb.S, PUP.SimilarWeb.H, PUP.SimilarWeb.K, PUP.SimilarWeb.P, PUP.SimilarWeb.G, PUP.SimilarGroup.SimilarWeb.Installer (M), PUP.SimilarGroup.SimilarW.Installer (M), PUP.SimilarGroup (M)

100.00%

Dr.Web

Trojan.DownLoader11.1174, Adware.Downware.1509, Adware.Downware.1509, Win32.HLLW.Tazebama

28.13%

Norman

Downloader, Win32.Worm.Mabezat.Gen

12.50%

avast!

Win32:Rootkit-gen [Rtk], Win32:Mabezat [Wrm]

6.25%

Boost by Reason

Adware.SimilarWeb.W

3.13%

Avira AntiVirus

Adware/Downware.djd

3.13%

VIPRE Antivirus

Trojan.Win32.Generic

3.13%

Trend Micro House Call

TROJ_GEN.R0CBH07I613

3.13%

Trend Micro

TROJ_GEN.R0CBC0OJF13

3.13%

Vba32 AntiVirus

TrojanDownloader.Genome

3.13%

1 / 68 (PUP)

similarbundlegenericdl.exe (SimilarSites) (7e7cc429bb47d1fb97f3f9aaa4b8d5da)

1 / 68 (PUP)

similarsites.exe (SimilarSites) (736d1b73f4a02683f925bfbff4444be4)

1 / 68 (PUP)

similarsites.exe (SimilarSites) (730bb9ec9e7e5a0b2524259d623d9ff5)

1 / 68 (PUP)

similarsites.exe (SimilarSites) (80a2f1326a509c993e4deb23bd4af364)

1 / 68 (PUP)

a0182284.exe (SimilarSites) (6da46c3866fb7286316ffee1db309bba)

1 / 68 (PUP)

similarsites.exe (SimilarSites) (04eadf02075fa8001fd5e42ffc2dd1b6)

1 / 68 (PUP)

similarweb.exe (SimilarWeb) (74c22ea06529c4e454e3dab154c8eb02)

1 / 68 (PUP)

similarsites.exe (SimilarSites) (14532bd20e5fa182e9a7fe4b6f393008)

1 / 68 (PUP)

similarsites.exe (SimilarSites) (74ce3659a8b63b722a0fc6d519d42de2)

1 / 68 (PUP)

similarsites.exe (SimilarSites) (b114e5d9577483cac87f862b54af67f2)

1 / 68 (PUP)

similarsites.exe (SimilarSites) (da2638611a09da4ec49c77bbff2a81e7)

1 / 68 (PUP)

similar.exe (SimilarSites) (59d01d3102dbd4d59ebdb26263b49fc8)

1 / 68 (PUP)

similarweb.exe (SimilarWeb) (bfc288d61ceb081c71cb796a137067c2)

1 / 68 (PUP)

similar.exe (SimilarSites) (ee6acb7d9be48f062136962f2228af1e)

1 / 68 (PUP)

similarbundlegenericdl.exe (SimilarSites) (35b44f28a501e5f2a3d54e781c155e62)

1 / 68 (PUP)

similar.exe (SimilarSites) (a26700c7269d0e43e19b27fbab9cf5d7)

1 / 68 (PUP)

similarbundleask.exe (SimilarSites) (66e6675cf0dfba86ea36fcf552d9720d)

1 / 68 (PUP)

similarbundleimdl.exe (SimilarSites) (86ff668f8ec0917af3a4ece15e054e20)

1 / 68 (PUP)

similarsites.exe (SimilarSites) (5476ceb8ee19f00d6f9fad0a3bef1657)

1 / 68 (PUP)

similar.exe (SimilarSites) (d866b62a49edbe6599de8709c6563d87)

11 / 68 (PUP)

4ecd475a-a99c-3b4a-ec25-6f11b225b1d6 (SimilarSites) (b97c16c044aed10c80ad5df90c081456)

2 / 68 (PUP)

similarsites.exe (SimilarSites) (0440fedd48416eaf5d4b5b42059eb385)

1 / 68 (PUP)

simweb.exe (SimilarWeb by SimilarGroup) (2d494a17bc463babdee29f24842bb34c)

4 / 68 (PUP)

similarbundledl.exe (SimilarSites) (d6b659ccaa7a769a922b16849405b7c4)

2 / 68 (PUP)

similarweb.exe (SimilarWeb) (631511cad57b6238b767e65fcd1b1a66)

2 / 68 (PUP)

similarsites.exe (SimilarSites) (a129ec8e8ff9e298a7660fb24f631ebc)

1 / 68 (PUP)

similar.exe (SimilarSites) (12b8fc6fb848c20216392c04a45f8cc4)

2 / 68 (PUP)

similarsites.exe (SimilarSites) (a34b5176569a311bb6bddd15c9fd25c2)

7 / 68 (PUP)

similarwebbundledl.exe (SimilarWeb by SimilarGroup) (e2c4e64209e1dc62361b0f9d00f61436)

2 / 68 (PUP)

similarsites.exe (SimilarSites) (137c80ce90a2ecbbb4385afab50f5e26)

Latest 30 of 32 files

Downloads URLs for files signed by SimilarWeb Ltd..

2 / 68 (PUP)

http://www.similarsites.com/.../similarsites.exe (0440fedd48416eaf5d4b5b42059eb385)

7 / 68 (PUP)

http://sd-cf.en.softonic.com/69654000/69654857/.../SimilarWebBundleDl.exe (e2c4e64209e1dc62361b0f9d00f61436)

2 / 68 (PUP)

http://utils.similargroup.com/.../similarweb.exe (631511cad57b6238b767e65fcd1b1a66)

7 / 68 (PUP)

http://www.similicio.us/.../SimilarBundleGenericDl.exe (a669d4dc843f51835ac8539961fc031e)

2 / 68 (PUP)

http://utils.similargroup.com/.../similarsites.exe (137c80ce90a2ecbbb4385afab50f5e26)

7 / 68 (PUP)

http://gsf-cf.softonic.com//332/424/.../file?id_file=69662175&channel=WEB&instance=softonic_es&type=RECOFFER&fdh=no&SD_used=1&Expires=1373796054&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=fpz3FpTRyIptAqdKagBLkTj5vLJOTnAtogu6LZeyw2r1zGSecVpoByX7aPGnVxK3WmUK9lyj2RfTbonOHH-BdikM~BLuingKf8n2AMgrnptVGZTpcquqdkDknL7ulW~Dj8ERQqsscc7WFgq6JTxzy1mwW0HJIo6jX7KwVBXZkCE_&filename=SimilarBundleGenericDl.exe (a669d4dc843f51835ac8539961fc031e)

7 / 68 (PUP)

http://cdn.ppdownload.com/Installer/.../similarbundlegenericdl.exe (a669d4dc843f51835ac8539961fc031e)

Distribution

The following websites host and distribute files published by SimilarWeb Ltd..

www.similicio.us

utils.similargroup.com

gsf-cf.softonic.com

sd-cf.en.softonic.com

cdn.ppdownload.com

The following certificate is also signed by SimilarWeb Ltd..

20D71AF6EFC8A362653EAFE639021DB1 (Apr 04, 2013 to May 04, 2014)

The following publishers (by Authenticode signature organization name) are related.

Multiply ROI, Inc

OutBrowse LTD

DealPly Technologies Ltd

Big Water Applications, LLC

Strongvault Online Storage LLC

Linkury

* Note, the details and description above are based on the code signing digital signature issued to SimilarWeb Ltd. by VeriSign, Inc. on March 20, 2012 with the serial number '437307139ab8798c2cf18a6b3a5ca054'.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.