» Simple Leads LLC
Digital Signature
Analysis
Files (20)
Downloads (25)
Distribution (9)
Related (130)

Simple Leads LLC

Publisher Information

Simple Leads LLC is a software publisher located in New Rochelle, New York in the United States*. The publisher primarily developes software that can be classified as adware. Thre are 3 additional code signing certificates issued to this publisher.

Authority:

DigiCert Inc

Valid from:

1/16/2014 7:00:00 PM

Valid to:

1/20/2015 7:00:00 AM

Subject:

CN=Simple Leads LLC, O=Simple Leads LLC, L=New Rochelle, S=New York, C=US

Issuer:

CN=DigiCert High Assurance Code Signing CA-1, OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:

0dd2231e795cde5e876606fc14eaee4f

Scanner detections:

Detections (100% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.SimpleLeads.M, PUP.SimpleLeads.H, Adware.Installer.SimpleLeads.M, PUP.SimpleLeads.K, PUP.Installer.SimpleLeads.F, PUP.SimpleLeads.T, PUP.SimpleLe.Installer (M), PUP (M)

100.00%

F-Prot

W32/VBTrojan.Dropper.2, W32/AutoIt.AQ2.gen

15.00%

McAfee

Artemis!001529AB0AB4, Artemis!EB798F4A1DC4

10.00%

K7 AntiVirus

Trojan

10.00%

Trend Micro House Call

TROJ_GEN.F47V0201, TROJ_GE.9797A2AA

10.00%

1 / 68 (PUP)

registrycleanerfree.exe (Registry Cleaner FREE by Registry Cleaner FREE) (b9554002f4869bd5fd974486bb47db33)

1 / 68 (PUP)

errortoolspcrepair.exe (Error Tools PC Repair by Error Tools PC Repair) (b03327defa0f443a40228885ec80a6dc)

1 / 68 (PUP)

oneclickroot.exe (OneClickRoot) (436c5e6f37f4e6360a5b9bafaef55ab1)

1 / 68 (PUP)

oneclickroot.exe (OneClickRoot) (14f4f85b85f6f6da30a7267f835ad499)

1 / 68 (PUP)

oneclickroot.exe (OneClickRoot) (f56fd5a0920727f48122c1ba498cf375)

1 / 68 (PUP)

oneclickroot_installer.exe (OneClickRoot) (f43df860dd4d0778470b78f187bc10a7)

1 / 68 (PUP)

oneclickroot.exe (OneClickRoot) (c0f1f736335349502d27be7a6b4c9238)

2 / 68 (PUP)

errortoolspcrepair.exe.infected (Error Tools PC Repair by Error Tools PC Repair) (dc8f0264ef199c192da2afd39d4f8300)

1 / 68 (PUP)

Updater.exe (Updater) (0abdf184e529059aeade8ef3c56d36cd)

1 / 68 (PUP)

FreeRegistryCleaner.exe (FreeRegistryCleaner) (e20a29113b2ad76b66c8505a2297374d)

1 / 68 (PUP)

Updater.exe (Updater) (c515558e273f6dc1d1414aa30a492857)

1 / 68 (PUP)

FreeRegistryCleaner.exe (FreeRegistryCleaner) (e332a617e53c43202255887a5555df99)

1 / 68 (PUP)

Updater.exe (Updater) (dbf01d7f5c90cedd0e12cdad3802d5be)

1 / 68 (PUP)

devicerooter.exe (AndroidRooter) (dfadd0c42681999d68fd673d40f59a69)

1 / 68 (PUP)

Downloader.exe (Downloader) (bd42a169acb1337872a707cdd467b89d)

5 / 68 (PUP)

Setup.exe (OneClickRoot) (54619cb06e578beb8904c2365c9ae07c)

1 / 68 (PUP)

Downloader.exe (Downloader) (4cce5ff1dd9a4bf3642bbce0f1bba47a)

5 / 68 (PUP)

oneclickroot.exe (OneClickRoot) (001529ab0ab4da03810e6acd6313f61f)

1 / 68 (PUP)

Updater.exe (Updater) (6db228a198987afee1c5c85f00e2f457)

1 / 68 (PUP)

devicerooter.exe (AndroidRooter) (6eef4677befb595fdc2272e71dcd3229)

Downloads URLs for files signed by Simple Leads LLC.

5 / 68 (PUP)

temp:OneClickRoot.exe (54619cb06e578beb8904c2365c9ae07c)

5 / 68 (PUP)

https://d1.downlod.me/d/.../OneClickRoot.exe (54619cb06e578beb8904c2365c9ae07c)

5 / 68 (PUP)

http://oneclickroot.software.informer.com/.../ (Setup.exe)

5 / 68 (PUP)

http://hexamob.oneclickroot.revenuewire.net/oneclickroot/.../ (Setup.exe)

2 / 68 (PUP)

https://s3.amazonaws.com/.../ErrorToolsPCRepair.exe (dc8f0264ef199c192da2afd39d4f8300)

2 / 68 (PUP)

http://files.downloadnow.com/s/software/13/75/66/.../ErrorToolsPCRepair.exe (dc8f0264ef199c192da2afd39d4f8300)

2 / 68 (PUP)

http://gsf-cf.softonic.com/f85/da9/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69684205&instance=softonic_en&type=PROGRAM&Expires=1460081561&Signature=hf1wq4Dx5AlKgWlGpH1SiVscc92GUsIBie2d0W5ykW-GaqI2WaB9Ky2qM-IOqVjw1MbxZz9fod1hUNvcTcEXt2IMkosdJtlf04-qePX7grvaLs8wpHsnG7yPa0t1MpnAlBDJwFcljbGlOkR5RiqGOtfbNC1x~nXrgkNuGNE0wTA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ErrorToolsPCRepair.exe (dc8f0264ef199c192da2afd39d4f8300)

5 / 68 (PUP)

https://userscloud.com/06rhf9qpx5x8 (Setup.exe)

2 / 68 (PUP)

http://gsf-cf.softonic.com/f85/da9/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69684205&instance=softonic_en&type=PROGRAM&Expires=1443329159&Signature=Rpl6Rw5psQKrgTgIaPejUZw2DuXTdVozyIGH7pCZkHHIArWdzT97gbYfQLwMxoXauvJm1vE1vTiQYZV0VwvNn~3-BT1BYjya7zr7Lv-32QMNJRNYXWzUup7UesdavnMFtfyd8veY1Tokaa0CWBNbWfmPm2OwgQ3mrxnCqqKk6yQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ErrorToolsPCRepair.exe (dc8f0264ef199c192da2afd39d4f8300)

5 / 68 (PUP)

http://s3.amazonaws.com/.../OneClickRoot.exe (54619cb06e578beb8904c2365c9ae07c)

5 / 68 (PUP)

http://goo.gl/qZCxy (Setup.exe)

5 / 68 (PUP)

http://goo.gl/8qyfZ (Setup.exe)

5 / 68 (PUP)

http://www.oneclickroot.net/.../ (Setup.exe)

5 / 68 (PUP)

https://s3.amazonaws.com/.../OneClickRoot.exe (54619cb06e578beb8904c2365c9ae07c)

5 / 68 (PUP)

https://s3.amazonaws.com/.../OneClickRoot.exe (001529ab0ab4da03810e6acd6313f61f)

5 / 68 (PUP)

http://api.kbm2.com/downloadLauncher.ashx?cid=554 (oneclickroot.exe)

5 / 68 (PUP)

http://statstemp.rootsupport.net/dl/http://.../downloadLauncher.ashx?cid=554 (oneclickroot.exe)

5 / 68 (PUP)

https://s3.amazonaws.com/.../OneClickRoot.exe (54619cb06e578beb8904c2365c9ae07c)

5 / 68 (PUP)

https://s3.amazonaws.com/.../OneClickRoot.exe (001529ab0ab4da03810e6acd6313f61f)

5 / 68 (PUP)

http://www.oneclickroot.net/.../ (oneclickroot.exe)

5 / 68 (PUP)

https://s3.amazonaws.com/.../OneClickRoot.exe (54619cb06e578beb8904c2365c9ae07c)

5 / 68 (PUP)

http://statstemp.rootsupport.net/dl/https://s3.amazonaws.com/.../OneClickRoot.exe (54619cb06e578beb8904c2365c9ae07c)

5 / 68 (PUP)

https://s3.amazonaws.com/.../OneClickRoot.exe (54619cb06e578beb8904c2365c9ae07c)

5 / 68 (PUP)

http://statstemp.rootsupport.net/dl/https://s3.amazonaws.com/.../OneClickRoot.exe (001529ab0ab4da03810e6acd6313f61f)

5 / 68 (PUP)

https://s3.amazonaws.com/.../OneClickRoot.exe (001529ab0ab4da03810e6acd6313f61f)

Distribution

The following websites host and distribute files published by Simple Leads LLC.

hexamob.oneclickroot.revenuewire.net

files.downloadnow.com

userscloud.com

www.oneclickroot.net

gsf-cf.softonic.com

statstemp.rootsupport.net

goo.gl

api.kbm2.com

s3.amazonaws.com

The certificates below are also signed by Simple Leads LLC.

079005AFBD2EFBF77EF042AE1BFD1F2C (Apr 11, 2016 to Mar 08, 2017)

0C438EAA28B2E092DF60468F68134025 (Dec 29, 2014 to Feb 19, 2016)

03C4C30F42CC844B90923615BE908F07 (Dec 30, 2012 to Jan 08, 2014)

The following publishers (by Authenticode signature organization name) are related.

Banner LLC

LLC

Best Download Manager

Safe Software (Rspark LLC)

InstallX, LLC

OutBrowse

Secure Download (Rspark LLC)

MP3 TechSupport LLC

Philipp B. Winterberg

Kreapixel

Digital Volcano software Ltd

Beijing AmazGame Age Internet Technology Co., Ltd.

PowerOfSOftware Ltd.

Mindspark Interactive Network

Consumer Software International

30 of 130 publishers

* Note, the details and description above are based on the code signing digital signature issued to Simple Leads LLC by DigiCert Inc on January 16, 2014 with the serial number '0dd2231e795cde5e876606fc14eaee4f'.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.