» Somoto Ltd.
Digital Signature
Analysis
Files (14,438)
Downloads (2)
Domains (11)
Related (3)

Somoto Ltd.

Publisher Information

Somoto Ltd. is a software developer located in Tel Aviv, Israel*. The company is a primary distributor of unwanted software. Somoto uses a monetization platform known as the 'Better Installer' to provide the ability of 3rd party developers to bundle various adware packages through an affiliate pay-per-install program. There is one additional code signing certificate issued to this publisher.

Authority:

Thawte, Inc.

Valid from:

7/1/2014 9:00:00 PM

Valid to:

7/2/2015 8:59:59 PM

Subject:

CN=Somoto Ltd., O=Somoto Ltd., L=Tel Aviv, S=Israel, C=IL

Issuer:

CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:

6a0c39d0252522a9c448352858acaacb

Scanner detections:

Detections (100% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.Somoto (M)

100.00%

1 / 68 (Adware)

720-nsi382-naruchigo_downloader-i39uuclsf.exe (d77f7f7fc63111dfdeb2a974b2258854)

1 / 68 (Adware)

flvplayersetup-n0mxuhibr.exe (2f18688ced88a7a6d7a14a98e54fb2ea)

1 / 68 (Adware)

nsva93d.tmp (f339bf9be6182330a829e9a5d831a6e3)

1 / 68 (Adware)

nst1671.tmp (96e175aec457230b08914f48231bce8c)

1 / 68 (Adware)

dejadll.win32.dll (10c17767d1415f7da4ff22d4c508cfe1)

1 / 68 (Adware)

nst5bfb.tmp (5a2f166cb21d1c2f3a5a1948c49372d4)

1 / 68 (Adware)

00000000 (2ac858f5becf84bcaba294555e8c2fb3)

1 / 68 (Adware)

flvplayer_downloader-ndmpjyogo.exe (a1cb105bd175cf728656d59d25b6e0d4)

1 / 68 (Adware)

00000000 (3374be0df9088ce319cbc45b71cff4aa)

1 / 68 (Adware)

engel_tboston_rs4800y_hd_new_engel_remote_080213_downloader-i6bp0v2j6.exe (fccbbfafc98a2ca782c71581722fb761)

1 / 68 (Adware)

00000001 (aa2df8740e5f78abd6fac26564484c2c)

1 / 68 (Adware)

setup.exe (dfeb4b63fc5254e91708cd5cac969a7b)

1 / 68 (Adware)

00000000 (ff517af35f505ffd72253a838ef379e2)

1 / 68 (Adware)

nsw110.tmp (a20b4d7f381a15a283643ea493a42937)

1 / 68 (Adware)

videoconvertersetup-n84qbhmb1.exe (67e16876057f9d4d3931e2538c4801f0)

1 / 68 (Adware)

00000002 (723d8f2dd9a00fe169bb7ddc0e233d7d)

1 / 68 (Adware)

00000001 (e0b5018a98e3a9bde921499fafc03726)

1 / 68 (Adware)

civilizationvzeus_downloader_by_turkceyama.exe (af4f6821feac103ba07225e115988b1a)

1 / 68 (Adware)

how_downloader-i1j9qgxdr.exe (9d7eef7aa6ca36a366f36d8d36edbf3c)

1 / 68 (Adware)

nsv6b08.tmp (c2e905b19029847f0f2bfad1fd69c693)

1 / 68 (Adware)

nsmb1a8.tmp (effcda3462de4576d2a67a9170f35887)

1 / 68 (Adware)

nsz63.tmp (d8f3243d04ffe2300a3ae0bed0d5cfa5)

1 / 68 (Adware)

plugin_downloader-ifoyjtndq.exe (db61a8cc01e95ded624d312991df4ab8)

1 / 68 (Adware)

nsxf014.tmp (cfd231a764bad6b63952a95a65c1026c)

1 / 68 (Adware)

nsob488.tmp (5779c1f5441e29f9b0ecd003164d4c7f)

1 / 68 (Adware)

nspa175.tmp (6dcb818651b8b7af9a5df0b9779bb9df)

1 / 68 (Adware)

nsnb735.tmp (aeb016ed515ff0717734604b46fbdc4d)

1 / 68 (Adware)

flvplayer_downloader-n2ku2pril.exe (4f689b588ce882e5f48ded111818faff)

1 / 68 (Adware)

flvplayer_downloader-n4qv1rvfx.exe (85404c9d0d06183fb281d465f69de797)

1 / 68 (Adware)

00000000 (5c65bd655f81eae99feba3cd2d398a77)

Latest 30 of 14,438 files

Downloads URLs for files signed by Somoto Ltd..

1 / 68 (Adware)

http://www.solidfiles.com/.../ENGEL_TBOSTON_RS4800Y_HD_New_Engel_remote_080213_downloader-I6bp0V2J6.exe (fccbbfafc98a2ca782c71581722fb761)

1 / 68 (Adware)

http://fsoft4down.com/.../FLVPlayer_downloader-Nd9x5UyfH.exe (d1a064b1f60d1e1788603be73c178ccc)

Domains

Top-level domains owned by Somoto Ltd..

The following certificate is also signed by Somoto Ltd..

00841D099D16B738F34172FEEFE1D2574F (Sep 19, 2011 to Sep 19, 2014)

The following publishers (by Authenticode signature organization name) are related.

Somoto Israel Ltd.

Somoto Israel

Somoto Limited

* Note, the details and description above are based on the code signing digital signature issued to Somoto Ltd. by Thawte, Inc. on July 01, 2014 with the serial number '6a0c39d0252522a9c448352858acaacb'.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.