home

Webcellence Ltd.

Publisher Information

Webcellence Ltd. is a software publisher located in Israel*. The company is a primary distributor of unwanted software. Thre are 6 additional code signing certificates issued to this publisher.
Authority:
GlobalSign nv-sa

Valid from:
1/21/2016 12:44:27 AM

Valid to:
1/21/2017 12:44:27 AM

Subject:
CN=Webcellence Ltd., O=Webcellence Ltd., L=Ora, C=IL

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
11210b06125939e344ae4b43b8a1e80087cc

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.installCore (M), PUP.InstallCore.IM (L)
100.00%

1 / 68      (Adware)
icreinstall_microsoft_word.exe (Lasoc by Hacon)  (69c4d98570fda5489f23bc641a89a876)

1 / 68      (Adware)
ilivid_download_manager.exe (Lasoc by Hacon)  (c1d3a02606014baa0332dfdde5b35632)

1 / 68      (Adware)
xbmc.exe (Kunimebir)  (6445baa1d3ea60355e8be668f82f9839)

1 / 68      (Adware)
microsoft_word.exe (Fak by Reb)  (a4006efa776f22d355a1464f49e4ed0f)

1 / 68      (Adware)
icreinstall_pro_evolution_soccer.exe (Lasoc by Hacon)  (cadf6639ec62bcc82fd96281cfa21864)

1 / 68      (Adware)
itunes.exe (Kigot)  (2e3a66b9cadf5c74dd97579fbc066353)

1 / 68      (Adware)
gom_player.exe (Nacires by Sutamihod)  (19f7be0c12202a82af26271715dec25d)

1 / 68      (Adware)
icreinstall_itunes_agent.exe (Lumata by Ricubo)  (361f846c1f1ea944c337e168ced3341a)

1 / 68      (Adware)
microsoft_wordpad.exe (Totef)  (831f1bbb12b7725fdfe61fd638c9c08e)

1 / 68      (Adware)
counter-strike.exe (Kigot)  (6814c43e6d96173fa8aa0018ee483510)

1 / 68      (Adware)
icreinstall_microsoft_excel.exe (Mom)  (fd2124791fb442cad3e3e1d4c136e2f2)

1 / 68      (Adware)
picasa.exe (Mom)  (e7e0d9a1b8a879be0dd33a3d315d9299)

1 / 68      (Adware)
microsoft_edge_browser.exe (Socobokem by Secetogi)  (420e3112f63997e2ccbc91bb676869f8)

1 / 68      (Adware)
age_of_empires_ii_-_the_age_of_kings.exe (Cekoru)  (930c1bef11c89dd0bc0094bf442476fd)

1 / 68      (Adware)
windows_media_player.exe (Lasoc by Hacon)  (71aa89aaf99a3f7e24e04c0b31000ed4)

1 / 68      (Adware)
magic_lines_v511.exe (Nep by Hepuf)  (197d9041c4cb46916d2d0d76376d68ce)

1 / 68      (Adware)
windows_media_player.exe (Socobokem by Secetogi)  (0887016824d82ece06ab637ed3e454e5)

1 / 68      (Adware)
winrar.exe (Lecufok by Mimacinap)  (0e2086190687683174efceee15a90620)

1 / 68      (Adware)
itunes_agent.exe (Hufibute)  (39fbe675adb99c0a20815b30b190d6fe)

1 / 68      (Adware)
icreinstall_photoscape.exe (Falor by Cetato)  (03dcc708d57c48631b4fd0d28e4d5ca4)

1 / 68      (Adware)
google_earth.exe (Hufibute)  (10390e7170a08faaa449f2e60f563045)

1 / 68      (Adware)
icreinstall_open_office.exe (Rukapusa)  (ff97cb4df634180c6ea2409ecba497d2)

1 / 68      (Adware)
letter_chase_typing_tutor.exe (Lasoc by Hacon)  (540e72ceecede29cb6118f0ccedb65be)

1 / 68      (Adware)
icreinstall_letter_chase_typing_tutor.exe (Lasoc by Hacon)  (33b443e4ccedf3ebabaefcd18b18f2b4)

1 / 68      (Adware)
winzip.exe (Socobokem by Secetogi)  (79f92d63755ade1a6d75a634c6389a2d)

1 / 68      (Adware)
grand_theft_auto_v.exe (Mom)  (8dda8ba420c8a364dc52f759101b4cd9)

1 / 68      (Adware)
pdf_to_cad_converter_pdf_to_autocad.exe (Lasoc by Hacon)  (f7d3b766f1bc699d3ffb07b62db9419a)

1 / 68      (Adware)
icreinstall_itunes.exe (Rukapusa)  (c11cc98f745b161a220a4f2887265415)

1 / 68      (Adware)
icreinstall_geogebra.exe (Mom)  (5c69d7311f54d9c6e39da444114c06d1)

1 / 68      (Adware)
torch_browser.exe (Foguresog)  (957679f5e5de7b6fa1f8e3cedf5dc495)

 
Latest 30 of 32,618 files

Downloads URLs for files signed by Webcellence Ltd..

1 / 68      (Adware)
http://www.headvaultscenter.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  (winrar.exe)

1 / 68      (Adware)
http://www.grabbulkgrab.com/WKEe9gHnSc12heFqI1qQFD3eCQoqFBvp2FcZR3s7lftkPdQUVS5yBASqh9lHx4sZXkwy1xuHLWYERAuWYEWrXS8oF2zCOVP6TgzjPe2trIDYTva33jp9Hjs30A9AOtUx6r8YLiA2rOYAATv4uJjyUnKA8HlBbIZjtQ9c5j1ttuNrQhhm3aA1TJ5EX1baRAp89qr IlshKxzWIt 2URN4qayfU50HqikGPDhbManAH7JVcQK93a0URW vtbwDFbjkwZ_Eb9FyL2oze1ArM56y6iS kZCZa8ItLeft9cWBxtw1UhYencJKRn4kJRIkbHdQlyYRx08lx9y99vb9QhAJzU5X_aR OJIST50Ph iodV8y7fS5wp2UX9mDkbq_vEnrs8MpJGzWShTizU9SXEuy9lVli3hM3TbbP8ZX1ihmq8PxV5hBssnIGx9ynQ92WnzVDxCTL9gLjdz6gc0h PuWBOs0KBSBiA==-G3gAAORte89pY0lrSoiUQwVTpxw4tLKA8sDu17MedGPhoV5xCGIzyG08OkseZxc1sPL6Ih8dyv3Xnnb OSVKVgeEe4KME9M8qLG4cdEugQA=  (torch_browser.exe)

1 / 68      (Adware)
http://www.currentbytecenter.com/c?x=zoYDuwDb0GJ0iZtXLhTCxVD/sPejEd3YVferSCitZ4M=&c=oavb1udXLt68jzF 3vS6jzcCt0cjmZ2ugBCNpr TUP0xPyP8wSCq5m3kR2ZVLGKbYuJsgdzEW7o4VwX1zatzq9EYi1DVESzGCbUa98P93VYNZWL9a90pVG1QvQQRikCG&downloadAs=viber.exe&fallback_url=http://viber.hr.downloadastro.com/.../?utm_source=ira&utm_medium=error_generating&utm_campaign=viber  (3d1558f640873f31dba35000c4fbf9a9)

The certificates below are also signed by Webcellence Ltd..

2A9FE0366B280B65E2788E33BDF8123E  (Feb 04, 2016 to Feb 04, 2017)

773E2C2E5EC62B0904E1441B54A723A6  (Jan 18, 2016 to Jan 18, 2017)

11210EDA12994C4AC76341C842C5B4689D11  (Nov 25, 2015 to Nov 25, 2016)

083059C7641A95E130A5846DC91CCC06  (Apr 09, 2014 to Jun 09, 2015)

2742F1242826FB7F69B052B7F394DFED  (Mar 04, 2013 to May 04, 2014)

18664931CBC922A41BEE24E72C6B8669  (Apr 10, 2012 to Apr 11, 2013)

* Note, the details and description above are based on the code signing digital signature issued to Webcellence Ltd. by GlobalSign nv-sa on January 21, 2016 with the serial number '11210b06125939e344ae4b43b8a1e80087cc'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.