» Iphone-Install.com
Digital Signature
Analysis
Files (11)
Downloads (11)
Distribution (3)
Related (5)

Iphone-Install.com

Publisher Information

Iphone-Install.com is a software publisher located in montreal, Quebec in Canada*. The publisher primarily developes software that can be classified as adware. Thre are 2 additional code signing certificates issued to this publisher.

Authority:

thawte, Inc.

Valid from:

12/10/2014 1:00:00 AM

Valid to:

12/11/2015 12:59:59 AM

Subject:

CN=Iphone-Install.com, O=Iphone-Install.com, L=montreal, S=quebec, C=CA

Issuer:

CN=thawte SHA256 Code Signing CA, O="thawte, Inc.", C=US

Serial number:

056f2fc216106646c9d192a21c3ad985

Scanner detections:

Detections (100% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.IphoneInstall, PUP.Wajam.IphoneInstall (M), PUP.Wajam.IphoneIn.Installer (M), PUP.Wajam.IphoneIn (M)

100.00%

Dr.Web

Adware.Searcher.2746, Adware.Searcher.2844, Trojan.DownLoader12.18554

72.73%

Zillya! Antivirus

Trojan.Win32.1DB12147

54.55%

NANO AntiVirus

Trojan.Win32.SuspPack.dmtmtd, Trojan.Nsis.Wajam.dqgtqq

54.55%

avast!

Win32:Dropper-gen [Drp], Win32:Rootkit-gen [Rtk], Win32:Malware-gen, Win32:Patched-JI

54.55%

Qihoo 360 Security

HEUR/QVM42.0.Malware.Gen

45.45%

Malwarebytes

PUP.Optional.Wajam.A

45.45%

G Data

Win32.Trojan.Agent.H4LIOD, Gen:Variant.Adware.Graftor.173564, Trojan.GenericKD.2144224, Gen:Variant.Kazy.589052

45.45%

ESET NOD32

Win32/Wajam.K potentially unwanted

45.45%

Emsisoft Anti-Malware

Gen:Variant.Adware.Graftor.173564, Trojan.GenericKD.2144224, Gen:Variant.Kazy.589052, Win32.SlugIn

45.45%

2 / 68 (PUP)

f7a.tmp (bf03873ce49c85c100aadabea9e50f1c)

11 / 68 (PUP)

wie_2.23.2.5.exe (5dac17d35f6b2161ba63edfa216f212c)

1 / 68 (PUP)

35c3.tmp (abdb8fc738cc86d5faf995fae9fbf990)

1 / 68 (PUP)

6b2c.tmp (a3fa95e942d76d45367d672e23cbba10)

1 / 68 (PUP)

wie_2.19.2.6.exe (1e0c3a07834dbb0db64bbc140c2bdc85)

31 / 68 (PUP)

nsa7f9c.tmp (b43598e88763ab048afe6e79b07d7026)

15 / 68 (PUP)

nsa2fe.tmp (082fc69d514999a625482b028d79dcc5)

18 / 68 (PUP)

wie_2.23.2.15.exe (9ff543045aa0fd7e79465969cd15f405)

20 / 68 (PUP)

wajam_download_v2.exe (359d2dd59105e4274753a96183a8a849)

13 / 68 (PUP)

5c07.tmp (29a671da376b73421c7327a3eb4462c2)

5 / 68 (PUP)

wie_2.23.2.5.exe (c2ab4fa09a9cb0fd317b5960cf765a6c)

Downloads URLs for files signed by Iphone-Install.com.

20 / 68 (PUP)

http://wajam-download.com/.../WIE_2.23.2.12.exe (359d2dd59105e4274753a96183a8a849)

5 / 68 (PUP)

http://113.171.224.214/.../WIE_2.23.2.5.exe (c2ab4fa09a9cb0fd317b5960cf765a6c)

18 / 68 (PUP)

http://www.wajam-download.com/.../WIE_2.23.2.15.exe (9ff543045aa0fd7e79465969cd15f405)

20 / 68 (PUP)

http://install-apps.com/.../WIE_2.23.2.12.exe (359d2dd59105e4274753a96183a8a849)

13 / 68 (PUP)

http://wajam-download.com/.../WIE_2.23.2.10.exe (29a671da376b73421c7327a3eb4462c2)

5 / 68 (PUP)

http://wajam-download.com/.../WIE_2.23.2.5.exe (c2ab4fa09a9cb0fd317b5960cf765a6c)

18 / 68 (PUP)

http://wajam-download.com/.../WIE_2.23.2.15.exe (9ff543045aa0fd7e79465969cd15f405)

5 / 68 (PUP)

http://install-apps.com/.../WIE_2.23.2.5.exe (c2ab4fa09a9cb0fd317b5960cf765a6c)

13 / 68 (PUP)

http://install-apps.com/.../WIE_2.23.2.10.exe (29a671da376b73421c7327a3eb4462c2)

18 / 68 (PUP)

http://install-apps.com/.../WIE_2.23.2.15.exe (9ff543045aa0fd7e79465969cd15f405)

5 / 68 (PUP)

http://install-apps.com/wajam_install.exe (c2ab4fa09a9cb0fd317b5960cf765a6c)

Distribution

The following websites host and distribute files published by Iphone-Install.com.

install-apps.com

wajam-download.com

www.wajam-download.com

The certificates below are also signed by Iphone-Install.com.

3A9486DD32A165F8BAA825EFBA581212 (Dec 10, 2014 to Dec 11, 2015)

724D56E3E70ADF3D7AA76EF2D3A540BD (Dec 08, 2014 to Dec 09, 2015)

The following publishers (by Authenticode signature organization name) are related.

* Note, the details and description above are based on the code signing digital signature issued to Iphone-Install.com by thawte, Inc. on December 10, 2014 with the serial number '056f2fc216106646c9d192a21c3ad985'.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.