LiveSoftAction

Publisher Information

LiveSoftAction is a software publisher located in Bucharest, Romania*. The company is a primary distributor of unwanted software. The LiveSoftAction download manager (via getnow.com and part of the SienAppNetwork, AppScion) bundles legitimate and open-source software with the Appscion Download and Install manager. This download manager from SIEN SA bundles all sorts of adware toolbars including utilities such as the company's Iminent toolbar. - "During the download process we show commercial offers such as Iminent, MyCuteBuddy, Beamrise, WeCare, PlayBryte, FreeRideGames, 2YourFace, Wajam, Babylon, Baidu, and others. If a sponsored software offer, like for example a toolbar, will be offered, it shall change the User's home page, default search settings and 404-error traffic, in the event the User selects such options." Thre are 5 additional code signing certificates issued to this publisher.
Authority:
GlobalSign nv-sa

Valid from:
4/13/2015 1:33:32 PM

Valid to:
4/13/2016 1:33:32 PM

Subject:
CN=LiveSoftAction, O=LiveSoftAction, L=Bucharest, C=RO

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
112170a29b7b1c44372416b604f9bb1609cc

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Sien (M), PUP.Sien.Bundler
100.00%

1 / 68      (Adware)
verifiedhacksetupv3215.exe (Installer by Web Installer)  (49a44fdeb685284905b079ac853b7098)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)
icreinstall_rust.exe (Installer by Web Installer)  (00f6da24907c05844ff1b9c83ffd510e)

1 / 68      (Adware)

1 / 68      (Adware)
scarletbladeonlineclient.exe (Installer by Web Installer)  (e4866e99cf1d37e4f83804ac03ec443b)

1 / 68      (Adware)

1 / 68      (Adware)
nikond7100userguide.exe (Installer by Web Installer)  (dfe45d44cb44cc47be8c4baec32a455b)

1 / 68      (Adware)

1 / 68      (Adware)
vtkexportforinventor.exe (Installer by Web Installer)  (817082cd87619777c38ba4e095c19087)

1 / 68      (Adware)
robloxrobuxhackgenerator.exe (Installer by Web Installer)  (14a09be3b9c2b389302e429a6e804142)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)
icreinstall_photocat.exe (Installer by Web Installer)  (fb48ebd76414d05e8a57b48d3597052d)

1 / 68      (Adware)

1 / 68      (Adware)
icreinstall_heekscad.exe (Installer by Web Installer)  (f14cae5fe10b8662e6b275bac39c0aac)

1 / 68      (Adware)

1 / 68      (Adware)
icreinstall_run0a6be.exe (Installer by Web Installer)  (4f6122812b24e04bf05e23c39ecbe6b2)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)
cdgilliardaovivo.exe (Installer by Web Installer)  (0470b41051b8e0fbf3dc2f3105fcd139)

1 / 68      (Adware)

 
Latest 30 of 289 files

The certificates below are also signed by LiveSoftAction.

2D7ABE4311DF975AF6921F74F966D8C4  (Dec 20, 2016 to Dec 21, 2017)

53F942B550131CA0421C84A7FCFE16A6  (Dec 22, 2015 to Dec 22, 2016)

0DB89F49425D87D205160442DA55CE38  (Dec 08, 2014 to Dec 09, 2015)

2CAFD284C3B4147AD3E7601989FCCF42  (Dec 13, 2013 to Dec 14, 2014)

17E4CA22DB0D2CFD73BAACB9BD605BF7  (Jun 04, 2012 to Jun 05, 2014)

The following publishers (by Authenticode signature organization name) are related.

* Note, the details and description above are based on the code signing digital signature issued to LiveSoftAction by GlobalSign nv-sa on April 13, 2015 with the serial number '112170a29b7b1c44372416b604f9bb1609cc'.