» Norassie LTD
Digital Signature
Analysis
Files (27)
Downloads (6)
Distribution (3)

Norassie LTD

Publisher Information

Norassie LTD is a software publisher located in Mahe, Eden Island in SC*. The company is a primary distributor of unwanted software. There is one additional code signing certificate issued to this publisher.

Authority:

COMODO CA Limited

Valid from:

2/9/2014 7:00:00 PM

Valid to:

2/10/2015 6:59:59 PM

Subject:

CN=Norassie LTD, O=Norassie LTD, STREET="Tenancy 10, Marina House", L=Mahe, S=Eden Island, PostalCode=1403, C=SC

Issuer:

CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

385751bee21ef6b589b4316dd99863f8

Scanner detections:

Detections (100% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.Norassie.M, PUP.Installer.Norassie.R, PUP.Installer.Norassie.O, PUP.Installer.Norassie.DD, PUP.installCore.Norassie.Installer (M), PUP.installCore.Norassie (M), PUP.installCore (M)

100.00%

IKARUS anti.virus

Hoax.Win32.ArchSMS, Trojan.Win32.Agent

14.81%

Trend Micro House Call

Suspicious_GEN.F47V1118, Suspicious_GEN.F47V1120

7.41%

Vba32 AntiVirus

suspected of Trojan.Notifier.gen

7.41%

Avira AntiVirus

ADWARE/InstallCore.Gen7

7.41%

McAfee

Artemis!2675417B4216

3.70%

ESET NOD32

Win32/InstallCore.RA potentially unwanted application

3.70%

Sophos

Generic PUA HN

3.70%

ESET NOD32

Win32/InstallCore.RA (variant)

3.70%

1 / 68 (Adware)

java_installer.exe (Java Installer) (ed6271762d1b643e3a61c7f90800d5d0)

1 / 68 (Adware)

apache_openoffice_4.0.1_win_x86_install_en-us.exe (Application) (b8b452dd85778910e2f66e2e6228cfb8)

1 / 68 (Adware)

java_update.exe (Java 7.67 Installer by Installer) (69a4b5e608084e06c6c008b4c5d05620)

1 / 68 (Adware)

java_update.exe (Java 7.67 Installer by Installer) (a53e0c87c1d0f520c97bb51e6e1f55d4)

1 / 68 (Adware)

driver_setup.exe (Driver Detective Installer by Installer) (ac36abf84df65791d403c04a337d62e3)

1 / 68 (Adware)

java_setup.exe (6da3534f69fbaad0c3a2f24b62eb26bb)

1 / 68 (Adware)

epson_tm_t20_driver-drivers.exe (2b9a8815c595d42c97b7255d0131a63a)

1 / 68 (Adware)

megagetsetup1.exe (MegaGet Downloader by Norassie) (a10e391cf4258363eb5893a891ae6e04)

1 / 68 (Adware)

codec_update.exe (Video Codec Update by Norassie) (916a9d66b667c9e3744da4e61abd5cfc)

1 / 68 (Adware)

updatesetup.exe (Software Updater) (61b31dc6415dc1f33827663aa1aa2cec)

1 / 68 (Adware)

adblock_plus-2.6.7-sm+tb+fx+an.exe (Application) (9728e0ae69eae680ba8fb294faa8280d)

1 / 68 (Adware)

java_setup.exe (8c28ac1454439b1b62c12fd182407123)

1 / 68 (Adware)

webinstaller.exe (OSHI Defender by Norassie) (dd65c4d3dddfacf53952f7813326ccbb)

1 / 68 (Adware)

icreinstall_adobe_flash_player_setup.exe (86abd67ba6a598d270b0d1ea413b7b14)

1 / 68 (Adware)

internet_explorer_setup.exe (Internet Explorer Installer by Installer) (7e610e42515f9e1c2f6d9b9e7f225c46)

1 / 68 (Adware)

flashplayer_installer.exe (Flash Player Installer) (f6df27f149da4cc205f4cb7534f24ef8)

1 / 68 (Adware)

hp_officejet_pro_8600_driver-drivers.exe (10bddf6af049e932eff60e4e9cc11690)

1 / 68 (Adware)

icreinstall_java_setup.exe (09bf90555da79778c50cb0fcbfdd8567)

1 / 68 (Adware)

canon_mf4100_driver-driver.exe (Drivers Updater Tool by Installer) (cf381a2bd1560f50373054218969313f)

2 / 68 (Adware)

setup.exe (Software Installer by Norassie) (f1f28ce8f4d7de6606be291328a1dc38)

1 / 68 (Adware)

firefox setup stub 26.0.exe (Application) (619f8944414cab1a5e664f82d08c3f55)

4 / 68 (Adware)

java_setup.exe (5aecb02ba9404c5639b3ff36a5ca0263)

4 / 68 (Adware)

java_installer.exe (Java Installer) (057473dee779a08f4099226f17c82ef6)

3 / 68 (Adware)

ashampoo_burning_studio_setup.exe (c3c0ce7511fa96005b183af8467e07ff)

3 / 68 (Adware)

java_installer.exe (Java Installer) (41778501ffa980514c64ac98b98cb682)

4 / 68 (Adware)

flashplayer_setup.exe (Flash Player Installer) (2675417b421645faddb4c2fb3d2d7804)

1 / 68 (Adware)

codec_update.exe (Video Codec Update by Norassie) (9e468cad91e99ab8102e55c96f0c2742)

Downloads URLs for files signed by Norassie LTD.

1 / 68 (Adware)

http://cdn.classydownloads.com/?ic_user_id=9204 (icreinstall_java_setup.exe)

1 / 68 (Adware)

http://javaupdate.regfixkit.com/java_update.exe (69a4b5e608084e06c6c008b4c5d05620)

1 / 68 (Adware)

http://cdn.classydownloads.com/?ic_user_id=9204 (java_setup.exe)

1 / 68 (Adware)

http://yumdownload.com/.../internet_explorer_setup.exe (7e610e42515f9e1c2f6d9b9e7f225c46)

4 / 68 (Adware)

http://javaupdate.regfixkit.com/java_installer.exe (057473dee779a08f4099226f17c82ef6)

3 / 68 (Adware)

http://javaupdate.regfixkit.com/java_installer.exe (41778501ffa980514c64ac98b98cb682)

Distribution

The following websites host and distribute files published by Norassie LTD.

yumdownload.com

cdn.classydownloads.com

javaupdate.regfixkit.com

The following certificate is also signed by Norassie LTD.

00B3E3E3FC0BBFD6D5BC245C26F53737AC (Jan 27, 2015 to Jan 28, 2016)

* Note, the details and description above are based on the code signing digital signature issued to Norassie LTD by COMODO CA Limited on February 09, 2014 with the serial number '385751bee21ef6b589b4316dd99863f8'.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.