home

Ori Rejwan

Publisher Information

Ori Rejwan is a software publisher located in Tel Aviv, Tlv in Israel*. A majority of the programs developed by the company can be classified as adware or other potentially unwanted programs. There is one additional code signing certificate issued to this publisher.
Authority:
COMODO CA Limited

Valid from:
3/18/2012 8:00:00 PM

Valid to:
3/19/2014 7:59:59 PM

Subject:
CN=Ori Rejwan, O=Ori Rejwan, STREET=42 Balfure Street, STREET=Apartment 11, L=Tel Aviv, S=TLV, PostalCode=65212, C=IL

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00c5d28fc139933adfc598cadda3492604

Scanner detections:
Detections  (91% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Crossrider.BHO.N, Adware.Crossrider.OriRejwan (M), Adware.Crossrider.OriRejwa (M), Adware.Crossrider (M), Threat.Win.Reputation.IMP
90.91%

Trend Micro House Call
Suspicious_GEN.F47V0713
9.09%

1 / 68      (Malware)
hipomatic.exe (Qbrlxj by Ktejqwuzvdssmc)  (e6fd03567f9ae9756a7ee2fb51c05239)

1 / 68      (Adware)
hipomatic-bho64.dll (Hipomatic)  (239b7d41cd6c685c276ac28da37e15a9)

1 / 68      (Adware)
hipomatic-codedownloader.exe (Hipomatic)  (a2154a11e90fd1ad2e2010db9eabfae1)

1 / 68      (Adware)
hipomatic-buttonutil64.dll  (0100bd69941d2d8a47f5d22d0a2cb5fd)

1 / 68      (Adware)
hipomatic-buttonutil.exe (Hipomatic)  (c88404609d0f8555f1bf94b2a46a4e53)

1 / 68      (Adware)
hipomatic-buttonutil.dll  (afcb8c46b3f1668b10bedba53a35581e)

1 / 68      (Adware)
hipomatic-bg.exe (Hipomatic)  (605547a4784de1a844e94f59b9512c37)

1 / 68      (Adware)
hipomatic-helper.exe  (f99f5276f56716b44f175b3a56fef31d)

1 / 68      (Adware)
hipomatic-buttonutil64.exe (Hipomatic)  (e635315b989cd6358aace2e8037b38bb)

1 / 68
fbcim.exe  (84e6717f53bfa00e8fd1e6beb989b229)

1 / 68      (Adware)
hipomatic-bho.dll (Hipomatic)  (97ae76694665a580d420fbed37d74fd1)

The following certificate is also signed by Ori Rejwan.

00EC0B02C1D3C98296496142B9A5A146FD  (Dec 08, 2010 to Dec 09, 2011)

* Note, the details and description above are based on the code signing digital signature issued to Ori Rejwan by COMODO CA Limited on March 18, 2012 with the serial number '00c5d28fc139933adfc598cadda3492604'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.