home

K.S.-GRUPP

Publisher Information

K.S.-GRUPP is a software publisher located in Chernigiv, Ukraine*. A majority of the programs developed by the company can be classified as adware or other potentially unwanted programs. Thre are 2 additional code signing certificates issued to this publisher.
Authority:
COMODO CA Limited

Valid from:
1/11/2017 3:00:00 AM

Valid to:
12/3/2017 2:59:59 AM

Subject:
CN=K.S.-GRUPP, OU=KS-GRUPP, O=K.S.-GRUPP, STREET=Bud 17 V Vul Dotsenka, L=Chernigiv, S=Ukraine, PostalCode=14032, C=UA

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
44b2f32c7694112e97b89dc59c73880b

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
Adware.Bundler (M)
100.00%

ESET NOD32
Win32/GenKryptik.RDW trojan
2.00%

1 / 68      (PUP)
bundle130117191504z.exe  (988d22eeb2302688d29bce39be6a92e5)

1 / 68      (PUP)
bundle130117155056z.exe (FEIG by ©Aneohhia)  (89826820dcdd7e24db61b2875c88dd60)

1 / 68      (PUP)
bundle150117152313z.exe  (6d6b49842517656e962c7afc8700f320)

1 / 68      (PUP)
bundle150117022239z.exe  (f41b6e2605cec5bea0a1c54eebfdba6c)

1 / 68      (PUP)
bundle140117170324z.exe  (45977dcf63d5aca06d3d6a8cb1c15e84)

1 / 68      (PUP)
kursy.zip.exe  (3efda4b1a516f7e4187a7d91a380be67)

1 / 68      (PUP)
150117024625913.exe  (85344f8ccd66be464fa4816d4094e677)

1 / 68      (PUP)
bundle130117225931z.exe  (48315d71f3af6220c609574b6c5c003b)

1 / 68      (PUP)
bundle_stitched.exe  (6dadf58133fbfcdf2f73ba53b842ad6a)

1 / 68      (PUP)
bundle_stitched.exe  (26ffb48c6387f4a0b512bf214a6ab2f0)

2 / 68      (PUP)
bundle130117161843z.exe  (1cfd60387e1510bcbcecd8733bd46457)

1 / 68      (PUP)
bundle160117084125z.exe  (58c0823f1f9afeb65dbcc27ec51c84f0)

1 / 68      (PUP)
bundle130117213529z.exe  (ab0ca791251c51a8b159b6b1f186bd25)

1 / 68      (PUP)
bundle140117224228z.exe  (2df6cba47d6e2f7932e1820ae3ca2e04)

1 / 68      (PUP)
bundle140117085744z.exe  (427a99b69ebb369d5f5f83340b3591a4)

1 / 68      (PUP)
bundle140117031511z.exe  (4347612b296661cc411848979f709340)

1 / 68      (PUP)
bundle130117180529z.exe  (d1abed7533ca57f041ffd0ea10494022)

1 / 68      (PUP)
bundle150117172528z.exe  (350e02028e798ea410d1f2fbdd88f128)

1 / 68      (PUP)
cleo-auto--c.exe  (1212ade5c78a4d2ea2a8961e6e0d4302)

1 / 68      (PUP)
bundle150117132451z.exe  (1babbcc4d7f03ceadbf8fb27d0ee85cb)

1 / 68      (PUP)
1500-rubley.rar.exe  (5c3aaeaaee4a6edbcd0806ee56141a0d)

1 / 68      (PUP)
bundle150117011154z.exe  (41b8b460785cebe3448c9c47042e6755)

1 / 68      (PUP)
bundle140117212511z.exe  (5dbec0837d1a54340421be3a50d4ea92)

1 / 68      (PUP)
turbobit.net.exe  (41468df62ff867413ee18eac3a65629a)

1 / 68      (PUP)
avataria-bestv1.4.exe  (0d92024d8dd1e787214422459aee838d)

1 / 68      (PUP)
skachat-igru-chelovek-pauk-1-cherez-torrent-na-kompiuter-besplatno.exe  (aad98a6888ac7993f5215eaef269b41f)

1 / 68      (PUP)
bundle230117114212z.exe  (5b6800a1f63b77109e2704d8e4ae0ec5)

1 / 68      (PUP)
steamsetup.exe  (77988f06cb4536e9245cb71275b3582c)

1 / 68      (PUP)
skachat-sobeit-sobeyt-dlya-samp-0.3.exe  (3f4bf67a3a7004aca2f4735161873b98)

1 / 68      (PUP)
bundle150117192934z.exe  (41dcd335decbf18689e864200dfb550b)

 
Latest 30 of 380 files

Downloads URLs for files signed by K.S.-GRUPP.

1 / 68      (PUP)
http://new-mso.com/files/bundles/.../bundle_stitched.exe  (2cde1713b8d48abb65731dedc4f98e21)

1 / 68      (PUP)
http://new-mso.com/files/bundles/.../bundle_stitched.exe  (350e02028e798ea410d1f2fbdd88f128)

The certificates below are also signed by K.S.-GRUPP.

00A78C6505531EF4C4E399B948FBF8AEA8  (Feb 17, 2017 to Feb 18, 2018)

5B5FA3D866750075EAEBBD10F74E4CFF  (Dec 02, 2016 to Dec 03, 2017)

* Note, the details and description above are based on the code signing digital signature issued to K.S.-GRUPP by COMODO CA Limited on January 11, 2017 with the serial number '44b2f32c7694112e97b89dc59c73880b'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.