home

Mikhail Sidorenko

Publisher Information

Mikhail Sidorenko is a software developer located in Moscow, Russia*. A majority of the programs developed by the company can be classified as adware or other potentially unwanted programs.
Authority:
thawte, Inc.

Valid from:
3/10/2016 2:00:00 AM

Valid to:
3/11/2017 1:59:59 AM

Subject:
CN=Mikhail Sidorenko, OU=Individual Developer, O=No Organization Affiliation, L=Moscow, S=Moscow, C=RU

Issuer:
CN=thawte SHA256 Code Signing CA, O="thawte, Inc.", C=US

Serial number:
5d0e0e923d3fab7b44f463082c483e22

Scanner detections:
Detections  (76% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Sidorenko.MikhailS.Meta (M), PUP.NeoBar.MikhailS.Meta (M), Adware.HPDefender, PUP.NeoBar.MikhailS.Installer.Meta (M), PUP.NeoBar (M)
76.19%

Dr.Web
Detection.Undefined, Trojan.StartPage1.25908, Trojan.StartPage1.26842, Trojan.StartPage1.26866
47.62%

ESET NOD32
Win32/Toolbar.Neobar.BJ potentially unwanted application, Win32/Floxif.H virus, Win32/Adware.HPDefender.Z application
16.67%

VIPRE Antivirus
Threat.4150696
9.52%

F-Secure
Win32.Floxif.A, Variant.Razy.29743, Variant.Razy.58674
9.52%

Quick Heal
Trojan.Agen.r5
7.14%

AhnLab V3 Security
Trojan/Win32.StartPage
7.14%

Rising Antivirus
PE:Malware.Generic/QRS!1.9E2D [F]
7.14%

IKARUS anti.virus
Trojan.Inject
7.14%

Panda Antivirus
Trj/Genetic.gen
7.14%

0 / 68
ImageEd.exe (ImageEd)  (fa7347496aa54b1611f445170bd38cad)

0 / 68
ImageEd.exe (ImageEd)  (c0e542432de9352b6e0e5b3d5b443ed9)

0 / 68
ImageEd.exe (ImageEd)  (029ed2d3fa1e75c40e6f4a36c41e16c8)

2 / 68      (inconclusive)
ImageEd.exe (ImageEd)  (d9971d957faaf8f3f47d3aab08ccae47)

0 / 68
ImageEd.exe (ImageEd)  (9f76688fe1cbce503c83cb3e9ee4a10f)

0 / 68
ImageEd.exe (ImageEd)  (fcf29054049e2092cd8a8b848495db5f)

1 / 68      (PUP)
uninstaller.exe  (b890fcdbbe92681bd5407b4fe96f0edf)

0 / 68
ImageEd.exe (ImageEd)  (4d31075d9d49c2d2f78f0c1c5207b34e)

5 / 68      (PUP)
ImageEd.exe (ImageEd)  (890ac16f7644455c500c1eabbfad9ecf)

10 / 68    (Malware)
ImageEd.exe (ImageEd)  (2c6c47e1128f56023af605fafcad5929)

1 / 68      (PUP)
uninstaller.exe  (b3b8aec88c3cda896433e5a8c416de36)

2 / 68      (inconclusive)
ImageEd.exe (ImageEd)  (df81b3876a920f133df3bea00a854cb1)

2 / 68      (inconclusive)
ImageEd.exe (ImageEd)  (e65735b0d6ad5a01702ae77546f4c61a)

1 / 68      (PUP)
searchl-svd.ru_asia.exe  (1b0f318f9480befdee67d964283dda05)

1 / 68      (PUP)
uninstaller.exe  (8508cfbdae1c06f9d9d67b44d0e07e38)

1 / 68      (PUP)
uninstaller.exe  (4e00a779611ac84fdbdb2c6d3126d615)

2 / 68      (PUP)
uninstaller.exe  (28444c69114a340613d30fc05e3aecdd)

10 / 68    (Malware)
ImageEd.exe (ImageEd)  (49c2857fe9555950d277f389098fad5a)

1 / 68      (PUP)
serchib-svd.ru_asia.exe  (b2b40e8a4d05a996842decd5cd6db02b)

1 / 68      (PUP)
serchim-svd.ru_cis.exe  (eb40c6634aa6edf3fd4c324289214010)

1 / 68      (inconclusive)
ImageEd.exe (ImageEd)  (4171d5330685a0bc03265ac69f43e8ca)

3 / 68      (PUP)
p85tipu3xvjc.exe  (fb9ed6f87bbb80cd533d74efd10aea2e)

3 / 68      (PUP)
5kjhdymhcwz3.exe  (23a7ee8059b7d799d6817fa37e120bcf)

3 / 68      (PUP)
searchq-sd.ru_ru.exe  (f838e2987bcbc75533bb56d0d54aba37)

1 / 68      (PUP)
ImageEd.exe (ImageEd)  (3068c83496c8acf771f9005c642338a8)

2 / 68      (PUP)
searchl-sd.ru_cis.exe  (f3cb1e2574f6a52ae9929cbed1f17d11)

1 / 68      (PUP)
searchij-svd.ru_cis.exe  (e8d798c89a945a36c9161d1645288de5)

2 / 68      (PUP)
searhih-svd.ru_ru.exe  (99081a548effaf3213a6bf05253aea73)

1 / 68      (PUP)
searchim-svd.ru_br.exe  (8c29ea4601641036f28b6485b1af9414)

9 / 68      (PUP)
iwczslapwuth.exe  (bcbf6f7e77c75f51b4a1c66cc78d709a)

 
Latest 30 of 126 files

Downloads URLs for files signed by Mikhail Sidorenko.

1 / 68      (PUP)
http://bapo.labst.ru/installs/.../3596afbc.exe  (85aa561920c6bfaae89b0ee39524ed23)

The following websites host and distribute files published by Mikhail Sidorenko.

bapo.labst.ru

The following publishers (by Authenticode signature organization name) are related.

A1 Interactive (A1 INTEREKTIV, OOO)

* Note, the details and description above are based on the code signing digital signature issued to Mikhail Sidorenko by thawte, Inc. on March 10, 2016 with the serial number '5d0e0e923d3fab7b44f463082c483e22'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.