home

Morava Group

Publisher Information

Morava Group is a software publisher located in Towson, Maryland in the United States*. A majority of the programs developed by the company can be classified as adware or other potentially unwanted programs. There is one additional code signing certificate issued to this publisher.
Authority:
GlobalSign nv-sa

Valid from:
4/8/2016 8:51:07 AM

Valid to:
4/9/2017 8:51:07 AM

Subject:
CN=Morava Group, O=Morava Group, L=Towson, S=MD, C=US

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121a6b4203881a4b99030781a86f85d962d

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.InstallCore (M)
100.00%

1 / 68      (PUP)
lego_worlds.exe (Ficisi)  (b09043c15b14ee31b212603d7749ec2e)

1 / 68      (PUP)
oxygennotincluded.exe (Ficisi)  (46d93d6837dbf85c63c7a6235d320db2)

1 / 68      (PUP)
mylittleblacksmithshop.exe (Cam)  (d2c04c14be0fed36af3a7e998261c04c)

1 / 68      (PUP)
the_culling.exe (Gok)  (9d7166d19f4b758685b7519682a5e421)

1 / 68      (PUP)
icreinstall_helloneighbor.exe (Cam)  (96c9727e9a36490b5d38665d70499d50)

1 / 68      (PUP)
tubetycoon.exe (Ficisi)  (235f8842f82426d045cc409c5bf3edd9)

1 / 68      (PUP)
fnafworld_setup.exe (Ficisi)  (a3293d5e9686045d3c3d05ce3e5b72d6)

1 / 68      (PUP)
scrapmechanic.exe (Ficisi)  (822fde2eecd66a28c82847dc1de9e62d)

1 / 68      (PUP)
scrapmechanic.exe (Ficisi)  (9882bc32a4d6601d49409c684ced8b7a)

1 / 68      (PUP)
undertale.exe (Ficisi)  (66bde89959c2193f534d7c93cc1816e3)

1 / 68      (PUP)
undertale.exe (Mag)  (2f13828c09f608af5715714514d6f4d0)

1 / 68      (PUP)
besiege_setup.exe (Hiduda)  (3b68840653fd56e7e4f42f32b9b3b82f)

1 / 68      (PUP)
who'syourdaddy.exe (Ficisi)  (fc4eff50e7c3b4853b508d3fdc4ff9b3)

1 / 68      (PUP)
helloneighbor.exe (Ficisi)  (e579bddd6151d460aa6b5a99cec2aa83)

1 / 68      (PUP)
raft.exe (Ficisi)  (887cfc1349f5a74fbec7dff5515b66e2)

1 / 68      (PUP)
oxygennotincluded.exe (Ficisi)  (7524e9d594af9ea9609bd5c3c30cffec)

1 / 68      (PUP)
scrapmechanic.exe (Ficisi)  (a8806c0aa3989c24a4d03c0bc5489054)

1 / 68      (PUP)
ancientwarfare2.exe (Cam)  (b2e364a5b1db84b7c159e960f7bc76ea)

1 / 68      (PUP)
slime_rancher.exe (Hiduda)  (b0d135aa23dc374647ede67e25d43912)

1 / 68      (PUP)
mylittleblacksmithshop.exe (Cam)  (5404a413a544701b5a721f7e415ed350)

1 / 68      (PUP)
3bcfb64c-2a35-a584-9d89-d97433820258_1d235fa8f1dde1e (Sose)  (21ced42a5e1092cd6712335aa1e705f1)

1 / 68      (PUP)
clonedrone.exe (Ficisi)  (e8c308e103e3b70b138fab354ffca833)

1 / 68      (PUP)
lego_worlds.exe (Hiduda)  (4e4c48fcf69fc6caf16185a7f2132ea2)

1 / 68      (PUP)
formata.exe (Ficisi)  (3f4ef25917241fb2335349e085ab8f01)

1 / 68      (PUP)
gangbeasts_setup.exe (Ficisi)  (29d39952d1ad1166bcfac0b453769ffc)

1 / 68      (PUP)
rocketleague_setup.exe (Ficisi)  (64039847739979ad41c994b97023bfd4)

1 / 68      (PUP)
fnafworld_setup.exe (Ficisi)  (2f09819d335c0c4d4394a3173168f9f0)

1 / 68      (PUP)
raft_setup.exe (Ficisi)  (fc162fe82c7bff6506c6aa41c6fad6b4)

1 / 68      (PUP)
mylittleblacksmithshop.exe (Cam)  (ecb143d374e498eb547b1456d16b06c1)

1 / 68      (PUP)
papers_please.exe (Ficisi)  (634a060b533104626439aa19740e5b52)

 
Latest 30 of 6,171 files

Downloads URLs for files signed by Morava Group.

1 / 68      (PUP)
http://www.flashbinariesgift.com/vzdmUxzGx2F1i L6Y3IwkJrjZQiI7hs5mqmiDqzfEVnV94wsVkZXZuUo22gecIRpRiopOycYka7p7Qe70IxvoczLdkWNFRYQWPqBl_50ufDw9CAvio 7ZuwJTXsHPQ1B0giARdwnw06YeC7mzM5w_kVi9RZ5eFvRJf73SW1zF3UtD X1UMCcHXfnjcmkhT6pZbokCZ2ij_kpsB7FyWh629vSL5ABsr0nBqAhZWV8MGVr2r1sDUJ1QBew07s073Jjbmr3zrP4kybt4VYL5ppX3QFtgLj76hclIadxfLwJksfdZEgVvU3_KkWwE1zxycblKzcQBKexo O_hZCupzmEV5iRwaj7UsuTqpHXnPh_9TkvQyn3FpglHgrJCqcBcrM5pxrFu1JGzfy_W_kxdy1ouP3lRQWoOeLQWHjMpoSoH0rqmq4n_vJk96cxqi8BgT3DbQztLkq683wC8LsQT4z93OLupQxXpLBCo9X7NCqnVx6ZorvQ3sY=-CxCAaHR0cDovL2dvZmlsZXMub3JnL1N0ZWFtU2V0dXAuZXhlAw==  (oxygennotincluded.exe)

1 / 68      (PUP)
http://www.flashbinariesgift.com/yf7KEZfzPCiIfuAHfnRL8Y01ZnYrSfLmLLcd6y6zc9_0aTkTv69wzLT7RN79jG0N7v7XHQqLM8EpSXBq1P K_8zehBIELc9mqReDSgfPimDFvd7OoUSSkAU2bHDRMCH4A6i5naWkHRmXCxquJcMgs39yZdCNqOu0ygD YmyqlZ_cPk4j4DnoDzSk1nl xUFYeNFnTx6gRY4O4a4wJu8DpZKqEGg2kYnB82nhkL B7iRjdZ koKMWVQtqZu WJSVnT67_dU7OGikda58NYMei4JQwZo9kkKFMqHi_2WFqTW1pok_VWluuVBbRDrBOsBOjpUAMW9NnIs7g4KGkPuWfXafHVIhF7gTlW59T37Jo gcVrfUhzWTGIiDART8OVIN2ekZLVuUbRCHRjxPiHWuMNGevFZzA8_DWsSetbPqhXIClY5 5P90jtKnrtnrEUU4E_GMw3USBzDYppTwSfEOLfY FuEb_PEipfEO1lY5W 7HZhA4Zet7pk0f80zqQwZldUIzXGMkLS4IBlckNnDy5rhf0kpOjw==-CxCAaHR0cDovL2dvZmlsZXMub3JnL1N0ZWFtU2V0dXAuZXhlAw==  (scrapmechanic.exe)

1 / 68      (PUP)
http://www.flashbinariesgift.com/Wkyh7kp1ZFBDo4N9xMB6DMXRmzMJxc9OFBbNqHObtChg EnyzGQMki5GLR8GMYb2lPb8iT508epDy4ByeAXf46NIVdD7Rc5aHvim5n9CZKpcMOmCZBlfk66oU4tMz96F8iymAdB6IxLXRSnHrBKTfWFG8vM LMFRL z3gVHMd7X8SZa2MD5Wr3TVNS2xvxOzyPTmHn_Is7DqcIIpkoYtzENMft_I7FLXh8J5NuFGAsk53Qp1qrwSYHddQwR_rCSuDSMz0lDPIWfyB5b0jKrqODCCU20IK6Y_igWM2Lw0AJ1jX2muVckl7UbJ0RlKm48eBoKJ6TxgEPpu6RcFajcWo1qVXNfJwLhC_nyOQ5RQq7dZc Tg9BKPxwAc83DPnlLSVyeRt9MqhhJRQ00aRI_IawPpWV2_T2AS5jzWIjR_XbmOXabEfP3QKNKxDBFIeaLzioKGY CfRcrDkAWxvXU4p10v1weyiAwe6K5kgmnyXZxAbQKvI_rRgMJsVmB06_SVEuIP83zIwzDG2ULgrS e6EjeXSpUfQ==-CxCAaHR0cDovL2dvZmlsZXMub3JnL1N0ZWFtU2V0dXAuZXhlAw==  (scrapmechanic.exe)

1 / 68      (PUP)
http://www.flashbinariesgift.com/MNgNi6Iy_e_ eZ_FIi8t81F6LU9AamFjnunUcMiGhI33_PPoVcznPwWVNqFZr2M4_737fbooSVInKy5L_C6i7aXUPDkcRuv4awxJlnQ2Dj_GYJIDDVj3AJwJUd20U2eRkhJJwkgL9AnWeDqrDTRuLyVAFfvv9X8oDpIJVRtVRl5mFYl8DxyoA1CRVi0xzXehlubnytU1w5GGeGj635b R573XHQd9g==-CxCAaHR0cDovL2dvZmlsZXMub3JnL1N0ZWFtU2V0dXAuZXhlAw==  (gangbeasts_setup.exe)

1 / 68      (PUP)
http://www.binariespresentranch.com/Ha1h7wJDmASsITHzE01oSKpwilY6gMUXAdrL5nBy9pQQe LrfRUI6mHPsySf1Qcc9ntGUEcrCMT42dXpV8qACVzfE2rSuF0AT4Y94aS7kI0q3oiT1YxfKJZqpSbkKyQqQ40eu_bNxDvmrx9AdY 90kZ9h3TqpnBJfYDWY3iUvIIwcoZ7S5mYgC5X3yyKUflcJIfkgg4lWbU2lYaq00LTQz2PEBq0XmzCQRkRUGAWFO9N8XXGMhRVyVx0lpqgTIfp_kgT3Jyjvy0JIuuk9oexPIobeual_prVJj1iwWk43Rl7Flruw6 dZqZnvKQw SkHh8A7 RrjcIDO1Qp_N2820jAAqKesacRdJCv2REn0ZtVEDU9boHN4ochQd6m nF9Z49eB8WyBZwwVsRBqka4jYKAnJkNjXiD0knrtexHHCGYP4MglHbJQkUn4FACRCq3b gmycemoQlq1zSIekbSVDOdYOnMNVaz2L3pmOVfUYnQdBDmsuWcL6ME3ZsWCT1YvNyWlwE7xQp6ENkfZ59WqODYVVZjMEYx8WR5EDy8WvglIaCNMPNGVk7PR1oPSs2TKZM8O6K1Kr91JPLISgZDB6k8TcPAAhVD17eOE9NjycxjNV92EC9Q=-CxCAaHR0cDovL2dvZmlsZXMub3JnL1N0ZWFtU2V0dXAuZXhlAw==  (rocketleague_setup.exe)

1 / 68      (PUP)
http://www.flashbinariesgift.com/xuYb9bRYNx0TPCxYqfc96OoScLfq7ks2ArVQFKdK1t55rczdOBu8rPDUufqiK8PLmwa4JDB6W_lAtvghBLYLgs2EsW33A5cX2OnRSFqs5DlVhCQMqCpB6oz6WGeprLUTChNf9J9MiJpvJZ4o IbNjjjTdokQCGt73oUDRYib9TMj7_dj8eK2QS_YSVszrWoAcGGyX0 WBJY9BqUdh7moglFFzecsYSBMoyQnZpK25bqlAGSRxUYivgAs2Bnd6qxiPUm_zLkS0HB1KKS3FWdVpYDTZ4x7OeXZk7r4T1IUfoWHAb7AN5DwVDraiJY8lWqbw0oAi79w68CcZy EBIaZWQyeCc 2wMwPbmXCS3zTzf8zDFR6O35pbM5O9aa479plru3Ufc kWHl 7XHuqYCkNg9box56soLAma28hhaISCRsGqjb4FF _52Xot2AqzkQFpfILlNhquCF3xtkH1JO54aTcsSG8PDpj9LW32deGxnZ X78dA=-CxCAaHR0cDovL2dvZmlsZXMub3JnL1N0ZWFtU2V0dXAuZXhlAw==  (oxygennotincluded.exe)

1 / 68      (PUP)
http://www.flashbinariesgift.com/fzFkSipz0G74W3Nr9iIP8r1zVoDT0K5KaWYf6KPSSK94M7CFwXmnsKA4_n9RSuaMWjaelLE3vhXKa07vFza4QAwjt PCW glOIng0ipda4YL1cOm6WVVrs2XqIbQZG85_zjwX1qAHmEVI61inW7kkXR PdvZRRWn4RnJVpVudMIFnt8_l_4 mFlthq3t8Edr6GvAY9YvSVOb0DBNzbIHiLsC7wBaOA==-CxCAaHR0cDovL2dvZmlsZXMub3JnL1N0ZWFtU2V0dXAuZXhlAw==  (deadbydaylight.exe)

The following certificate is also signed by Morava Group.

1121A83F14C1C6D435814D1A4B9EC949DB5C  (Mar 07, 2016 to Mar 08, 2017)

* Note, the details and description above are based on the code signing digital signature issued to Morava Group by GlobalSign nv-sa on April 08, 2016 with the serial number '1121a6b4203881a4b99030781a86f85d962d'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.