» SARKARA-GRUP LLC
Digital Signature
Analysis
Files (79)
Downloads (6)
Distribution (3)
Related (14)

SARKARA-GRUP LLC

Publisher Information

SARKARA-GRUP LLC is a software publisher located in Kyiv, Ukraine*. The company is a primary distributor of unwanted software. There is one additional code signing certificate issued to this publisher.

Authority:

Thawte, Inc.

Valid from:

12/2/2014 3:00:00 AM

Valid to:

12/3/2015 2:59:59 AM

Subject:

CN=SARKARA-GRUP LLC, O=SARKARA-GRUP LLC, L=Kyiv, S=Kyiv, C=UA

Issuer:

CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:

796a7ebb47570ca680be9b9d828f2cc4

Scanner detections:

Detections (100% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.Outbrowse.SARKARAG.Bundler (M), PUP.Outbrowse (M), PUP.Outbrowse.Bundler

100.00%

1 / 68 (Adware)

простые поделки из бумаги и пластилина.exe (242d1e6a8d83a3061a7bb45921f95c94)

1 / 68 (Adware)

bauyrzhan_momysh_lyny_z_dauysy_-_ly_otan_so_ysy_b_l_zhe_s_b_zge_arzan_a_t_sken_zho_(xmusic.me).exe (85fe0321e8102d47aaeedd738fe4378f)

1 / 68 (Adware)

vlad_matyugov_basta_noggano_domno_domino_kreed_timati_dzhigan_depo_kollibri_kavabanga_adamant_zhenya (e28b82ba95d1a3cf96033ce7b900bb35)

1 / 68 (Adware)

maxdownloader.exe (6685172e4bed8bb079ac0c124beab361)

1 / 68 (Adware)

safari.exe (b3500a1597f01f1a8155a5d655e64990)

1 / 68 (Adware)

t23448.exe (8b7f7936a851689bbc1d2fdbb415d688)

1 / 68 (Adware)

minecraft-s-100-modov.exe (27da8c6c6291e1baadee6e0b89f4d90c)

1 / 68 (Adware)

akt.exe (c47256fb2241d7ce352a5f8d9234ef12)

1 / 68 (Adware)

shakira_la_la_la_original_shakira_dare_la_la_la_(vmusice.net).exe (f10654c119177ef3e3cf513642d53e71)

1 / 68 (Adware)

rysskie_narodnue_skazki.exe (722bd78cc8949ad183dfb7c8f34c15d4)

1 / 68 (Adware)

blank.exe (123335e7536dd2efb4def955063a66c7)

1 / 68 (Adware)

maxdownloader.exe (6d685d03edf060fe2c9812fd5f4eceb4)

1 / 68 (Adware)

microsoft-word-2007-online-installer.exe (1b79c26b1d58b336a3df99a9519774c0)

1 / 68 (Adware)

microsoftword2007.exe (711623797c7d264e61a21c6b6e9e4991)

1 / 68 (Adware)

grp 2015 online beta 0.4 torrent.exe (97e19a2363e14dc87a98e198dcfaa3b3)

1 / 68 (Adware)

akt.exe (0aee4ef58a7166a892d5f6b386a8b1be)

1 / 68 (Adware)

tropkillaz_hideho_(vmusice.net).exe (f052fa7ca9aa0f9ba9d1526d1b88b0c0)

1 / 68 (Adware)

avet_markaryan_gulyali_s_toboji_byli_v_dvoem_stoyala_berezakosoj_kak_nash_dom_i_v_dome_tomstoyal_nas (f735aae7446ce51361e15c3039e5de7b)

1 / 68 (Adware)

filter - happy together.exe (e6a4325efe7eea25d0bffea76d41358b)

1 / 68 (Adware)

english.exe (66935a7e94a20be7a6d14cfe5ca9db64)

1 / 68 (Adware)

hamachi.exe (12d42cf5fee3935b80c7bb8ddf5c9708)

1 / 68 (Adware)

00r772.exe (0009e1c9fb78d7f9c83a39461033d757)

1 / 68 (Adware)

blank.exe (8c17e60813ed14b7d33d249a172e46aa)

1 / 68 (Adware)

semeyka.m0nstr0v.2014.d.web-dlrip.1400mb.avi_24520.exe (b2948d5fe94220973a40440f89ebf70f)

1 / 68 (Adware)

titans.dilogy.2010-2012.avc_7030.exe (ab13c90a22dec26e8b2b7355ef5c5b89)

1 / 68 (Adware)

garis-mod-2.exe (d227576a8e1f8bf08476f4f67546270f)

1 / 68 (Adware)

characteristic-s-mesta-zhitelstva.exe (1117544879203129e9e6db80aebec504)

1 / 68 (Adware)

veronika.poteryannoe.schaste.2012.tvrip.102011.torrent-102011.exe (982b5399c7cd3cd3eb50374177af9c5f)

1 / 68 (Adware)

veronika.poteryannoe.schaste.2012.tvrip.102011.torrent-102011.exe (fc8393222c1745579ef9ca1ca208409d)

1 / 68 (Adware)

veronika.poteryannoe.schaste.2012.tvrip.102011.torrent-102011.exe (26803f2b5bb3ce70bb64e6d96ef2fb57)

Latest 30 of 79 files

Downloads URLs for files signed by SARKARA-GRUP LLC.

1 / 68 (Adware)

http://rhyerofi.altuvfi.ru/YXdyZHhkcHJvcWhld2N6Z2F1YWxsdHVraGpzY3V7InZlciI6IjEiLCJzaWQiOiIyMTcxIiwidXJsIjoiaHR0cDovL3NvZnRvci5ydS9maWxlcy9NaWNyb3NvZnQtV29yZC0yMDA3LU9ubGluZS1JbnN0YWxsZXIudG9ycmVudCIsIm5hbWUiOiJNaWNyb3NvZnQtV29yZC0yMDA3LU9ubGluZS1JbnN0YWxsZXIudG9ycmVudCIsInR5cGUiOiJ0b3JyZW50Iiwic2l6ZSI6MzAwMDAwMCwicm5kMCI6NDM3MTMxNzg5NTEyOTN9 (microsoft-word-2007-online-installer.exe)

1 / 68 (Adware)

http://rhyerofi.altuvfi.ru/YXplcHV2bXRjZ3Z0d217InZlciI6IjEiLCJzaWQiOiI1NDM4IiwidXJsIjoiaHR0cDovL3NvZnRrby5uZXQvZW5naW5lL2dvLnBocD91cmw9YUhSMGNEb3ZMMnRoYkd0MWMyOW1kSE11Y25VdlRXbGpjbTl6YjJaMFYyOXlaREl3TURjdVpYaGwiLCJuYW1lIjoiTWljcm9zb2Z0V29yZDIwMDcuZXhlIiwidHlwZSI6InNldHVwIiwicm5kMCI6NDM1MDMxNDMzNTg5N30 (microsoftword2007.exe)

1 / 68 (Adware)

http://kidorojai.kidorojai.ru/eyJ2ZXIiOiIxIiwic2lkIjoiODciLCJ1cmwiOiJodHRwOi8vZmlsbWl0b3JyZW50Lm9yZy90b3JyZW50aS9bZmlsbWl0b3JyZW50Lm9yZ11UaXRhbnMuRGlsb2d5LjIwMTAtMjAxMi5BVkNfNzAzMC50b3JyZW50IiwibmFtZSI6IlRpdGFucy5EaWxvZ3kuMjAxMC0yMDEyLkFWQ183MDMwLnRvcnJlbnQiLCJ0eXBlIjoidG9ycmVudCIsInNpemUiOiIzNjk2NCIsInJuZDAiOjI1NDIzMTU2MDUwOTY1fQ (titans.dilogy.2010-2012.avc_7030.exe)

1 / 68 (Adware)

http://kidorojai.kidorojai.ru/eyJ2ZXIiOiIxIiwic2lkIjoiNyIsInVybCI6Imh0dHA6Ly9teWJpbi5ydS9zaXRlcy9maWxlcy9jaGFyYWN0ZXJpc3RpYy1zLW1lc3RhLXpoaXRlbHN0dmEuZG9jIiwibmFtZSI6ImNoYXJhY3RlcmlzdGljLXMtbWVzdGEtemhpdGVsc3R2YS5kb2MiLCJ0eXBlIjoiYm9vayIsInNpemUiOiIxNTkiLCJybmQwIjo3MDI3MzIwNjU2OTI1NH0 (characteristic-s-mesta-zhitelstva.exe)

1 / 68 (Adware)

http://download-host.com/dlv2.php?sub_id2=35053000&link=eyJzaWQiOiI0OTUyIiwidmVyIjoiMSIsInVybCI6Imh0dHA6XC9cL21heGRvd25sb2FkZXIuY29tXC9NYXhEb3dubG9hZC5leGUiLCJuYW1lIjoiTWF4RG93bmxvYWRlciIsInR5cGUiOiJ0b3JyZW50Iiwic2l6ZSI6IjM1NjUxNTgiLCJzdWJfaWQyIjoiMzUwNTMwMDAifQ,, (maxdownloader.exe)

1 / 68 (Adware)

http://rhyerofi.altuvfi.ru/eyJ2ZXIiOiIxIiwic2lkIjoiNDUzMSIsInVybCI6Imh0dHA6Ly9rYWNobnVsLm9yZy9maWxlcy9ORlNNb3N0V2FudGVkKDIuNzkgR0IpLnRvcnJlbnRcdTAwMDBcdTAwMDAiLCJuYW1lIjoiTmZzLW1vc3Qtd2FudGVkIiwidHlwZSI6InRvcnJlbnQiLCJzaXplIjoiOTI4MDAiLCJybmQwIjozODcxOTAzMjA3NjE4N30 (nfs-most-wanted.exe)

Distribution

The following websites host and distribute files published by SARKARA-GRUP LLC.

kidorojai.kidorojai.ru

download-host.com

rhyerofi.altuvfi.ru

The following certificate is also signed by SARKARA-GRUP LLC.

16BFB6323EFD7384650C7F4F4A053A85 (Dec 21, 2014 to Dec 22, 2015)

The following publishers (by Authenticode signature organization name) are related.

* Note, the details and description above are based on the code signing digital signature issued to SARKARA-GRUP LLC by Thawte, Inc. on December 02, 2014 with the serial number '796a7ebb47570ca680be9b9d828f2cc4'.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.