» TEHSNABSTROY LLC
Digital Signature
Analysis
Files (1,350)
Downloads (2)
Related (9)

TEHSNABSTROY LLC

Publisher Information

TEHSNABSTROY LLC is a software publisher located in G. MOSKVA, Russia*. The company is a primary distributor of unwanted software. Shetef uses the Amonetize is a pay-per-insall monetization and distribution platform to distribute adware installers as well as other potentially unwanted software, mostly wrapping legitimate programs in adware bundles.

Authority:

COMODO CA Limited

Valid from:

6/19/2014 3:00:00 AM

Valid to:

6/20/2015 2:59:59 AM

Subject:

CN=TEHSNABSTROY LLC, O=TEHSNABSTROY LLC, STREET="UL. NIKOLYAMSKAYA, 9", L=G. MOSKVA, S=G. MOSKVA, PostalCode=109240, C=RU

Issuer:

CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

00f4b1a67457808cff0300cd93c4050f05

Scanner detections:

Detections (100% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.Amonetize (M), PUP.Amonetize.Bundler

100.00%

1 / 68 (Adware)

file.download__2299_i1290809527_il1.exe (ccbbf4da488cef4db2b02e151d8828fc)

1 / 68 (Adware)

setup.exe (by TechSnabStroy) (784efdf1ef6473f03ab4adbf8c916bee)

1 / 68 (Adware)

bitmaster_55elw.exe (by TechSnabStroy) (2486d90d25e2820e55f1ca8fc27aa8b6)

1 / 68 (Adware)

bitmaster_51ftf.exe (by TechSnabStroy) (c7538c74852ee68e839f8e0751c6e9c8)

1 / 68 (Adware)

bitmaster_478gg.exe (by TechSnabStroy) (275856780e69f5f98183b7d291b9e2ca)

1 / 68 (Adware)

download.setup_59xkc.exe (Winner Download Manager (4921) by OOO TechSnabStroy (2909)) (90b83664a856bbdc91751ebda0678a77)

1 / 68 (Adware)

setup.exe (by TechSnabStroy) (c8b8aadd82775f5c311c6eb82a489fd4)

1 / 68 (Adware)

setup.exe (by TechSnabStroy) (e53497aed2f3c47fd17371f93c45ce7d)

1 / 68 (Adware)

downloadfilesetup_61cvg.exe (by TechSnabStroy) (be6cc50ed0d62ac383bd81b50c37d13b)

1 / 68 (Adware)

setup.exe (by TechSnabStroy) (46eeeb25fc0ad28df2732fe03a1a0177)

1 / 68 (Adware)

setup.exe (by TechSnabStroy) (84c89625d58fe10e9651b17c28b7cdd8)

1 / 68 (Adware)

downloadfilesetup_94wxl.exe (by TechSnabStroy) (5c0fc6175cd7b689127fd2c237e18401)

1 / 68 (Adware)

setup.exe (by TechSnabStroy) (f38a9c54ad545c6b6e775e72c0287452)

1 / 68 (Adware)

download.setup_09dq1.exe (by TechSnabStroy) (b1393d18b14730790779dde03eb2ed4a)

1 / 68 (Adware)

downloadfilesetup_73cpz.exe (by TechSnabStroy) (99c9c8f93c96bad1e5be8f5a11353396)

1 / 68 (Adware)

downloadfilesetup_841ej.exe (by TechSnabStroy) (2293b753d254b8834923077ee830208b)

1 / 68 (Adware)

il1endac.exe (by TechSnabStroy) (35a83ac09b548b28ab6dce4579b59d4f)

1 / 68 (Adware)

5zfpwu_f.exe (by TechSnabStroy) (b47d8ba337e83627c458dedb8369a4b7)

1 / 68 (Adware)

downloadfilesetup_21yrn.exe (by TechSnabStroy) (14ca5480ace231008fe18c8b6e01cd87)

1 / 68 (Adware)

sonic_and_the_black_knight_wii_pal_multi5_com_rar_18toe.exe (Winner Download Manager (4921) by OOO TechSnabStroy (2909)) (b4c7038562b1c9c134902b2533e90fce)

1 / 68 (Adware)

setup.narutosaga.exe_77fla.exe (by TechSnabStroy) (5f71c0f653130737594bb776d518aa6d)

1 / 68 (Adware)

setup.narutosaga.exe_27jjv.exe (by TechSnabStroy) (c31eaedb65e6e482b454913515d464e4)

1 / 68 (Adware)

jg2hb3ng.exe (by TechSnabStroy) (ed8df56cac53342148d9b25004ed6c1f)

1 / 68 (Adware)

file.download_79gml.exe (by TechSnabStroy) (e518f8b97fa8eada2df82a6f81185f1f)

1 / 68 (Adware)

download.setup_17l2i.exe (by TechSnabStroy) (ffe347c5d2f0533d97a458a95d902490)

1 / 68 (Adware)

downloadfilesetup_29hb3.exe (by TechSnabStroy) (cb4f1c48a42b0b21ae542cb53aa86a18)

1 / 68 (Adware)

download.setup_33slh.exe (by TechSnabStroy) (70bbfb14de93d3367c5f2c7f826d2684)

1 / 68 (Adware)

download.setup_00arg.exe (by TechSnabStroy) (ceaee880ba13e3fa67f523363f2e1331)

1 / 68 (Adware)

downloadfilesetup__2299_i1044509015_il1.exe (63f5b3924d05d12a582741923e53eb49)

1 / 68 (Adware)

download.setup_07owm.exe (Winner Download Manager (4921) by OOO TechSnabStroy (2909)) (3dd889946f569b38d329aee1b9706589)

Latest 30 of 1,350 files

Downloads URLs for files signed by TEHSNABSTROY LLC.

1 / 68 (Adware)

http://206.54.160.211/installer/.../?carrier_cmd_uri=&referral=ta089.0.0.010.010901737f7a123&file_name=DownloadFileSetup (downloadfilesetup_841ej.exe)

1 / 68 (Adware)

http://206.54.160.211/installer/.../?carrier_cmd_uri=&referral=t9d47.261775.0.201.31087e745fb4423&file_name=DownloadFileSetup (downloadfilesetup_21yrn.exe)

The following publishers (by Authenticode signature organization name) are related.

Amonetize ltd.

Shetef Solutions & Consulting (1998) Ltd.

* Note, the details and description above are based on the code signing digital signature issued to TEHSNABSTROY LLC by COMODO CA Limited on June 19, 2014 with the serial number '00f4b1a67457808cff0300cd93c4050f05'.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.