home

TOV Osya-Trans

Publisher Information

TOV Osya-Trans is a software publisher located in Uzhgorod, Ukraine*. The company is a primary distributor of unwanted software. There is one additional code signing certificate issued to this publisher.
Authority:
thawte, Inc.

Valid from:
12/29/2014 2:00:00 AM

Valid to:
12/30/2015 1:59:59 AM

Subject:
CN=TOV Osya-Trans, O=TOV Osya-Trans, L=Uzhgorod, S=Uzhgorod, C=UA

Issuer:
CN=thawte SHA256 Code Signing CA, O="thawte, Inc.", C=US

Serial number:
728bc5572a0da8ebd677d0a17c4b5124

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.OutBrowse (M)
100.00%

1 / 68      (Adware)
installation.exe (Setup)  (816a299afc2ab2dec750ca06f4cd1dc2)

1 / 68      (Adware)
setup.exe  (78c404727ffc78068114ca8c5a98e3bc)

1 / 68      (Adware)
nsa7131.tmp  (9461117cdbb977506fe7f19d21c84929)

1 / 68      (Adware)
Setup.exe (Setup)  (df4e520619d14ced630047a6e4f8fff7)

1 / 68      (Adware)
installer_whatsapp_english.exe  (9f47eab994d4511986e8a91bf2083d48)

1 / 68      (Adware)
setup.exe  (cbf631f3f8c82124f194a38f3c2607e1)

1 / 68      (Adware)
nske2a1.tmp  (333454a3d02d1be8f2a315707035a5d2)

1 / 68      (Adware)
setup.exe  (5e5469ba0666adee01f07741fa303ace)

1 / 68      (Adware)
installation.exe (Installation)  (801798c604480673a261544761f2ce8d)

1 / 68      (Adware)
installation.exe  (481298abd831065e30f69d77d375b53d)

1 / 68      (Adware)
installer_adobe_flash_player_english.exe  (2c04c56fdb620c0baa3a181845813e35)

1 / 68      (Adware)
setup.exe  (d9d7d07c6c3f6534ae118ae311ddb496)

1 / 68      (Adware)
installer_java_dutch.exe  (e1809c70e13e5bf09e3157c8910764a3)

1 / 68      (Adware)
nsdec1d.tmp  (a8400654378290e27a38001b7bbfe77b)

1 / 68      (Adware)
nsk2a15.tmp  (8d984a4073c7a8ba820efc8c5ddda800)

1 / 68      (Adware)
nsf432b.tmp  (8d88f3c280a8af14b1fdd0ceada1b4bb)

1 / 68      (Adware)
nsl48e3.tmp  (0c504b578bed119dc8378c46fe7a7d58)

1 / 68      (Adware)
Setup.exe (Setup)  (997cd37584cc875d8260770878943a51)

1 / 68      (Adware)
nsm9204.tmp  (a64ea835b7fdf50d9c8e628ff09eaba4)

1 / 68      (Adware)
nst9160.tmp  (d522fa269899bef9690dcf12dbd94edf)

1 / 68      (Adware)
setup.exe  (da0e3429320930148900e68b6feaa71d)

1 / 68      (Adware)
setup.exe  (e3f3b3fe7d2393883a08becb7a17bbd4)

1 / 68      (Adware)
non confermato 863458.crdownload (Setup)  (20f883df792f2bab695db737bf727ace)

1 / 68      (Adware)
non confermato 711985.crdownload (Setup)  (0772c60986af7bf0b27df5272b45f5ca)

1 / 68      (Adware)
nsw3983.tmp  (8d33583cb6692a4b519676ca00e5d622)

1 / 68      (Adware)
nsd85b1.tmp  (376aeafa23f2ad9da57351e65c72fa4f)

1 / 68      (Adware)
setup.exe  (50203f5f2e1259c640451bd7077fb6ab)

1 / 68      (Adware)
installation.exe (Setup)  (d7ce99d6f81fd91581ed251277f68b7e)

1 / 68      (Adware)
nsb93e7.tmp  (f7f39f1ce55d447c847cd9e2d1f26aa3)

1 / 68      (Adware)
installer_gta-sanandreas_english.exe  (2f690986d63e89d0960dd2cfbdbe0469)

 
Latest 30 of 258 files

Downloads URLs for files signed by TOV Osya-Trans.

1 / 68      (Adware)
http://dl.appsdesktop.com/.../Get?p=3022&d=24601&l=1694&n=0&d1=337641&d2=-1&d3=-1&d4=-1&d5=-1&filename=setup&clickid=wTN9A663F9F3BR9HGP3EE9N6  (setup (21).exe)

1 / 68      (Adware)
http://dl.appsdesktop.com/.../Get?p=3022&d=20297&l=1694&n=0&d1=365452&d2=-1&d3=-1&d4=-1&d5=-1&filename=setup&clickid=wGLCIOJQMDUTVP9HGP47ML9E  (setup.exe)

1 / 68      (Adware)
http://descargar.mp3.es/lv/software/downloadf/.../Minecraft.htm  (installer_minecraft_1_8_spanish.exe)

The following certificate is also signed by TOV Osya-Trans.

12AC2537444B8393C5CAF0A4ABE47CEE  (Jan 12, 2015 to Jan 13, 2016)

The following publishers (by Authenticode signature organization name) are related.

LLC

Safe install OPt

* Note, the details and description above are based on the code signing digital signature issued to TOV Osya-Trans by thawte, Inc. on December 29, 2014 with the serial number '728bc5572a0da8ebd677d0a17c4b5124'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.