» Thanksoft
Digital Signature
Analysis
Files (33)
Downloads (8)
Distribution (3)
Related (108)

Thanksoft

Publisher Information

Thanksoft is a software developer located in Dnepropetrovsk, N/a in Ukraine*. The publisher primarily developes software that can be classified as adware. Thre are 5 additional code signing certificates issued to this publisher.

Authority:

VeriSign, Inc.

Valid from:

1/31/2014 3:00:00 AM

Valid to:

2/1/2015 2:59:59 AM

Subject:

CN=Thanksoft, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Thanksoft, L=Dnepropetrovsk, S=n/a, C=UA

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

6c1556eb6266c79df482a0471e0f4004

Scanner detections:

Detections (100% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.Installer.Thanksoft.O, PUP.Thanksoft.I, PUP.Installer.Thanksoft.I, PUP.Thanksoft.Installer (M), PUP.Thanksoft (M), PUP.Thanksof (M), PUP.Thanksof.Installer (M), PUP (M)

100.00%

Vba32 AntiVirus

Downloader.Agent

3.03%

1 / 68 (PUP)

mask-surf-lite_3.6.exe (f41cfc90f55466d1bbef7967b497b6e6)

1 / 68 (PUP)

mask-surf-everything_2.3.exe (f81a483a9290f838f399decf07e72f49)

1 / 68 (PUP)

tor.exe (9f83f4682d2eced239fb1aed43d38413)

1 / 68 (PUP)

FalseIPScanner.exe (FalseIPScanner) (32f83020c9c02fb4eb19a097a0630ac0)

1 / 68 (PUP)

mse.sys (NetFilter SDK by NetFilterSDK.com) (6248184fa30cf0d34d4d1158c724eaf3)

1 / 68 (PUP)

mask-surf-lite.exe (ba38397d8479415b26bf496c43133610)

1 / 68 (PUP)

mse.sys (NetFilter SDK by NetFilterSDK.com) (d3072ea87c7092504b9912682dc8d9a3)

1 / 68 (PUP)

mse.sys (Windows Win 7 DDK driver by Windows Win 7 DDK provider) (cfc6037eac8ddd2318476b9e8f095aff)

1 / 68 (PUP)

mask-surf-lite_3.6_2.exe (1aee04cdb49bd57e93676172b7ff171d)

1 / 68 (PUP)

mask-surf-lite_3.6.exe (f275c213b65d5046b80c61677bb03f8b)

1 / 68 (PUP)

mse.sys (Windows Win 7 DDK driver by Windows Win 7 DDK provider) (17f682ab67962cb52b6b7af31eabd0dc)

1 / 68 (PUP)

MSU.exe (Mask Surf Ultimate by Thanksoft) (85003481a7643d5f0b70ae6e9cfb94fd)

1 / 68 (PUP)

mse.sys (Windows Win 7 DDK driver by Windows Win 7 DDK provider) (2b3c86403d27c059ebdfef22bbd27fc0)

1 / 68 (PUP)

mse.sys (Windows Win 7 DDK driver by Windows Win 7 DDK provider) (221f3b42f2410b790c3838e5331a42e5)

1 / 68 (PUP)

a0022877.exe (c34d92910aca1542dad2f79ec7ef8669)

1 / 68 (PUP)

tor.exe (480e8af70ee4bdd21d783889085bd423)

1 / 68 (PUP)

mse.exe (Mask Surf Everything by Thanksoft) (b8d922d9c3c2362c4b1946251a2956b1)

1 / 68 (PUP)

tor.exe (b76fa5da1a5ab517d390bafc3e61ee33)

1 / 68 (PUP)

mse.exe (Mask Surf Everything by Thanksoft) (ea82f99eb89c8beedf38ab6951fdb7f0)

1 / 68 (PUP)

mse.exe (Mask Surf Everything by Thanksoft) (93ac59d24a9631c51afb6d19cc0a6d5a)

1 / 68 (PUP)

mask-surf-lite.exe (ebaf6625d24fd6b85be7269b0aedf81d)

1 / 68 (PUP)

msusetup.exe (02ce2a6645670af4767cc627fef7346d)

1 / 68 (PUP)

mse.sys (Windows Win 7 DDK driver by Windows Win 7 DDK provider) (58d56d19594a0eef7c119ce67352d4a6)

1 / 68 (PUP)

mse.sys (NetFilter SDK by NetFilterSDK.com) (9f9ebb99b1804a98fe45186a0c7ac02e)

1 / 68 (PUP)

mse.sys (Windows Win 7 DDK driver by Windows Win 7 DDK provider) (b30713885bc84f605deddef8c9d5305c)

1 / 68 (PUP)

mse.sys (Windows Win 7 DDK driver by Windows Win 7 DDK provider) (e15860e394d866d5f4008203c5e9e257)

1 / 68 (PUP)

tor.exe (b9740d9f7ef82bae0b7714e94e487126)

1 / 68 (PUP)

mse.exe (Mask Surf Everything by Thanksoft) (9f27acf77a70e8c25991dfcf87d2823b)

1 / 68 (PUP)

mse.sys (Windows Win 7 DDK driver by Windows Win 7 DDK provider) (f701261c19751737ecbb658443042fcc)

2 / 68 (PUP)

msesetup.exe (239abff30ae245deb1d03a8a6154d690)

Latest 30 of 33 files

Downloads URLs for files signed by Thanksoft.

2 / 68 (PUP)

http://www.masksurf.com/.../msesetup.exe (239abff30ae245deb1d03a8a6154d690)

1 / 68 (PUP)

https://doc-0k-98-docs.googleusercontent.com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/s2vjtcr13s71dn6mgv3fd8mqrnmbas6b/1471384800000/08696374077854131578/.../0B7aNbC31jNpCU29DUU5uNDJwanM?e=download (masksurf_setup.exe)

1 / 68 (PUP)

http://download.findmysoft.com/2014/11/.../mask-surf-lite_3.6.exe (ebaf6625d24fd6b85be7269b0aedf81d)

1 / 68 (PUP)

https://drive.google.com/uc?export=download&id=0B7aNbC31jNpCU29DUU5uNDJwanM (masksurf_setup.exe)

1 / 68 (PUP)

http://files.downloadnow.com/s/software/13/80/90/.../masksurf_setup.exe (c4bf03fedadd12fa2c672fbd50eb8d2f)

1 / 68 (PUP)

http://software-files-a.cnet.com/s/software/13/93/88/.../masksurf_setup.exe (c4bf03fedadd12fa2c672fbd50eb8d2f)

1 / 68 (PUP)

&onid=2144&oid=3001-2144_4-10888261&rsid=cbsidownloadcomsite&sl=en&sc=us&topicguid=security/privacy&topicbrcrm=windows software&pid=13809076&mfgid=6278333&merid=6278333&ctype=dm&cval=CBSI&devicetype=desktop&pguid=c3886daa9830475f59b767e7&viewguid=RavlN6WZHBClexg4zVV2HXJsDsZQqjyutrgb&destUrl=http://software-files-a.cnet.com/s/software/13/80/90/.../masksurf_setup.exe (c4bf03fedadd12fa2c672fbd50eb8d2f)

1 / 68 (PUP)

http://software-files-a.cnet.com/s/software/13/80/90/.../masksurf_setup.exe (c4bf03fedadd12fa2c672fbd50eb8d2f)

Distribution

The following websites host and distribute files published by Thanksoft.

files.downloadnow.com

drive.google.com

software-files-a.cnet.com

The certificates below are also signed by Thanksoft.

3AF1A1ACB217D0C6F6CE6D7A43281075 (Feb 26, 2016 to Apr 15, 2016)

3B50069E945D4934FDF6546BCA6CCF5A (Apr 15, 2015 to Apr 15, 2016)

76708538C402831E2762FB5792D7BCDB (Nov 21, 2012 to Dec 22, 2013)

601A58A2017F0D20AFF0E14B7204977F (Sep 25, 2011 to Nov 11, 2012)

6C32D085F123AC99B7049016B3E96710 (Nov 09, 2010 to Nov 10, 2011)

The following publishers (by Authenticode signature organization name) are related.

LLC

Anton Panin

Safe Software (Rspark LLC)

Secure Download (Rspark LLC)

MP3 TechSupport LLC

Philipp B. Winterberg

Digital Volcano software Ltd

PowerOfSOftware Ltd.

Mindspark Interactive Network

Hipgnosis Vision

Consumer Software International

Smart PC Solutions, Inc.

Tenki Technology Co., Ltd.

30 of 108 publishers

* Note, the details and description above are based on the code signing digital signature issued to Thanksoft by VeriSign, Inc. on January 31, 2014 with the serial number '6c1556eb6266c79df482a0471e0f4004'.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.