home

Banyan Tree Technology Limited

Publisher Information

Banyan Tree Technology Limited is a software publisher located in Hong Kong*. Thre are 8 additional code signing certificates issued to this publisher.
Authority:
GlobalSign nv-sa

Valid from:
11/13/2015 10:42:50 AM

Valid to:
11/25/2016 5:10:32 AM

Subject:
CN=Banyan Tree Technology Limited, O=Banyan Tree Technology Limited, L=HongKong, S=HongKong, C=HK

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
112135b73f75cb0a7e3f808ab13ae8d635a2

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.BanyanTreeTechnology (M)
100.00%

MicroWorld eScan
Application.Elex.M
50.00%

Quick Heal
PUA.Banyantree.Gen
50.00%

Malwarebytes
PUP.Optional.MyStartSearch.ShrtCln
50.00%

Zillya! Antivirus
Downloader.ELEX.Win32.1
50.00%

Bitdefender
Application.Elex.M
50.00%

K7 AntiVirus
Adware
50.00%

Agnitum Outpost
Riskware.Agent
50.00%

ESET NOD32
Win32/ELEX.EC potentially unwanted (variant)
50.00%

NANO AntiVirus
Riskware.Win32.Mutabaha.dxudgr
50.00%

1 / 68      (Adware)
nst2477.tmp (5134_cmi_istartpageing by 777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777)  (b0db664cf3497ac71ed890ca46e565ac)

19 / 68    (Adware)
portmon.exe (5053_cmi_mystartsearch by Portmon/EE)  (053b2c51fdb29165099b09916710038d)

Downloads URLs for files signed by Banyan Tree Technology Limited.

19 / 68    (Adware)
http://113.171.224.245/.../cmi_mystartsearch.exe  (053b2c51fdb29165099b09916710038d)

1 / 68      (Adware)
http://113.171.224.243/.../cmi_mystartsearch.exe  (b0db664cf3497ac71ed890ca46e565ac)

1 / 68      (Adware)
http://113.171.224.168/.../cmi_mystartsearch.exe  (b0db664cf3497ac71ed890ca46e565ac)

19 / 68    (Adware)
http://113.171.224.166/.../cmi_mystartsearch.exe  (053b2c51fdb29165099b09916710038d)

19 / 68    (Adware)
http://d2drfrdurj6mvo.cloudfront.net/.../cmi_mystartsearch.exe  (053b2c51fdb29165099b09916710038d)

1 / 68      (Adware)
http://d2drfrdurj6mvo.cloudfront.net/.../cmi_mystartsearch.exe  (b0db664cf3497ac71ed890ca46e565ac)

The following websites host and distribute files published by Banyan Tree Technology Limited.

d2drfrdurj6mvo.cloudfront.net

The certificates below are also signed by Banyan Tree Technology Limited.

1121A84F087742227CF7C530AB0F07FFC7DD  (Nov 05, 2015 to Nov 25, 2016)

1121EB927D58E77AEFD3A6297ECCB86FC789  (Nov 12, 2015 to Nov 25, 2016)

1121324A0077AF306A49E6EE83AD1B5E12CB  (Nov 02, 2015 to Nov 25, 2016)

11215894DC361435AF34A96727E43A6C2EFE  (Nov 09, 2015 to Nov 25, 2016)

112187F443E0F4A62FBC1C591265D74420EE  (Oct 26, 2015 to Nov 25, 2016)

1121CB7052A12E42B49B65A31F3A1626DAFE  (Nov 15, 2015 to Nov 24, 2016)

1121AF796D0895B8626D137A7B12A5F28B42  (Nov 13, 2014 to Oct 01, 2015)

1121C63E4490F9D28667737C8DE7D3B6805D  (Jan 09, 2013 to Jan 10, 2015)

The following publishers (by Authenticode signature organization name) are related.

Beijing ELEX Technology Co.,Ltd

Shulan Hou

Xiaoqing Liu

Taiming Li

Fuyuan Zhou

Li Mo

Thinknice Co., Limited

Giner Tech Inc

Yuxin WANG

Minidigital Technology Co., Limited

Thinknice Co. Limited

Skytouch Technology Co., Limited

EasyVpn

* Note, the details and description above are based on the code signing digital signature issued to Banyan Tree Technology Limited by GlobalSign nv-sa on November 13, 2015 with the serial number '112135b73f75cb0a7e3f808ab13ae8d635a2'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.