» Giner Tech Inc
Digital Signature
Analysis
Files (15)
Downloads (5)
Distribution (1)
Related (12)

Giner Tech Inc

Publisher Information

Giner Tech Inc is a software publisher located in Wilmington, Delaware in the United States*. The company is a primary distributor of unwanted software. Thre are 20 additional code signing certificates issued to this publisher.

Authority:

GlobalSign nv-sa

Valid from:

10/19/2015 5:31:10 AM

Valid to:

12/2/2015 5:23:38 AM

Subject:

CN=Giner Tech Inc, O=Giner Tech Inc, L=Wilmington, S=Delaware, C=US

Issuer:

CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:

112106b3edf5de21fe5dd0e0f44eb00f51db

Scanner detections:

Detections (100% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.Thinknice.GinerTech (M), PUP.Thinknice.GinerTech.Installer (M), PUP.Thinknice (M)

100.00%

Malwarebytes

PUP.Optional.OurSeaching, PUP.Optional.MyStartSearch.ShrtCln, PUP.Optional.IStartSurf.ShrtCln

73.33%

F-Secure

Application.Elex.M, Gen:Variant.Application.Jatif

73.33%

ESET NOD32

Win32/ELEX.EY potentially unwanted (variant), Win32/ELEX.FK potentially unwanted (variant)

73.33%

VIPRE Antivirus

Trojan.Win32.Generic

66.67%

Dr.Web

Adware.Mutabaha.802

53.33%

Bkav FE

W32.HfsAdware

33.33%

MicroWorld eScan

Application.Elex.M, Gen:Variant.Application.Jatif.390

33.33%

Bitdefender

Application.Elex.M, Gen:Variant.Application.Jatif.390

33.33%

Lavasoft Ad-Aware

Application.Elex.M, Gen:Variant.Application.Jatif.390

33.33%

1 / 68 (Adware)

adv_76.exe (4767_ima_mystartsearch by Portmon/EE) (fb7cc1295fcc658b398e9a06d4e3ae49)

1 / 68 (Adware)

cvs5_mystartsearch.exe (4992_cvs5_mystartsearch) (614664d0e20a7ef4868da35ae13a455c)

1 / 68 (Adware)

llys_mystartsearch.exe (4962_tugss_mystartsearch) (f4f43e87461f18b02a19d97336e8bc8e)

1 / 68 (Adware)

lly1_istartsurf.exe (4960_tug1_istartsurf) (d6f9cd4ab10bacf62d63214b8be3b825)

6 / 68 (Adware)

dae_do-search.exe (4968_dae_do-search) (b2c024c3b1ee5c08632e490d2056398a)

14 / 68 (Adware)

cvs_mystartsearch.exe (4989_cvs_mystartsearch) (38a469ba4fbddbc1be72e55fb71579d5)

16 / 68 (Adware)

smt_istartsurf.exe (4963_smt_istartsurf) (69616811e38de93f9d94f8961bb040b8)

6 / 68 (Adware)

llys_istartsurf.exe (4961_tugss_istartsurf) (f43b24f45f5a13675b0b841e118ce802)

14 / 68 (Adware)

amt_oursurfing.exe (4959_amt_oursurfing) (db27ce84fbf7a2019bd9bef958493339)

6 / 68 (Adware)

smt_oursurfing.exe (4964_smt_oursurfing) (12b39dae9a15c015db0d392c009a4ef1)

6 / 68 (Adware)

2sq3_oursurfing.exe (4966_2sq3_oursurfing) (7cc429169cfd04d98e89d9031223bb09)

6 / 68 (Adware)

2sq_oursurfing.exe (4965_2sq_oursurfing) (6023faa19f41c09f023a262b7e7644f8)

19 / 68 (Adware)

adv_46.exe (4768_ima_istartsurf by Portmon/EE) (2ead2cf0c2d17ee6d2d876df4d47e362)

14 / 68 (Adware)

adv_76.exe (4767_ima_mystartsearch by Portmon/EE) (7981c376d0ccba18e54272ec0ebbb5cd)

7 / 68 (Adware)

oursurfing.exe (4780_eip_oursurfing by Portmon/EE) (4a86042e900d1e95f913547dde53b160)

Downloads URLs for files signed by Giner Tech Inc.

1 / 68 (Adware)

http://d2drfrdurj6mvo.cloudfront.net/.../lly1_istartsurf.exe (d6f9cd4ab10bacf62d63214b8be3b825)

1 / 68 (Adware)

http://d2drfrdurj6mvo.cloudfront.net/.../llys_mystartsearch.exe (f4f43e87461f18b02a19d97336e8bc8e)

6 / 68 (Adware)

https://d2drfrdurj6mvo.cloudfront.net/.../dae_do-search.exe (b2c024c3b1ee5c08632e490d2056398a)

6 / 68 (Adware)

http://d2drfrdurj6mvo.cloudfront.net/.../2sq_oursurfing.exe (6023faa19f41c09f023a262b7e7644f8)

6 / 68 (Adware)

http://d2drfrdurj6mvo.cloudfront.net/.../llys_istartsurf.exe (f43b24f45f5a13675b0b841e118ce802)

Distribution

The following websites host and distribute files published by Giner Tech Inc.

d2drfrdurj6mvo.cloudfront.net

The certificates below are also signed by Giner Tech Inc.

112186B135D0152CD8EA8D04B67D2A0CCF34 (Apr 20, 2015 to Dec 02, 2015)

1121B74BA60A169786D0CAC560764F7FC03A (Nov 27, 2015 to Dec 02, 2015)

1121E3C052D28186E7A3A2F0C0E1C9DB0E0A (Sep 09, 2015 to Dec 02, 2015)

1121FB793B677F1D12C7BCC7B71B945F3810 (Jun 12, 2015 to Dec 02, 2015)

112133A773ED10A66141A4E8D415A28B33BC (Nov 25, 2015 to Dec 02, 2015)

112167537F02B71858D5AA3FC5D6CBB4265C (Mar 24, 2015 to Dec 02, 2015)

1121B41D053551CB1F7FDDDC1D9FB5BA07B3 (Oct 08, 2015 to Dec 02, 2015)

1121FF4B793B23CE59EA22F72C1A6C3394D7 (Nov 30, 2015 to Dec 02, 2015)

11211E09603B593D245602D9201DA71AC837 (Oct 26, 2015 to Dec 02, 2015)

112144A013AAD3E1337D18D07539AE686CDE (Jul 10, 2015 to Dec 02, 2015)

10 of 20 code signing certificates issued

The following publishers (by Authenticode signature organization name) are related.

Yuxin WANG

Minidigital Technology Co., Limited

Skytouch Technology Co., Limited

Thinknice Co., Limited

Thinknice Co. Limited

Banyan Tree Technology Limited

EasyVpn

* Note, the details and description above are based on the code signing digital signature issued to Giner Tech Inc by GlobalSign nv-sa on October 19, 2015 with the serial number '112106b3edf5de21fe5dd0e0f44eb00f51db'.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.