» Tripro Ltd
Digital Signature
Analysis
Files (33)
Downloads (9)
Distribution (3)

Tripro Ltd

Publisher Information

Tripro Ltd is a software publisher located in Hong Kong*. The company is a primary distributor of unwanted software. There is one additional code signing certificate issued to this publisher.

Authority:

Symantec Corporation

Valid from:

10/1/2015 2:00:00 AM

Valid to:

11/29/2017 11:59:59 PM

Subject:

CN=Tripro Ltd, O=Tripro Ltd, L=Hong Kong, S=Hong Kong, C=HK

Issuer:

CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:

13a3b9c03ed5637d31e4611b935adccf

Scanner detections:

Detections (100% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.Tripro.Installer (M), PUP.Tripro (M), PUP (M)

100.00%

ESET NOD32

Win32/Bundled.Toolbar.Ask.G potentially unsafe application

18.18%

Malwarebytes

PUP.Optional.APNToolBar

9.09%

ESET NOD32

Win32/Bundled.Toolbar.Ask.G potentially unsafe (variant)

9.09%

Baidu Antivirus

Adware.Win32.AskToolbar

9.09%

Fortinet FortiGate

Riskware/Ask

9.09%

Kaspersky

Trojan-Spy.MSIL.KeyLogger

6.06%

Sophos

Virus 'Mal/FakeAV-IR'

3.03%

Microsoft Security Essentials

Threat.Undefined

3.03%

1 / 68 (Adware)

freedocumentsviewer.exe (d7de8b029bb9b6ca3ffe16b34704cb21)

1 / 68 (Adware)

freedocumentsviewer.exe (42ad555ded87cf56586a3b7af0298a67)

1 / 68 (Adware)

freezipopener.exe (FreeZipOpener) (3b9481e34cc1b277d552678d00bf1c00)

1 / 68 (Adware)

freedocumentsviewer.exe (6979a6ba0c53996b21b689071e9a5b27)

1 / 68 (Adware)

freezipopener.exe (8c5a4f322f094ceedeaaf703ff12e207)

1 / 68 (Adware)

freedocumentsviewer.exe (8347f91a054fe53552f7d8f10810645a)

1 / 68 (Adware)

freedocumentsviewer.exe (4f7b1d424ef33120edaa9e968eb9bd79)

1 / 68 (Adware)

freedocumentsviewer.exe (38675d76e3261a5f57c23a9e26be9dad)

1 / 68 (Adware)

installer_freedocumentsviewer.exe (5af5e8553a126a385e04d8f0331ac32f)

2 / 68 (Adware)

freedocumentsviewer.exe (bffe80f0c6d5cdcb4c2333d7cf2b5f6b)

1 / 68 (Adware)

FreeDocumentsViewer.exe (FreeFileViewer.Client) (3c6baf813d7248658ca537468f8c8186)

1 / 68 (Adware)

freezipopener.exe (349da000577bf21fa49bc3fdb36ee007)

1 / 68 (Adware)

freezipopener.exe (FreeZipOpener) (0e47dcdc4845289bbe3ae8c7d8fd64ea)

1 / 68 (Adware)

freezipopener.exe (27deac1771f5adfa208b5205003e0ee6)

1 / 68 (Adware)

freedocumentsviewer.exe (b042d6cce59b4296d466112bc1f219c8)

4 / 68 (Adware)

81720751a76958fd30615041e8deda48563231bb (e5d2c0c892684b42f1e203a9af3b4797)

1 / 68 (Adware)

freezipopener.exe (6c6343cfa807498ffa16520e709284b4)

2 / 68 (Adware)

81720751a76958fd30615041e8deda48563231bb (60f3b9d4dffe7f6fb4a137dc20948282)

3 / 68 (Adware)

81720751a76958fd30615041e8deda48563231bb (468a9808542c17af5fe3da4c027064f7)

1 / 68 (Adware)

freezipopener.exe.mxdl (34fd1ce4422699deb20bdb57b70eb442)

2 / 68 (Adware)

81720751a76958fd30615041e8deda48563231bb (3fe0278e47f047b389ce9ce455e6ee48)

3 / 68 (Adware)

81720751a76958fd30615041e8deda48563231bb (72ae63ce97974aa90f041f01114b01d5)

1 / 68 (Adware)

freezipopener.exe (5de7f017a99e46f8da02990afea75897)

1 / 68 (Adware)

freedocumentsviewer.exe (d70cb86d7be3e61fd606a1d2b69d0a5a)

1 / 68 (Adware)

improvespeedpc_setup.exe (1e07f6dbea00d927929c29d763ac586e)

5 / 68 (Adware)

freedocumentsviewer.exe (51b70f5ce08a8aa7b00a81e8d98db932)

1 / 68 (Adware)

freezipopener.exe (FreeZipOpener) (0e47dcdc4845289bbe3ae8c7d8fd64ea)

1 / 68 (Adware)

installer_freezipopener.exe (60fe907f4bdc8e8c729c399cec102f7f)

5 / 68 (Adware)

freezipopener.exe (abd96f2b38087f549ec37a08a733080d)

5 / 68 (Adware)

Setup.exe (b621083276e68d6a42f1c62ccce256c3)

Latest 30 of 33 files

Downloads URLs for files signed by Tripro Ltd.

5 / 68 (Adware)

http://localhost:37848/continue?TiCredToken=18249&Source=WTP&URL=http://.../FreeDocumentsViewer.exe (51b70f5ce08a8aa7b00a81e8d98db932)

1 / 68 (Adware)

http://freezipopener.s3.amazonaws.com/FreeZipOpener.exe (349da000577bf21fa49bc3fdb36ee007)

2 / 68 (Adware)

http://freedocumentsviewer.s3.amazonaws.com/FreeDocumentsViewer.exe (bffe80f0c6d5cdcb4c2333d7cf2b5f6b)

1 / 68 (Adware)

http://freezipopener.s3.amazonaws.com/FreeZipOpener.exe (5de7f017a99e46f8da02990afea75897)

1 / 68 (Adware)

http://freedocumentsviewer.s3.amazonaws.com/FreeDocumentsViewer.exe (d70cb86d7be3e61fd606a1d2b69d0a5a)

5 / 68 (Adware)

http://113.171.224.167/.../FreeDocumentsViewer.exe (51b70f5ce08a8aa7b00a81e8d98db932)

5 / 68 (Adware)

http://freezipopener.s3.amazonaws.com/FreeZipOpener.exe (abd96f2b38087f549ec37a08a733080d)

5 / 68 (Adware)

http://freedocumentsviewer.s3.amazonaws.com/FreeDocumentsViewer.exe (51b70f5ce08a8aa7b00a81e8d98db932)

5 / 68 (Adware)

http://improvespeedpc.s3.amazonaws.com/ImproveSpeedPC.exe (b621083276e68d6a42f1c62ccce256c3)

Distribution

The following websites host and distribute files published by Tripro Ltd.

freezipopener.s3.amazonaws.com

freedocumentsviewer.s3.amazonaws.com

improvespeedpc.s3.amazonaws.com

The following certificate is also signed by Tripro Ltd.

1189C239E85299F4464322E094264D91 (Sep 30, 2013 to Oct 01, 2015)

* Note, the details and description above are based on the code signing digital signature issued to Tripro Ltd by Symantec Corporation on October 01, 2015 with the serial number '13a3b9c03ed5637d31e4611b935adccf'.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.