» Banyan Tree Technology Limited
Digital Signature
Analysis
Files (2)
Downloads (6)
Distribution (1)
Related (13)

Banyan Tree Technology Limited

Publisher Information

Banyan Tree Technology Limited is a software publisher located in Hong Kong*. Thre are 8 additional code signing certificates issued to this publisher.

Authority:

GlobalSign nv-sa

Valid from:

11/13/2015 10:42:50 AM

Valid to:

11/25/2016 5:10:32 AM

Subject:

CN=Banyan Tree Technology Limited, O=Banyan Tree Technology Limited, L=HongKong, S=HongKong, C=HK

Issuer:

CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:

112135b73f75cb0a7e3f808ab13ae8d635a2

Scanner detections:

Detections (100% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.BanyanTreeTechnology (M)

100.00%

MicroWorld eScan

Application.Elex.M

50.00%

Quick Heal

PUA.Banyantree.Gen

50.00%

Malwarebytes

PUP.Optional.MyStartSearch.ShrtCln

50.00%

Zillya! Antivirus

Downloader.ELEX.Win32.1

50.00%

Bitdefender

Application.Elex.M

50.00%

K7 AntiVirus

Adware

50.00%

Agnitum Outpost

Riskware.Agent

50.00%

ESET NOD32

Win32/ELEX.EC potentially unwanted (variant)

50.00%

NANO AntiVirus

Riskware.Win32.Mutabaha.dxudgr

50.00%

1 / 68 (Adware)

nst2477.tmp (5134_cmi_istartpageing by 777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777) (b0db664cf3497ac71ed890ca46e565ac)

19 / 68 (Adware)

portmon.exe (5053_cmi_mystartsearch by Portmon/EE) (053b2c51fdb29165099b09916710038d)

Downloads URLs for files signed by Banyan Tree Technology Limited.

19 / 68 (Adware)

http://113.171.224.245/.../cmi_mystartsearch.exe (053b2c51fdb29165099b09916710038d)

1 / 68 (Adware)

http://113.171.224.243/.../cmi_mystartsearch.exe (b0db664cf3497ac71ed890ca46e565ac)

1 / 68 (Adware)

http://113.171.224.168/.../cmi_mystartsearch.exe (b0db664cf3497ac71ed890ca46e565ac)

19 / 68 (Adware)

http://113.171.224.166/.../cmi_mystartsearch.exe (053b2c51fdb29165099b09916710038d)

19 / 68 (Adware)

http://d2drfrdurj6mvo.cloudfront.net/.../cmi_mystartsearch.exe (053b2c51fdb29165099b09916710038d)

1 / 68 (Adware)

http://d2drfrdurj6mvo.cloudfront.net/.../cmi_mystartsearch.exe (b0db664cf3497ac71ed890ca46e565ac)

Distribution

The following websites host and distribute files published by Banyan Tree Technology Limited.

d2drfrdurj6mvo.cloudfront.net

The certificates below are also signed by Banyan Tree Technology Limited.

1121EB927D58E77AEFD3A6297ECCB86FC789 (Nov 12, 2015 to Nov 25, 2016)

1121A84F087742227CF7C530AB0F07FFC7DD (Nov 05, 2015 to Nov 25, 2016)

1121324A0077AF306A49E6EE83AD1B5E12CB (Nov 02, 2015 to Nov 25, 2016)

11215894DC361435AF34A96727E43A6C2EFE (Nov 09, 2015 to Nov 25, 2016)

112187F443E0F4A62FBC1C591265D74420EE (Oct 26, 2015 to Nov 25, 2016)

1121CB7052A12E42B49B65A31F3A1626DAFE (Nov 15, 2015 to Nov 24, 2016)

1121AF796D0895B8626D137A7B12A5F28B42 (Nov 13, 2014 to Oct 01, 2015)

1121C63E4490F9D28667737C8DE7D3B6805D (Jan 09, 2013 to Jan 10, 2015)

The following publishers (by Authenticode signature organization name) are related.

Beijing ELEX Technology Co.,Ltd

Thinknice Co., Limited

Giner Tech Inc

Yuxin WANG

Minidigital Technology Co., Limited

Thinknice Co. Limited

Skytouch Technology Co., Limited

EasyVpn

* Note, the details and description above are based on the code signing digital signature issued to Banyan Tree Technology Limited by GlobalSign nv-sa on November 13, 2015 with the serial number '112135b73f75cb0a7e3f808ab13ae8d635a2'.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.