home

DivineMedia Inc.

Publisher Information

DivineMedia Inc. is a software publisher located in Guro-gu, Seoul in Korea*. The company is a primary distributor of unwanted software. Thre are 4 additional code signing certificates issued to this publisher.
Authority:
thawte, Inc.

Valid from:
9/3/2015 9:00:00 AM

Valid to:
2/2/2017 8:59:59 AM

Subject:
CN=DivineMedia Inc., O=DivineMedia Inc., L=Guro-gu, S=Seoul, C=KR

Issuer:
CN=thawte SHA256 Code Signing CA, O="thawte, Inc.", C=US

Serial number:
0c5dd2f14a9f2a0f57b26988f570e13c

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.DivineMe.Installer (M), PUP.DivineMe (M), PUP (M)
100.00%

1 / 68      (Adware)
synth.exe  (12ebca3500a69497be7c00678cc4217a)

1 / 68      (Adware)
synth.exe  (14f9e10c251c02bb4cb0bb9ec7fc651c)

1 / 68      (Adware)
synth.exe  (ca68123d1ec1385cbfbd4645a5faadd7)

1 / 68      (Adware)
homecaresetupver1.0.exe (by HomeCare)  (12f747868dfd3dbe042ab52f13324c28)

1 / 68      (Adware)
synth.exe  (9b053d7e1c5196932e0aa278a8b19273)

1 / 68      (Adware)
homecaresetupver1.0.exe (by HomeCare)  (ddcd8a8481faa01536951a696ef1c6b3)

1 / 68      (Adware)
homecaresetupver1.0.exe (by HomeCare)  (e5552247b771e73b47928d05d0e00e13)

1 / 68      (Adware)
synth.exe  (e849985a405b7e9592c5cffb37cf03d2)

1 / 68      (Adware)
kar229e.tmp  (251ca3d35cc6990efaf82948b0e69b4b)

1 / 68      (Adware)
synth.exe  (931b0cf0af2531d839efcded704ef99d)

1 / 68      (Adware)
synth.exe  (f7ce417e20311cc152958903a74d82ad)

1 / 68      (Adware)
synth.exe  (8e0192324b8acdccddebb2a8c5d8cc76)

1 / 68      (Adware)
synth.exe  (f616ed20fb1674997565863e6ce6e06b)

1 / 68      (Adware)
homecaresetupver1.0.exe (by HomeCare)  (448ab3a92a19cbdb41807d9d2b2e6a8e)

1 / 68      (Adware)
synth.exe  (db2e19e86abb38b7f0cdf9644726b791)

1 / 68      (Adware)
synth.exe  (f4d40eb77a71946720b08c4c7f4ecb96)

1 / 68      (Adware)
synth.exe  (98ba58149bac4e8823da5290f74bc5fd)

1 / 68      (Adware)
synth.exe  (0f4061ba8b5a0dcf9cf4adca82fa8907)

1 / 68      (Adware)
homecaresetupver1.0.exe (by HomeCare)  (57e13024ef80061dd8ceeb2fade80701)

1 / 68      (Adware)
synth.exe  (e04cdc34e0f7bbbe3e784350602c4f0a)

1 / 68      (Adware)
homecaresetupver1.0.exe (by HomeCare)  (970e7854b01ff54b061f33ca6546ab50)

1 / 68      (Adware)
synth.exe  (f5d7a5f7a739b7facb842e52a8555470)

1 / 68      (Adware)
homecaresetupver1.0.exe (by HomeCare)  (f635c7604a63eed7d4195d72cb482f67)

1 / 68      (Adware)
homecaresetupver1.0.exe (by HomeCare)  (11466e6b532794bb75d89a046899648e)

1 / 68      (Adware)
synth.exe  (f9e0bd0d67dca81b4e0f079dbbf9460a)

1 / 68      (Adware)
homecaresetupver1.0.exe (by HomeCare)  (974b090c718f0c7935b58f07b9438564)

1 / 68      (Adware)
hcssrv.exe  (268addf46b5e0713017a78f1dfd907ec)

1 / 68      (Adware)
synth.exe  (b15dafc725475918b39e1330b3bc2f82)

1 / 68      (Adware)
synth.exe  (28f7257aa0c63046b29c579b58047f34)

1 / 68      (Adware)
homecaresetupver1.0.exe (by HomeCare)  (87c441a87414865a3ffa837c5dcf69e3)

 
Latest 30 of 131 files

Downloads URLs for files signed by DivineMedia Inc..

1 / 68      (Adware)
http://homecaresystem.kr/app/1.0/.../HomeCareSetupVer1.0.exe  (974b090c718f0c7935b58f07b9438564)

1 / 68      (Adware)
http://magiccare.net/ver3/app/.../synth.exe  (db07c2ab476fc60913367830261233f4)

The following websites host and distribute files published by DivineMedia Inc..

magiccare.net

homecaresystem.kr

The certificates below are also signed by DivineMedia Inc..

3A678ED54C0B610741AB0EB36DAC1E6F  (Dec 04, 2014 to Feb 02, 2017)

19DC8090FC96690F34D6B6C865222BFA  (Nov 26, 2015 to Feb 02, 2017)

70D6D72340C00A54AEEB109E10818B2B  (Dec 04, 2012 to Jan 04, 2015)

75E01A79B0F42738A2368AB6D8FE0FBB  (Dec 14, 2011 to Dec 14, 2012)

* Note, the details and description above are based on the code signing digital signature issued to DivineMedia Inc. by thawte, Inc. on September 03, 2015 with the serial number '0c5dd2f14a9f2a0f57b26988f570e13c'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.