home

gaia media group Co., Ltd.

Publisher Information

gaia media group Co., Ltd. is a software publisher located in Gangseo-gu, Seoul in Korea*. Thre are 2 additional code signing certificates issued to this publisher.
Authority:
Thawte, Inc.

Valid from:
5/19/2015 9:00:00 AM

Valid to:
6/18/2016 8:59:59 AM

Subject:
CN="gaia media group Co., Ltd.", O="gaia media group Co., Ltd.", L=Gangseo-gu, S=Seoul, C=KR

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
621c5d885a095c1e68b67865be750e97

Status:
Inconclusive detections from multiple engines

Scan engine
Details
Detections

ESET NOD32
Win32/Adware.SafeTerra.A application
54.55%

Reason Heuristics
PUP.GaiaMediaGroup, PUP.InstallCore.IM (L)
36.36%

Dr.Web
c:\users\test\appdata\local\temp\291ca6b90654cbde83ab00eb9f37a6e00acf0936 c:\users\test\appdata\loca, c:\users\test\appdata\local\temp\42c45b4de8bd94c66b6ce7fc6927f988531a9e45 c:\users\test\appdata\loca
27.27%

1 / 68      (PUP)
wiesminstall_20_163.exe (WIESM by Gaia Media Group)  (f7f684d0b4fb1558b9f325b2c7faabba)

0 / 68
nhopen.dll (nhopen.dll)  (b6cd6ecdcc7741c2f67afeaf32c8485c)

0 / 68
iszoneupdate.exe  (846ed7d61b1cd614a91596052045025f)

0 / 68
iszone.exe  (aff9d249d99f362e36e84b496ffe95d4)

0 / 68
iszone.exe  (25abb7b4c2d0005d3d885171dba41a66)

2 / 68      (inconclusive)
iszone.exe  (a3f3b94fc55d59f8128ae546dfaeec4f)

0 / 68
iszone.exe  (28eb335975a060ca591c4af68aa553a1)

1 / 68      (inconclusive)
iszoneinstall_18_163.exe (ISZone by Gaia Media Group)  (b5144417aaaa61795a7a8a8d172ebff6)

2 / 68      (inconclusive)
iszoneinstall_66_156.exe (ISZone by Gaia Media Group)  (a67a3fd716825db14bc2d926328a9868)

0 / 68
wiesmupdate.exe  (21e65b0868f341f0b503d21d32ac3211)

0 / 68
nhopen.dll (nhopen.dll)  (5c3d68a4e634c37ed5efd2fa243aaf18)

0 / 68
wiesminstall_20_163.exe (WIESM by Gaia Media Group)  (beb78ac3803ee16110252fe2624bed2a)

0 / 68
wiesm.exe  (45227043facc9ffd92c7b07776f755f0)

0 / 68
nhopen.dll (nhopen.dll)  (1bc4f6872df90a066e889b705dab8686)

0 / 68
iszoneupdate.exe  (ead43b4bbb07448bcb8cdf09490c8155)

0 / 68
iszone.exe  (a5e8f88e5ee2cb6c599ec57305b21dfc)

0 / 68
nhopen.dll (nhopen.dll)  (c14fb71a5167e5b90107bc18075c064c)

0 / 68
wiesmupdate.exe  (78a04cca6e103979941736745438cbeb)

0 / 68
wiesm.exe  (9481a420e10980c20d1a793883ab7445)

1 / 68      (PUP)
wiesmsetup_20_hide.exe  (92d2a827b365962b04af9d54c0724435)

0 / 68
wiesminstall_20_163.exe (WIESM by Gaia Media Group)  (680769f49c77d698103f423f5c27acbf)

0 / 68
nhopen.dll (nhopen.dll)  (17c757a604a4b2722372414f595db75a)

0 / 68
iszoneinstall_127_163.exe (ISZone by Gaia Media Group)  (6a31f4e9915e11aa9a961595cc1a0cec)

0 / 68
iszoneupdate.exe  (e0687752a1408371bc6f158723dbc8a7)

1 / 68      (inconclusive)
iszone.exe  (df20c3412f04a89b9950190e6a52f57e)

0 / 68
iszone.exe  (55b28eae3fb92c16fbbc8b9879931210)

0 / 68
iszone.exe  (c3e5f8627049b90bf18eabd69a9412e5)

0 / 68
iszone.exe  (48ec962af127ee73e44298bbbac6d5a2)

0 / 68
nhopen.dll (nhopen.dll)  (27b6b37e0ced1032f6b1ed3c8c13caa5)

1 / 68      (PUP)
iszonesetup_127_hide.exe  (ed40003b913f2233ea2f0a6680600248)

 
Latest 30 of 46 files

Downloads URLs for files signed by gaia media group Co., Ltd..

1 / 68      (PUP)
http://down.keywordinfo.co.kr/ISZoneSetup_65_hide.exe  (eeb465b424af7bbadba3fd4f9f0d34e5)

The following websites host and distribute files published by gaia media group Co., Ltd..

down.keywordinfo.co.kr

The certificates below are also signed by gaia media group Co., Ltd..

651F1DA2E8A3D393B027E058D6CD880B  (May 23, 2016 to Jul 23, 2017)

22D636EEBF0024B8A048577B1BEBF0A6  (May 29, 2014 to May 30, 2015)

The following publishers (by Authenticode signature organization name) are related.

Gaia Media Group Inc.

* Note, the details and description above are based on the code signing digital signature issued to gaia media group Co., Ltd. by Thawte, Inc. on May 19, 2015 with the serial number '621c5d885a095c1e68b67865be750e97'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.