» Giner Tech Inc
Digital Signature
Analysis
Files (16)
Downloads (5)
Distribution (1)
Related (12)

Giner Tech Inc

Publisher Information

Giner Tech Inc is a software publisher located in Wilmington, Delaware in the United States*. The company is a primary distributor of unwanted software. Thre are 20 additional code signing certificates issued to this publisher.

Authority:

GlobalSign nv-sa

Valid from:

9/9/2015 4:02:15 PM

Valid to:

12/2/2015 11:23:38 AM

Subject:

CN=Giner Tech Inc, O=Giner Tech Inc, L=Wilmington, S=Delaware, C=US

Issuer:

CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:

1121e3c052d28186e7a3a2f0c0e1c9db0e0a

Scanner detections:

Detections (100% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.Thinknice.GinerTech (M), PUP.Thinknice.GinerTec (M), PUP.Thinknice.GinerTec.Installer (M)

100.00%

Malwarebytes

PUP.Optional.MyStartSearch.ShrtCln, PUP.Optional.IStartSurf.ShrtCln, PUP.Optional.Omniboxes.ShrtCln, PUP.Optional.OurSeaching

50.00%

ESET NOD32

Win32/ELEX.FG potentially unwanted (variant), Win32/ELEX.FC potentially unwanted (variant)

50.00%

F-Secure

Gen:Variant.Application.Jatif

50.00%

Dr.Web

Adware.Mutabaha.706, Adware.Mutabaha.700

43.75%

MicroWorld eScan

Gen:Variant.Application.Jatif.390

37.50%

Bitdefender

Gen:Variant.Application.Jatif.390

37.50%

Lavasoft Ad-Aware

Gen:Variant.Application.Jatif.390

37.50%

Arcabit

PUP.Adware.GinerTech.ecb

37.50%

G Data

Gen:Variant.Application.Jatif.390

37.50%

1 / 68 (Adware)

setup_magic_ct.exe (4745_pjr_oursurfing by WillLink.net) (31489bc8ba9f4acc44aadba882698675)

1 / 68 (Adware)

lly1_istartsurf.exe (4793_tug1_istartsurf by WillLink.net) (e5800a9b83dd4e2208e9b882895fc840)

1 / 68 (Adware)

306.exe (4784_brd_istartsurf by WillLink.net) (500ce493088f8408fd742f8d28dfdc5b)

1 / 68 (Adware)

dae_do-search.exe (4785_dae_do-search by Portmon/EE) (6716d16dc37553e634367fa50354fd00)

14 / 68 (Adware)

lly_istartsurf.exe (4746_tugs_istartsurf by WillLink.net) (0eec3781d0a56b7f0b64a219c6765841)

1 / 68 (Adware)

lly_istartsurf.exe (4792_tugs_istartsurf by WillLink.net) (536f29a770d4ca48a06948de05116786)

16 / 68 (Adware)

lly_mystartsearch.exe (4794_tugs_mystartsearch by WillLink.net) (2e35c28b1e6bfb6b4b1bf96fea781ca3)

1 / 68 (Adware)

lly1_istartsurf.exe (4748_tug1_istartsurf by WillLink.net) (8498e4d99fb578369bf916a32c280675)

12 / 68 (Adware)

awh2934.tmp (4805_amt_oursurfing by 7th) (6e6c60a1b0ce6b67d5e0e6c60cb60df2)

13 / 68 (Adware)

amt_oursurfing.exe (4800_amt_oursurfing by WillLink.net) (2ae81ecd81dcbaec99e1b8651b53215d)

1 / 68 (Adware)

isvhlt6izo.exe (4803_exp1_oursurfing by WillLink.net) (a7d5a21f5152ac3c6f20ac055c3d1d0b)

1 / 68 (Adware)

lly_mystartsearch.exe (4747_tugs_mystartsearch by WillLink.net) (7ca1d8f8a8259120962dddf26dc494c6)

10 / 68 (Adware)

amt_omniboxes.exe (4753_amt_omniboxes by 7th) (aa73934237e829ecfa668aef5950d70c)

11 / 68 (Adware)

o26ddtbbizhksga.exe (4757_icp_istartsurf by 7th) (887b04e430e3b3970b9873a4931af130)

5 / 68 (Adware)

b3wkunhqsq.exe (4755_exp1_oursurfing by 7th) (88077fabb89f8320343be069542dce4f)

5 / 68 (Adware)

amt_oursurfing.exe (4752_amt_oursurfing by 7th) (94abcdae9e79e55bc7c8b8cf595866f8)

Downloads URLs for files signed by Giner Tech Inc.

1 / 68 (Adware)

http://d2drfrdurj6mvo.cloudfront.net/.../lly_mystartsearch.exe (7ca1d8f8a8259120962dddf26dc494c6)

14 / 68 (Adware)

http://d2drfrdurj6mvo.cloudfront.net/.../lly_istartsurf.exe (0eec3781d0a56b7f0b64a219c6765841)

1 / 68 (Adware)

https://d2drfrdurj6mvo.cloudfront.net/.../dae_do-search.exe (6716d16dc37553e634367fa50354fd00)

16 / 68 (Adware)

http://d2drfrdurj6mvo.cloudfront.net/.../lly_mystartsearch.exe (2e35c28b1e6bfb6b4b1bf96fea781ca3)

1 / 68 (Adware)

http://d2drfrdurj6mvo.cloudfront.net/.../lly1_istartsurf.exe (8498e4d99fb578369bf916a32c280675)

Distribution

The following websites host and distribute files published by Giner Tech Inc.

d2drfrdurj6mvo.cloudfront.net

The certificates below are also signed by Giner Tech Inc.

112186B135D0152CD8EA8D04B67D2A0CCF34 (Apr 20, 2015 to Dec 02, 2015)

1121B74BA60A169786D0CAC560764F7FC03A (Nov 27, 2015 to Dec 02, 2015)

1121FB793B677F1D12C7BCC7B71B945F3810 (Jun 12, 2015 to Dec 02, 2015)

112133A773ED10A66141A4E8D415A28B33BC (Nov 25, 2015 to Dec 02, 2015)

112106B3EDF5DE21FE5DD0E0F44EB00F51DB (Oct 19, 2015 to Dec 02, 2015)

112167537F02B71858D5AA3FC5D6CBB4265C (Mar 24, 2015 to Dec 02, 2015)

1121FF4B793B23CE59EA22F72C1A6C3394D7 (Nov 30, 2015 to Dec 02, 2015)

1121B41D053551CB1F7FDDDC1D9FB5BA07B3 (Oct 08, 2015 to Dec 02, 2015)

112144A013AAD3E1337D18D07539AE686CDE (Jul 10, 2015 to Dec 02, 2015)

112155502553F211EFA352E25951E091FBB5 (Oct 24, 2015 to Dec 02, 2015)

10 of 20 code signing certificates issued

The following publishers (by Authenticode signature organization name) are related.

Yuxin WANG

Minidigital Technology Co., Limited

Skytouch Technology Co., Limited

Thinknice Co., Limited

Thinknice Co. Limited

Banyan Tree Technology Limited

EasyVpn

* Note, the details and description above are based on the code signing digital signature issued to Giner Tech Inc by GlobalSign nv-sa on September 09, 2015 with the serial number '1121e3c052d28186e7a3a2f0c0e1c9db0e0a'.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.