» Search Safer Inc
Digital Signature
Analysis
Files (51)
Downloads (29)
Distribution (11)
Related (63)

Search Safer Inc

Publisher Information

Search Safer Inc is a software publisher located in San Francisco, California in the United States*. The company is a primary distributor of unwanted software. Thre are 2 additional code signing certificates issued to this publisher.

Authority:

COMODO CA Limited

Valid from:

6/6/2014 1:00:00 AM

Valid to:

6/7/2015 12:59:59 AM

Subject:

CN=Search Safer Inc, OU=Search Safer Inc, O=Search Safer Inc, STREET=665 3rd street Suite 150, L=San Francisco, S=California, PostalCode=94107, C=US

Issuer:

CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

00e26e98daa7aaa5703565127bf095efbe

Scanner detections:

Detections (100% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.Startup.SearchSafer.J, PUP.Installer.SearchSafer.L, PUP.Installer.SearchSafer.K, PUP.SearchSafer.P, PUP.SearchSafer.L, PUP.SearchSafer.D, PUP.SearchSafer.E, PUP.SearchSafer.I, Threat.SearchSafer, PUP.SearchSafer.Installer (M), PUP.SearchSafer (M), PUP.SearchSa.Installer (M), PUP.SearchSa (M), PUP (M)

100.00%

Vba32 AntiVirus

Trojan.AutoHK

20.00%

Trend Micro House Call

Suspicious_GEN.F47V0628, Suspicious_GEN.F47V0703, Suspicious_GEN.F47V0702, Suspicious_GEN.F47V0626, Suspicious_GEN.F47V1111

14.00%

McAfee

Artemis!B67230A0FC91, Artemis!8D05C7AF64CF, Artemis!B18C70D830CD, Artemis!E53E0264B339

8.00%

Zillya! Antivirus

Tool.NetPass.Win32.2737

8.00%

Dr.Web

Adware.Downware.8862

8.00%

AVG

Search Safer Inc

2.00%

1 / 68 (Adware)

andyprioritymgr.exe (7eab629f253e458765e9a459b58692d9)

1 / 68 (Adware)

andycleanvm.exe (d141aafffff5caa73c8e86c454b84b33)

1 / 68 (Adware)

andycleanuptool.exe (43132be3658c0c207075a749edf31ca1)

1 / 68 (Adware)

andy_v29.exe (ANDY OS by andyroid.net) (4cae875707ef5e2a7270588eb67cf630)

1 / 68 (Adware)

andycleanvm.exe (731bd56363f5c6dad557a8a4db725c9b)

1 / 68 (Adware)

andycleanuptool.exe (ea1c63664c7f54f45842874982e3fa2a)

1 / 68 (Adware)

andy_v29.exe (ANDY OS by andyroid.net) (02c67d64a00a082a0dbd4bc8ec92f902)

1 / 68 (Adware)

andy_v29.exe (ANDY OS by andyroid.net) (9fd56e954f5a57894230da6abb5c058f)

1 / 68 (Adware)

andycleanuptool.exe (1d0fc440f4d91d075da20a752ad00ca7)

1 / 68 (Adware)

andycleanuptool.exe (da81d78be277a928bd96d484166937c4)

1 / 68 (Adware)

andycleanuptool.exe (34fdafd62b4987a1ec2e46de14a9ba28)

1 / 68 (Adware)

andycleanuptool.exe (7be3efb9319a077658680dde69c36822)

1 / 68 (Adware)

handyandy.exe (f1a6151659aa2f7e72921eb0b87c7e18)

1 / 68 (Adware)

andy.exe (andy) (a376f130c593e1087fa368c1b3c2da1a)

1 / 68 (Adware)

andy.exe (andy) (b01f227d18f3c125ba42196ffb5f8236)

1 / 68 (Adware)

andycleanvm.exe (573e8458cc1e64fdd7f0724303ae22bb)

1 / 68 (Adware)

andycleanuptool.exe (5cbbcb6f9a9f6eda7df1ce0e304b53f2)

1 / 68 (Adware)

andycleanvm.exe (61a8773839337ca69a805456f3f3565c)

1 / 68 (Adware)

andycleanuptool.exe (7805007e951a2a47746333cadb4b772c)

1 / 68 (Adware)

andy_v29.exe (ANDY OS by andyroid.net) (71177106b111bc1f02af92831abfcffb)

1 / 68 (Adware)

andycleanuptool.exe (fe95c44a8c07dfd64d562c71fc7a922c)

1 / 68 (Adware)

handyandyinst.exe (aec89010cb67387d598cae1cc746b415)

1 / 68 (Adware)

andycleanuptool.exe (44b9c75846d53b11edf11dabe908fa08)

1 / 68 (Adware)

andy_v28.exe (ANDY OS by andyroid.net) (0b001d8a72d226c8e022ebce0d6adfc2)

1 / 68 (Adware)

andy.exe (ANDY OS by andyroid.net) (549146592d02f0890e00eb902bf601c0)

1 / 68 (Adware)

handyandy.exe (4d2e75d5801b019150dca1f994452071)

1 / 68 (Adware)

andyprioritymgr.exe (4284f2c9d0f275a72125ead7f2a83904)

1 / 68 (Adware)

handyandyinst.exe (d44a098659fc2aedbc7de2dbc6cb226a)

1 / 68 (Adware)

andyapk.exe (bc6a619cd40de40288cbc059704aaea2)

1 / 68 (Adware)

andy.exe (andy) (e285edb0e3ee13fac0958e3bfa69713f)

Latest 30 of 51 files

Downloads URLs for files signed by Search Safer Inc.

1 / 68 (Adware)

http://store.jt.iq:8080/index.php?do=download&id=45900 (andy_v29(2).exe)

1 / 68 (Adware)

http://andyroid.softonic.com/download-tracker?th=8yS3 KGEYLiw7GKMHzA/trmsvRChbxdrflJq3ZIylWuurWoI 1oJzhhhkKoDUKPQZeXHECtacR7jIiLbTW1Gdb8DaqCb/.../SHHWkuJyb (andy_v29(2).exe)

1 / 68 (Adware)

http://gsf-cf.softonic.com/8f3/086/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69689722&instance=softonic_br&type=PROGRAM&Expires=1421881714&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=DAuU-eL9L5v4gYX8qgr9oc7STUO8ZjK2qKuAUh8ObpJlWSqjdBeVwziEjowXtlVLEyeJNnIdZPZUrM-xbVWWyxuSyS4pnbZLt-iUjbs~t~7uT6OzxDjnOTfHgKqXtU1rplPYLsOc2RGqBEAH~C3HXz-6es-zCJYYidMXRAdzYGk_&filename=Andy_v29.exe (f7f6b2f12a89a75b55efa69d61535590)

1 / 68 (Adware)

http://gsf-cf.softonic.com/8f3/086/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69689722&instance=softonic_es&type=PROGRAM&Expires=1423977692&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=iiQFWUwps2vpFjK02zn4Qgu7qkO7oZBTAnWoa737msvg97xBdH960nJuD4X8rShgPyIF~cUTve6KA9EIK17mnzEJS6E2BZaTld6p50tM~6dsMeKGZ2K3YYmf1wYRjTGlupv6WfOXcv2BO~B2PQD7xzsXBZh0r86AdW7HX86YlbI_&filename=Andy_v29.exe (f7f6b2f12a89a75b55efa69d61535590)

1 / 68 (Adware)

http://s6859.chomikuj.pl/File.aspx?e=ZPQS7AcSGfHazSKIOuTaPlNvRu0rH6_fmvgA0rK0s5u3Pdvasgsj9simykFRZdz4QaKBHdIdQ__lr-QkGiVUYWfisehI9ieplXV5MTtcSUZI685t3moYj-UZyoZvwh2nONZSrbljZn0qJIBrdyj8cg&pv=2 (andy_v29(2).exe)

1 / 68 (Adware)

http://s6859.chomikuj.pl/File.aspx?e=ZPQS7AcSGfHazSKIOuTaPlNvRu0rH6_fmvgA0rK0s5tBOg4bqHegF4TGVudle5VDLp14TbNpZf9U4TQlxJ9H86-SYk3oSJ53AzjJP49DWCPWU-ccoszWGqQO5pew1f9GdbZrx6IvJOS_g5EGcLJdiA&pv=2 (andy_v29(2).exe)

1 / 68 (Adware)

http://s6859.chomikuj.pl/File.aspx?e=ZPQS7AcSGfHazSKIOuTaPlNvRu0rH6_fmvgA0rK0s5sr5-ugJdDceM1Gw2pVr1UyF3QX7S-ZV5vYTNMCEdJhgbg3lhT8WujGAVSoYJYWzmirKIQD9buMLD3aOqFpvb8OcG1XeTdSi0j7T1ZmtMYF7A&pv=2 (andy_v29(2).exe)

1 / 68 (Adware)

http://download1521.mediafire.com/2xw6adkaaivg/.../Andy_27_v1.exe (b832739bfd43d3a0bd4d7d930ce8452c)

1 / 68 (Adware)

http://www.toofile.com/files/2/.../Andy_v29.exe (f7f6b2f12a89a75b55efa69d61535590)

1 / 68 (Adware)

http://ziggi.uol.com.br/.../86646 (andy_v28.exe)

1 / 68 (Adware)

http://s6859.chomikuj.pl/File.aspx?e=ZPQS7AcSGfHazSKIOuTaPo37smzjOYhTgsWBWLbZObnSRCX7o2DNpKd5xcRp7j4R3_H3G5_m_QA3kjk7ugoHiZkiyAd2KOkDuvF6EsbIgBf35E4jHPzL5wm6iL1ZFLTfRk4Hc9FZXSm1Wo2FLUXxtw&pv=2 (andy_v29(2).exe)

1 / 68 (Adware)

http://gsf-cf.softonic.com/8f3/086/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69689722&instance=softonic_en&type=PROGRAM&Expires=1424055547&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=BMstmRGzt1FecV9KV31ksbtEgXks6XtDYd2oVO7hdKtqB75btKgiYfdl5DT~pjyGGf0NC6S1YUQL6c8wOkBonT6r43ecLctKghMXBKe62HTChHa6H31Ueg5Dj6q8T~PUFuAbBXTAradXzE6ER54Y~ovd6O9bSx2BRpM5B234NZQ_&filename=Andy_v29.exe (f7f6b2f12a89a75b55efa69d61535590)

1 / 68 (Adware)

http://gsf-cf.softonic.com/8f3/086/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69689722&instance=softonic_fr&type=PROGRAM&Expires=1423265535&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=GdVg~q20FSN1CR-FvGtKCFKsDludZRG3q7EZw1GUamUf256CfN95wjC-De6vg2rbXaWcQ0uwOOvxR9w8aEsc8dNB8d7b2EaAZ5eDwSBvweXQHnp1DtnaYHwmIkmnfFy9XMPIgQdAksdwfgjSh97C70YjZP~ofr~3ElWsfsKiVCc_&filename=Andy_v29.exe (f7f6b2f12a89a75b55efa69d61535590)

1 / 68 (Adware)

http://static.letoltokozpont.hu/letoltokozpont.hu/programok/.../Andy_v29.exe (f7f6b2f12a89a75b55efa69d61535590)

1 / 68 (Adware)

http://kawo.tistory.com/.../cfile28.uf@223186445402758F1ED162.exe (2dd6e0a4c3eda4e8ff4a48c3e720ab04)

1 / 68 (Adware)

http://global-shared-files-l3.softonic.com/8f3/086/.../file?nvb=20141203072928&nva=20141203193028&token=0e32fd46be98dbad5ceaf&instance=softonic_fr&filename=Andy_v29.exe (f7f6b2f12a89a75b55efa69d61535590)

1 / 68 (Adware)

q=http://bit.ly/getAndy&redir_token=xNX6LAqkgA9uDmteMAxqik1U79V8MTQxMzQyMDI4MkAxNDEzMzMzODgy (andy_v29(2).exe)

1 / 68 (Adware)

q=http://bit.ly/getAndy&redir_token=40WofJiTFRSBrAWiXPWkgWbssth8MTQxMzQxNDczNUAxNDEzMzI4MzM1 (andy_v29(2).exe)

1 / 68 (Adware)

http://global-shared-files-l3.softonic.com/8f3/086/.../file?nvb=20150119190522&nva=20150120070622&token=0710a5694a14179dcd8d3&SD_used=0&channel=WEB&fdh=no&id_file=69689722&instance=softonic_it&type=PROGRAM&filename=Andy_v29.exe (f7f6b2f12a89a75b55efa69d61535590)

1 / 68 (Adware)

http://s12.treesfile.com/files/1/.../Andy_v29.exe (f7f6b2f12a89a75b55efa69d61535590)

1 / 68 (Adware)

http://4pda.ru/.../index.php?act=attach&id=4733667&dlsess=686897e8b0dbd05bbed43cb4b6b71598 (andy_27_v4.exe)

1 / 68 (Adware)

http://4pda.ru/.../index.php?act=attach&id=4771189&dlsess=3d37e71c18ebba32cef421410fca2ea6 (andy_v29(2).exe)

1 / 68 (Adware)

http://download.informer.com/.../andy_27_v1.exe (b832739bfd43d3a0bd4d7d930ce8452c)

1 / 68 (Adware)

http://andy-os.software.informer.com/.../ (andy_27_v1.exe)

1 / 68 (Adware)

http://s12.treesfile.com/files/6/.../Andy_v29.exe (f7f6b2f12a89a75b55efa69d61535590)

1 / 68 (Adware)

http://www.andyroid.net/getandy.php (andy_v29(2).exe)

1 / 68 (Adware)

https://d1ubedgu4eka0j.cloudfront.net/.../Andy_v29.exe (f7f6b2f12a89a75b55efa69d61535590)

1 / 68 (Adware)

https://d1ubedgu4eka0j.cloudfront.net/.../Andy_27_v4.exe (0022cb8724c0afaff58dd713c3da7ab0)

1 / 68 (Adware)

http://bit.ly/getAndy (andy_v29(2).exe)

Distribution

The following websites host and distribute files published by Search Safer Inc.

static.letoltokozpont.hu

kawo.tistory.com

andy-os.software.informer.com

s12.treesfile.com

d1ubedgu4eka0j.cloudfront.net

global-shared-files-l3.softonic.com

download.informer.com

The certificates below are also signed by Search Safer Inc.

2E52A6DDE35299C92C0BC50B042F85BC (Oct 09, 2015 to Oct 09, 2016)

0928969D76ECF08EC8C9172F9E4DEA37 (Jul 13, 2014 to Jul 14, 2015)

The following publishers (by Authenticode signature organization name) are related.

Faglaro Enterprises Limited

30 of 63 publishers

* Note, the details and description above are based on the code signing digital signature issued to Search Safer Inc by COMODO CA Limited on June 06, 2014 with the serial number '00e26e98daa7aaa5703565127bf095efbe'.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.