» Tech Joy Co.
Digital Signature
Analysis
Files (19)
Downloads (2)
Distribution (2)
Related (56)

Tech Joy Co.

Publisher Information

Tech Joy Co. is a software publisher located in Nam-gu, Busan in Korea*. Thre are 4 additional code signing certificates issued to this publisher.

Authority:

Thawte, Inc.

Valid from:

12/26/2012 9:00:00 AM

Valid to:

12/27/2013 8:59:59 AM

Subject:

CN=Tech Joy Co., OU=Research and Development, O=Tech Joy Co., L=Nam-gu, S=Busan, C=KR

Issuer:

CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:

0974f91a72cefdb8a0b7695f54a21957

Scanner detections:

Malware distribution (100% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP (M)

100.00%

AhnLab V3 Security

PUP/Win32.MulDown, PUP/Win32.Downloader, Win-PUP/Downloader.MulDown.698768.B

47.37%

Trend Micro House Call

TROJ_GEN.F47V0118, TROJ_GEN.F47V0724, TROJ_GEN.F47V0705, TROJ_GEN.F47V0623, TROJ_GEN.F47V0131, TROJ_GEN.F47V0618

36.84%

nProtect

Adware/W32.Agent.901008

5.26%

Comodo Security

ApplicUnsaf.Win32.Downloader.Agent.~f

5.26%

1 / 68 (Malware)

msvcr100.dll_package_download.exe (e17aab93dcc39c83aded9b78891093fe)

1 / 68 (Malware)

갤럭시노트2 usb 드라이버 다운로드.exe (00bfa4e882f058742406a0d256625ab8)

1 / 68 (Malware)

javaruntime_download_.exe (42a5d0271ad22f62ee61a5a6bfd78c7d)

1 / 68 (Malware)

minecraft_1.5.2_download.exe (828fdaf15055817c9e3ed26480a00df1)

2 / 68 (Malware)

minecraft1.5.2_mode_vpert_download.exe (5c1aab479080b697d7f9207811d78ba8)

1 / 68 (Malware)

minecraft1.6.2_mode_vpert_download.exe (c252c580bf4bc1753c21f9a5d70691e4)

1 / 68 (Malware)

5368cd8a79801542bf23c9ece0a6a3e4b115dc45185f3135d83d6c3b93995725 (40afecb209380a0e933a59d0947e7d54)

1 / 68 (Malware)

3dd7c0b6eac67d511076e276d94770195a9f1a8d0d12fcb31f21efebcd913ba8 (0eca2c043b432d0b3559e9a450b86c01)

4 / 68 (PUP)

a.i_1003h_download.exe (bfd806cd5e629c707740c050ecea21a0)

2 / 68 (PUP)

minecraft_1.5.1_download.exe (efdaee5fb03349093759b2e1d2779a9f)

2 / 68 (PUP)

a.i_1003h_download.exe (6f8f22eb60153650db3c73048ef62985)

3 / 68 (Malware)

samsung_usb_driver_download.exe (15569f6ddc8bfdd1ce502b9b4260c834)

2 / 68 (PUP)

minecraft_bucket_1.5.2_download.exe (a4e7da6c16f9f7dabbf9b929e5cb4ac7)

3 / 68 (PUP)

princessmaker2_refine_package_download.exe (732bdda9c83ad9d9fc9cb6a6046d13fe)

2 / 68 (PUP)

autozola1.8_download.exe (fb6a13cb10a21cca8cae28a0a7a47af5)

2 / 68 (PUP)

pokemon_ruby_download.exe (c15d6af590bc7eb6ef8df195e6051e30)

3 / 68 (PUP)

minecraft1.5.2_mode_vpert_download.exe (dd3b0b3801cc82b282e1f17bbc4a37ff)

2 / 68 (Malware)

hamachi2_download.exe (782a6fdecde5fa346471d6adbbd64432)

3 / 68 (PUP)

utorrent.3.1_download.exe (93b95a566ab9eb0bead4a07f0c0e6354)

Downloads URLs for files signed by Tech Joy Co..

2 / 68 (Malware)

http://blogattach.naver.net/38ad249781dfdc002ec9aa9cae45324ae7b54caf1f/20130712_63_blogfile/.../Minecraft1.5.2_Mode_vPert_download.exe (782a6fdecde5fa346471d6adbbd64432)

3 / 68 (PUP)

http://itstorydownload.com/marks/nii/.../utorrent.3.1_download.exe (93b95a566ab9eb0bead4a07f0c0e6354)

Distribution

The following websites host and distribute files published by Tech Joy Co..

itstorydownload.com

blogattach.naver.net

The certificates below are also signed by Tech Joy Co..

2F1BD357A0AC32826B5DDAA44B1F9C61 (Feb 08, 2017 to Apr 10, 2018)

689DE0C710CFD34A8D8A426851D6FC73 (Dec 15, 2015 to Mar 16, 2017)

362042A82531C60C444EB2DB49DC0A14 (Dec 12, 2014 to Feb 11, 2016)

2EC15A429F8D225D547BBFAA87ED5AAF (Oct 16, 2013 to Jan 16, 2015)

The following publishers (by Authenticode signature organization name) are related.

Akeo Consulting

Onesoft Co., Ltd.

Unity Technologies ApS

Ellora Assets Corporation

CACE TECHNOLOGIES, LLC

TechPowerUp Ltd

Florian Heidenreich

INCA Internet Co.,Ltd.

Clunet Co.,Ltd.

Beijing Stone Age Network Technology Limited Company

NEXON Korea Corporation.

Mediawave Corporation

Process Clean Corp

think-cell Software GmbH

30 of 56 publishers

* Note, the details and description above are based on the code signing digital signature issued to Tech Joy Co. by Thawte, Inc. on December 26, 2012 with the serial number '0974f91a72cefdb8a0b7695f54a21957'.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.