» Engaging Apps
Digital Signature
Analysis
Files (715)
Domains (2)
Related (14)

Engaging Apps

Publisher Information

Engaging Apps is a software developer located in Philadelphia, Pennsylvania in the United States*. The company is a primary distributor of unwanted software. Engaging Apps (Red Online Marketing Group LP) is a advertising software producer of web browser add-ons designed to display ads and affiliate offers within the web pages of a web browser. The company re-distributes a few dozen of the same adware type programs through monetized bundled installations primarily using the Crossrider toolbar platform.

Authority:

Thawte, Inc.

Valid from:

6/4/2013 2:00:00 AM

Valid to:

6/5/2014 1:59:59 AM

Subject:

CN=Engaging Apps, O=Engaging Apps, L=Philadelphia, S=Pennsylvania, C=US

Issuer:

CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:

632eebd9b987bc680d444d8675a26545

Scanner detections:

Detections (100% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.50OnRed (M), Adware.GamePlayLabs (M), Adware.Crossrider (M)

100.00%

1 / 68 (Adware)

lightning savings-helper.exe (af4b980f97d60e11a43db0f0c96b3d38)

1 / 68 (Adware)

lightning savings-buttonutil64.dll (819adeb5ea18868cea07f0f8a8c5ee35)

1 / 68 (Adware)

frameworkengine.exe (Framework) (21d26cab10cf5e98a20ba4a4821b0eb9)

1 / 68 (Adware)

frameworkbho64.dll (Framework) (b369c20260575d533bcde5b7c89236df)

1 / 68 (Adware)

frameworkbho.dll (Framework) (da4bcc09972627df9dac71f083ee5890)

1 / 68 (Adware)

coupon server.exe (18b037d4e413a4514c8661d4ec5779f9)

1 / 68 (Adware)

frameworkengine.exe (Framework) (ea607d8f9ee8406db032186a792d5a90)

1 / 68 (Adware)

frameworkbho64.dll (Framework) (660fc977e7a8fcfa307cd0992def7d26)

1 / 68 (Adware)

frameworkbho.dll (Framework) (507b0c3b6bc1c5338e63a2a0325426dd)

1 / 68 (Adware)

frameworkengine.exe (Framework) (ac34c25209c996f6cefc5b450711aacd)

1 / 68 (Adware)

frameworkbho64.dll (Framework) (18542285b8fc35e9745b484b444cba3f)

1 / 68 (Adware)

frameworkbho.dll (Framework) (05eb9bfe16ea7cc762ec68ff66bc06ea)

1 / 68 (Adware)

coupon server.exe (9244aa60bda6a407f7d192d69dfe9803)

1 / 68 (Adware)

coupon server.exe (12ae771b487eddba48070b6846b1712b)

1 / 68 (Adware)

frameworkengine.exe (Framework) (71b19cb02e2f22f7865bc5bca0ebf7cb)

1 / 68 (Adware)

frameworkbho64.dll (Framework) (b7b45ceaa73d070f79d0e555a0169c89)

1 / 68 (Adware)

coupon server.exe (610661294b65affcfd789bf5325c7409)

1 / 68 (Adware)

frameworkbho.dll (Framework) (8ed4ba1ccdcd6b2dee8b3ba7836268b1)

1 / 68 (Adware)

frameworkengine.exe (Framework) (480f9020d5c1813086231394a7040a69)

1 / 68 (Adware)

frameworkbho64.dll (Framework) (2e32d6533430f081c78c37fbe0d8051e)

1 / 68 (Adware)

frameworkbho.dll (Framework) (0471b4a0566446e80348712464ed1a22)

1 / 68 (Adware)

coupon server.exe (a117c01e60dccbd8fb3417e9c17dfe9d)

1 / 68 (Adware)

coupon server.exe (052d0426e285704f3bf450adc640a31c)

1 / 68 (Adware)

coupon server.exe (b7a2308d4ddd3d1a1d83330bfc20e4be)

1 / 68 (Adware)

frameworkengine.exe (Framework) (c8032d50a86170e29822fa6b2fae60e7)

1 / 68 (Adware)

frameworkengine.exe (Framework) (061b04d08f6035aa446d18bfeb38dcf6)

1 / 68 (Adware)

frameworkbho64.dll (Framework) (995d3ae4fce9ec0d95c2bca1becaa124)

1 / 68 (Adware)

frameworkbho.dll (Framework) (ef7a1bf7de5efc4e5df3deb1c9f4d497)

1 / 68 (Adware)

frameworkbho64.dll (Framework) (783ebc7b8f58158d93d862ed823c4966)

1 / 68 (Adware)

frameworkbho.dll (Framework) (28b66894bcc64f95133e133fd9e02d31)

Latest 30 of 715 files

Domains

Top-level domains owned by Engaging Apps.

advertising-support.com

costmin.info

The following publishers (by Authenticode signature organization name) are related.

Kimahri Software inc.

Radyoos Media Ltd.

* Note, the details and description above are based on the code signing digital signature issued to Engaging Apps by Thawte, Inc. on June 04, 2013 with the serial number '632eebd9b987bc680d444d8675a26545'.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.