home

CORLEON GROUP LTD

Publisher Information

CORLEON GROUP LTD is a software developer located in Victoria, Mahe in SC*. The company is a primary distributor of unwanted software. There is one additional code signing certificate issued to this publisher.
Authority:
VeriSign, Inc.

Valid from:
7/26/2013 3:00:00 AM

Valid to:
7/27/2014 2:59:59 AM

Subject:
CN=CORLEON GROUP LTD, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=CORLEON GROUP LTD, L=Victoria, S=Mahe, C=SC

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
3892391fd98598a279ce03af7330dcfb

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.InstallMonster (M)
100.00%

1 / 68      (Adware)
audioskazka_-_kornej_chukovskij_telefon_(iplayer.fm).exe  (73cc31bce73c16a647edf5370ee68448)

1 / 68      (Adware)
ayn741tr.exe  (c6eb453c6c91c10dcd24846ed4f50c7c)

1 / 68      (Adware)
uzeyir_mehdizade-salam_askim_2013_-_uzeyir_mehdizade-salam_askim_2013_(iplayer.fm).exe  (ca97a44c36185e2305f1ad5679111d9a)

1 / 68      (Adware)
elza_ramazanova_lakskaya_-_iranskaya_noch_iranskaya_narodnaya_pesnya_-_na_yazyke_farsi_(iplayer.fm).  (25b18b8d5e724db4fd8445c2606764a8)

1 / 68      (Adware)
ehsan_khaje_amiri_-iranskij_pevec_syn_znamenitogo_pevca_tradicionnoj_iranskoj_muzyki_iraj_-_salame_(  (7ce256a71ef9e352f4550492677a8c05)

1 / 68      (Adware)
utorrent-3.3.exe  (103ef802e2e87ff3e6e7704e008c4471)

1 / 68      (Adware)
the sims 3 university life.exe  (565aa0a0967cc042bf3edb3d6b5d7ab1)

1 / 68      (Adware)
the sims 3 university life.exe  (4783713e43000ca838426ba98b046192)

1 / 68      (Adware)
01299-modern-combat-4-zero-hour-1.1.0.exe  (0db12089487ac7b7696c78e446329697)

1 / 68      (Adware)
fabrika_-_oj_lyu_li_(xmusic.me).exe  (1864a9bc0d90316cfcf10363ba2d5549)

1 / 68      (Adware)
абстрактные-шаблоны powerpoint-39.exe  (2af1ca384738b42a3f7d5a9b18a493ee)

1 / 68      (Adware)
demi_lovato_i_dzho_dzhonas_-_kemp_rok_2_(iplayer.fm).exe  (a629122ed2ebfbdcb50b81c7b4e0c12a)

1 / 68      (Adware)
tanya_alieva_dina_-_nashidna_kumykskom_rodnoj_yazyk_shejhov_abu._apti_(iplayer.fm).exe  (d949082fabb1589757aec5e9c19afb4a)

1 / 68      (Adware)
kumykskij_mavlid_-_bez_nazvaniya_(iplayer.fm).exe  (be206875653fa0d90417d1b03ab1733b)

1 / 68      (Adware)
setup.exe  (5c93b7db0d4bf606ae9d4920c77dbe2b)

1 / 68      (Adware)
install_flashplayer11x32_mssa_aaa_aih.exe  (74a2c0bbf2ee2dde2607e0d3f55cc0ac)

1 / 68      (Adware)
batman-arkham-origins-treyner-9-v1.0-lingon.exe  (91afc7092c687de0a29d3837b3523eb0)

1 / 68      (Adware)
install_flashplayer11x32_mssa_aaa_aih.exe  (5149993cf34f319eae82079bf18cca4a)

1 / 68      (Adware)
333_-_regina_sufletului_meu_download-muzica.ro_-2013_(get-tune.net).exe  (5b9f4bceecd9c6a3845b6b9eb5d5302e)

1 / 68      (Adware)
flash.exe  (0062c9015e693240c38c6d1502ba3899)

1 / 68      (Adware)
flash.exe  (5b8719268bb86b9933d02ef3ef422a72)

1 / 68      (Adware)
ruben_haxverdyan_-_tser_gnchuhin_(iplayer.fm).exe  (c6758f1454cd79a40272c51e4621c9bf)

1 / 68      (Adware)
qufxymlv.exe  (e9b4cab04165c09533cd7c990d8d9eab)

1 / 68      (Adware)
fermamod.exe  (7ffb7a1720cc409ba0b5dead215cbdc0)

1 / 68      (Adware)
prazdnik_k_nam_prihodit_k_novomu_godu_-_novogodnyaya_podborka_4_trektolko_klubnaya_muzyka_zdes_gt_(i  (0e688cf435236292c58fe124ee2a995e)

1 / 68      (Adware)
11_dj_stufi-happy_new_year_2011_-_novyj_god.novogodnij.miks.novogodnyaya.novogo_goda_...super...na_n  (539d965ea68f8f45659673085bd600d1)

1 / 68      (Adware)
anzhelika_nachesova_adygejskaya_muzyka_-_uhozhu_lyubya_(iplayer.fm).exe  (732c7854d67e2171cfa2ef2cfbb105dd)

1 / 68      (Adware)
газ 4301.exe  (6725dbfb776999481b1f826fdc5d1ddb)

1 / 68      (Adware)
52457a3781e2c382.exe  (3c1bc251a0b2c2c871db182a472a92bc)

1 / 68      (Adware)
pyilnaya rabota_(1-40 serii iz 40).[tfile.ru].exe  (c53e9198a5bbfcf57d02acf3cec41b26)

 
Latest 30 of 2,345 files

Downloads URLs for files signed by CORLEON GROUP LTD.

1 / 68      (Adware)
http://roosettahenderso.were.me/.../?j=c2lkPTM3MjQmdXJsPWh0dHAlM0ElMkYlMkZudWxsZ2FtZS5ydSUyRmVuZ2luZSUyRmRvd25sb2FkLnBocCUzRmlkJTNEMTAxNSZuYW1lPVMuVC5BLkwuSy5FLlIuXy1fQ2FsbF9vZl9QcmlweWF0Lmlzei50b3JyZW50JnR5cGU9dG9ycmVudCZzaXplPTE1ODI0  (s.t.a.l.k.e.r._-_call_of_pripyat.isz.exe)

1 / 68      (Adware)
http://geralddimendoz.gurcanozturk.com/get_file/?sid=4318&url=http://.../MaxTorrent.exe&name=t5235.torrent.exe&type=disk&size=612311  (4ef5bc185eec58d9964d7afdb0316b16)

1 / 68      (Adware)
http://getfile.eu/get_file/?sid=802&url=http://mpoisk.com/download/.../?cs=1-18v4&d=p5&audio=dc3f63b541eb7d&song=Paul Copeland-American Ragtime and Jazz&name=paul-copeland-american-ragtime-and-jazz&type=audio&size=  (paul-copeland-american-ragtime-and-jazz.exe)

1 / 68      (Adware)
http://getfile.eu/get_file/?sid=1644&url=http://narod.ru/disk/.../Adobe Photoshop CS5.1.rar.html&name=adobe-photoshop&type=setup  (adobe-photoshop.exe)

The following certificate is also signed by CORLEON GROUP LTD.

05D1EDA621A201F36C3E158FEB2D4DC2  (Jan 16, 2014 to Jan 17, 2015)

* Note, the details and description above are based on the code signing digital signature issued to CORLEON GROUP LTD by VeriSign, Inc. on July 26, 2013 with the serial number '3892391fd98598a279ce03af7330dcfb'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.