» Coupoon
Digital Signature
Analysis
Files (36)
Downloads (8)
Distribution (1)
Related (6)

Coupoon

Publisher Information

Coupoon is a software developer located in Tallahassee, Florida in the United States*. The company is a primary distributor of unwanted software.

Authority:

GlobalSign nv-sa

Valid from:

11/21/2014 3:35:57 PM

Valid to:

11/22/2015 3:35:57 PM

Subject:

E=support@coupoon.org, CN=Coupoon, O=Coupoon, L=Tallahassee, S=FL, C=US

Issuer:

CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:

1121400c47ec899c3ba485785e2cab2d79c3

Scanner detections:

Detections (100% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.AdPeak.Coupoon, PUP.AdPeak.Installer, PUP.AdPeak.Coupoon.Installer (M), PUP.AdPeak.Coupoon (M), PUP.AdPeak (M)

100.00%

Malwarebytes

PUP.Optional.Coupoon.A, PUP.Optional.Bundle

41.67%

Sophos

Generic PUA FE, Mal/FakeAV-QN, Virus 'Mal/FakeAV-QN', Generic PUA CI

41.67%

Emsisoft Anti-Malware

Adware.AdPeak.Y, Gen:Variant.Adware.Graftor.163248, Trojan.Agent.BKLE

36.11%

ESET NOD32

Win32/Adware.Adpeak (variant), Win64/Adware.Adpeak (variant)

33.33%

Baidu Antivirus

Adware.Win32.Adpeak

30.56%

F-Secure

Adware.AdPeak.Y, Gen:Variant.Adware.Graftor, Trojan.Agent.BKLE

30.56%

AVG

Generic, Adware Generic6.BKJK

30.56%

VIPRE Antivirus

Trojan.Win32.Generic, Threat.4782788, Threat.4150696

27.78%

herdProtect (fuzzy)

a variant of 66487afd98fe6e17bde21ad847ae74647309fa49, a variant of 540f2b36f86d97d759d0403347df2c99eeb31906, a variant of abf74cfa13005519dd71751226b103ef65d4528a

22.22%

1 / 68 (Adware)

couponarific.exe (Coupoon) (9ef82a962753e1620c1ca97847ae149c)

8 / 68 (Adware)

tmp0000000368c9f643159a3a41 (d828d8dece6292eaa9f4f9c978f732fa)

1 / 68 (Adware)

awh12ef.tmp (c00c7440aecaac7991acbb53771030a0)

9 / 68 (Adware)

tmp00000002def51658807497e1 (e169d235063a0b039197ec7c86f6ae53)

1 / 68 (Adware)

frqthybfjp32.exe (5de20310a559946a044bac9caff8b6f6)

4 / 68 (Adware)

nsg522d.tmp.exe (97d9ff9d9421474754d748228fbeee17)

16 / 68 (Adware)

coupoon72.exe (268f51769e80fb985b0ea2d88cdad0c9)

1 / 68 (Adware)

setup_644.exe (Coupoon) (60248349222088d1bba28614a6214d81)

8 / 68 (Adware)

coupoon_09_04--c4304491.exe (5f71caec496438ed09fbb65a05dfad0a)

7 / 68 (Adware)

pcoupoon_soft_partner.exe (Coupoon) (c06a1cd122c42d1949389f2ece7a4bbf)

4 / 68 (Adware)

nsj6d84.tmp.exe (22cb3441070ae68258d72c4274e2a60f)

15 / 68 (Adware)

lxqvbcbiws32.exe (3c2a0cc2ecf576f9bcebb9df5d82f89b)

6 / 68 (Adware)

updatecheck.exe (31c1c7cc1c176ca6231384a33c28f5f7)

15 / 68 (Adware)

couponarific.exe (8fa6441dd2e1a8c50f38d33c923f727f)

14 / 68 (Adware)

couponarific.exe (Coupoon) (40b747f6fd23db287b81d911c7a9b058)

4 / 68 (Adware)

updatecheck.exe (a9a44226715526bac2b78852f1e5eee2)

3 / 68 (Adware)

coupoon72.exe (Coupoon) (de4e4a0c28e0d7f28f5f7684139c1d65)

2 / 68 (Adware)

updatecheck.exe (fea24f5516a08632148f0adae92a1b14)

12 / 68 (Adware)

iiwjljrnpc.exe (7e215235bfdd2f8be6cd000eef4c9930)

3 / 68 (Adware)

setup7.exe (77849649b8d2374427704f320c72dc28)

1 / 68 (Adware)

nst29e0.tmp.exe (97362e7f9c1f450dfd261aac2a93c7e3)

14 / 68 (Adware)

zfytzaqkhn32.exe (4df26509f51b58373f9a4006bcdf5217)

1 / 68 (Adware)

nsc1c3b.tmp.exe (a76f4fa90642325ccc717d73da417355)

1 / 68 (Adware)

uninstaller.exe (126bb6bc27754839b1544f468c64d6f8)

5 / 68 (Adware)

coupoon72.exe (27969ea0da8afec6c0e04b142621b8d9)

14 / 68 (Adware)

rbanmzatrg32.exe (d7dcd2046a6b3483232128f3db913af1)

7 / 68 (Adware)

awh3b4c.tmp (324c01c6eba45b893ea37de9cb4935eb)

14 / 68 (Adware)

tpydklloou32.exe (6d97c8a655bfdbe696e7346bd1621089)

1 / 68 (Adware)

nsbaaee.tmp.exe (9c8ebdfffab08b3c8d56074a6de9f5d6)

9 / 68 (Adware)

slfhyizrqi32.exe (1baea8e01050b1db7b20250f05f22cd5)

Latest 30 of 36 files

Downloads URLs for files signed by Coupoon.

14 / 68 (Adware)

http://54.160.120.51/install.php?aid=28 (couponarific.exe)

14 / 68 (Adware)

http://54.160.120.51/install.php?aid=24 (couponarific.exe)

14 / 68 (Adware)

http://54.160.120.51/install.php?aid=34 (couponarific.exe)

14 / 68 (Adware)

http://54.160.120.51/install.php?aid=21 (couponarific.exe)

3 / 68 (Adware)

http://54.160.120.51/install.php?aid=21 (coupoon72.exe)

3 / 68 (Adware)

http://cdn.chironexfleckeriwhite.com/downloads/offers/.../setup7.exe (77849649b8d2374427704f320c72dc28)

14 / 68 (Adware)

http://54.160.120.51/install.php?aid=26 (couponarific.exe)

5 / 68 (Adware)

http://54.237.124.140/dl.php?aid=1 (coupoon72.exe)

Distribution

The following websites host and distribute files published by Coupoon.

cdn.chironexfleckeriwhite.com

The following publishers (by Authenticode signature organization name) are related.

Tuto4PC.com

Kreapixel Network

CR7 Team (Bright Circle Investments Ltd)

TUTO4PC COM INTERNATIONAL SL

Candle Jar

Core Systems

* Note, the details and description above are based on the code signing digital signature issued to Coupoon by GlobalSign nv-sa on November 21, 2014 with the serial number '1121400c47ec899c3ba485785e2cab2d79c3'.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.