home

DivineMedia Inc.

Publisher Information

DivineMedia Inc. is a software publisher located in Guro-gu, Seoul in Korea*. The company is a primary distributor of unwanted software. Thre are 4 additional code signing certificates issued to this publisher.
Authority:
Thawte, Inc.

Valid from:
12/4/2014 9:00:00 AM

Valid to:
2/2/2017 8:59:59 AM

Subject:
CN=DivineMedia Inc., O=DivineMedia Inc., L=Guro-gu, S=Seoul, C=KR

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
3a678ed54c0b610741ab0eb36dac1e6f

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.DivineMedia (M), PUP.DivineMedia.Installer (M), PUP.DivineMe.Installer (M), PUP.DivineMe (M), PUP (M)
100.00%

F-Prot
W32/Downloader.J.gen, W32/Banker.T.gen
4.00%

avast!
Win32:Adware-gen [Adw], Win32:Malware-gen
4.00%

Avira AntiVirus
ADWARE/Kraddare.238392, TR/ATRAPS.Gen
4.00%

Qihoo 360 Security
HEUR/QVM11.1.Malware.Gen
4.00%

Bkav FE
W32.HfsAdware
2.00%

K7 AntiVirus
Adware
2.00%

Agnitum Outpost
PUA.Kraddare
2.00%

ESET NOD32
Win32/AdWare.Kraddare.JQ (variant)
2.00%

Comodo Security
ApplicUnwnt
2.00%

1 / 68      (Adware)
synth.exe  (94706f068f9f31b5a8c60fdf6bc61a8d)

1 / 68      (Adware)
homecaresetupver1.0.exe (by HomeCare)  (f6efafadcd1988225f2525422e3dfe28)

1 / 68      (Adware)
syncmgr.exe  (8f183741dd4b5c8e962f39655af7e966)

1 / 68      (Adware)
syncmgr.exe  (249e7ff8c54a811e76811b41b48d2837)

1 / 68      (Adware)
wcpk.exe (searchmedia)  (e015bece99c101dc8037533e56e30ec1)

1 / 68      (Adware)
homecaresetupver1.0.exe (by HomeCare)  (48755b873e8c8ad0c52c70f7f22be520)

1 / 68      (Adware)
homecaresetupver1.0.exe (by HomeCare)  (04a594b358c91eab431c3708380cbd49)

1 / 68      (Adware)
homecaresetupver1.0.exe (by HomeCare)  (3262748a72048312ff5a2a3e1b4a0574)

1 / 68      (Adware)
homecaresetupver1.0.exe (by HomeCare)  (1df6fca04f18605a194ba8ecd017e419)

1 / 68      (Adware)
homecaresetupver1.0.exe (by HomeCare)  (ef0277d58beb816c1a0309965a2cb4ce)

1 / 68      (Adware)
syncmgr.exe  (32f45bc88aa2034814329108a0ecddd7)

1 / 68      (Adware)
hcsctrl.exe (HomeCare)  (58d6c711c536ef9936d2c219f79a25f9)

1 / 68      (Adware)
homecaresetupver1.0.exe (by HomeCare)  (761b49732829f6c6f04be57a5ee5b476)

1 / 68      (Adware)
synth.exe  (157c80a52c909d2b576ebb7d69daecec)

1 / 68      (Adware)
homecaresetupver1.0.exe (by HomeCare)  (d8db79d4fbeea7bdaf5dc4b2a414484a)

1 / 68      (Adware)
synth.exe  (75ef4dae7e2700ed882241eb0d4208e5)

1 / 68      (Adware)
isvschs.exe (searchmedia)  (a94d28ef2b8d4944a261410e363cde70)

1 / 68      (Adware)
synth.exe  (74055477f73ba55218b36dfd3d454b67)

1 / 68      (Adware)
isvnk.exe (InternetSafe Interface)  (24091d6150406a200c9996163e63e67b)

1 / 68      (Adware)
synth.exe  (89ad7cdb1282b4412c94c096c178a575)

1 / 68      (Adware)
mckschs.exe (searchmedia)  (76e4dae4130d2b003a1a21a3fa702556)

1 / 68      (Adware)
hcsctrl.exe (HomeCare)  (71630b50e6c58c8190910d4dbacbc8c1)

1 / 68      (Adware)
wcplogon.exe (Windows Web Care)  (2132301b70c01b38bcd24ad0e02c6108)

1 / 68      (Adware)
homecaresetupver1.0.exe (by HomeCare)  (6dcc32d4970132d6582a5dcf73c2495b)

1 / 68      (Adware)
hckschs.exe (searchmedia)  (f2c664b491d660324ab627c51b619434)

1 / 68      (Adware)
skschs.exe (searchmedia)  (fe62896b14b65f5e8c65935313a12745)

1 / 68      (Adware)
homecaresetupver1.0.exe (by HomeCare)  (0e03d9c65220ec7a32ff0f9322a9b7d1)

1 / 68      (Adware)
homecaresetupver1.0.exe (by HomeCare)  (2c9ae8516691e025f55e43ba3f48b51c)

1 / 68      (Adware)
homecaresetupver1.0.exe (by HomeCare)  (d9c4fdafb3a40dd340cf2922adac9691)

1 / 68      (Adware)
hcsagent.exe (HomeCare)  (24e4994e010580070b94323f0e490fc7)

 
Latest 30 of 55 files

Downloads URLs for files signed by DivineMedia Inc..

1 / 68      (Adware)
http://magiccare.net/ver3/app/.../mcsctr.exe  (88df6b0b2017d4a88d40c99540125274)

1 / 68      (Adware)
http://isafeplus.net/.../isvnk.exe  (cedbea0647056a93e71a8c78d64bb39a)

1 / 68      (Adware)
http://isafeplus.net/.../isvminyt.dll  (isvminyt.dll)

The following websites host and distribute files published by DivineMedia Inc..

magiccare.net

isafeplus.net

The certificates below are also signed by DivineMedia Inc..

19DC8090FC96690F34D6B6C865222BFA  (Nov 26, 2015 to Feb 02, 2017)

0C5DD2F14A9F2A0F57B26988F570E13C  (Sep 03, 2015 to Feb 02, 2017)

70D6D72340C00A54AEEB109E10818B2B  (Dec 04, 2012 to Jan 04, 2015)

75E01A79B0F42738A2368AB6D8FE0FBB  (Dec 14, 2011 to Dec 14, 2012)

* Note, the details and description above are based on the code signing digital signature issued to DivineMedia Inc. by Thawte, Inc. on December 04, 2014 with the serial number '3a678ed54c0b610741ab0eb36dac1e6f'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.