home

doubleup communication

Publisher Information

doubleup communication is a software publisher located in Gangnam-gu, Seoul in Korea*.
Authority:
Thawte, Inc.

Valid from:
6/22/2012 9:00:00 AM

Valid to:
6/23/2014 8:59:59 AM

Subject:
CN=doubleup communication, O=doubleup communication, L=Gangnam-gu, S=Seoul, C=KR

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
490a43cf38fbaf6f6dc69f740d5f8e01

Status:
Inconclusive detections from multiple engines

Scan engine
Details
Detections

Malwarebytes
Adware.Korad, Adware.KorAd, Adware.Kraddare
75.00%

Comodo Security
Heur.Suspicious, TrojWare.Win32.Trojan.Agent.Gen, UnclassifiedMalware
62.50%

AVG
Downloader.Generic13, Win32/DH{gQwggRITJCIlATYK}, Skodna.Generic
62.50%

Reason Heuristics
Threat.Win.Reputation.IMP
62.50%

McAfee
Artemis!2B7A516A06B8, Artemis!3516F862A302, Artemis!CDAF0F0F77C3, Artemis!9A0F79CE4710
50.00%

Agnitum Outpost
Trojan.DL.Genome, Adware.Kraddare, PUA.Downloader
50.00%

Avira AntiVirus
Adware/Kraddare.GK.1, TR/Spy.Banker.Gen, Adware/Rogue.1317248, DR/Delphi.Gen
50.00%

AhnLab V3 Security
PUP/Win32.KeywordPop, PUP/Win32.Helper
50.00%

ESET NOD32
Win32/Adware.Kraddare.GK (variant), Win32/Adware.Kraddare.EQ (variant), Win32/Adware.Kraddare.FY (variant)
50.00%

Trend Micro House Call
ADW_KRADARE, ADW_KRADDARE, TROJ_GEN.RCBCOCO
37.50%

0 / 68
AutoUpdater.exe (AutoUpdater.exe by PODCorn)  (a91095dc078b5e874bcfcd263d7299d2)

0 / 68
AutoUpdater.exe (AutoUpdater.exe by PODCorn)  (3a1bd103bd386927b0a1f7b6f9c0360f)

0 / 68
keywordpop_biza05.exe  (a58e7ca205cccb73774f59bf80f37d08)

0 / 68
starcodec201206~setup.exe (autopack by adm)  (1aea416a3c4312f07c7323f010f641df)

0 / 68
AutoUpdater.exe (AutoUpdater.exe by adm)  (6a6e445d4dabb1ac81e9019137979b67)

0 / 68
AutoUpdater.exe (AutoUpdater.exe by adm)  (596409255f7ce75cc10289f5b805fd34)

0 / 68
keywordpop_biza05.exe  (86ee5a99505a676ccdc328c39425f28c)

0 / 68
keywordpop.exe  (376f54d89fadb097e1006e342db83689)

0 / 68
AutoUpdater.exe (AutoUpdater.exe)  (c6b6505e3d803b1b3e15b923050f24eb)

0 / 68
AutoUpdater.exe (AutoUpdater.exe by adm)  (b39b5031988d50fb8cd5688c7f7e1753)

0 / 68
keywordpop_lee.exe  (812094a2d73c20f98dddd099ecce2467)

0 / 68
keywordpop_biza02.exe  (18a793ff432bf26cd5ca16383f50f54d)

0 / 68
update.exe (updater by adm)  (0cc509192c7a9e004b351be0a6db7ca1)

0 / 68
wemakeppop_part01.exe.19.08.32.18.vz  (c0745156ab32cc0c414f8faf0231f522)

0 / 68
keywordpop_biza03.exe.19.08.28.00.vz  (4c407d8485ef3d097de9ca4920e2dc61)

1 / 68      (Malware)
keywordpop.exe  (702208bf0264f3f3d4220d95f3e0ac8d)

0 / 68
starcodec201206~setup.exe (autopack by adm)  (5f5df830c7f3cc6b584d4d8824e8967f)

1 / 68      (Malware)
keywordpop_biza.exe  (f7c9fc0719a203f4389d9865af023ddc)

4 / 68      (inconclusive)
uninstall_keywordpop.exe  (9a0f79ce471024b8daa9d71622065e9e)

16 / 68    (PUP)
keywordpop.exe  (cdaf0f0f77c3f48d9994cf3774967f37)

0 / 68
keywordpop_biza02.exe  (4b7ce3f2e9cdc6567660fda65a29a84a)

13 / 68    (PUP)
ad_6.exe  (a4f66dc46a758061b77cdc262c180131)

13 / 68    (PUP)
keywordpop.exe  (ccb084763cae2479cb28fcd113ff4094)

8 / 68      (PUP)
uninstall_keywordpop.exe  (3516f862a3028dd70965a2763514b9f8)

24 / 68    (PUP)
keywordpop_livepot.exe  (2b7a516a06b87337de51e90912d8c4ac)

* Note, the details and description above are based on the code signing digital signature issued to doubleup communication by Thawte, Inc. on June 22, 2012 with the serial number '490a43cf38fbaf6f6dc69f740d5f8e01'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.