doubleup communication

Publisher Information

doubleup communication is a software publisher located in Gangnam-gu, Seoul in Korea*.
Authority:
Thawte, Inc.

Valid from:
6/22/2012 9:00:00 AM

Valid to:
6/23/2014 8:59:59 AM

Subject:
CN=doubleup communication, O=doubleup communication, L=Gangnam-gu, S=Seoul, C=KR

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
490a43cf38fbaf6f6dc69f740d5f8e01

Status:
Inconclusive detections from multiple engines

Scan engine
Details
Detections

Malwarebytes
Adware.Korad, Adware.KorAd, Adware.Kraddare
75.00%

Comodo Security
Heur.Suspicious, TrojWare.Win32.Trojan.Agent.Gen, UnclassifiedMalware
62.50%

AVG
Downloader.Generic13, Win32/DH{gQwggRITJCIlATYK}, Skodna.Generic
62.50%

Reason Heuristics
Threat.Win.Reputation.IMP
62.50%

McAfee
Artemis!2B7A516A06B8, Artemis!3516F862A302, Artemis!CDAF0F0F77C3, Artemis!9A0F79CE4710
50.00%

Agnitum Outpost
Trojan.DL.Genome, Adware.Kraddare, PUA.Downloader
50.00%

Avira AntiVirus
Adware/Kraddare.GK.1, TR/Spy.Banker.Gen, Adware/Rogue.1317248, DR/Delphi.Gen
50.00%

McAfee Web Gateway
Artemis!2B7A516A06B8, Artemis!CDAF0F0F77C3
50.00%

AhnLab V3 Security
PUP/Win32.KeywordPop, PUP/Win32.Helper
50.00%

ESET NOD32
Win32/Adware.Kraddare.GK (variant), Win32/Adware.Kraddare.EQ (variant), Win32/Adware.Kraddare.FY (variant)
50.00%

0 / 68
AutoUpdater.exe (AutoUpdater.exe by PODCorn)  (a91095dc078b5e874bcfcd263d7299d2)

0 / 68
AutoUpdater.exe (AutoUpdater.exe by PODCorn)  (3a1bd103bd386927b0a1f7b6f9c0360f)

0 / 68
keywordpop_biza05.exe  (a58e7ca205cccb73774f59bf80f37d08)

0 / 68
starcodec201206~setup.exe (autopack by adm)  (1aea416a3c4312f07c7323f010f641df)

0 / 68
AutoUpdater.exe (AutoUpdater.exe by adm)  (6a6e445d4dabb1ac81e9019137979b67)

0 / 68
AutoUpdater.exe (AutoUpdater.exe by adm)  (596409255f7ce75cc10289f5b805fd34)

0 / 68
keywordpop_biza05.exe  (86ee5a99505a676ccdc328c39425f28c)

0 / 68
keywordpop.exe  (376f54d89fadb097e1006e342db83689)

0 / 68
AutoUpdater.exe (AutoUpdater.exe)  (c6b6505e3d803b1b3e15b923050f24eb)

0 / 68
AutoUpdater.exe (AutoUpdater.exe by adm)  (b39b5031988d50fb8cd5688c7f7e1753)

0 / 68
keywordpop_lee.exe  (812094a2d73c20f98dddd099ecce2467)

0 / 68
keywordpop_biza02.exe  (18a793ff432bf26cd5ca16383f50f54d)

0 / 68
update.exe (updater by adm)  (0cc509192c7a9e004b351be0a6db7ca1)

0 / 68
wemakeppop_part01.exe.19.08.32.18.vz  (c0745156ab32cc0c414f8faf0231f522)

0 / 68
keywordpop_biza03.exe.19.08.28.00.vz  (4c407d8485ef3d097de9ca4920e2dc61)

1 / 68      (Malware)
keywordpop.exe  (702208bf0264f3f3d4220d95f3e0ac8d)

0 / 68
starcodec201206~setup.exe (autopack by adm)  (5f5df830c7f3cc6b584d4d8824e8967f)

1 / 68      (Malware)
keywordpop_biza.exe  (f7c9fc0719a203f4389d9865af023ddc)

6 / 68      (PUP)
uninstall_keywordpop.exe  (9a0f79ce471024b8daa9d71622065e9e)

18 / 68    (PUP)
keywordpop.exe  (cdaf0f0f77c3f48d9994cf3774967f37)

0 / 68
keywordpop_biza02.exe  (4b7ce3f2e9cdc6567660fda65a29a84a)

15 / 68    (PUP)
ad_6.exe  (a4f66dc46a758061b77cdc262c180131)

13 / 68    (PUP)
keywordpop.exe  (ccb084763cae2479cb28fcd113ff4094)

10 / 68    (PUP)
uninstall_keywordpop.exe  (3516f862a3028dd70965a2763514b9f8)

27 / 68    (PUP)
keywordpop_livepot.exe  (2b7a516a06b87337de51e90912d8c4ac)

* Note, the details and description above are based on the code signing digital signature issued to doubleup communication by Thawte, Inc. on June 22, 2012 with the serial number '490a43cf38fbaf6f6dc69f740d5f8e01'.