» ironCdemo
Digital Signature
Analysis
Files (12)
Downloads (2)
Distribution (1)
Related (10)

ironCdemo

Publisher Information

ironCdemo is a software developer located in Tel Aviv, Israel*. A majority of the programs developed by the company can be classified as adware or other potentially unwanted programs.

Authority:

COMODO CA Limited

Valid from:

10/7/2013 3:00:00 AM

Valid to:

10/8/2014 2:59:59 AM

Subject:

CN=ironCdemo, O=ironCdemo, STREET=Lilinblum 28, L=Tel Aviv, S=Israel, PostalCode=6513307, C=IL

Issuer:

CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

15d8078242920800fda26f46f1ccf23d

Scanner detections:

Detections (67% detected)

Scan engine

Details

Detections

Avira AntiVirus

ADWARE/InstallCore.Gen9, TR/Dropper.Gen, PUA/InstallCore.Gen, PUA/InstallCore.Gen7

100.00%

AVG

InstallC

100.00%

ESET NOD32

Win32/InstallCore.PO potentially unwanted application, Win32/Injected.F trojan, Win32/InstallCore.VW potentially unwanted application, Win32/InstallCore.OL potentially unwanted application

87.50%

Vba32 AntiVirus

Downware.InstallCore, Malware-Cryptor.InstallCore.gen

87.50%

F-Prot

W32/A-dbe1ec51, W32/A-2d45491d

50.00%

Comodo Security

Application.Win32.InstallCore.BWAN

50.00%

Malwarebytes

PUP.Optional.InstallCore.A

37.50%

Total Defense

Win32/InstallCore.A!generic

37.50%

Norman

Kryptik.CDMO, Gen:Trojan.Heur2.GZ.QGZ@ba4gHdci

25.00%

Reason Heuristics

Win32.Generic.Bundler.Meta

25.00%

0 / 68

mobogenie_downloader_v1.0.1.17271_073_demo.exe (34cfd82d1f26c5ea55f57d636e1ccb4c)

0 / 68

mobogenie_downloader_v1.0.1.17271_073_demo.exe (fdd25d2e421d530a8227bd9453581c28)

0 / 68

suddenattacksetup_v1.0.3.18618_929_demo_levelup_host_silent.exe (74c098346ad574e356e51fd08d872e8e)

5 / 68 (PUP)

video_to_mp3_setup_sweetpage_bisli_demo.exe (11648a6208399ddaed37c4ba2431b88d)

7 / 68 (PUP)

{blocked}.exe (bb4ae5d11ce34dcd84618ef878fe87b4)

13 / 68 (PUP)

demo_weatherbug.exe (ee93a2be3db4a0eb580f5965d4a5a1e5)

8 / 68 (PUP)

icreinstall_winzip_demo_lastpass.exe (22715ae641d8f29eb040aa77a66dea45)

8 / 68 (PUP)

{blocked}.exe (f114122401dc9e1dd41841f1d1eb2d9d)

5 / 68 (PUP)

video_to_mp3_setup_nortonsecurity3_d2m_demo.exe (1fa66d9c6053b890bddf34a28f808ab6)

10 / 68 (PUP)

icreinstall_similargroup_d2m_setup_v1.0.4.15156_demo.exe (23acfde8b5ceb1d82dcf84191c8c156a)

6 / 68 (PUP)

icreinstall_winzipsetup_v1.0.4.22595_004_7.34_demo.exe (24823acffb8afad56ac85e7225ff11fb)

0 / 68

baixaki_yahoo_no_checker_demo.exe (7105b7ee1855f5722f8171a0a992a97a)

Downloads URLs for files signed by ironCdemo.

5 / 68 (PUP)

http://dnld.ironcustapps.com/cust/.../Video_To_MP3_Setup_NortonSecurity3_d2m_demo.exe (1fa66d9c6053b890bddf34a28f808ab6)

0 / 68

http://dnld.ironcustapps.com/cust/.../Baixaki_Yahoo_no_checker_demo.exe (7105b7ee1855f5722f8171a0a992a97a)

Distribution

The following websites host and distribute files published by ironCdemo.

dnld.ironcustapps.com

The following publishers (by Authenticode signature organization name) are related.

CoolAppDownloads

Participatory Culture Foundation

IronPremium

Motus Software Limited

* Note, the details and description above are based on the code signing digital signature issued to ironCdemo by COMODO CA Limited on October 07, 2013 with the serial number '15d8078242920800fda26f46f1ccf23d'.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.