home

Irongate

Publisher Information

Irongate is a software publisher located in Bundang-gu, Gyeonggi-Do in Korea*. Thre are 3 additional code signing certificates issued to this publisher.
Authority:
Thawte, Inc.

Valid from:
6/1/2011 9:00:00 AM

Valid to:
7/31/2013 8:59:59 AM

Subject:
CN=Irongate, OU=Dev Team, O=Irongate, L=Bundang-gu, S=Gyeonggi-do, C=KR

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
4e3f9b7bf7131f9cafa90bb77b1d6104

Status:
Inconclusive detections from multiple engines

Scan engine
Details
Detections

IKARUS anti.virus
Trojan.Rogue
50.00%

Qihoo 360 Security
Win32/Trojan.4a6
50.00%

McAfee
Trojan.Artemis!F7DE8794C9F9, Trojan.Artemis!B4B7B1FCCC43
50.00%

Avira AntiVirus
TR/Rogue.9187694
25.00%

0 / 68
gocleanup.exe  (62cc84a9d92a40b464a248eef0ce13a2)

0 / 68
GoClean.exe  (8ca23cd4e2055e53afd7a840e1299944)

0 / 68
GoClean.exe  (c521067118b6c98266582432e20eeb08)

0 / 68
gocleansetup134.exe  (ef45ae0b1b8023fec49b698d639fb927)

0 / 68
GoClean.exe  (62ccf6e36b3906a3893412d4e811fee1)

0 / 68
gocleanup.exe  (c332800e4d5a40ca8afa26ffa035ddf5)

0 / 68
GoClean.exe  (4cee0d66e0532780ce867c64286c2172)

0 / 68
gocleansetup131.exe  (a1781709bf85a68d009cb0f31b7314fb)

0 / 68
gocleanup.exe  (fadea91b406620a23867695fc90b17f5)

0 / 68
GoClean.exe  (940e62fe142c9d48249899ac14d7c053)

0 / 68
GoClean.exe  (4e19d03201e08e558bfb4060cc84fc86)

0 / 68
gocleansetup1310.exe  (fc6955a04b6c9fcceed85304352fc727)

1 / 68
gocleansetup133.exe  (b4b7b1fccc43292d22740ca4cc9fe556)

0 / 68
GoClean.exe  (33e64e9c0e133c7754d4cae570ffc17b)

0 / 68
GoClean.exe  (18cb0912b4ae573611ec9f6d1086c8dd)

0 / 68
gocleansetup132.exe  (05cceb21c0515ff36b09f424a7083f13)

0 / 68
gocleansetup135.exe  (573afedce0182094fb23fecd19baffa2)

0 / 68
GoClean.exe  (244d60eef97f81647a1d23ffa64d1add)

0 / 68
GoClean.exe  (2e93bd6d6c106c83d32ff1c5f86312e7)

0 / 68
gocleansetup137.exe  (57b7e8a066fcca8b6d6f0d6b49a65e3a)

0 / 68
GoClean.exe  (ba882a4241d8e9b4e3147e83f958f1ad)

3 / 68      (inconclusive)
GoClean.exe  (e6cfaa7ad481f61aee6198974aa37995)

1 / 68
gocleansetup138.exe  (f7de8794c9f9f6fee59eb22bb01a665d)

0 / 68
GoClean.exe  (9e4b7d83d49d51011c4531b138ce24ef)

2 / 68
gocleansetup136.exe  (63002d5f3426ce2bc560b593c4ec8907)

0 / 68
gocleanup.exe  (1805944960eaae27cbb360d699374483)

0 / 68
GoClean.exe  (8a573db8299f92be8d0c26f831b2cc42)

0 / 68
gocleanup.exe  (276efe88ffd2177c3b76cb4d8c6bf363)

0 / 68
GoClean.exe  (1fb27ca9e4c043fd6bca890ade41b8c7)

0 / 68
gocleansetup139.exe  (40a512632c95d8aae4019b6a4538dfb2)

 
Latest 30 of 31 files

Downloads URLs for files signed by Irongate.

1 / 68
http://cfile7.uf.tistory.com/.../2064713D4EDC54E2135BA2  (gocleansetup133.exe)

0 / 68
http://dnlimit6.simfile.uplusbox.co.kr/.../httpdown.cgi?orgfname=gocleansetup137.exe&filename=SS9WRVJDUnFULVdDSHVLeEo N3ZKeT1yTGhXYUxPLmVIT0N4Sz9qL0tDSS5NUmQ4  (57b7e8a066fcca8b6d6f0d6b49a65e3a)

0 / 68
http://cfile21.uf.tistory.com/.../242619395170E8580ABF3F  (gocleansetup140.exe)

2 / 68
http://goclean.tistory.com/.../cfile27.uf@1636C9344FB06515025613.exe  (63002d5f3426ce2bc560b593c4ec8907)

0 / 68
http://dnplus4.simfile.uplusbox.co.kr/.../httpdown.cgi?orgfname=gocleansetup1310.exe&filename=SS9WRVJDUnFULVdDSHVLLkw N3ZLQ2N1TFJpYUxPLmVIT0N4S2VUMUpTRXNMeFY4  (fc6955a04b6c9fcceed85304352fc727)

2 / 68
http://gby05.tistory.com/.../cfile1.uf@19264C3A513DF73E37339B.exe  (63002d5f3426ce2bc560b593c4ec8907)

0 / 68
http://goclean.tistory.com/.../cfile3.uf@205E73374EA20142317042.exe  (05cceb21c0515ff36b09f424a7083f13)

0 / 68
http://goclean.tistory.com/.../cfile21.uf@242619395170E8580ABF3F.exe  (27f900ad13efc310a658723aa46eb98f)

The following websites host and distribute files published by Irongate.

gby05.tistory.com

goclean.tistory.com

The certificates below are also signed by Irongate.

64FF5D281A4D15D24DEEE55E44E7D939  (May 15, 2013 to Aug 15, 2015)

72768669E01757E685FC5D0B18A111BC  (Jun 23, 2009 to Jun 24, 2011)

16E907A82768AB7F05AB9AC6D44E8295  (Jul 20, 2007 to Jul 19, 2009)

The following publishers (by Authenticode signature organization name) are related.

Irongate Inc

* Note, the details and description above are based on the code signing digital signature issued to Irongate by Thawte, Inc. on June 01, 2011 with the serial number '4e3f9b7bf7131f9cafa90bb77b1d6104'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.