home

JS Communications Corp

Publisher Information

JS Communications Corp is a software publisher located in Gangnam-Gu, Seoul in Korea*. There is one additional code signing certificate issued to this publisher.
Authority:
VeriSign, Inc.

Valid from:
6/25/2015 9:00:00 AM

Valid to:
8/24/2016 8:59:59 AM

Subject:
CN=JS Communications Corp, O=JS Communications Corp, L=Gangnam-Gu, S=Seoul, C=KR

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
6b4533c09fb38c8d161fdcc023be8ebd

Status:
Inconclusive detections from multiple engines

Scan engine
Details
Detections

Dr.Web
Adware.Downware.3790, Trojan.Fakealert.51941, Trojan.Adkor.364
48.39%

AhnLab V3 Security
PUP/Win32.Winexpand, PUP/Win32.HubHelper
38.71%

Vba32 AntiVirus
suspected of Trojan.Downloader.gen.h
38.71%

IKARUS anti.virus
Win32.SuspectCrc, PUA.Kraddare
25.81%

K7 AntiVirus
Adware
22.58%

ESET NOD32
Win32/AdWare.Kraddare.JP (variant), Win32/Adware.Kraddare.HA (variant)
22.58%

Fortinet FortiGate
Riskware/Kraddare
22.58%

AVG
AdPlugin, Generic
22.58%

VIPRE Antivirus
Trojan.Win32.Generic
19.35%

avast!
Win32:Adware-gen [Adw]
19.35%

0 / 68
updatewinexpand.exe  (af077ae19ee5e74832e78f57c40782a7)

0 / 68
updatewinexpand.exe  (3bfd17cbee4f1037d41a3bdb6c09bbbf)

0 / 68
WEUninstall_v2ggl.exe (WEUninstall_v2ggl by CJMooter)  (8f53391dcb82620258e6a601e03b30b2)

13 / 68    (PUP)
updatewinexpand.exe (WinExpandSetup_v2systemupdate by CJMooter)  (82b7fbdd641b138fe54da3e8fb86deb3)

2 / 68
winxpendup_v2sme.exe  (e3a07ccd8451620bd06bb7dfac4ea083)

0 / 68
WinExpand_v2sme.dll (WinExpand_v2sme Module)  (d982ba5573436f992483e3643143bad2)

1 / 68
WEUninstall_v2sme.exe (WEUninstall_v2sme by CJMooter)  (525110a1057fea96298b87ed35e62fe8)

1 / 68      (inconclusive)
WEUninstall_v2ote.exe (WEUninstall_v2ote by CJMooter)  (6f458f8acc614bc2fc96dcfb684671bf)

1 / 68      (inconclusive)
WinExpand_v2ote.dll (WinExpand_v2ote Module)  (970c9c710421ac56c8655ce937d1a7c2)

14 / 68    (PUP)
updatewinexpand.exe (WinExpandSetup_v2googool by CJMooter)  (e612bde0b21d6e5c981c1c4e290e8a8d)

0 / 68
winxpendup_v2ote.exe  (56e922ad4cf705a4f4ad39046a489800)

1 / 68      (inconclusive)
WEUninstall_v2use.exe (WEUninstall_v2use by CJMooter)  (aada4991cd959d8fa2178d2d816b85e1)

3 / 68
winxpendup_v2ggl.exe  (23a5d1a1f6998fe6de5c47e284f88b8c)

1 / 68      (inconclusive)
WinExpand_v2ggl.dll (WinExpand_v2ggl Module)  (e6eaa4d6a243c42c6b254eff35125ee3)

0 / 68
WinExpand_v2fh5.dll (WinExpand_v2fh5 Module)  (6fefca9b0516d66dbc29212820101588)

0 / 68
winexpandpu_v2fh5.dll  (3fb02e3cb7826894fe39a8eff3819ef8)

1 / 68      (inconclusive)
WEUninstall_v2fh5.exe (WEUninstall_v2fh5 by CJMooter)  (e5cf4a303a4740ecaf493f91b5e760da)

12 / 68    (PUP)
updatewinexpand.exe  (fe5b3513f8471c083dd49ba4f04e7cf2)

1 / 68      (inconclusive)
WinExpand_v2use.dll (WinExpand_v2use Module)  (be2d1b6f4904fcd3ae5cc7b983f7de77)

1 / 68      (inconclusive)
winxpendup_v2use.exe  (cba71307e9c3983b625cefee7fc940c6)

16 / 68    (PUP)
updatewinexpand.exe (WinExpandSetup_v2thessi by CJMooter)  (ed39eb085f7e0ebb916ab32e7be9eb30)

0 / 68
winexpandmsetup.exe (WinExpandSetup_v2mgoon by CJMooter)  (4a921846e8fe24dc837fb2be5c796f17)

0 / 68
winstend_v2fh5.EXE (winstend_v2fh5)  (778f90f7b29a749f50972000a689f86c)

1 / 68      (inconclusive)
winxpendup_v2fh5.exe  (6f3f38ed06194a494e839b467cf09bc5)

14 / 68    (PUP)
updatewinexpand.exe (WinExpandSetup_v2flash365 by CJMooter)  (c1cd1f652ff55096e90df32dc1e47271)

0 / 68
winxpendup_v2tei.exe  (55b1a3cecb77baf36d21899133f677cf)

1 / 68
WEUninstall_v2tei.exe (WEUninstall_v2tei by CJMooter)  (0af34a0585d907e7991cb6e10b2223f4)

0 / 68
WinExpand_v2tei.dll (WinExpand_v2tei Module)  (f582585f01ba415a9c7d067c66a57aae)

17 / 68    (PUP)
updatewinexpand.exe (WinExpandSetup_v2downrealm by CJMooter)  (7657d6a88b86ed3a3f0624c2eaa62d1d)

0 / 68
updatewinexpand.exe (WinExpandSetup_theessi by CJMooter)  (ce3d7599ace37a06e6b4274116214e6b)

 
Latest 30 of 52 files

Downloads URLs for files signed by JS Communications Corp.

0 / 68
http://cypartnerpds.nowcdn.co.kr/.../weupdate_v2mon.exe  (944312553ba4b8f1c6e85e42eb31c883)

0 / 68
http://cypartnerpds.nowcdn.co.kr/.../weupdate_v2ips.exe  (62b931a2b5f8638ee2469de70c8023a3)

0 / 68
http://cypartnerpds.nowcdn.co.kr/.../weupdate_v2cog.exe  (75ede6013e26964970e1f0e07da8fb7b)

The following websites host and distribute files published by JS Communications Corp.

cypartnerpds.nowcdn.co.kr

The following certificate is also signed by JS Communications Corp.

0F898A7559C2A868C668B2D368C8AE95  (Jul 17, 2014 to Jul 18, 2015)

The following publishers (by Authenticode signature organization name) are related.

Cyebiz

* Note, the details and description above are based on the code signing digital signature issued to JS Communications Corp by VeriSign, Inc. on June 25, 2015 with the serial number '6b4533c09fb38c8d161fdcc023be8ebd'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.