home

Linuxwares Co., Ltd.

Publisher Information

Linuxwares Co., Ltd. is a software publisher located in Gangnam-gu, Seoul in Korea*. Thre are 3 additional code signing certificates issued to this publisher.
Authority:
Thawte, Inc.

Valid from:
2/14/2014 9:00:00 AM

Valid to:
4/15/2016 8:59:59 AM

Subject:
CN="Linuxwares Co., Ltd.", O="Linuxwares Co., Ltd.", L=Gangnam-gu, S=Seoul, C=KR

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
2a8dc600da10bc195cb27c779d367d7a

Status:
Inconclusive detections from multiple engines

Scan engine
Details
Detections

McAfee
Artemis!81976AC1A8C6, Artemis!0F0AC646D2A1, Artemis!1E583792F3D6
75.00%

Kaspersky
HEUR:Trojan-Downloader.Win32.Generic
75.00%

Vba32 AntiVirus
suspected of Trojan.Downloader.gen.h
75.00%

Baidu Antivirus
Trojan.Win32.Downloader
50.00%

Zillya! Antivirus
Adware.Somoto.Win32.803
25.00%

Qihoo 360 Security
HEUR/QVM42.1.Malware.Gen
25.00%

AegisLab AV Signature
Troj.Downloader.W32!c
25.00%

Reason Heuristics
Threat.Win.Reputation.IMP
25.00%

0 / 68
mailplug_messenger_setup.exe  (e1fadfa8788f13d5fc42eb1aa5727ca4)

0 / 68
mailplug_messenger_setup.exe  (e91953c21886b634b5eb94ca23bf21ed)

1 / 68      (Malware)
archiving_setup.exe  (d703458ecba903b4e401d2486cba2767)

0 / 68
archiving.exe  (bad04b25f8e510cbb4367220c4dd1790)

4 / 68      (inconclusive)
outlook_auto_config-1.1_mail_eng.exe  (1e583792f3d689c447071d05cda2e316)

0 / 68
f_0039df  (2da639e81b160a0e53208ae51d0fd4e2)

4 / 68      (inconclusive)
outlook_auto_config-1.1.exe  (0f0ac646d2a1fc0a141cce995285d83a)

0 / 68
tmpwqxevy.exe  (df34d57850a992f56b4964e355293ffe)

0 / 68
mailplug_messenger_setup.exe  (4f17ae4007fd8bcf3b5c484072057ca7)

6 / 68      (PUP)
7of56.81976ac1a8c6477004ac7228ba4c5116.outlook_auto_config-1.1_mail.exe  (81976ac1a8c6477004ac7228ba4c5116)

0 / 68
tmpxpp4lq.exe  (cadc3d1ae3373870b6824363de390dce)

0 / 68
tmp5mghpy.exe  (2ea4d68a6ee18836330967e217c2eac2)

0 / 68
tmpyi4am2.exe  (0ea1ed66f6c5ecd4012a31c20a3c35b0)

0 / 68
tmpil1zvb.exe  (9cd1fae6c4fa2a7dec525925e55a3378)

0 / 68
tmpnrkwsw.exe  (8ac94b82bb5f907589c28b741f5f105f)

0 / 68
tmplss9is.exe  (b9c30234538f2a5bfdd2c6b7895d2ad0)

0 / 68
LwUpload.OCX  (2b98c1a922f1c8147851be062f98f550)

Downloads URLs for files signed by Linuxwares Co., Ltd..

0 / 68
http://download.mailplug.com/.../Mailplug_Messenger_Setup.exe  (e91953c21886b634b5eb94ca23bf21ed)

4 / 68      (inconclusive)
http://download.mailplug.com/.../Outlook_Auto_Config-1.1_mail_eng.exe  (1e583792f3d689c447071d05cda2e316)

6 / 68      (PUP)
http://download.mailplug.com/.../Outlook_Auto_Config-1.1_mail.exe  (81976ac1a8c6477004ac7228ba4c5116)

0 / 68
http://download.mailplug.com/.../Mailplug_Messenger_Setup.exe  (4f17ae4007fd8bcf3b5c484072057ca7)

The following websites host and distribute files published by Linuxwares Co., Ltd..

download.mailplug.com

The certificates below are also signed by Linuxwares Co., Ltd..

1BD0580BF8D0E88ACA18295AB1919652  (Mar 31, 2016 to May 31, 2018)

700A24458F9E3BBDA0CE218A35290909  (Mar 07, 2012 to Mar 08, 2014)

507CB45102B989A5DC62A8C0BE5C5240  (Apr 04, 2007 to Apr 11, 2009)

* Note, the details and description above are based on the code signing digital signature issued to Linuxwares Co., Ltd. by Thawte, Inc. on February 14, 2014 with the serial number '2a8dc600da10bc195cb27c779d367d7a'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.