Maroin Co., Ltd

Publisher Information

Maroin Co., Ltd is a software developer located in Haeundae-gu, Busan in Korea*. The company is a primary distributor of unwanted software. Thre are 2 additional code signing certificates issued to this publisher.
Authority:
Thawte, Inc.

Valid from:
1/14/2013 9:00:00 AM

Valid to:
1/15/2014 8:59:59 AM

Subject:
CN="Maroin Co., Ltd", OU=Dev Team, O="Maroin Co., Ltd", L=Haeundae-gu, S=Busan, C=KR

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
45d35ae0597265a616314a55e3ebe91b

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.MaroinCo.I, PUP.Task.MaroinCo.Q, PUP.MaroinCo.S, PUP.Installer.MaroinCo.H, PUP.MaroinCo.Installer (M), PUP.MaroinCo (M)
100.00%

Trend Micro House Call
TROJ_GEN.F47V1214, TROJ_GEN.F47V0829, TROJ_GEN.F47V0329, TROJ_GEN.F47V0401, ADW_KRADDARE, Suspicious_GEN.F47V0303, TROJ_GEN.F47V0909
57.14%

AVG
MalSign.Generic, OpenShopper.A
52.38%

Malwarebytes
Adware.KorAd, Adware.Korad
38.10%

Comodo Security
ApplicUnwnt, Heur.Suspicious
38.10%

ESET NOD32
Win32/Adware.OpenShopper (variant), Win32/Adware.Kraddare.HA (variant)
38.10%

Clam AntiVirus
Adware.Openshopper-1
33.33%

AhnLab V3 Security
PUP/Win32.OpenKeyword, Win-PUP/Helper.OpenKeyword.2134416, Win-PUP/Helper.OpenKeyword.2134456.B
33.33%

nProtect
Adware/W32.Agent.432688, Adware/W32.KrAdword.44480, Adware/W32.KrAdword.427496, Adware/W32.KrAdword.56768, Adware/W32.KrAdword.1718232
23.81%

VIPRE Antivirus
Trojan.Win32.Generic
23.81%

1 / 68      (Adware)
48937.exe  (40bedc1fd111c4cde92016dd573da1bc)

1 / 68      (Adware)
34413.exe (by http://smarttip.co.kr)  (5488d9d332742f9caebd43c5494f061f)

1 / 68      (Adware)
SmartTipAgent.exe (by Maroin)  (247b4beb2377cc242d4e8418bdfa7dfe)

1 / 68      (Adware)
SmartTip.exe (SmartTip by Maroin)  (d798972a49f1011fe05c8f4e9747a8f1)

1 / 68      (Adware)
OpenKeywordC.exe (OpenKeywordC by TGSM)  (c1bb7c5cbb10e793ae8c87b9ab30522e)

1 / 68      (Adware)
openkeyword_silent.exe  (9ce9a247911da1f62d2c0b31504da32b)

9 / 68      (Adware)
OpenKeywordD.exe (OpenKeywordD by TGSM)  (6e624be05fed234d7370807d1bc9907b)

4 / 68      (Adware)
OpenKeyword.exe (OpenKeyword by Maroin)  (a22d708b060458c4ee6612b17546f51f)

9 / 68      (Adware)
SmartTipAgent.exe (by Maroin)  (cc0a7c6874392670e76c025822d20eef)

4 / 68      (Adware)
SmartTip.exe (SmartTip by Maroin)  (9840e7fc4824aff5b907d280c1461662)

21 / 68    (Adware)
torrent3.1_win.exe  (56562fe74a515129676b58a796fe4652)

20 / 68    (Adware)
okextern.exe (by http://openkeyword.co.kr)  (6a0af5c736cf3636fad6e89c8b3eea14)

17 / 68    (Adware)
561806.exe  (d5aca099a9bbb0a52383937d322c1e66)

19 / 68    (Adware)
555722.exe (by http://openkeyword.co.kr)  (3a8ca397fa4624a9c1353b084d456cb9)

1 / 68      (Adware)
SmartTipAgent.exe (by Maroin)  (7b58f5b66e34f92e1550ea1dac541508)

1 / 68      (Adware)
SmartTip.exe (SmartTip by Maroin)  (bfac65e16dea252c91e9c21bbbd7debb)

14 / 68    (Adware)
oksetup.exe  (d2c3e0fdb2e5b4375875fd7f900a4965)

10 / 68    (Adware)
okupdate.exe (by http://openkeyword.co.kr)  (acf376d7722504ab65e6fc31181af1da)

3 / 68      (Adware)
openkeyword_silent.exe  (6b1a7e0bddfd74884d99d11dd532dba5)

4 / 68      (Adware)
OpenKeywordAgent.exe (OpenKeywordAgent by Maroin)  (ad4c080bec1d045a8a864101de27cc97)

12 / 68    (Adware)
okextern.exe (by http://openkeyword.co.kr)  (d283abb494445613d6c4e313aba79634)

The certificates below are also signed by Maroin Co., Ltd.

6247B0D6AE6DA842E9AFD19046D234EF  (Dec 01, 2015 to Mar 02, 2018)

5DF1E27BEBF6F3BA4B33632B858EC872  (Dec 18, 2013 to Feb 17, 2016)

* Note, the details and description above are based on the code signing digital signature issued to Maroin Co., Ltd by Thawte, Inc. on January 14, 2013 with the serial number '45d35ae0597265a616314a55e3ebe91b'.