» GMT
Digital Signature
Analysis
Files (45)
Downloads (2)
Distribution (1)
Related (5)

GMT

Publisher Information

GMT is a software developer located in Gyeyang-gu, Incheon in Korea*. The publisher primarily developes software that can be classified as adware. Thre are 2 additional code signing certificates issued to this publisher.

Authority:

Thawte, Inc.

Valid from:

9/18/2012 9:00:00 AM

Valid to:

12/19/2013 8:59:59 AM

Subject:

CN=GMT, O=GMT, L=Gyeyang-gu, S=INCHEON, C=KR

Issuer:

CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:

61d926c4bc50f40a050d02355cd98ec4

Scanner detections:

Detections (100% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.Startup.GMT.R, PUP.GMT.L, PUP.GMT.O, PUP.GMT.Installer (M), PUP.TomorrowSoftware.GMT.Installer (M), PUP.TomorrowSoftware.GMT (M), PUP.TomorrowSoftware (M)

100.00%

IKARUS anti.virus

AdWare.Win32.Enumerate, Win32.Malware, Trojan.SuspectCRC

8.89%

McAfee

Artemis!D460DC7F056F, Generic Downloader.z, Artemis!18C19D028C97

6.67%

Malwarebytes

Adware.KorAd

6.67%

VIPRE Antivirus

Trojan.Win32.Generic

6.67%

Comodo Security

ApplicUnwnt, UnclassifiedMalware

4.44%

Trend Micro House Call

TROJ_GEN.F47V0815, TROJ_DLOADR.PDJ

4.44%

Bkav FE

W32.Clod5c9.Trojan, W32.Clod7cc.Trojan

4.44%

Trend Micro

TROJ_DLOADR.PDJ, ADW_KRADDARE

4.44%

AVG

Skodna.Downloader.T, Dropper.Generic_c

4.44%

1 / 68 (PUP)

udcontrol_05_install.exe (8edb731a893ad21295f51594f483bb67)

1 / 68 (PUP)

enterjoydt.exe (enterjoy) (8da27aaee049d42cb4cd479cea7df85a)

1 / 68 (PUP)

enterjoy.dll (enterjoy) (a5465041c23940bce1f412b9e90aefa0)

1 / 68 (PUP)

enterjoydt.exe (enterjoy) (58451b0fb1429e0d5db6e03d67d6ddad)

1 / 68 (PUP)

enterjoy.dll (enterjoy) (5f5db0c0557f09864db6bab8aadbd1ec)

1 / 68 (PUP)

micropcrecord_update_20121024.exe (78919844bff3b0fb014791d3c28fef22)

1 / 68 (PUP)

filetap_udcontrol_update_20121031.exe (74d1684001662f95812a5fce00208524)

1 / 68 (PUP)

micropcrecord_update_20121004.exe (91eabc9b56771465dfe313b0b3d46459)

1 / 68 (PUP)

tmp_20121020220542.$$$ (ffa12bbc7735a5d50c59fef955fef7e8)

1 / 68 (PUP)

enterjoydt.exe (enterjoy) (d7446c94886805d52225ca715ff0521f)

1 / 68 (PUP)

enterjoy.dll (enterjoy) (40d0ad8254dd40c10a5bbbcad9bc2a37)

1 / 68 (PUP)

udcontrol.exe (Windows UtilWorld Download Controller) (06997057f938e9a8da676ee39b2a884e)

1 / 68 (PUP)

mm2kor.exe (0a6e138c2cf88be5c251bd16f95d8d82)

1 / 68 (PUP)

udcontrol.exe (Windows UtilWorld Download Controller) (91bab041576cd24aa4038364b05fa680)

1 / 68 (PUP)

alzip821.exe (213e6cee29e645ee2b7c62f40b4be189)

1 / 68 (PUP)

alsee69.exe (Windows FileTap Download Controller) (b3a3f4398818f4c712a853f3fb786d46)

1 / 68 (PUP)

icleanzoneupdate.exe (a1b4e2c797820b166615d308f0353bc6)

1 / 68 (PUP)

icleanzone.exe (d29c10935a64bd724c914ff4766ca20f)

1 / 68 (PUP)

youdonkey_2.4.8.4.exe (Windows Utiland Download Controller) (62ea771ff353fb04fe5ec6303bd69911)

1 / 68 (PUP)

udcontrol.exe (Windows UtilWorld Download Controller) (44ef4498af3f12346441196d2a4c0d69)

1 / 68 (PUP)

icleanzone.exe (4a61ce0aff1e684533b8c84bb7cf9521)

1 / 68 (PUP)

udcontrol.exe (Windows UtilWorld Download Controller) (712d85ab5090d32624361d1d7836684e)

1 / 68 (PUP)

엔터조이.exe (f0747130016729c8e0532b16c99b4e33)

1 / 68 (PUP)

micropcrecord_update_h_20121113.exe (73c008ae8b165cc6aa25d4c1344d4516)

1 / 68 (PUP)

udcontrol.exe (Windows UtilWorld Download Controller) (650bef341abf17616c80ae4b13fe63d6)

1 / 68 (PUP)

micropcrecordupdate.exe (7715602a418e1cdbed6e67b4c8cbb4df)

1 / 68 (PUP)

이종석김우빈_눈물씬영상.exe (Windows UtilWorld Download Controller) (a8c4306bdfee5945eb9ddeaf8666510d)

1 / 68 (PUP)

youdonkey_2.4.8.4.exe (977f5b3a06055746c16685abb312b03c)

1 / 68 (PUP)

micropcrecordudt_.exe (MicroPCRecord) (f136f0d1439b39ed12d8edb6213cdd9e)

1 / 68 (PUP)

udcontrol.exe (Windows UtilWorld Download Controller) (b1849f0492d4c163283151e5d4bc71cd)

Latest 30 of 45 files

Downloads URLs for files signed by GMT.

1 / 68 (PUP)

http://blogattach.naver.net/c055dc6f7c2d24f8d63550615ab9c7b31e48b254da/20130611_198_blogfile/.../13-4_vista_win7_win8_64_dd_ccc_whql.exe (37725899ae15cd805e5d9982aa8ad192)

1 / 68 (PUP)

http://blogattach.naver.net/da4fc67567373ee2cc2b497a47a4dca8065aae49a2/20130620_91_blogfile/.../mm2kor.exe (0a6e138c2cf88be5c251bd16f95d8d82)

Distribution

The following websites host and distribute files published by GMT.

blogattach.naver.net

The certificates below are also signed by GMT.

0095D8DD215B340CB3180B50899D59F3 (Nov 21, 2013 to Jan 21, 2015)

554039A1949314066A5E2E1CD0F6B657 (Dec 13, 2011 to Dec 13, 2012)

The following publishers (by Authenticode signature organization name) are related.

* Note, the details and description above are based on the code signing digital signature issued to GMT by Thawte, Inc. on September 18, 2012 with the serial number '61d926c4bc50f40a050d02355cd98ec4'.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.