home

netpure

Publisher Information

netpure is a software developer located in Gangnam-gu, Seoul in Korea*. Thre are 3 additional code signing certificates issued to this publisher.
Authority:
Thawte, Inc.

Valid from:
10/15/2012 9:00:00 AM

Valid to:
11/15/2013 8:59:59 AM

Subject:
CN=netpure, OU=Service Team, O=netpure, L=Gangnam-gu, S=Seoul, C=KR

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
185be7fc0069eba0030d23f0ac45ad14

Status:
Inconclusive detections from multiple engines

Scan engine
Details
Detections

Avira AntiVirus
TR/Malob.R.10
66.67%

Vba32 AntiVirus
suspected of Trojan.Downloader.gen.h
33.33%

IKARUS anti.virus
Virus.Win32.Virut
33.33%

0 / 68
jjangfilepassiv.exe  (84022b4753c5f1026484b04104e57c68)

0 / 68
UnifyFileControl.dll  (298e0f1c54b75782d3da935be62d70f6)

1 / 68      (inconclusive)
jjangfilepassiv.exe  (a3794b0b816730605e30ded8691ee003)

0 / 68
setup.exe  (39c3c70ec059be6ade05d658123ea57a)

0 / 68
UnifyFileControl.dll  (1c27277b3e87677039e28704dcd8d017)

0 / 68
setup.exe  (1bf45e6483c438e20c9c3167f29dac3a)

2 / 68
setup.exe  (f17358c13d6d427fd504d219c6542d22)

0 / 68
UnifyFileControl.dll  (d9a2ebf8656c6f323ca0f9ef1e97deab)

0 / 68
chocoplayer_setup_1.1.2.exe  (e4e090ec0698a2dd303fe705c4bd62b4)

0 / 68
setup.exe  (d431f24c2baa6b9674eb4ba9c8683a8f)

0 / 68
setup.exe  (3355e253ad52165399c2745af6711ea6)

0 / 68
chocoplayer_patch.exe  (2f11d94f74d147ae7b8c23c3e5953e8d)

1 / 68
chocoplayer_setup_1.1.3.exe  (a963c53844976e74b5557e45152de024)

Downloads URLs for files signed by netpure.

1 / 68
http://rgy0409.tistory.com/.../cfile29.uf@273B0B38584535FB3BE31B.exe  (a963c53844976e74b5557e45152de024)

0 / 68
http://chocopatch.gridcdn.com/ChocoPlayer_Patch.exe  (2f11d94f74d147ae7b8c23c3e5953e8d)

1 / 68
http://www.chocoplayer.com/.../ChocoPlayer_Setup_1.1.3.exe  (a963c53844976e74b5557e45152de024)

The following websites host and distribute files published by netpure.

www.chocoplayer.com

The certificates below are also signed by netpure.

04B083F8C937FBAD6396F08F6317A807  (Sep 26, 2011 to Oct 26, 2012)

0BA1DD0B34841371593071463CD791E1  (Dec 23, 2010 to Dec 24, 2011)

76D775C6D9AF5F65B23D2E79A9BAC11E  (Sep 28, 2010 to Sep 29, 2011)

The following publishers (by Authenticode signature organization name) are related.

Clunet Co.,Ltd.

* Note, the details and description above are based on the code signing digital signature issued to netpure by Thawte, Inc. on October 15, 2012 with the serial number '185be7fc0069eba0030d23f0ac45ad14'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.