home

DreamWiz Internet Co.,Ltd

Publisher Information

DreamWiz Internet Co.,Ltd is a software developer located in Guro-gu, Seoul in Korea*. Thre are 2 additional code signing certificates issued to this publisher.
Authority:
thawte, Inc.

Valid from:
12/30/2016 9:00:00 AM

Valid to:
1/30/2018 8:59:59 AM

Subject:
CN="DreamWiz Internet Co.,Ltd", OU=IT Team, O="DreamWiz Internet Co.,Ltd", L=Guro-gu, S=SEOUL, C=KR

Issuer:
CN=thawte SHA256 Code Signing CA, O="thawte, Inc.", C=US

Serial number:
6a8e9317252448a6ebd8dc53a4428cc6

Scanner detections:
Malware distribution  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP (M), PUP.InstallCore.CSH (L)
100.00%

1 / 68      (Malware)
setup.exe (1gram player by DreamWiz Internet)  (b071056c99dc0620ade19b90ba5d92b4)

1 / 68      (Malware)
1gram.exe (1gram player by DreamWiz Internet)  (042dc224176dd74a74c73dcd2fd51896)

1 / 68      (Malware)
smartaddress64.exe (SmartAddress by Dreamwiz Internet)  (9a77cd1da1cf027f9af97a4afff5dc34)

1 / 68      (Malware)
vipsa_setup.exe (Smart Address by Dreamwiz Internet)  (5a4443811fa07108ca88a5feaa475f9d)

1 / 68      (Malware)
smartaddress64.exe (SmartAddress by Dreamwiz Internet)  (9a77cd1da1cf027f9af97a4afff5dc34)

1 / 68      (Malware)
setup_1.0.0.16.exe (Smart Address by Dreamwiz Internet)  (69f9c9c98ce6f69c84a76ef0dd48e3dd)

1 / 68      (Malware)
SmartAddress.exe (SmartAddress by Dreamwiz Internet)  (f4f69380c4cf85404e13e258d43b6bc1)

1 / 68      (Malware)
smartaddress64.exe (SmartAddress by Dreamwiz Internet)  (9a77cd1da1cf027f9af97a4afff5dc34)

1 / 68      (Malware)
smartaddress64.exe (SmartAddress by Dreamwiz Internet)  (9a77cd1da1cf027f9af97a4afff5dc34)

1 / 68      (Malware)
smartaddress64.exe (SmartAddress by Dreamwiz Internet)  (9a77cd1da1cf027f9af97a4afff5dc34)

1 / 68      (Malware)
vipsa_setup.exe (Smart Address by Dreamwiz Internet)  (988035b73d90785ab5e7b52d08b9eeba)

1 / 68      (Malware)
1gram.exe (1gram player by DreamWiz Internet)  (4e3afb9f4183eabef9e5884661307a05)

1 / 68      (Malware)
launcher_utilsa.exe  (d23b9527c50bf542e6b0135a16110984)

1 / 68      (Malware)
utilsa_setup.exe (Smart Address by Dreamwiz Internet)  (58c89e76a7ec209e3a5504f257e757a1)

1 / 68      (Malware)
tygsa_setup.exe (Smart Address by Dreamwiz Internet)  (cbe1cc4512496699a0d5e9e1339b7050)

1 / 68      (Malware)
launcher_tygsa.exe  (32f3d7c04f523e2d817622fbc184cfed)

1 / 68      (Malware)
smartaddress64.exe (SmartAddress by Dreamwiz Internet)  (9a77cd1da1cf027f9af97a4afff5dc34)

1 / 68      (Malware)
smartaddress64.exe (SmartAddress by Dreamwiz Internet)  (a13c0aad947ff803265368e1b2d9c9c6)

1 / 68      (Malware)
smartaddress64.exe (SmartAddress by Dreamwiz Internet)  (9a77cd1da1cf027f9af97a4afff5dc34)

1 / 68      (Malware)
SmartAddress.exe (SmartAddress by Dreamwiz Internet)  (6bef953dd8d509660f9fe7881fce07c6)

1 / 68      (Malware)
kmcsa_setup.exe (Smart Address by Dreamwiz Internet)  (e322f55c07680d3e7718b6cc8eee817a)

1 / 68      (Malware)
utilsa_setup.exe (Smart Address by Dreamwiz Internet)  (c8a9b88414bd69d42f156ceceda1d1ae)

2 / 68      (Malware)
smartaddress64.exe (SmartAddress by Dreamwiz Internet)  (9a77cd1da1cf027f9af97a4afff5dc34)

1 / 68      (Malware)
kmcsa_setup.exe (Smart Address by Dreamwiz Internet)  (005951f1fb0c753090fd0639b03d87f0)

1 / 68      (Malware)
SmartAddressTA.dll  (06709600495d55b8f28acee85010818a)

1 / 68      (Malware)
setup_1.0.0.17.exe (Smart Address by Dreamwiz Internet)  (fc53e427313566e43ac694f46f2dd6da)

1 / 68      (Malware)
SmartAddress.exe (SmartAddress by Dreamwiz Internet)  (f4f69380c4cf85404e13e258d43b6bc1)

1 / 68      (Malware)
vipsa_setup.exe (Smart Address by Dreamwiz Internet)  (39eb9969ef54ed5db44fb0fbba49488b)

1 / 68      (Malware)
smartaddress64.exe (SmartAddress by Dreamwiz Internet)  (f7f7f2cd2700b79776746ee145f727a5)

1 / 68      (Malware)
setup_1.0.0.16.exe (Smart Address by Dreamwiz Internet)  (e463dafc9bc58363640d4d7407253c1d)

 
Latest 30 of 89 files

Downloads URLs for files signed by DreamWiz Internet Co.,Ltd.

1 / 68      (Malware)
http://www.bomul.com/filedown?id=75192  (utorrent_75192.exe)

1 / 68      (Malware)
http://high.software.dn.naver.com/56736a82ccf4d7098f577a14f81bc876/.../HanSee_Setup.exe  (01b81becd4409483041dc0a231edd7cc)

The certificates below are also signed by DreamWiz Internet Co.,Ltd.

2C28441B5E4D45C0B4A25EBFE0B40940  (Dec 04, 2015 to Jan 03, 2017)

12DB999BC9533C57564CC89CAC820B20  (Dec 06, 2013 to Dec 07, 2015)

* Note, the details and description above are based on the code signing digital signature issued to DreamWiz Internet Co.,Ltd by thawte, Inc. on December 30, 2016 with the serial number '6a8e9317252448a6ebd8dc53a4428cc6'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.