home

DYS

Publisher Information

DYS is a software developer located in Gimhae-si, Gyeongsangnam-Do in Korea*. Thre are 2 additional code signing certificates issued to this publisher.
Authority:
Thawte, Inc.

Valid from:
7/22/2014 9:00:00 AM

Valid to:
9/20/2016 8:59:59 AM

Subject:
CN=DYS, O=DYS, L=Gimhae-si, S=Gyeongsangnam-do, C=KR

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
018402830cf822de0c0de7706ea5741b

Status:
Inconclusive detections from multiple engines

Scan engine
Details
Detections

McAfee
Artemis!40A920EFFFCC
100.00%

NANO AntiVirus
Riskware.Win32.Agent.dagpce
100.00%

Norman
Suspicious_Gen4.GRUAE
100.00%

Dr.Web
BackDoor.Infector.133
100.00%

VIPRE Antivirus
Trojan.Win32.Generic
100.00%

ESET NOD32
Win32/Packed.Themida suspicious (variant)
100.00%

Vba32 AntiVirus
suspected of Trojan.Downloader.gen.h
100.00%

Qihoo 360 Security
HEUR/Malware.QVM19.Gen
100.00%

0 / 68
xdloader.exe  (8a18712d57fec3b73b048f89c92d3aa8)

0 / 68
ULMod.exe  (acd52f38d5bc82ff6fbc3436881cd6d5)

0 / 68
DLMod.exe  (a236b464f941e415f97e2eb98adfc0b7)

8 / 68      (PUP)
setup.exe  (40a920efffcc5d9f525cf6e03f98714e)

The certificates below are also signed by DYS.

774173F0ABB7148FF347EF0E0745749D  (Jul 12, 2012 to Aug 12, 2014)

3DC4C23F34C4AF77B2E3D56C00EBDF47  (Jul 19, 2011 to Jul 19, 2012)

* Note, the details and description above are based on the code signing digital signature issued to DYS by Thawte, Inc. on July 22, 2014 with the serial number '018402830cf822de0c0de7706ea5741b'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.