home

GNWay (Beijing) Co. Ltd

Publisher Information

GNWay (Beijing) Co. Ltd is a software developer located in Beijing, China*. Thre are 6 additional code signing certificates issued to this publisher.
Authority:
VeriSign, Inc.

Valid from:
7/30/2012 8:00:00 AM

Valid to:
9/29/2013 7:59:59 AM

Subject:
CN=GNWay (Beijing) Co. Ltd, OU=Research and Development Department, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=GNWay (Beijing) Co. Ltd, L=Beijing, S=Beijing, C=CN

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
66c109a323a27b7925a4fd9d521252e5

Status:
No known positive detections

Scan engine
Details
Detections

Vba32 AntiVirus
Trojan.BHORA.04490
100.00%

0 / 68
wvsock.dll  (cf6c74d40a7c53d1bbfef90f2173b7ec)

0 / 68
gnclient.exe  (0e915f9dd3396f1f7662ae3b85b18958)

0 / 68
ClientConfig.exe  (09e1c56d21e3932436417b6f7590dfdb)

0 / 68
gnLan.exe  (1314f3a4fc1ad05a668bb25c443be90a)

0 / 68
gnlink_e.exe  (b8b34cdf864d73e8038c7e6c8f117d70)

0 / 68
php5.dll (PHP by The PHP Group)  (934cfe17264d36d08236ab6ae416f445)

0 / 68
ClientConfig.exe  (46141dc651947538d7b9ffe0eb583e13)

0 / 68
userclient.exe (by Gnway)  (6727b1b7ba6501c7c277d6c09343fa97)

0 / 68
TerminateProcess.EXE  (a63418acc32b5001769d1e34b26e3db4)

0 / 68
GNUtil.DLL (GNUtil Dynamic Link Library)  (87f1b60cb0ded6cf7103701733021f92)

0 / 68
gnhostservice.exe  (7110841ff31041665c10239771e23385)

0 / 68
userclient.exe (by Gnway)  (1d652e5512c9c575765ad00a668079bb)

0 / 68
screenhooks32.dll (OSP UserClient by GlavSoft)  (2db5a6851fb4bdccbb675b666099127b)

0 / 68
OSPStatusViewer.exe (by GNWay Co)  (05f7a1e169dd9c6b1cb308e66178d595)

0 / 68
ospbase.dll  (b81b699c59782163bc28ee8fc9a1f722)

0 / 68
gnauphelper.dll  (2c02902a169d6efa141b2e5f470657ad)

0 / 68
GNAupdaemon.exe (GNAupdaemon.exe)  (5ceda77e6bd3a886f70745607438390f)

0 / 68
DLL_STUN.dll  (b0fc22887415dbd3dc25caa97355688c)

0 / 68
userclient.exe (by Gnway)  (24d4cda435521b512ea03fd0e1dc1a2c)

0 / 68
generateversionfile.exe  (c5dece73dc98c2b0b5915fb5bbc63910)

0 / 68
setup_std_client.exe  (95d400f97fe487a450874255c3b5f68b)

0 / 68
userclient.exe  (84bd60e82c104ae51c92c67039364911)

0 / 68
gnclient.exe  (9f2232c54569a5808f7fbb00394f0733)

0 / 68
gneslclient.exe  (766ab37b07d1849a0577cbe3099f8089)

0 / 68
screenhooks32.dll (OSP UserClient by GlavSoft)  (8894b29f4049932ac72997647a4705a3)

0 / 68
智百威远程工具客户端.exe  (95a0223f2df68e177cfd842e73ac5374)

0 / 68
setup_std_client.exe  (960c1d03a4bec8eb12d2dc1e2c22e5c1)

0 / 68
GNAupdaemon.exe (GNAupdaemon.exe)  (4d9b99d6f6c6d0c443d0de6d1ec3127f)

0 / 68
GNWebHelper.exe  (b4f6a7eb5fc0d1e10f412684af529f66)

0 / 68
userclient.exe (by Gnway)  (a6c5ad4c0a5f426ee87951c4847ad90a)

 
Latest 30 of 70 files

The certificates below are also signed by GNWay (Beijing) Co. Ltd.

26854BDA75753C37821DF6D2BBA1F511  (Nov 30, 2016 to Jan 30, 2020)

24821F300265F47D52150D634470261B  (Dec 07, 2015 to Jan 06, 2017)

67371CA03447B579DA4173B6514A627F  (Oct 16, 2014 to Dec 16, 2015)

11DB1B81FDCC2AE3EC3A7E76744D2994  (Jul 30, 2013 to Oct 30, 2014)

0D24A48E029C575C6ED10E38B457B291  (Jun 25, 2011 to Aug 24, 2012)

5A3EAB7074210EB8E6340AC4AACC7D22  (Aug 01, 2010 to Aug 02, 2011)

* Note, the details and description above are based on the code signing digital signature issued to GNWay (Beijing) Co. Ltd by VeriSign, Inc. on July 30, 2012 with the serial number '66c109a323a27b7925a4fd9d521252e5'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.