home

Hengyida Information Technology CO.,LTD.

Publisher Information

Hengyida Information Technology CO.,LTD. is a software publisher located in Chengdu, Sichuan in China*. The company is a primary distributor of unwanted software. Thre are 3 additional code signing certificates issued to this publisher.
Authority:
WoSign CA Limited

Valid from:
1/29/2016 5:18:21 PM

Valid to:
3/29/2017 5:18:21 PM

Subject:
CN="Hengyida Information Technology CO.,LTD.", E=eastrivergroup@yahoo.com, O="Hengyida Information Technology CO.,LTD.", L=Chengdu, S=Sichuan, C=CN

Issuer:
CN=WoSign Class 3 Code Signing CA G2, O=WoSign CA Limited, C=CN

Serial number:
61420c92e019420c07f4a03abc828e4b

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Hengyida (M), PUP.Hengyida.Installer (M), PUP (M)
100.00%

1 / 68      (Adware)
mmqczj.exe  (9507e98cc772d3e9320f5d71d2e42648)

1 / 68      (Adware)
a0110978.exe (idoo AntiSpyware by http://www.idoosoft.com)  (855a71e98457f6d834b8097dca94577f)

1 / 68      (Adware)
mmzj.exe  (656b8eec1397c146579107fb52105ed9)

1 / 68      (Adware)
setup_idav_v0302.exe  (ebf066c01ff9c9c18f94870dfa81e51a)

1 / 68      (Adware)
mmzj.exe  (0b1483f35b870b05319778cec1d7c86d)

1 / 68      (Adware)
mmqczj.exe  ()

1 / 68      (Adware)
setup_c.exe  ()

1 / 68      (Adware)
setupqc.exe  ()

1 / 68      (Adware)
setup_idoo_en.exe  (1a4fe4461fcb89f0bd80e4560827877a)

1 / 68      (Adware)
mmzj.exe  (3f76305eeed2e1cc1402f66730bac660)

1 / 68      (Adware)
setup_idav_v0301.exe  (e87c52b9733c9b43aaf8d1d3b093a862)

1 / 68      (Adware)
apcsetupen.exe  (f6e9a0259a9f1ef370d7bba4647bed12)

1 / 68      (Adware)
idoo-pc-cleaner_setup.exe  (1d856a4bfd36d55ece8dd9f012811e71)

1 / 68      (Adware)
idooPC.exe (idoo PC Cleaner by http://www.idoosoft.com)  (af939667e7ef48533b51bbb7d386f3ff)

1 / 68      (Adware)
idooAS.exe (idoo AntiSpyware by http://www.idoosoft.com)  (d05e23d8cab39ab442b24afbe8aa2563)

The certificates below are also signed by Hengyida Information Technology CO.,LTD..

5D606649A3DFD1409F0DD58E3D6FE428  (Jan 29, 2016 to Mar 29, 2017)

39DF2C4756EF0BB3A40DE9654C6F34FA  (Jan 14, 2015 to Feb 14, 2016)

166DAF8F034BBD9BE8EBE24044970524  (Jan 15, 2014 to Jan 15, 2015)

* Note, the details and description above are based on the code signing digital signature issued to Hengyida Information Technology CO.,LTD. by WoSign CA Limited on January 29, 2016 with the serial number '61420c92e019420c07f4a03abc828e4b'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.