home

Onnuri Infotek Inc.

Publisher Information

Onnuri Infotek Inc. is a software developer located in Seongdong-gu, Seoul in Korea*. Thre are 6 additional code signing certificates issued to this publisher.
Authority:
thawte, Inc.

Valid from:
4/20/2015 9:00:00 AM

Valid to:
6/19/2017 8:59:59 AM

Subject:
CN=Onnuri Infotek Inc., O=Onnuri Infotek Inc., L=Seongdong-gu, S=Seoul, C=KR

Issuer:
CN=thawte SHA256 Code Signing CA, O="thawte, Inc.", C=US

Serial number:
0388d6e2d2bfb6e0ef837f7f962e9a34

Status:
No known positive detections

Scan engine
Details
Detections

Reason Heuristics
PUP.InstallCore.CSH (L), PUP.InstallCore.IM (L)
88.89%

Qihoo 360 Security
HEUR/QVM05.1.0000.Malware.Gen
11.11%

0 / 68
kukjemessenger.exe  (e2a15f7ea061032f4433907a06c8c805)

0 / 68
apupgrade.exe  (8883b772ae99c43c8759b17cd0dabfa7)

0 / 68
activepostgsuite.exe  (1cf6911d66824f5dc8255f8f72b0a67c)

0 / 68
st_messenger.exe  (546ffa4c53871a33eba934378486dd31)

0 / 68
install_apg_client_3618_20151221.exe (ActivePost G-Suite by Onnuri.inc)  (d02d507b7e03a3b07d51df19cb1e3d53)

1 / 68      (PUP)
mimessengersetup.exe (MiMessenger)  (6d9c91b652f43181e9f87bb39f5836f9)

0 / 68
adminmanager.exe  (a67d87f224284c4531f37ee49dce9ce7)

0 / 68
activepostgsuite.exe  (8c7dd0c32da277850916f12ed6ec2c2c)

0 / 68
autoupdate.exe  (d34c63f047cca6ca578752a9368ce52e)

0 / 68
msgsvr.exe  (0e39b01ffc6ef3cbbf674d8d7dcec503)

1 / 68
sndmsgsvr.exe  (7e9a91cf3c61bc86ce12d59050fc6d7a)

0 / 68
logssvr.exe  (1c666abefa43ce05704bff7d7a6c5314)

0 / 68
fileboxsvr.exe  (170aced81ef7d9a47ffb29fe50249b9c)

0 / 68
filesvr.exe  (afe96a6aba7f9001e05de53fde3f625c)

0 / 68
loginsvr.exe  (0da25ca1553947dbbe6b02aaafd60d88)

0 / 68
apgsuiteserver.exe  (96fec83f9a219b80dc28e50ef042070f)

1 / 68      (PUP)
messenger_setup.exe (by Onnuri.inc)  (7adf3ce858805aa30f331d42fef82131)

0 / 68
stumessenger.exe  (e942ffd72f30f2a96be05fe0cdeb9570)

1 / 68      (PUP)
msgsetup.exe (ActivePost G-Suite by Onnuri.inc)  (ef7dbc7baf98698ceb8717601810329a)

0 / 68
activepostgsuite.exe  (5d489bd6e8e9952ab9f7556cfd43fe96)

0 / 68
kukjemessenger.exe  (3515af671a92afdff022fa774c3fbf1b)

0 / 68
activepostgsuite.exe  (3f058a2876a04148e46627a736b0b979)

0 / 68
activepostgsuite.exe  (9b36dfb7e3e60bbc29af80863e3e1b09)

0 / 68
activepostgsuite.exe  (a9a0779fa583a331850202871f1a3ca2)

0 / 68
activepostgsuite.exe  (bf633cce2081bbf5ab9cf432326ef515)

1 / 68      (PUP)
skb messenger setup_3563 (SKB Messenger by Onnuri.inc)  (5caeaa9c591a46fda31b2c7595b1d0e2)

1 / 68      (PUP)
경상남도 내부 메신저 setup_3582.exe (by Onnuri.inc)  (7aa7ace1fcf9df01b33db0ec94f2ca32)

1 / 68      (PUP)
경남교육 메신저 setup.exe (by Onnuri.inc)  (b0be4317b10a4708acc4cb680ef6251a)

1 / 68      (PUP)
mimessengersetup.exe (MiMessenger)  (9843bdb18d700fb84e997d8d4e5e7a16)

0 / 68
activepostgsuite.exe  (c30bb090fa4543757c4c9df4dda6deb1)

 
Latest 30 of 131 files

The certificates below are also signed by Onnuri Infotek Inc..

278EF5C4D2BCA787DF6333338B013E69  (Mar 19, 2013 to May 19, 2015)

660833617D4CCB72DA925012F72E256D  (Mar 08, 2011 to Apr 07, 2013)

7C790AC44B4C8E2A344E08C0B39852A5  (Jan 18, 2010 to Mar 20, 2011)

22932B510F42F84BC79265114B4157B4  (Jan 30, 2009 to Feb 12, 2010)

29D19486D891AE47C0C7D0F1CC602E72  (Feb 12, 2008 to Feb 12, 2009)

0CD9430122FD372B0F835E7104450D71  (Jan 23, 2007 to Feb 13, 2008)

* Note, the details and description above are based on the code signing digital signature issued to Onnuri Infotek Inc. by thawte, Inc. on April 20, 2015 with the serial number '0388d6e2d2bfb6e0ef837f7f962e9a34'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.