home

Wuhan os-easy technology co., ltd

Publisher Information

Wuhan os-easy technology co., ltd is a software developer located in Wuhan, Hubei in China*. Thre are 3 additional code signing certificates issued to this publisher.
Authority:
VeriSign, Inc.

Valid from:
10/9/2009 8:00:00 AM

Valid to:
11/9/2010 7:59:59 AM

Subject:
CN="Wuhan os-easy technology co., ltd", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Wuhan os-easy technology co., ltd", L=Wuhan, S=Hubei, C=CN

Issuer:
CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
6f896768fc8ca1e4d9d3e48c28332683

Status:
No known positive detections

Scan engine
Details
Detections

Dr.Web
probably DLOADER.Trojan
100.00%

0 / 68
HRMon.exe  (3b505769f0b993cc8a235b9a2f8b4669)

0 / 68
uninst.exe  (d78a191fd3db43beec817c1033637085)

0 / 68
SelFile.EXE  (d0458d55ce4ac0df7d7523f2a531dcb2)

0 / 68
PartManage.exe  (adb005851e0defc9e905fadf21703400)

0 / 68
hookew.dll  (66d3f1061e3bec7f8cef75c0bf6fe2cb)

0 / 68
ChannelManage.exe  (8ec712977c4f46271e3500fa03a5eb69)

0 / 68
HRMon.exe  (31e3e2d8ae4e9911dd96b1ebcc898381)

0 / 68
vdisk.sys  (6511b34cd2d9437f1178d3e155d5a4e0)

0 / 68
功能管理平台.exe  (29afcdb54d8bdfe83f38366e9df4e906)

0 / 68
VSManage.exe  (58c1a67993d4270fbf5fe04fbe62127d)

0 / 68
uninst.exe  (48b5523a2191cdfb8e8e94a68c4bfb08)

0 / 68
PartManage.exe  (430669f049dd4b6139d81177cab482b9)

0 / 68
hrmonupdate.exe (Download Application)  (b7e9a013e22533a6935632d18ab88df1)

0 / 68
channelmanage.exe  (d6ddeb5ceaacb0285f8c82d2d1ff2456)

0 / 68
addkillprocess.exe  (afdf2ea4598be91e292c4ca56ec18320)

0 / 68
autoreg.exe  (a7972c10aec52df45fe56a909842085f)

0 / 68
processmon.sys  (3af9f766e50e37b73a9f9bf0c0f37770)

0 / 68
kbfilter.sys (Ctrl2cap by Systems Internals)  (34401d224f33914b54efc8cd4a502ffc)

0 / 68
protect.exe  (2858f455c74213a4788ae1449e421f01)

0 / 68
HRMon.exe  (6f37aa064c5b4c49fdf4ed459fba4727)

0 / 68
ClientAll.dll  (fa83b853928e2b944bb12eab4ace2245)

0 / 68
datacompress.dll  (3f46c7a1a6deccc92fbcd68b0bbb80fb)

0 / 68
bhkoper.dll  (1bbebc8730d5d39d69da7452c6b6f5dc)

0 / 68
mxsourse.dll  (9c9f847351d4b97a7ac4ff72b6024f45)

0 / 68
sqlite3.dll  (1db322972d880008e655d283d2f1861a)

0 / 68
lgclient.exe  (4a33ca777902a39d09b422e4797d1085)

0 / 68
omnithread_rt.dll  (43fd49b1240bb09ee08b7aa4bb1250ea)

0 / 68
VNCHooks.dll (AT&T Research Labs Cambridge - VNCHooks by AT&T Research Labs Cambridge)  (ed3be087875c9ec913e0ac14a7cfdb88)

1 / 68      (inconclusive)
WinVNC.exe (AT&T Research Labs Cambridge - WinVNC by AT&T Research Labs Cambridge)  (008ddfd8784dc0e2d49c870e59d2598e)

0 / 68
WinVNC.exe (AT&T Research Labs Cambridge - WinVNC by AT&T Research Labs Cambridge)  (7b7bded1a5e7774dc2a58279f540836f)

 
Latest 30 of 115 files

The certificates below are also signed by Wuhan os-easy technology co., ltd.

1F8F20DD4FC46FA1105CB1B3F9A1173D  (Dec 24, 2012 to Feb 23, 2014)

621BB9A53ED6BD2B808EBFFF3BFBDF9F  (Nov 01, 2011 to Jan 31, 2013)

1AC973C465F546C5855FC2085FF20F8D  (Oct 20, 2010 to Dec 20, 2011)

* Note, the details and description above are based on the code signing digital signature issued to Wuhan os-easy technology co., ltd by VeriSign, Inc. on October 09, 2009 with the serial number '6f896768fc8ca1e4d9d3e48c28332683'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.