home

Xi'an SAMING Technology Co., Ltd.

Publisher Information

Xi'an SAMING Technology Co., Ltd. is a software developer located in Xi’an, Shanxi in China*. Thre are 7 additional code signing certificates issued to this publisher.
Authority:
VeriSign, Inc.

Valid from:
4/27/2012 8:00:00 AM

Valid to:
2/11/2013 7:59:59 AM

Subject:
CN="Xi'an SAMING Technology Co., Ltd.", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Xi'an SAMING Technology Co., Ltd.", L=Xi’an, S=ShanXi, C=CN

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
4478575d77cc11c9d85e2d46c3f8fd20

Status:
No known positive detections

Scan engine
Details
Detections

Dr.Web
probably DLOADER.Trojan
100.00%

0 / 68
RCLogSystem.DLL (RCLogSystem Dynamic Link Library)  (9fd5b02b7ed5c45e2c9bc080d51ff298)

0 / 68
ProductRegister.dll (TODO: <Product name> by TODO: <Company name>)  (c8c8d1a09a48ad79e487da6d19dd699f)

0 / 68
ClientRegist.DLL  (c5573942f9d7dcd8cf3c1db24f2ea6cd)

0 / 68
safnt (by PCGuard)  (58f7446828c13d942fc843e3adc734d9)

0 / 68
ClientRegist.DLL  (2d57ecc77bf9da06d106cfcf5c8d89ef)

0 / 68
enc.dll  (ea3b1b5ae33e9b04e1eb8b31b2fe26d7)

0 / 68
UninstallPort.EXE  (749d9de1ed53dc800c9787145867514f)

0 / 68
ProtectDetect.EXE  (e09976aef652cc6011b0306b265c1588)

0 / 68
multitest.EXE (multitest Application)  (4da7cfbc6040db8b2a525c1131822df0)

0 / 68
QHSock.dll (QHSock by Startsoft)  (41bcb4520d04bbac99e2de441745695c)

0 / 68
HTSAPI.DLL (Screen Broadcast by Startsoft)  (2937f68aa8ccf9553c5183a5d24a8626)

0 / 68
LockScreen.DLL (LockScreen Dynamic Link Library)  (3f779f368cf113aa6c07638ab057aba3)

0 / 68
sendmessage.dll (Message Dynamic Link Library)  (a31dcb43d12a65b2ffc84577a69fdfa7)

0 / 68
enc.dll  (269dba979e75fc5c8c834beee7f6edab)

0 / 68
VNCHooks.dll (samig by saming)  (2cdd5fae75f2ed7d2d4e5d1bc49709f5)

0 / 68
bufmonitor.exe  (6b1d70279108589293b0fdfb06535ab4)

1 / 68      (inconclusive)
capclient.exe (saming capclient by saming)  (07d3f2efb988d1147b6b96739748fdc0)

0 / 68
TP.EXE  (5da733e9c3fcb014fa597e3bc8447903)

0 / 68
SamIo.dll (SamIo)  (c381952cf3115ee8a285189f864a4541)

0 / 68
zlib.dll (ZLib.DLL by Saming)  (75bf3998c2cc3c6948a200999a6b13de)

0 / 68
VNCHooks.dll (samig by saming)  (6d745af466efc6c06bcec578f656e896)

0 / 68
omnithread_rt.dll  (a58f4d62e59c6e3fc703fc08833b9a9a)

0 / 68
multitest.EXE (multitest Application)  (750c91c99888a0e0fa9a511e21066e26)

0 / 68
mirror.dll  (f92bce597576edd4a8d711b613b2b4dc)

0 / 68
ijl15.dll (Intel JPEG Library by Intel)  (914a25b72ee0504f651fcf7c25d530a5)

0 / 68
htsound.dll  (104820dd7372946bdf711db2562e0e7c)

0 / 68
capture.DLL (capture Dynamic Link Library)  (2f55ffdf990e53b553b3941b4a4443f6)

0 / 68
TP.EXE  (c64232cbd2d55fbdc86fb868db59d287)

0 / 68
multitest.EXE (multitest Application)  (ab4b08bb778ebf0ab1944596a3128685)

0 / 68
HTSAPI.DLL (Screen Broadcast by Startsoft)  (a6cc8e872e8a04762f81fdb2fdc1fb19)

 
Latest 30 of 45 files

The certificates below are also signed by Xi'an SAMING Technology Co., Ltd..

2FC993B62435FB5BCDB020559AA73AC8  (Oct 09, 2016 to Jan 08, 2020)

738E01351FB9F3E2C46016D99926751D  (Feb 21, 2013 to Mar 24, 2014)

2BAC6A302511CC2311CB1B53D07337EC  (Dec 12, 2011 to Feb 10, 2013)

1F35B30309B462F032B33F349F9743EE  (Nov 30, 2010 to Dec 31, 2011)

2D96DFEFFB9054622018ADC22F170388  (Dec 07, 2007 to Dec 07, 2010)

2DF6A0EA04EE7275B1E694FD226923AA  (Dec 15, 2006 to Dec 16, 2007)

17660F828F2F6CE2E6862DCDD3A54831  (Dec 08, 2006 to Dec 09, 2007)

* Note, the details and description above are based on the code signing digital signature issued to Xi'an SAMING Technology Co., Ltd. by VeriSign, Inc. on April 27, 2012 with the serial number '4478575d77cc11c9d85e2d46c3f8fd20'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.