home

厦门二五八集团有限公司

Publisher Information

厦门二五八集团有限公司 is a software developer located in 福建省, China*. There is one additional code signing certificate issued to this publisher.
Authority:
WoSign CA Limited

Valid from:
1/13/2016 9:09:25 AM

Valid to:
4/13/2019 9:09:25 AM

Subject:
CN=厦门二五八集团有限公司, E=kefu@258.com, O=厦门二五八集团有限公司, L=厦门市, S=福建省, C=CN

Issuer:
CN=WoSign Class 3 Code Signing CA, O=WoSign CA Limited, C=CN

Serial number:
1a448426c5d7a098a0b40a9992a0d3f0

Status:
No known positive detections

Scan engine
Details
Detections

Dr.Web
probably DLOADER.Trojan
100.00%

Vba32 AntiVirus
suspected of Trojan.Downloader.gen.h
50.00%

0 / 68
appbrowse.exe  (07e8a7d2b832033ce3be42658fea020e)

0 / 68
CalendarService.exe  (348169e3e0ebf3c8e73b6f651c4395c9)

0 / 68
swwsuninstall.exe  (d73dfb192516a6153772e50ef67d7d6f)

0 / 68
Clock.exe (T-Clock Redux by -)  (7b7b800bf36170ecf2ac179eb506dfdf)

0 / 68
calendarserviceloader.exe  (66611f1db0af8540da78dc149cc9ddef)

0 / 68
cartooncityloader.exe  (8d27ce34d0c186c191bb0acc74a8d488)

0 / 68
qiaojinprotectservice.exe  (f9b0ee0bc532bee4347a431a1ad24fee)

2 / 68
qiaojinprotectloader.exe  (17314035470beb652a344ea21b7ae261)

0 / 68
MeinvSearcher.exe (by 258)  (b6be6c24a882d07acbbee1445bfadfa1)

0 / 68
wihuprotect.exe (by 258)  (de54a26663f5f167db9d31b7150d7f0a)

0 / 68
secureguard.exe  (19e8b4674f8f0e81b58d56fd221b198c)

0 / 68
nas.exe (by 258)  (b95195ed26cb651eccd41e07cddfe7fe)

0 / 68
xuanchuanyi.exe  (592ddb0ccaf4cf62f5da9d0aa58fbb1e)

0 / 68
dmn.exe (dmn by 258)  (d68a9579d6f47257caa713d031f0fb62)

0 / 68
qiaojinprotectloader.exe  (2f04ef1ccd23d482b425f46ac6ffb3cc)

2 / 68
comiccitytgloader.exe  ()

0 / 68
engineassistant.exe (by 258)  (be3edd7321fd420499682faf64eff76a)

0 / 68
secureguard.exe  (22688b8e71e8d38f08b68b8b0861ad63)

0 / 68
ccocr.exe (Domino Protect by Domino1)  (56615564aad7fc21e47f0a511a80a21e)

0 / 68
qpw10.exe  (5e5fa055e70fbeca7203a2a0ed0546c5)

1 / 68      (inconclusive)
qiangpiaowangserviceloader.exe  (228c9f1f5b3f533e806bd8f9cf83d856)

0 / 68
qiangpiaowangservice.exe (by 258)  (8fe3eb4139e6ba87432bf351ab2496c5)

0 / 68
mhcinstall.exe  (ee21d4fdf47778be7d54d6082bfb1389)

0 / 68
comiccity.exe  (ababfed71ae3a242a4112a86a3240bbd)

0 / 68
manhuac.exe  (0fb7db5cd126f092508aea345f480f3c)

0 / 68
tgcomiccityservice.exe  (92067daf2c38d751bbc0a70dcc34b7c6)

1 / 68      (inconclusive)
tgcomiccityloader.exe  (dcda9ed00cb54e7427516e0c0c226c02)

0 / 68
mhcinstall4.exe  (a9e9d366e44f1c909e0da86adc04125d)

0 / 68
manhuac.exe  (9517c5d84539ce87a925ba0c8f672418)

0 / 68
mhcinstall5.exe  (56d175de926b1d6a5f7e643d9e2730c9)

 
Latest 30 of 31 files

Downloads URLs for files signed by 厦门二五八集团有限公司.

0 / 68
http://down.yunzhuan.com/.../comiccity.exe  (ababfed71ae3a242a4112a86a3240bbd)

The following websites host and distribute files published by 厦门二五八集团有限公司.

down.yunzhuan.com

The following certificate is also signed by 厦门二五八集团有限公司.

15BB38BE1564FFC7B9323F46BEDB04F1  (Jan 13, 2016 to Apr 13, 2019)

* Note, the details and description above are based on the code signing digital signature issued to 厦门二五八集团有限公司 by WoSign CA Limited on January 13, 2016 with the serial number '1a448426c5d7a098a0b40a9992a0d3f0'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.