home

Bo Zhang

Publisher Information

Bo Zhang is a software publisher located in Hegang, Heilongjiang in China*.
Authority:
WoSign CA Limited

Valid from:
12/8/2015 12:44:45 PM

Valid to:
12/8/2016 12:44:45 PM

Subject:
CN=Bo Zhang, L=Hegang, S=Heilongjiang, C=CN

Issuer:
CN=WoSign Class 2 Code Signing CA, O=WoSign CA Limited, C=CN

Serial number:
50f3632635d9289d4c2744d61d103c95

Status:
Inconclusive detections from multiple engines

Scan engine
Details
Detections

Clam AntiVirus
Win.Trojan.691128, Win.Trojan.691128-1
76.92%

Dr.Web
Trojan.KillFiles.28526
69.23%

NANO AntiVirus
Riskware.Win32.ShouQu.dmnfjx
61.54%

ESET NOD32
Win32/Packed.NSISmod.A suspicious (variant)
61.54%

Fortinet FortiGate
W32/Generic.AC.18053
61.54%

avast!
Win32:Malware-gen, Win32:Evo-gen [Susp], Win32:Adware-gen [Adw]
46.15%

McAfee
Artemis!715698FF9659, Artemis!1CBFB5C11B5A, Artemis!D729BC08B48D, Artemis!032F86F10013, Artemis!D91AA107427A
38.46%

AhnLab V3 Security
PUP/Win32.Downloader, PUP/Win32.ShortCut, PUP/Win32.Installer
30.77%

Avira AntiVirus
W32/Virut.Gen, W32/Sality.AT
23.08%

AegisLab AV Signature
Troj.Generic
23.08%

0 / 68
uninstall.exe (by bo zhang)  (eee91b28c5adfc89509f46220fc31ac9)

0 / 68
installassist.exe  (f97c3570230da36f710400dca92bebbf)

0 / 68
ieplugin_64.dll (by bo zhang)  (bd06dbc90eaa826b5f05676be4ba98ee)

13 / 68    (PUP)
setup_120_1.exe (by bo zhang)  (d91aa107427a88129226c012a04073fe)

8 / 68      (PUP)
setup_114_4.exe (by bo zhang)  (5fc880234bb96373458c137510959be0)

9 / 68      (PUP)
setup_92_1.exe (by bo zhang)  (032f86f10013ec34a09631b39e2c50af)

0 / 68
uninstall.exe (by bo zhang)  (0c53118560984dd878f39ecfa4e75f9b)

0 / 68
installassist.exe (by bo zhang)  (fc9e60cc0ecefc90def7105d3aead958)

0 / 68
installassist.dll (by bo zhang)  (ea444c8441194b86258ba929f30378d8)

0 / 68
npcrossbus.dll (npapi by bo zhang)  (3307721b9efe1b7ebade0623594ed981)

0 / 68
uninstall.exe (by bo zhang)  (2d3e55958213f72a83b5322ff80b20df)

0 / 68
installassist.exe (by bo zhang)  (8bb3c91c749f1c49599be76d9d199903)

0 / 68
ieplugin_64.dll (by bo zhang)  (00f7437072355ec3c8c001de522f2043)

0 / 68
setup_114_2.exe (by bo zhang)  (8265ecfc03b545ad8b663f55a39a076a)

0 / 68
uninstall.exe (by bo zhang)  (c315304d87190aa51756477162677c7d)

0 / 68
installassist.exe (by bo zhang)  (e7d24d91f08f64e32bc494010502bc79)

3 / 68      (inconclusive)
setup_87_2.exe (by bo zhang)  (11b935aeb634aca1697b2d5b70af3459)

1 / 68      (inconclusive)
npcrossbus.dll (npapi by bo zhang)  (b1d45e748332830fd99edefb84bc3cc1)

0 / 68
installassist.dll (by bo zhang)  (d9e5036ba4f80b7c72b2f57a06f2f387)

0 / 68
uninstall.exe (by bo zhang)  (0c1fe7c136c6178c1ffef1698efe23bd)

0 / 68
installassist.exe (by bo zhang)  (f50616e746672613d943357089f5eafe)

1 / 68      (inconclusive)
npcrossbus.dll (npapi by bo zhang)  (b14238abc9390c1e3a8a6459c3e04e4b)

0 / 68
installassist.dll (by bo zhang)  (e4dd0df7d1a4dfe21d33145c55f24aef)

3 / 68      (inconclusive)
setup_120_1.exe (by bo zhang)  (d2dd46b9ee35d0eb1f0a1fe57f19943a)

6 / 68      (PUP)
setup_120_1.exe (by bo zhang)  (d729bc08b48da3317ba5defc10ca7012)

0 / 68
uninstall.exe (by bo zhang)  (09c6b18052c23b2b7b0dd77a055f2f83)

0 / 68
installassist.exe (by bo zhang)  (5946447025dfe60065a43c3d06742993)

0 / 68
npcrossbus.dll (npapi by bo zhang)  (f14b907cfb1d301185adc6b2b5dca8d6)

5 / 68      (inconclusive)
setup_95_1.exe (by bo zhang)  (5369b348c1be1885f8a1072ea0787e53)

0 / 68
installassist.dll (by bo zhang)  (4d805630b4615ddaa66c73605654f643)

 
Latest 30 of 46 files

Downloads URLs for files signed by Bo Zhang.

9 / 68      (PUP)
http://dll.zhonghuchina.com/.../setup_95_1.exe  (032f86f10013ec34a09631b39e2c50af)

3 / 68      (inconclusive)
http://dll.zhonghuchina.com/.../setup_95_1.exe  (d2dd46b9ee35d0eb1f0a1fe57f19943a)

8 / 68      (PUP)
http://dll.zhonghuchina.com/.../setup_95_1.exe  (715698ff96594a2f66b14af2e170a2a0)

The following websites host and distribute files published by Bo Zhang.

dll.zhonghuchina.com

* Note, the details and description above are based on the code signing digital signature issued to Bo Zhang by WoSign CA Limited on December 08, 2015 with the serial number '50f3632635d9289d4c2744d61d103c95'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.