home

Salung International Corporation

Publisher Information

Salung International Corporation is a software publisher located in Columbus, Ohio in the United States*.
Authority:
Salung International Corporation

Valid from:
6/25/2016 11:45:36 AM

Valid to:
6/26/2026 11:45:36 AM

Subject:
E=sales@salung.com, CN=www.salung.com, OU=Sales Department, O=Salung International Corporation, L=Columbus, S=Ohio, C=US

Issuer:
E=sales@salung.com, CN=www.salung.com, OU=Sales Department, O=Salung International Corporation, L=Columbus, S=Ohio, C=US

Serial number:
00866e0a24f3686932

Status:
Inconclusive detections from multiple engines

Scan engine
Details
Detections

Microsoft Security Essentials
Threat.Undefined, Backdoor:Win32/Kirts.A, TrojanSpy:MSIL/Golroted, Trojan:Win32/Dynamer!ac
60.00%

ESET NOD32
MSIL/Injector.PQN (variant), MSIL/Immirat, MSIL/Kryptik.GMU (variant), MSIL/Kryptik.GMF (variant), MSIL/Kryptik.GNB (variant)
52.00%

McAfee
RDN/Generic PWS.y, RDN/Generic.bfg, Artemis!8232AFC92D9F, RDN/Generic.dx, Artemis!0B2B1DDD91CF, Trojan-FIGV, Artemis!E2C5ABBE75E3
52.00%

ESET NOD32
MSIL/Kryptik.GMF trojan, MSIL/Kryptik.GNB trojan, MSIL/Injector.PQN trojan, MSIL/Kryptik.GMK trojan
48.00%

avast!
Win32:Evo-gen [Susp], Win32:Malware-gen, Win32:Dropper-gen [Drp]
48.00%

Baidu Antivirus
Win32.Trojan.WisdomEyes.151026.9950, MSIL.Trojan.Kryptik
48.00%

G Data
MSIL.Trojan-Stealer.Brogcy.3XOS5S, Trojan.GenericKD.3351165, Trojan.Generic.17427354, Win32.Trojan-Spy.Gozi.O9B6XY, Win32.Trojan.Agent.5SMC96
48.00%

Fortinet FortiGate
MSIL/Injector.PQN!tr, MSIL/Immirat.C!tr, MSIL/Kryptik.GMF!tr, MSIL/Kryptik.GNB!tr, MSIL/Kryptik.GNE!tr, MSIL/Kryptik.GMK!tr
48.00%

Avira AntiVirus
TR/Dropper.MSIL.dktr, TR/Dropper.MSIL.ielu, TR/Dropper.MSIL.yfqm, TR/Dropper.MSIL.bknq, TR/Dropper.MSIL.aint, TR/Dropper.MSIL.hwga
44.00%

Sophos
Troj/HawkEye-EQ, Troj/HawkEye-ES, Mal/Generic-S
40.00%

27 / 68    (Malware)
gwxux  (3c48ba47883f72e052cb47b59f050517)

28 / 68    (Malware)
windowsupdate.exe  (c4b7e7c8b1cfc2170a038def5e291137)

3 / 68      (Malware)
dwm.exe  (8ffbcd82749138891e074b3b0e58156d)

2 / 68      (inconclusive)
bivp6j1tuh0n.exe  (51907fd22850b1d9498c71dc6098689e)

24 / 68    (Malware)
conhost.exe  (53c8d6d69d0da083c01dfab6f8b0c2ef)

3 / 68      (Malware)
conhost.exe  (3f5a03503f20796dc6815fa2109ddacd)

13 / 68    (Malware)
timer by momento fenixzone.exe  (5055a53b49edeaad090fe5884fa9c704)

0 / 68
ucomlgltlv  (65bbdad7c50bdd8b70887c3cc9913b21)

0 / 68
rgjqmvnkyr  (c7ff2c06177cd74f81d224717b550d22)

0 / 68
qdsuyvkkjo  (cf116999f55e8d6cc888aad8f488ed8c)

0 / 68
phqghumeay  (8e5727eead5b744a98ade6cb805834f4)

22 / 68    (Malware)
klibvpszzn  (572561ca235cfec0e6a7b2fda0a34497)

23 / 68    (Malware)
gwhroqkhwu  (4a057fab1b76aa2f9fcefb9c40de18e6)

0 / 68
edakubnfgu  (ca719c0d3f521e5d68dfff8a14c93445)

0 / 68
jwciqsatre.exe  (33beace4f96e94e6b9262225d59dbd6e)

0 / 68
jagntxgvdr.exe  (5312bc9b1335a6f524ce39396b0ff7d8)

0 / 68
eduifqmktz.exe  (b46b236cd71a156979e2e17b48699863)

14 / 68    (Malware)
windowsdriver.exe  (e2c5abbe75e3b6ab4f5ae7408f1cc218)

4 / 68      (inconclusive)
googleupdtx64.exe  (0756ea9f8d27cf782eb41aec5041f807)

29 / 68    (Malware)
tsnp2std.exe  (6c288d8c41453af9ac932488d3b13ed0)

9 / 68      (Malware)
rocket bot.exe  (0b2b1ddd91cfe516f2e910271cda86d9)

2 / 68      (inconclusive)
wdzsfqhkpl  (0499c60360b8f9a7697a155dcf28acdc)

0 / 68
pfgaxzgflt  (a18481478a56d3d4ceedb410007b3754)

3 / 68      (Malware)
bcihpqwaqz  (ec9bde5b7fe36ace280e55dd6689668b)

0 / 68
yzaovenfvo  (7ba809028ca46d18261f56b495efa288)

0 / 68
xvkosaggmp  (41a13a42d4b0ca39c090737a18e67f4c)

1 / 68      (inconclusive)
re4per crypt.exe  (98bf0f3992364136779f0dbb4d2776c1)

0 / 68
tnwnphdbyt  (937d3ac29ac3b07497d45b8caee8cb71)

0 / 68
wdzsfqhkpl  (9f3206ef5f34a128768e8bde51581e4a)

0 / 68
bokmwgsddp  (f12fac979b5538b3d0b3c5a08d05107b)

 
Latest 30 of 134 files

Downloads URLs for files signed by Salung International Corporation.

0 / 68
http://grind2win.com/.../s.exe  (6a27ca46d1808365e8b77b8711bca0e6)

0 / 68
http://113.171.224.241/.../s.exe  (6a27ca46d1808365e8b77b8711bca0e6)

0 / 68
http://grind2win.com/.../bla.exe  (bf4180eaf216825ab188252afda9012d)

The following websites host and distribute files published by Salung International Corporation.

grind2win.com

The following publishers (by Authenticode signature organization name) are related.

MalTech Incorporation

* Note, the details and description above are based on the code signing digital signature issued to Salung International Corporation by Salung International Corporation on June 25, 2016 with the serial number '00866e0a24f3686932'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.