home

北京丰余科技有限公司

Publisher Information

北京丰余科技有限公司 is a software publisher located in 北京市, China*. There is one additional code signing certificate issued to this publisher.
Authority:
WoSign CA Limited

Valid from:
4/14/2016 3:40:09 PM

Valid to:
4/14/2017 3:40:09 PM

Subject:
CN=北京丰余科技有限公司, O=北京丰余科技有限公司, L=北京市, S=北京市, C=CN

Issuer:
CN=WoSign Class 3 Code Signing CA G2, O=WoSign CA Limited, C=CN

Serial number:
6f023ac937a05412fb470a7dd5283ffa

Status:
Inconclusive detections from multiple engines

Scan engine
Details
Detections

McAfee
Artemis!C8BCD538C0CB, Artemis!EE915E31F679, Artemis!56FCF0E2D61B, Artemis!0A94A493BA58
100.00%

Zillya! Antivirus
Downloader.DownloaderGuideCRTD.Win32.6008
100.00%

K7 AntiVirus
Unwanted-Program
100.00%

IKARUS anti.virus
PUA.Yiwanzhushou
100.00%

Quick Heal
Downloader.DownloaderGuide
75.00%

AegisLab AV Signature
Troj.Downloader.W32.Downloaderguide!c
75.00%

G Data
Win32.Application.Agent.A9NJVS, Win32.Application.Agent.OV162H, Win32.Application.Agent.BRDAT9
75.00%

ESET NOD32
Win32/Yiwanzhushou.A potentially unwanted (variant)
75.00%

Rising Antivirus
PUA.Yiwanzhushou!8.DE6F-Nsek87iytTQ (cloud), PUA.Yiwanzhushou!8.DE6F-QmYoqjLRctC (cloud), PUA.Yiwanzhushou!8.DE6F-mEFAF9nHWaV (cloud)
75.00%

Sophos
Generic PUA BI (PUA), Generic PUA IF (PUA)
50.00%

0 / 68
runner.exe  (377b00986f2e1c94b3fa0834e2dd5427)

0 / 68
runner.exe  (5bd9e913ea73c31e663a1c576ad1f3c4)

0 / 68
runner.exe  (b7129a0025e090bfb3d1917ab3f5c16a)

0 / 68
YiwanAssist.exe (YiwanAssist Module)  (20e6ded757235a9a6720ff0486d82154)

0 / 68
runner.exe  (0c3de6a2ebf173eecbee528f7aed6c0f)

0 / 68
45.exe (YiwanInstaller Module by yiwanzhushou)  (fe6b0a30effa55674c30a2ff4dc9dedc)

0 / 68
runner.exe  (c65b446856bc1ea1deb3076179d5caa8)

0 / 68
yiwaninstaller_360mnq_01_3250514.exe (YiwanInstaller Module by yiwanzhushou)  (52c13ecbb7f832e1c1892507fc34cbce)

0 / 68
loginagent.dll  (56b3dd3b1ab406bd5a76eb4dbd2e973d)

0 / 68
runner.exe  (acaf1260424c6fb5e29d38c2435df62e)

0 / 68
runner.exe  (4e3a4f3067f6bd6366bbfbb8990094ea)

0 / 68
runner.exe  (24028a8989057292f8cf37a4335e07cb)

0 / 68
runner.exe  (b9d2b10084c4fae22ba0528248aca3e1)

0 / 68
yiwaninstaller_sea_09_3632241.exe (YiwanInstaller Module by yiwanzhushou)  (27c0e4d045963957429a833ee0fff674)

0 / 68
runner.exe  (524efd3aad48480138a2c0736384f7ef)

0 / 68
YiwanHall.exe  (a695d619140bc424d9818bfe9fb55ea2)

0 / 68
5KongTVDanMu.exe (5KongTV)  (1a3f1189e753903c8b08c394ed4f5622)

0 / 68
5KongTV.exe (5KongTV)  (1647a8e228b46f6108fae005be68c875)

0 / 68
runner.exe  (520076daec2f8e993ca6660cd2c350b4)

0 / 68
runner.exe  (a41976f360dec0f0e54a0fde800f6509)

0 / 68
YW-Frontend.exe (yiwanGames by yiwanGames Systems)  (12f27b620aa96c117b903599ec956648)

12 / 68    (PUP)
yiwaninstaller_sea_09_3067000.exe (YiwanInstaller Module by yiwanzhushou)  (0a94a493ba5839079744d73bcead1d27)

0 / 68
runner.exe  (d410423fc353ed1983485e0697a29ef7)

0 / 68
YiwanAssist.exe (YiwanAssist Module)  (ea2ca0b1811ae14ecde9d5d551217634)

0 / 68
yiwaninstaller_sea_09_3403924.exe (YiwanInstaller Module by yiwanzhushou)  (ca649a8c95b3d85cab443e467ef433a3)

0 / 68
runner.exe  (bc16e4c89746651aa284e061d39337ab)

0 / 68
yujianqydnb_1.2.0_jisuban.exe (YiwanInstaller Module by yiwanzhushou)  (d7029bc50e31f09644040b7d51c64bde)

0 / 68
YiwanAssist.exe (YiwanAssist Module)  (badb66e8ed0c1430fc1b57d14af5d4af)

9 / 68      (PUP)
yiwaninstaller_sea_09_3263720.exe (YiwanInstaller Module by yiwanzhushou)  (56fcf0e2d61b043c40d7eb593a9a719d)

0 / 68
YiwanHall.exe  (49d02e3625113e423510f8a53bba2ed0)

 
Latest 30 of 494 files

Downloads URLs for files signed by 北京丰余科技有限公司.

9 / 68      (PUP)
http://cdn.yiwanzhushou.com/160922/.../YiwanInstaller_sea_09_3263720.exe  (56fcf0e2d61b043c40d7eb593a9a719d)

The following certificate is also signed by 北京丰余科技有限公司.

626F093A7B9390119026AB12B473BDEA  (Apr 14, 2016 to Apr 14, 2017)

* Note, the details and description above are based on the code signing digital signature issued to 北京丰余科技有限公司 by WoSign CA Limited on April 14, 2016 with the serial number '6f023ac937a05412fb470a7dd5283ffa'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.