home

杜锋

Publisher Information

杜锋 is a software publisher located in 甘肃省, China*.
Authority:
WoSign CA Limited

Valid from:
10/11/2014 1:59:20 PM

Valid to:
10/11/2015 1:59:20 PM

Subject:
CN=杜锋, E=43434019@qq.com, L=泾川县, S=甘肃省, C=CN

Issuer:
CN=WoSign Class 2 Code Signing CA, O=WoSign CA Limited, C=CN

Serial number:
6f545f576e019d85ebf95a8b0c2caef5

Status:
Inconclusive detections from multiple engines

Scan engine
Details
Detections

McAfee
Artemis!902BAB3E167E, Artemis!55FF5030C393, Artemis!A4ED7A21740D, Artemis!FE5F62B93127
100.00%

IKARUS anti.virus
Trojan.SuspectCRC, PUA.Yaimo, PUA.Trioris
100.00%

AVG
Generic
100.00%

Trend Micro House Call
Suspicious_GEN.F47V1109, Suspicious_GEN.F47V0126, Suspicious_GEN.F47V1220
75.00%

VIPRE Antivirus
Trojan.Win32.Generic
75.00%

Comodo Security
Application.Win32.MeinV.AK
50.00%

avast!
Win32:Evo-gen [Susp], Win32:Malware-gen
50.00%

Norman
Startpage.WTF
25.00%

Dr.Web
STPAGE.Trojan
25.00%

Avira AntiVirus
TR/StartPage.2847408
25.00%

8 / 68      (Malware)
setup_2108.exe  (fe5f62b93127c21556141908c0b292f5)

6 / 68      (PUP)
setup_2108.exe (by ${CmpName})  (a4ed7a21740d9cd98a8dadcf0f07d598)

0 / 68
TvSearchEng.dll  (8cb6e6d76cf6aa90a3d1520c0b12482f)

0 / 68
tvsearchclient.exe (TV Search Master)  (a69936153d8146a9c26659149de140c0)

0 / 68
autoupdate.exe  (a15bfacb21e420e41d834287fb22d508)

4 / 68      (inconclusive)
player_1292_t.exe  (55ff5030c39321f5d0d7ed186fd31f71)

0 / 68
parsetaskservices.exe (ParseTaskServices)  (f9a05399289f9946307ebc29f53eb0bb)

0 / 68
tvsearcheng.dll  (93c1142e2f4f5a3dc191fbbbe41b9552)

7 / 68      (PUP)
setup_2193.exe (by ${CmpName})  (902bab3e167ed7b1a7c1d03ebf1ea36d)

0 / 68
tvsearchclient.exe (TV Search Master)  (41fbeba5e24cae480a226eaaa0e9b531)

Downloads URLs for files signed by 杜锋.

7 / 68      (PUP)
http://1251184201.cdn.myqcloud.com/1251184201/.../Setup_2193.exe  (902bab3e167ed7b1a7c1d03ebf1ea36d)

The following websites host and distribute files published by 杜锋.

1251184201.cdn.myqcloud.com

* Note, the details and description above are based on the code signing digital signature issued to 杜锋 by WoSign CA Limited on October 11, 2014 with the serial number '6f545f576e019d85ebf95a8b0c2caef5'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.