» Anhui SaiYi Information Technology Co.,Ltd.
Digital Signature
Analysis
Files (22)
Downloads (4)
Distribution (1)

Anhui SaiYi Information Technology Co.,Ltd.

Publisher Information

Anhui SaiYi Information Technology Co.,Ltd. is a software developer located in Hefei, Anhui in China*. A majority of the programs developed by the company can be classified as adware or other potentially unwanted programs. There is one additional code signing certificate issued to this publisher.

Authority:

thawte, Inc.

Valid from:

1/14/2015 1:00:00 AM

Valid to:

1/15/2016 12:59:59 AM

Subject:

CN="Anhui SaiYi Information Technology Co.,Ltd.", O="Anhui SaiYi Information Technology Co.,Ltd.", L=Hefei, S=Anhui, C=CN

Issuer:

CN=thawte SHA256 Code Signing CA, O="thawte, Inc.", C=US

Serial number:

03afd30693330e8461d671397b227254

Scanner detections:

Detections (100% detected)

Scan engine

Details

Detections

Reason Heuristics

Adware.Elex.ASIT (M)

100.00%

ESET NOD32

Win32/Floxif.H virus, Win32/ELEX.IW potentially unwanted application

9.09%

Rising Antivirus

PE:Malware.Adload!6.26CF[F1]

4.55%

Dr.Web

Win32.FloodFix.7

4.55%

VIPRE Antivirus

Threat.4760052

4.55%

Emsisoft Anti-Malware

Win32.Floxif

4.55%

avast!

Win32:Pioneer-C

4.55%

Microsoft Security Essentials

Threat.Undefined

4.55%

F-Prot

W32/Floxif.B

4.55%

McAfee

Trojan.Dropper-FIY!655E03F4A91C

4.55%

1 / 68 (PUP)

mustangser20.exe (Mustang Service by MustangService) (acb10729dd399134fca86f227e9f231c)

1 / 68 (PUP)

mustangser1054.exe (Mustang Service by MustangService) (a4eec8155358101229ef49baefa3e260)

1 / 68 (PUP)

mustangser2451.exe (Mustang Service by MustangService) (4ed804103a2f790817abb913b51ace84)

1 / 68 (PUP)

mustangser2437.exe (Mustang Service by MustangService) (cdd4d7a5ecfcbedb4d442048a9a51945)

1 / 68 (PUP)

mustangser1557.exe (Mustang Service by MustangService) (36a7e4b3175368a925351379473cf9d4)

2 / 68 (PUP)

mustangser3113.exe (Mustang Service by MustangService) (1058a1e234ff316d3c46fe874a20672f)

1 / 68 (PUP)

mustangser152.exe (Mustang Service by MustangService) (4b00c7d4ec11bd16edde30a8c0e74b31)

1 / 68 (PUP)

mustangser1025.exe (Mustang Service by MustangService) (a5522001b742dc10003f129d2342a044)

1 / 68 (PUP)

mustangser1850.exe (Mustang Service by MustangService) (09c0e68e7c9b07e91c1f7e573559d072)

1 / 68 (PUP)

MUSTAN~1.EXE (Mustang Service by MustangService) (13782a6fe2bc7ad4389b37eab1971f4b)

1 / 68 (PUP)

mustangser1024.exe (Mustang Service by MustangService) (8cf1b21ccc08a8fc6e5bfbccfb224253)

1 / 68 (PUP)

54.exe (fd0749c8dc9c797436418def6ea22951)

14 / 68 (PUP)

mustangser294.exe (Mustang Service by MustangService) (655e03f4a91c2b53ff2c6a1cfd7087aa)

1 / 68 (PUP)

mustangser2426.exe (Mustang Service by MustangService) (a77ea76d6d4c1d2d53d53ca4eb2df2e0)

1 / 68 (PUP)

mustangser2245.exe (Mustang Service by MustangService) (53847b52b2db2da96e8fde5ca52ea0c6)

1 / 68 (PUP)

mustang.exe (Mustang Service by MustangService) (4236fc24711ada7d050d1cb1ebffa321)

1 / 68 (PUP)

mustang.exe (Mustang Service by MustangService) (50ec2089248da6db9d86ce03d2f79f93)

1 / 68 (PUP)

chext.exe (9d720b9a22cb69e4213b113d24fbe15a)

1 / 68 (PUP)

mustangser1023.exe (Mustang Service by MustangService) (acb10729dd399134fca86f227e9f231c)

1 / 68 (PUP)

vau8203.tmp.exe (65800afe4467f65fbd9e4f1d9c47969f)

2 / 68 (PUP)

doubleclick.exe (0539656bba28d5ddec75d9ed5aa6e827)

1 / 68 (PUP)

vau829f.tmp.exe (4285db03747ea84012e64dc624c07298)

Downloads URLs for files signed by Anhui SaiYi Information Technology Co.,Ltd..

2 / 68 (PUP)

http://s3.amazonaws.com/ins.adlegend.com/.../bpma_install.exe (0539656bba28d5ddec75d9ed5aa6e827)

1 / 68 (PUP)

http://201.31.162.87/cache/s3.amazonaws.com/ins.adlegend.com/.../bpma_install_v2.exe (65800afe4467f65fbd9e4f1d9c47969f)

1 / 68 (PUP)

http://s3.amazonaws.com/ins.adlegend.com/.../bpma_install.exe (4285db03747ea84012e64dc624c07298)

1 / 68 (PUP)

http://s3.amazonaws.com/ins.adlegend.com/.../bpma_install_v2.exe (65800afe4467f65fbd9e4f1d9c47969f)

Distribution

The following websites host and distribute files published by Anhui SaiYi Information Technology Co.,Ltd..

s3.amazonaws.com

The following certificate is also signed by Anhui SaiYi Information Technology Co.,Ltd..

1C97656E5D65C27E5A95A0BF328A76C1 (Oct 29, 2015 to Jan 28, 2017)

* Note, the details and description above are based on the code signing digital signature issued to Anhui SaiYi Information Technology Co.,Ltd. by thawte, Inc. on January 14, 2015 with the serial number '03afd30693330e8461d671397b227254'.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.