Dening Hu

Publisher Information

Dening Hu is a software developer located in Beijing, China*. A majority of the programs developed by the company can be classified as adware or other potentially unwanted programs. Thre are 20 additional code signing certificates issued to this publisher.
Authority:
thawte, Inc.

Valid from:
7/25/2016 8:00:00 AM

Valid to:
6/9/2017 1:59:59 AM

Subject:
CN=Dening Hu, OU=Individual Developer, O=No Organization Affiliation, L=Beijing, S=Beijing, C=CN

Issuer:
CN=thawte SHA256 Code Signing CA, O="thawte, Inc.", C=US

Serial number:
412d33faf41bb40a577e42a03b72ef99

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Elex (M), PUP.Elex.DeningHu.Meta (M)
92.86%

Emsisoft Anti-Malware
Win32.Floxif
7.14%

Microsoft Security Essentials
Threat.Undefined
7.14%

ESET NOD32
Win32/Floxif.H virus
7.14%

AVG
Win32/Floxif.A
7.14%

F-Prot
W32/Floxif.B
7.14%

Norman
Win32.Floxif.A
7.14%

avast!
Win32:Pioneer-C
7.14%

F-Secure
Win32.Floxif.A
3.57%

VIPRE Antivirus
Threat.4760052
3.57%

1 / 68      (PUP)
winsaber.exe  (1f2aca7632e2bdc4630c9515f360f592)

1 / 68      (PUP)
winsaber.exe  (1f2aca7632e2bdc4630c9515f360f592)

1 / 68      (PUP)
winsaber.exe  (1f2aca7632e2bdc4630c9515f360f592)

1 / 68      (PUP)
winsaber.exe  (1f2aca7632e2bdc4630c9515f360f592)

1 / 68      (PUP)
winsaber.exe  (8bc1d9f5f36f8c30f782705d61584ee7)

1 / 68      (PUP)
winsaber.exe  (1f2aca7632e2bdc4630c9515f360f592)

1 / 68      (PUP)
winsaber.exe  (8bc1d9f5f36f8c30f782705d61584ee7)

1 / 68      (PUP)
saber.exe  (a74b427b5d820b9fdd5aebc4c451a732)

1 / 68      (PUP)
winsaber.exe  (1f2aca7632e2bdc4630c9515f360f592)

1 / 68      (PUP)
winsaber.exe  (730c8541fa21dfccb70e46b9f98c8b7e)

1 / 68      (PUP)
winsaber.exe  (942baeca4330dfb502ab1db51ee65af6)

1 / 68      (PUP)
winsaber.exe  (a8e68ef8275bd8dc5a9f6c2236c47ca9)

1 / 68      (PUP)
winsaber.exe  (cd0b078c20e5aaeb76899aad8aecdd32)

1 / 68      (PUP)
winsaber.exe  (6dcecb301a5d8d86dfb43d3a4f9d34f5)

1 / 68      (PUP)
winsaber.exe  (7d40810436d6975111f68b435bec42b2)

1 / 68      (PUP)
winsaber.exe  (ac28bb10229810b50c4f066aa4f70ee8)

1 / 68      (PUP)
saber.exe  (92980f52066bfdbf3ac802c01cdde76f)

1 / 68      (PUP)
winsaber.exe  (8bc1d9f5f36f8c30f782705d61584ee7)

1 / 68      (PUP)
saber.exe  (e04f51a28e10eca70570204358bb93db)

1 / 68      (PUP)
tmp00000022d448c9890f205aa5  (0fc8a4d52e21b86bc65ee73670b37974)

1 / 68      (PUP)
winsaber.exe  (8bc1d9f5f36f8c30f782705d61584ee7)

1 / 68      (PUP)
winsaber.exe  (e67636b5a1c6310b0be4181269eeb080)

1 / 68      (PUP)
saber.exe  (60e9c4503e7e0f12408ccb6efce40e5e)

1 / 68      (PUP)
saber.exe  (8bc1d9f5f36f8c30f782705d61584ee7)

8 / 68      (Malware)
winsaber.exe  (903b479de461e33e8a719a15a1a6a5b6)

1 / 68      (PUP)
tmp00000004576b00857542c981  (900920b7c20d799ca2e66eff1430258b)

8 / 68      (Malware)
winsaber.exe  (bd2900150f49afafcfa0f1157c42a90c)

1 / 68      (PUP)
saber.exe  (1f2aca7632e2bdc4630c9515f360f592)

The certificates below are also signed by Dening Hu.

0241B909702EF44D10F5AB5FD6C664DF  (Aug 24, 2016 to Jun 09, 2017)

11746E1CD169D4C6D69A0C53EE052AE5  (Aug 31, 2016 to Jun 09, 2017)

48F6F27B7E9E428FAC06E28A6C97FCC2  (Jul 18, 2016 to Jun 09, 2017)

57CCEF725BD375656810929BA3B993CD  (Oct 14, 2016 to Jun 09, 2017)

1526014E3F697DCED61C390661163B6C  (Jun 08, 2016 to Jun 09, 2017)

1B4C3DB975D9BC9D6ACE9646EB28502A  (Aug 26, 2016 to Jun 09, 2017)

1B5D997D61943E8FF1BDF34C65EE5719  (Jul 28, 2016 to Jun 09, 2017)

5BD08CFF51B7E7BB13C171E1D7A49B78  (Sep 06, 2016 to Jun 09, 2017)

7986DA5F93A0A631551A2F4F1B1666BF  (Sep 22, 2016 to Jun 09, 2017)

7A2DF2BB7E9010EDF9FC306983C02B4D  (Oct 10, 2016 to Jun 09, 2017)

10 of 20 code signing certificates issued

* Note, the details and description above are based on the code signing digital signature issued to Dening Hu by thawte, Inc. on July 25, 2016 with the serial number '412d33faf41bb40a577e42a03b72ef99'.