home

Li Mo

Publisher Information

Li Mo is a software developer located in Guilin, Guangxi in China*. Thre are 9 additional code signing certificates issued to this publisher.
Authority:
DigiCert Inc

Valid from:
8/4/2014 3:00:00 AM

Valid to:
8/12/2015 3:00:00 PM

Subject:
CN=Li Mo, O=Li Mo, L=Guilin, S=Guangxi, C=CN

Issuer:
CN=DigiCert Assured ID Code Signing CA-1, OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:
078e6ab78826a47b4ae05d93cf737658

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Liyan Liu, Threat.Liyan Liu.LiMo, PUP.Liyan Liu.LiMo, PUP.ELEX.LiMo (M)
100.00%

F-Secure
Riskware.Gen:Application.Elex.1
83.33%

Emsisoft Anti-Malware
Gen:Application.Elex
83.33%

ESET NOD32
Win32/ELEX.EC potentially unwanted application
83.33%

MicroWorld eScan
Gen:Application.Elex.1
83.33%

Bitdefender
Gen:Application.Elex.1
83.33%

Agnitum Outpost
Riskware.Agent
83.33%

G Data
Gen:Application.Elex
83.33%

Vba32 AntiVirus
suspected of Trojan.Downloader.gen.h
83.33%

Baidu Antivirus
PUA.Win32.LiMo, Adware.Win32.ELEX
83.33%

1 / 68      (Adware)
apr7_3395_cor_do-search.exe (3395_cor_do-search by Spy union)  (b9ac5b3a2640e66f8bc98b1a4f187d9d)

20 / 68    (Adware)
apr7_3398_corfr_sweet-page.exe (3398_corfr_sweet-page by Spy union)  (b7f03cf433da2c8cc1d8690a1a4fa34a)

17 / 68    (Adware)
apr7_3396_corna_do-search.exe (3396_corna_do-search by Spy union)  (97cc7fd5cbb1edf2cab8faf1428ccd44)

15 / 68    (Adware)
apr7_3397_cor_mystartsearch.exe (3397_cor_mystartsearch by Spy union)  (226c0170c30d573b17e522d5dd129dca)

16 / 68    (Adware)
apr7_3394_cor_sweet-page.exe (3394_cor_sweet-page by Spy union)  (5c367284dc5cc9c4d27635dba7fb8e3e)

17 / 68    (Adware)
apr7_3395_cor_do-search.exe (3395_cor_do-search by Spy union)  (de9e1cf6a6fb3fe0c936d9cdaaf9b6e1)

The certificates below are also signed by Li Mo.

09CE096F35659BC891BE9713130F3019  (Jul 16, 2015 to Sep 13, 2016)

043D25C59C374D87F947A9A448031E94  (Jul 16, 2015 to Sep 13, 2016)

0A661DB1DB132545D560DF1B8F8F72CE  (Jul 15, 2015 to Sep 13, 2016)

06308C3CB3C78318D687BE76CBCCFDD8  (Aug 04, 2014 to Aug 12, 2015)

0BF14271D8A8ADE8A541CE8C8E1D75A1  (Aug 04, 2014 to Aug 12, 2015)

0381C5BAABACBA4D9D35F2C35CC5326B  (Aug 04, 2014 to Aug 12, 2015)

0F53999A8B9372F6AAC4844D7A5BE2CE  (Aug 04, 2014 to Aug 12, 2015)

0ACFC920404BD14F120697BDFEE3E5C9  (Aug 04, 2014 to Aug 12, 2015)

0226284B6EE43FB2E43A2888B7D5BA02  (Aug 03, 2014 to Aug 12, 2015)

The following publishers (by Authenticode signature organization name) are related.

Liyan Liu

Shulan Hou

Fuyuan Zhou

Ma Lin

Taiming Li

Xiaoqing Liu

Zhang Ling

* Note, the details and description above are based on the code signing digital signature issued to Li Mo by DigiCert Inc on August 04, 2014 with the serial number '078e6ab78826a47b4ae05d93cf737658'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.