Li Mo

Publisher Information

Li Mo is a software developer located in Guilin, Guangxi in China*. The company is a primary distributor of unwanted software. Thre are 9 additional code signing certificates issued to this publisher.
Authority:
DigiCert Inc

Valid from:
7/16/2015 2:00:00 AM

Valid to:
9/13/2016 2:00:00 PM

Subject:
CN=Li Mo, O=Li Mo, L=Guilin, S=Guangxi, C=CN

Issuer:
CN=DigiCert SHA2 Assured ID Code Signing CA, OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:
09ce096f35659bc891be9713130f3019

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.ELEX.LiMo (M), PUP.ELEX (M)
100.00%

Malwarebytes
PUP.Optional.IStartSurf.ShrtCln, PUP.Optional.OurSeaching.A, PUP.Optional.MyStartSearch.ShrtCln
17.39%

Bkav FE
W32.HfsAdware
13.04%

ESET NOD32
Win32/LiMo.A potentially unwanted (variant)
13.04%

Baidu Antivirus
Adware.Win32.ELEX
13.04%

Dr.Web
Adware.Mutabaha.597
4.35%

1 / 68      (Adware)
smt_istartsurf.exe (4494_smt_istartsurf)  (d7c6b59f74d923445502b56cb9790afd)

1 / 68      (Adware)

1 / 68      (Adware)
lly1_istartsurf.exe (4541_tug1_istartsurf by Webank.net)  (7f39e3aaff99c6fd781e0d7c21d2e76d)

1 / 68      (Adware)
amt_omniboxes.exe (4531_amt_omniboxes)  (6b56bca517d000f64d780e29e7626394)

1 / 68      (Adware)
oursurfing.exe (4505_2sq3_oursurfing)  (a9352a45e52d5c30666c7f4ea8b7c931)

1 / 68      (Adware)
lly_istartsurf.exe (4539_tugs_istartsurf by Webank.net)  (b6af365c6e647ab60ad81b9ddcee9318)

1 / 68      (Adware)
amt_oursurfing.exe (4527_amt_oursurfing by 7th)  (8b658f0461e09872301a861c668484f2)

1 / 68      (Adware)
lly_mystartsearch.exe (4544_tugs_mystartsearch)  (3bd59c2636546f67a895201309709377)

1 / 68      (Adware)
lly1_istartsurf.exe (4499_tug1_istartsurf by 7th)  (cf6fdbd2a0f29758301578380e385416)

1 / 68      (Adware)

1 / 68      (Adware)
lly_istartsurf.exe (4497_tugs_istartsurf by 7th)  (628fed1d67101278af3f42a1cae5ab8d)

1 / 68      (Adware)
oursurfing.exe (4503_2sq1_oursurfing)  (7b03910533c840ad2c4468056a664f05)

1 / 68      (Adware)
lly_istartsurf.exe (4543_tugs_istartsurf)  (632195b0716c07def07feb1c0c391905)

1 / 68      (Adware)

1 / 68      (Adware)
adv_155.exe (4515_ima_do-search)  (f9fe8e1e1b5d7bfbc02500794888d981)

5 / 68      (Adware)
oursurfing.exe (4505_2sq3_oursurfing)  (83ca700dd2a89e96bc0ee0f782082774)

3 / 68      (Adware)
lly_mystartsearch.exe (4498_tugs_mystartsearch by 7th)  (461215a46cadb4f0dc575115b622bd6e)

1 / 68      (Adware)
smt_oursurfing.exe (4495_smt_oursurfing)  (faf3e8b494cdec711163e1c2ae9f40a4)

5 / 68      (Adware)
amt_oursurfing.exe (4530_amt_oursurfing)  (db6ce97f65f5085baec7644e5f34e156)

1 / 68      (Adware)
adv_46.exe (4513_ima_istartsurf)  (bd51782362a652f61baea97b2f3641ff)

1 / 68      (Adware)
adv_76.exe (4514_ima_mystartsearch)  (b88809eb7d45a74caea22dad7eef492b)

1 / 68      (Adware)
0pljatvnq1n2d.exe (4502_2sq_oursurfing)  (e999a147e0344e77b29ed6ede04827d4)

5 / 68      (Adware)
smt_istartsurf.exe (4494_smt_istartsurf)  (672958e31f8e8fe66ff6e7cfba450f61)

Downloads URLs for files signed by Li Mo.

5 / 68      (Adware)
http://www.girlliuxiaowei.com/.../smt_istartsurf.exe  (672958e31f8e8fe66ff6e7cfba450f61)

1 / 68      (Adware)

3 / 68      (Adware)

1 / 68      (Adware)

The following websites host and distribute files published by Li Mo.

The certificates below are also signed by Li Mo.

043D25C59C374D87F947A9A448031E94  (Jul 16, 2015 to Sep 13, 2016)

0A661DB1DB132545D560DF1B8F8F72CE  (Jul 15, 2015 to Sep 13, 2016)

06308C3CB3C78318D687BE76CBCCFDD8  (Aug 04, 2014 to Aug 12, 2015)

0BF14271D8A8ADE8A541CE8C8E1D75A1  (Aug 04, 2014 to Aug 12, 2015)

0381C5BAABACBA4D9D35F2C35CC5326B  (Aug 04, 2014 to Aug 12, 2015)

078E6AB78826A47B4AE05D93CF737658  (Aug 04, 2014 to Aug 12, 2015)

0F53999A8B9372F6AAC4844D7A5BE2CE  (Aug 04, 2014 to Aug 12, 2015)

0ACFC920404BD14F120697BDFEE3E5C9  (Aug 04, 2014 to Aug 12, 2015)

0226284B6EE43FB2E43A2888B7D5BA02  (Aug 03, 2014 to Aug 12, 2015)

The following publishers (by Authenticode signature organization name) are related.

* Note, the details and description above are based on the code signing digital signature issued to Li Mo by DigiCert Inc on July 16, 2015 with the serial number '09ce096f35659bc891be9713130f3019'.