LIYAN LIU

Publisher Information

LIYAN LIU is a software developer located in Beijing, China*. The company is a primary distributor of unwanted software. Thre are 2 additional code signing certificates issued to this publisher.
Authority:
thawte, Inc.

Valid from:
1/25/2016 2:00:00 AM

Valid to:
1/25/2017 1:59:59 AM

Subject:
CN=LIYAN LIU, OU=Individual Developer, O=No Organization Affiliation, L=Beijing, S=Beijing, C=CN

Issuer:
CN=thawte SHA256 Code Signing CA, O="thawte, Inc.", C=US

Serial number:
5e0b6377f33581b2b9f8e9c1c0bab247

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.ELEX.LIYANLIU (M), PUP.ELEX (M)
100.00%

ESET NOD32
Win32/ELEX.FF potentially unwanted application
2.08%

Microsoft Security Essentials
Threat.Undefined
2.08%

Dr.Web
Adware.Mutabaha.1022
2.08%

1 / 68      (Adware)
wdman.exe (TU-Funs by TU-Funs LIMITED)  (6d656c24850bbfa3129d715673467245)

1 / 68      (Adware)
wdman.exe (TU-Funs by TU-Funs LIMITED)  (f2c3d1dec5a2bd6a89ad9d8542f4c9aa)

1 / 68      (Adware)
wpm_v20.0.0.2514.exe (TU-Funs by TU-Funs LIMITED)  (065a648dd08c1ce4a159bd7f751b40d0)

1 / 68      (Adware)
wdman.exe (TU-Funs by TU-Funs LIMITED)  (0c3ac867a7c667fcdc40a3abaa065027)

4 / 68      (Adware)
wdman.exe (TU-Funs by TU-Funs LIMITED)  (d8301da25cf735865c17527734de1bbb)

1 / 68      (Adware)
wdman.exe (TU-Funs by TU-Funs LIMITED)  (a8cb7d22f773b0468a080c963c7e0da4)

1 / 68      (Adware)
wdman.exe (TU-Funs by TU-Funs LIMITED)  (6d656c24850bbfa3129d715673467245)

1 / 68      (Adware)
wdman.exe (TU-Funs by TU-Funs LIMITED)  (6d656c24850bbfa3129d715673467245)

1 / 68      (Adware)
tmp00000001035bc9706aefc2e5 (TU-Funs by TU-Funs LIMITED)  (a4c99df89eadbb9ebd9322ce280e5406)

1 / 68      (Adware)
wdman.exe (TU-Funs by TU-Funs LIMITED)  (df3d7286f52446f22b9d99e17020477e)

1 / 68      (Adware)
wdman.exe (TU-Funs by TU-Funs LIMITED)  (2d90204334dadcf95f8e87a6c8732a7a)

1 / 68      (Adware)
wdman.exe (TU-Funs by TU-Funs LIMITED)  (4de1ba9b9d9070e9e7e0b20a8280e526)

1 / 68      (Adware)
wdman.exe (TU-Funs by TU-Funs LIMITED)  (6d656c24850bbfa3129d715673467245)

1 / 68      (Adware)
wdman.exe (TU-Funs by TU-Funs LIMITED)  (6d656c24850bbfa3129d715673467245)

1 / 68      (Adware)
wdman.exe (TU-Funs by TU-Funs LIMITED)  (6d656c24850bbfa3129d715673467245)

1 / 68      (Adware)
wdman.exe (TU-Funs by TU-Funs LIMITED)  (6d656c24850bbfa3129d715673467245)

1 / 68      (Adware)
wdman.exe (TU-Funs by TU-Funs LIMITED)  (6d656c24850bbfa3129d715673467245)

1 / 68      (Adware)
wdman.exe (TU-Funs by TU-Funs LIMITED)  (1295ce22d67a5363031ad9407cb8761e)

1 / 68      (Adware)
wdman.exe (TU-Funs by TU-Funs LIMITED)  (6d656c24850bbfa3129d715673467245)

1 / 68      (Adware)
wdman.exe (TU-Funs by TU-Funs LIMITED)  (1295ce22d67a5363031ad9407cb8761e)

1 / 68      (Adware)
wdman.exe (TU-Funs by TU-Funs LIMITED)  (1295ce22d67a5363031ad9407cb8761e)

1 / 68      (Adware)
wdman.exe (TU-Funs by TU-Funs LIMITED)  (1295ce22d67a5363031ad9407cb8761e)

1 / 68      (Adware)
wdman.exe (TU-Funs by TU-Funs LIMITED)  (1295ce22d67a5363031ad9407cb8761e)

1 / 68      (Adware)
wpm_v20.0.0.2514.exe (TU-Funs by TU-Funs LIMITED)  (e360454f3aecb028860781a5b968d4c7)

1 / 68      (Adware)
wdman.exe (TU-Funs by TU-Funs LIMITED)  (1295ce22d67a5363031ad9407cb8761e)

1 / 68      (Adware)
wdman.exe (TU-Funs by TU-Funs LIMITED)  (1295ce22d67a5363031ad9407cb8761e)

1 / 68      (Adware)
wdman.exe (TU-Funs by TU-Funs LIMITED)  (1295ce22d67a5363031ad9407cb8761e)

1 / 68      (Adware)
wdman.exe (TU-Funs by TU-Funs LIMITED)  (1295ce22d67a5363031ad9407cb8761e)

1 / 68      (Adware)
wdman.exe (TU-Funs by TU-Funs LIMITED)  (1295ce22d67a5363031ad9407cb8761e)

1 / 68      (Adware)
wdman.exe (TU-Funs by TU-Funs LIMITED)  (1295ce22d67a5363031ad9407cb8761e)

 
Latest 30 of 48 files

The certificates below are also signed by LIYAN LIU.

06A374858107D7F624D3CC328C92248A  (Jul 22, 2014 to Jul 27, 2015)

02CA146AED05062A5F6C4AC5628BBC00  (Jul 21, 2014 to Jul 27, 2015)

The following publishers (by Authenticode signature organization name) are related.

* Note, the details and description above are based on the code signing digital signature issued to LIYAN LIU by thawte, Inc. on January 25, 2016 with the serial number '5e0b6377f33581b2b9f8e9c1c0bab247'.