» Ren Jing
Digital Signature
Files (26)
Downloads (10)
Distribution (7)
Related (5)

Ren Jing

Publisher Information

Ren Jing is a software publisher located in Beijing, China*.

Authority:

WoSign CA Limited

Valid from:

8/26/2015 11:14:33 PM

Valid to:

8/26/2016 11:14:33 PM

Subject:

CN=Ren Jing, L=Beijing, S=Beijing, C=CN

Issuer:

CN=WoSign Class 2 Code Signing CA, O=WoSign CA Limited, C=CN

Serial number:

4aabe7c4e55ae3765929658935834cfd

Status:

Inconclusive detections from multiple engines

Scan engine

Details

Detections

Dr.Web

Adware.Mutabaha.901, Adware.Mutabaha.1959

66.67%

IKARUS anti.virus

PUA.Navegaki, Trojan.Win32.Egguard

50.00%

Panda Antivirus

PUP/Navegaki, Trj/CI.A

50.00%

Vba32 AntiVirus

TrojanDownloader.Small

33.33%

AegisLab AV Signature

W32.Sality, Gen.Variant.Graftor|2|103!c

33.33%

McAfee

Artemis!66A0178CDB2A, Artemis!0B39140B362D

33.33%

MicroWorld eScan

Gen:Variant.Graftor.278079

33.33%

Malwarebytes

PUP.Optional.Friv

33.33%

Arcabit

Trojan.Graftor.D43E3F

33.33%

ESET NOD32

Win32/Egguard (variant)

33.33%

26 / 68 (PUP)

frivlauncher_egg37_setup_cg01.exe (FrivLauncher by ${COMPANY_NAME}) (0b39140b362d9e27035ca76a4b94d8cf)

0 / 68

skup.exe (927086d53d4a4da3d5ec17d4954832e4)

0 / 68

SkypeUpdateEx.exe (skype by skype.cog.cc) (dec8dd9d9068fbdd2a10fc6745c4b8f1)

0 / 68

SkypeUpdateEx.exe (skype by skype.cog.cc) (89cb852b62a6cc8bac80cbde4450220d)

0 / 68

skup.exe (1413fe709a042ac3ae62188e17d2867a)

11 / 68 (PUP)

onaylanmayan 267200.crdownload (FrivLauncher by ${COMPANY_NAME}) (bad0630694a567debbc646a7820a1376)

0 / 68

SkypeUpdateEx.exe (skype by skype.cog.cc) (89cb852b62a6cc8bac80cbde4450220d)

1 / 68 (inconclusive)

SkypeUpdateEx.exe (skype by skype.cog.cc) (89cb852b62a6cc8bac80cbde4450220d)

0 / 68

skup.exe (00d8089016f2f90d16d4ebb9dce52fe1)

0 / 68

SkypeUpdateEx.exe (skype by skype.cog.cc) (08e72dc832fbfac9b23948b718a34a31)

2 / 68 (PUP)

awheb3d.tmp (Navegaki by ${COMPANY_NAME}) (35f3375a7d480e4d8f0b07498a370233)

0 / 68

frivlauncher_egg37_setup_lppt.exe (FrivLauncher by ${COMPANY_NAME}) (73a4f665a1eb0a74b01fec2b2f51af02)

0 / 68

frivlauncher_egg37_setup_lpes.exe (FrivLauncher by ${COMPANY_NAME}) (7e302f0178867920d654c3c35c43a8dc)

0 / 68

FrivLauncher.exe (FrivLauncher) (9fb3c44c0af1edda64b6cc44e5e39a73)

0 / 68

awh7964.tmp (FrivLauncher by ${COMPANY_NAME}) (e137e6099f47f42162c7fc453d840d11)

0 / 68

SkypeUpdateEx.exe (skype by skype.cog.cc) (ccbb0e2a49cf7122f87eb555d8cf3dbd)

0 / 68

mscore.dll (db1e599368daf285e465064a9626a2b6)

0 / 68

glcore.dll (ae8bbcb4bfc1cb06517eb8673d693bfa)

7 / 68 (PUP)

msearchersetup.exe (MSearcher) (66a0178cdb2a8963235d8f524a73ea78)

0 / 68

MSearcher.exe (MSearcher by Microsoft) (bdd97139119c51859f779356b3dfa8c1)

4 / 68 (inconclusive)

msearchersetup.exe (MSearcher) (631b76294ddec583e35df1589292ef27)

0 / 68

skypeupdate.dll (f748c97317011f3c572bf6ea13e4a268)

0 / 68

SkypeUpdateEx.exe (d1d4bc6dc73bd0628db4d573e3ae4dfb)

0 / 68

SkypeUpdateEx.exe (35c30744ae8f5be9923a731868fda347)

0 / 68

skypeupdateex_setup.exe (ea6d9efa9529547e1d82f66f0a45db36)

0 / 68

SkypeUpdateEx.exe (f9938b149cab569e3ab7be00b0e76df1)

Downloads URLs for files signed by Ren Jing.

0 / 68

http://eggupload.brotlab.net/.../FrivLauncher_Egg37_Setup_LPES.exe (7e302f0178867920d654c3c35c43a8dc)

2 / 68 (PUP)

http://eggupload.brotlab.net/.../Navigation_Egg37_Setup.exe (35f3375a7d480e4d8f0b07498a370233)

0 / 68

http://eggupload.brotlab.net/.../FrivLauncher_Egg37_Setup_LPPT.exe (73a4f665a1eb0a74b01fec2b2f51af02)

0 / 68

http://eggupload.brotlab.net/.../FrivLauncher_Egg37_Setup.exe (e137e6099f47f42162c7fc453d840d11)

4 / 68 (inconclusive)

http://www.msearcher.info/.../MSearcherSetup.exe (631b76294ddec583e35df1589292ef27)

0 / 68

http://dp8uklaiq5180.cloudfront.net/seed_storage//.../SkypeUpdateEx_setup.exe (ea6d9efa9529547e1d82f66f0a45db36)

0 / 68

http://d4dhk4221cz7n.cloudfront.net/seed_storage//.../SkypeUpdateEx_setup.exe (ea6d9efa9529547e1d82f66f0a45db36)

0 / 68

http://df7w3ytxcdxth.cloudfront.net/seed_storage//.../SkypeUpdateEx_setup.exe (ea6d9efa9529547e1d82f66f0a45db36)

0 / 68

http://d385c1n0o64nql.cloudfront.net/seed_storage//.../SkypeUpdateEx_setup.exe (ea6d9efa9529547e1d82f66f0a45db36)

0 / 68

http://d3ih1jowwmnf4t.cloudfront.net/seed_storage//.../SkypeUpdateEx_setup.exe (ea6d9efa9529547e1d82f66f0a45db36)

Distribution

The following websites host and distribute files published by Ren Jing.

eggupload.brotlab.net

www.msearcher.info

d4dhk4221cz7n.cloudfront.net

df7w3ytxcdxth.cloudfront.net

d3ih1jowwmnf4t.cloudfront.net

dp8uklaiq5180.cloudfront.net

d385c1n0o64nql.cloudfront.net

The following publishers (by Authenticode signature organization name) are related.

Navigation network co.,limited

* Note, the details and description above are based on the code signing digital signature issued to Ren Jing by WoSign CA Limited on August 26, 2015 with the serial number '4aabe7c4e55ae3765929658935834cfd'.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.