» Riyue Tongxing Information Technology (Beijing) Co.,Ltd.
Digital Signature
Analysis
Files (14)
Downloads (61)
Distribution (9)
Related (45)

Riyue Tongxing Information Technology (Beijing) Co.,Ltd.

Publisher Information

Riyue Tongxing Information Technology (Beijing) Co.,Ltd. is a software publisher located in Beijing, China*. A majority of the programs developed by the company can be classified as adware or other potentially unwanted programs. There is one additional code signing certificate issued to this publisher.

Authority:

WoSign CA Limited

Valid from:

11/2/2015 4:48:13 PM

Valid to:

11/2/2016 4:48:13 PM

Subject:

CN="Riyue Tongxing Information Technology (Beijing) Co.,Ltd.", O="Riyue Tongxing Information Technology (Beijing) Co.,Ltd.", L=Beijing, S=Beijing, C=CN

Issuer:

CN=WoSign Class 3 Code Signing CA, O=WoSign CA Limited, C=CN

Serial number:

55950e596b6d1eb045bbed7dee696932

Scanner detections:

Detections (93% detected)

Scan engine

Details

Detections

ESET NOD32

Win32/Gaofenquming.A potentially unwanted (variant), Win32/Gaofenquming.B potentially unwanted (variant)

57.14%

Baidu Antivirus

PUA.Win32.Gaofenquming

57.14%

Reason Heuristics

PUP.Gaofenquming (M)

57.14%

VIPRE Antivirus

Trojan.Win32.Generic, Threat.4150696

42.86%

AVG

Generic

35.71%

K7 AntiVirus

Adware

28.57%

IKARUS anti.virus

Trojan-Banker.Win32.Delf, PUA.Gaofenquming

28.57%

McAfee

Artemis!C9CE72F66D7D, Artemis!711031B5D5D7, Trojan.Artemis!B2EC2D7DC979, Artemis!6B401127E4BD

28.57%

avast!

Win32:Malware-gen, Win32:Dropper-gen [Drp]

28.57%

ESET NOD32

Win32/Gaofenquming.B potentially unwanted application

21.43%

1 / 68 (PUP)

ha_joytokey3.7.8_81000000475143059.exe (downer for windows by Riyue Tongxing Information Technology (Beijing) Co.,Ltd) (5c58fad32fa8a3f8bba38599e5379697)

1 / 68 (PUP)

超级兔子正式版 _18@183225.exe (downer for windows by Riyue Tongxing Information Technology (Beijing) Co.,Ltd) (8cf7525b0cb8ba1802c286885839fa22)

5 / 68 (PUP)

winrar_5.30_8100000001687019769.exe (downer for windows by Riyue Tongxing Information Technology (Beijing) Co.,Ltd) (c6cb8408af58878107fe820c8b993d4d)

11 / 68 (PUP)

Setup.exe (downer for windows by Riyue peer information technology (Beijing) Co.) (6b401127e4bd6004146b12d069964d1c)

5 / 68 (PUP)

downer_20@74427.exe (downer for windows by Riyue Tongxing Information Technology (Beijing) Co.,Ltd) (66b4e87171bd64861e45087495440d6e)

3 / 68 (PUP)

wps2015_8100000619656978100.exe (downer for windows by Riyue Tongxing Information Technology (Beijing) Co.,Ltd) (25c7060159b538c75479761f2288e4c6)

8 / 68 (PUP)

mathtype6.9_5100000054476978265.exe (downer for windows by Riyue Tongxing Information Technology (Beijing) Co.,Ltd) (b2ec2d7dc979f3dfc314ee1944c37de2)

1 / 68 (PUP)

office_18@27366.exe (downer for windows by Riyue Tongxing Information Technology (Beijing) Co.,Ltd) (d02f05c7ea14937e243adcf7c54b69fb)

6 / 68 (PUP)

foxit phantom64-bit 2.2.4.0225_3@51873.exe (downer for windows by Riyue Tongxing Information Technology (Beijing) Co.,Ltd) (711031b5d5d7de8fbaa93ab098f097e3)

6 / 68 (PUP)

我的世界暮色森林mod_31@99522.exe (downer for windows by Riyue Tongxing Information Technology (Beijing) Co.,Ltd) (c9ce72f66d7d1f179d595390ef3af29c)

3 / 68 (PUP)

tortoisecvs 1.12.5_3@57178.exe (downer for windows by Riyue Tongxing Information Technology (Beijing) Co.,Ltd) (3e8a609c901f3854b36ff1fd396bd3aa)

3 / 68 (PUP)

adberdr11000_zh_cn_8100000013226950695.exe (downer for windows by Riyue Tongxing Information Technology (Beijing) Co.,Ltd) (d6175a10fba47cb3e78c408210c92694)

4 / 68 (PUP)

奇艺qsv视频格式转换器_18@15613.exe (downer for windows by Riyue peer information technology (Beijing) Co.) (aa5306e6ba5ce5043f0291e5c67abb23)

4 / 68 (inconclusive)

adberdr11000_zh_cn_5100000013226950695.exe (downer for windows by Riyue peer information technology (Beijing) Co.) (18ca7d1943644b7996a7e6779a7838c1)

Downloads URLs for files signed by Riyue Tongxing Information Technology (Beijing) Co.,Ltd..

4 / 68 (inconclusive)

http://dl.pconline.com.cn/intf/.../downLoadTool.jsp?masterId=356452&ipType=1&riYueToken=xZiRnJUv (adberdr11000_zh_cn_5100000013226950695.exe)

1 / 68 (PUP)

http://dl.pconline.com.cn/intf/.../downLoadTool.jsp?masterId=356193&ipType=1&riYueToken=7m3rOg6c (ha_joytokey3.7.8_81000000475143059.exe)

4 / 68 (inconclusive)

http://filecdn.72zx.com/.../vc 6.0_30@51072.exe (18ca7d1943644b7996a7e6779a7838c1)

1 / 68 (PUP)

http://dlc2.pconline.com.cn/filedown3_1322_16950695/.../AdbeRdr11000_zh_CN_5100000013226950695.exe (5c58fad32fa8a3f8bba38599e5379697)

3 / 68 (PUP)

http://dl.pconline.com.cn/intf/.../downLoadTool.jsp?masterId=37973&ipType=1&riYueToken=5kkGhBen (wps2015_8100000619656978100.exe)

5 / 68 (PUP)

http://filecdn.72zx.com/.../3DS?CIA??_30@186061.exe (c6cb8408af58878107fe820c8b993d4d)

8 / 68 (PUP)

http://filecdn.72zx.com/.../??????_30@62433.exe (b2ec2d7dc979f3dfc314ee1944c37de2)

1 / 68 (PUP)

http://www.onlinedown.net/.../index3.php?ver=1&name=????????? 7.8g ???&id=49946&token=5a66726f13453bbe12eb9422649beed7 (office_18@27366.exe)

4 / 68 (inconclusive)

http://dl.pconline.com.cn/intf/.../downLoadTool.jsp?masterId=37973&ipType=1&riYueToken=fULlvKBG (adberdr11000_zh_cn_5100000013226950695.exe)

8 / 68 (PUP)

http://filecdn.72zx.com/.../m4a?????(Bigasoft_30@103177.exe (b2ec2d7dc979f3dfc314ee1944c37de2)

3 / 68 (PUP)

http://dl.pconline.com.cn/intf/.../downLoadTool.jsp?masterId=359417&ipType=1&riYueToken=0vGNfp0N (wps2015_8100000619656978100.exe)

1 / 68 (PUP)

http://dlc2.pconline.com.cn/filedown3_171892_17028693/.../WeChat_C1018_5100001718927028693.exe (5c58fad32fa8a3f8bba38599e5379697)

3 / 68 (PUP)

http://www.onlinedown.net/.../index2.php?ver=4.5 ?????&name=Microsoft ActiveSync&id=21106&token=52cb2c8ee7f75bfcd76cbed5e31a96f6 (tortoisecvs 1.12.5_3@57178.exe)

6 / 68 (PUP)

http://filecdn.72zx.com/.../WinRAR_30@62747.exe (c9ce72f66d7d1f179d595390ef3af29c)

3 / 68 (PUP)

http://filecdn.72zx.com/.../360??_30@59990.exe (d6175a10fba47cb3e78c408210c92694)

8 / 68 (PUP)

http://dl.pconline.com.cn/intf/.../downLoadTool.jsp?masterId=40908&ipType=1&riYueToken=UvaHhgBg (mathtype6.9_5100000054476978265.exe)

1 / 68 (PUP)

http://dl.pconline.com.cn/intf/.../downLoadTool.jsp?masterId=356452&ipType=1&riYueToken=tVPawGXZ (ha_joytokey3.7.8_81000000475143059.exe)

8 / 68 (PUP)

http://filecdn.72zx.com/.../??????_30@58262.exe (b2ec2d7dc979f3dfc314ee1944c37de2)

8 / 68 (PUP)

http://dl.pconline.com.cn/intf/.../downLoadTool.jsp?masterId=155&ipType=1&riYueToken=Ad2TDlYT (mathtype6.9_5100000054476978265.exe)

1 / 68 (PUP)

http://dl.pconline.com.cn/intf/.../downLoadTool.jsp?masterId=51229&ipType=1&riYueToken=7XqeG2PA (ha_joytokey3.7.8_81000000475143059.exe)

5 / 68 (PUP)

http://filecdn.72zx.com/.../DirectX????_30@57945.exe (c6cb8408af58878107fe820c8b993d4d)

3 / 68 (PUP)

http://filecdn.72zx.com/.../HTC??????_30@65414.exe (25c7060159b538c75479761f2288e4c6)

1 / 68 (PUP)

http://dl.pconline.com.cn/intf/.../downLoadTool.jsp?masterId=359531&ipType=1&riYueToken=YatJmQl9 (ha_joytokey3.7.8_81000000475143059.exe)

3 / 68 (PUP)

http://dl.pconline.com.cn/intf/.../downLoadTool.jsp?masterId=42443&ipType=1&riYueToken=y1nZAxxz (wps2015_8100000619656978100.exe)

5 / 68 (PUP)

http://filecdn.72zx.com/.../???????2???????_33@13849.exe (c6cb8408af58878107fe820c8b993d4d)

5 / 68 (PUP)

http://filecdn.72zx.com/.../??5????????_30@60588.exe (c6cb8408af58878107fe820c8b993d4d)

11 / 68 (PUP)

http://filecdn.72zx.com/.../????1.8.8???_30@158844.exe (6b401127e4bd6004146b12d069964d1c)

5 / 68 (PUP)

http://c2.72zx.com/.../???????_40@21730.exe (c6cb8408af58878107fe820c8b993d4d)

3 / 68 (PUP)

http://filecdn.72zx.com/.../2016????????????????_11@120056.exe (25c7060159b538c75479761f2288e4c6)

5 / 68 (PUP)

http://filecdn.72zx.com/.../??????_31@44275.exe (c6cb8408af58878107fe820c8b993d4d)

Latest 30 of 61 download URLs

Distribution

The following websites host and distribute files published by Riyue Tongxing Information Technology (Beijing) Co.,Ltd..

c2.72zx.com

ftp16-dg.pcgames.com.cn

ftp16-dg.pconline.com.cn

ftp-idc.pconline.com.cn

dlc2.pconline.com.cn

The following certificate is also signed by Riyue Tongxing Information Technology (Beijing) Co.,Ltd..

52DC4C31F7609AF339EF3228BD510B83 (Nov 02, 2015 to Nov 02, 2016)

The following publishers (by Authenticode signature organization name) are related.

Riyue peer information technology (Beijing) Co., Ltd

Wang Xin'gang

Qihoo 360 Software (Beijing) Company Limited

Disc Soft Ltd

Xing Wang

ShenZhen Thunder Networking Technologies Ltd.

Chongqing Yifei Technology Co., Ltd.

Zhuhai Kingsoft Office Software Co.,Ltd

CPUID

BEIJING QIYI CENTURY SCIENCE&TECHNOLOGY CO.,LTD.

Shenzhen QVOD Technology Co.,Ltd

Tencent Technology(Shenzhen) Company Limited

Foxit Software Incorporated

Wiziple software

BeiJing Baidu Netcom Science Technology Co., Ltd

SANDBOXIE L.T.D

上海广乐网络科技有限公司

GuangZhou KuGou Computer Technology Co.,Ltd.

Guangzhou Tieren Network Technology Co.,Ltd.

Connectify

GRETECH

Maanshan Zhiye Software Technology Co.,Ltd.

Xiao Fei

北京悠然天地科技有限公司

sina.com Technology(China)Co.,ltd

Shenzhen Thinksky Technology Co.,Ltd

30 of 45 publishers

* Note, the details and description above are based on the code signing digital signature issued to Riyue Tongxing Information Technology (Beijing) Co.,Ltd. by WoSign CA Limited on November 02, 2015 with the serial number '55950e596b6d1eb045bbed7dee696932'.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.