» VANKY TECHNOLOGY LIMITED
Digital Signature
Analysis
Files (52)
Downloads (7)
Distribution (1)
Related (2)

VANKY TECHNOLOGY LIMITED

Publisher Information

VANKY TECHNOLOGY LIMITED is a software publisher located in 香港, Hong Kong*. A majority of the programs developed by the company can be classified as adware or other potentially unwanted programs. Thre are 136 additional code signing certificates issued to this publisher.

Authority:

GlobalSign nv-sa

Valid from:

6/23/2016 9:56:32 AM

Valid to:

1/21/2017 7:41:53 AM

Subject:

CN=VANKY TECHNOLOGY LIMITED, O=VANKY TECHNOLOGY LIMITED, L=香港, S=香港, C=HK

Issuer:

CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:

0adf148f93d86ea1b9cd8a53

Scanner detections:

Detections (100% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.YesSearches.VANKYTEC (M), PUP.YesSearches.VANKYTEC.Installer (M), PUP.YesSearches (M)

100.00%

ESET NOD32

Win32/Floxif.H virus

4.00%

Microsoft Security Essentials

Threat.Undefined

2.00%

Emsisoft Anti-Malware

Win32.Floxif

2.00%

F-Prot

W32/Floxif.B

2.00%

F-Secure

Win32.Floxif.A

2.00%

avast!

Win32:GenMalicious-BFP [Trj]

2.00%

Norman

Win32.Floxif.A

2.00%

AVG

Win32/Floxif.A

2.00%

1 / 68 (PUP)

nbybr_zw.exe (d62d959cd55895075a02dcb30aee2f28)

1 / 68 (PUP)

nbyar_zw.exe (b2c61ccb08dfba240e428ccbc968979d)

1 / 68 (PUP)

nbyes_zw.exe (214a1cc1b56c81110910115a75d2ac4b)

1 / 68 (PUP)

nbycl_zw.exe (697754e8ede522c11a5a9b48639b4785)

1 / 68 (PUP)

nbyar_zw.exe (2a9e1da5251f0992572f7855c04250fe)

1 / 68 (PUP)

nbycl_zw.exe (40edc27902396a0194ee322fa5257333)

1 / 68 (PUP)

nbyfr_zw.exe (86e7c2aba75c8f29a14ed325ae811104)

1 / 68 (PUP)

nbymx_zw.exe (3440dbcc4b18e89b3484dfda301a1f22)

1 / 68 (PUP)

nbyit_zw.exe (648b1d8cd9a6d1c3b126ca920c946db8)

1 / 68 (PUP)

isr_lj.exe (8a9d6bddc58b286a7e2e87e9d8001c6b)

10 / 68 (PUP)

v6t9gqxfgm.exe (91503c52a2701349cc0afa8a0f4c90bf)

1 / 68 (PUP)

zxt_zt.exe (04d0ffc96953ef6102c601171162edc9)

1 / 68 (PUP)

piano_setup.exe (f6b5b8041f8e642058fcb9e0f007c30d)

1 / 68 (PUP)

web_zt.exe (0d14a5965b1258f60b9354fd062e65b0)

1 / 68 (PUP)

nbyar_zw.exe (41907346e830f811388c8f740bfd4b56)

1 / 68 (PUP)

pro_lj.exe (8fd2d28cd19f268295e3f02488466c84)

1 / 68 (PUP)

0aco9cf8a.exe (5edf292526573d7f8f1b4a800e5ebc83)

1 / 68 (PUP)

inst_1.exe (6c705c7c6c41c44078ead700e4538c5b)

1 / 68 (PUP)

cwwelaevxa.exe (305c357d555113643b3c0df9ada5b6d8)

1 / 68 (PUP)

84q90w6pu.exe (a2d81115ea1db75d46fbbedc5e96b940)

1 / 68 (PUP)

650.tmp (60475c61ab65c298a0093dcb5ffad68c)

1 / 68 (PUP)

piano_setup.exe (a32cc044fae9a8856e2da26015912e91)

1 / 68 (PUP)

trotux.exe (8da954c92fc3d57a15bb04dc7c7613d6)

1 / 68 (PUP)

d4ac.tmp (182f4a7d8ba0c7658ad6307aa9dc1812)

1 / 68 (PUP)

nbymx_zw.exe (1bccaf10903ec4338319676f4a3c6b9e)

1 / 68 (PUP)

nbybr_zw.exe (7359c537640ba9f5bae4afb183ea6dae)

1 / 68 (PUP)

nbyes_zw.exe (b0c08f9d12de15be0b44ef4e105d7156)

1 / 68 (PUP)

web_zt.exe (035c11e9c57de3cc1cd11df3ce2629ae)

1 / 68 (PUP)

pro_lj.exe (93e04d9fe2b04a034ef6eab3cdaf504a)

1 / 68 (PUP)

inst_1.exe (333d7c5518d7581319575441a60cce1c)

Latest 30 of 52 files

Downloads URLs for files signed by VANKY TECHNOLOGY LIMITED.

1 / 68 (PUP)

http://d11m2p9mpffp32.cloudfront.net/.../nbyes_zw.exe (214a1cc1b56c81110910115a75d2ac4b)

1 / 68 (PUP)

http://d11m2p9mpffp32.cloudfront.net/.../nbyar_zw.exe (2a9e1da5251f0992572f7855c04250fe)

1 / 68 (PUP)

http://d11m2p9mpffp32.cloudfront.net/.../nbyfr_zw.exe (86e7c2aba75c8f29a14ed325ae811104)

1 / 68 (PUP)

http://d11m2p9mpffp32.cloudfront.net/.../ftp_zt.exe (09264024ba0727eab001f13d92ca5690)

1 / 68 (PUP)

http://d11m2p9mpffp32.cloudfront.net/.../nbybr_zw.exe (7359c537640ba9f5bae4afb183ea6dae)

1 / 68 (PUP)

http://d11m2p9mpffp32.cloudfront.net/.../nbymx_zw.exe (3440dbcc4b18e89b3484dfda301a1f22)

1 / 68 (PUP)

http://d11m2p9mpffp32.cloudfront.net/.../nbyar_zw.exe (41907346e830f811388c8f740bfd4b56)

Distribution

The following websites host and distribute files published by VANKY TECHNOLOGY LIMITED.

d11m2p9mpffp32.cloudfront.net

The certificates below are also signed by VANKY TECHNOLOGY LIMITED.

08B43AE243C4C89C6777B21A (Sep 30, 2016 to Jan 21, 2017)

1079AB1B32079EFF3361C7B2 (Nov 30, 2016 to Jan 21, 2017)

1121D8237D7169E88BDA04260FE3FCAF2D56 (Apr 22, 2016 to Jan 21, 2017)

4BECA26210737A5442FF8B47 (Oct 14, 2016 to Jan 21, 2017)

6D531402C1361D48B68CF128 (Sep 02, 2016 to Jan 21, 2017)

6F9DC7FFCD887F56326F147A (Sep 01, 2016 to Jan 21, 2017)

7B24900E7B64B8CA5208D4BB (Aug 11, 2016 to Jan 21, 2017)

0F203839A9C63B8798A7CB31 (Dec 05, 2016 to Jan 21, 2017)

11210A6FDB2B7E55904C895AAA95C5D5E668 (Apr 14, 2016 to Jan 21, 2017)

1121154E102C9DDCCBBC71251F4FED6BA933 (May 09, 2016 to Jan 21, 2017)

10 of 136 code signing certificates issued

The following publishers (by Authenticode signature organization name) are related.

Xin Zhou

Beijing Caiyunshidai Technology Co., Ltd.

* Note, the details and description above are based on the code signing digital signature issued to VANKY TECHNOLOGY LIMITED by GlobalSign nv-sa on June 23, 2016 with the serial number '0adf148f93d86ea1b9cd8a53'.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.