» VANKY TECHNOLOGY LIMITED
Digital Signature
Analysis
Files (7)
Downloads (16)
Distribution (1)
Related (11)

VANKY TECHNOLOGY LIMITED

Publisher Information

VANKY TECHNOLOGY LIMITED is a software publisher located in 香港, Hong Kong*. Thre are 136 additional code signing certificates issued to this publisher.

Authority:

GlobalSign nv-sa

Valid from:

4/14/2016 5:18:44 AM

Valid to:

1/21/2017 7:41:53 AM

Subject:

CN=VANKY TECHNOLOGY LIMITED, O=VANKY TECHNOLOGY LIMITED, L=香港, S=香港, C=HK

Issuer:

CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:

11210a6fdb2b7e55904c895aaa95c5d5e668

Scanner detections:

Detections (100% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.YesSearches.VANKYTEC (M)

71.43%

Kaspersky

not-a-virus:Downloader.Win32.YeSearch, Virus.Win32.Slugin

42.86%

Emsisoft Anti-Malware

Win32.SlugIn, Gen:Trojan.Heur.JP.1q1@aabd@soj

42.86%

Microsoft Security Essentials

Threat.Undefined

42.86%

Norman

Win32.SlugIn.A, Gen:Trojan.Heur.JP.1q1@aabd@soj

42.86%

F-Secure

Win32.SlugIn.A

28.57%

avast!

Win32:Patched-JI

28.57%

ESET NOD32

Win32/Agent.NAG virus

28.57%

Dr.Web

Win32.Wplugin.1

28.57%

F-Prot

W32/Slugin.B

28.57%

4 / 68 (PUP)

nbyes_su.exe (fce7a6fbadc689ef63f25b5a204799c9)

11 / 68 (Malware)

isr_jq.exe (e3481f68806ade095c0bdf78be94ea75)

11 / 68 (Malware)

isr_jq.exe (a36f8acf4f61a06fb0b91d626b71ebad)

1 / 68 (PUP)

hohosearch.exe (e6e3e5ccf35c1122880ca46fb0bca574)

1 / 68 (PUP)

ppqjqutt4r.exe (0e1e8364b7c02cc93a4229ab2e396449)

1 / 68 (PUP)

bc35.tmp (5695dfda71bdfaed0c02d9ddeb194116)

2 / 68 (PUP)

amz.exe (04485af16b8071fab61c5ee37234e164)

Downloads URLs for files signed by VANKY TECHNOLOGY LIMITED.

1 / 68 (PUP)

http://d2xvc2nqkduarq.cloudfront.net/.../nbyit_su.exe (e6e3e5ccf35c1122880ca46fb0bca574)

1 / 68 (PUP)

http://d2xvc2nqkduarq.cloudfront.net/.../nbyes_su.exe (e6e3e5ccf35c1122880ca46fb0bca574)

1 / 68 (PUP)

http://113.171.224.210/.../clc_jq.exe (5695dfda71bdfaed0c02d9ddeb194116)

4 / 68 (PUP)

http://d2xvc2nqkduarq.cloudfront.net/.../nbyes_su.exe (fce7a6fbadc689ef63f25b5a204799c9)

2 / 68 (PUP)

http://d2xvc2nqkduarq.cloudfront.net/.../bzt_jq.exe (04485af16b8071fab61c5ee37234e164)

1 / 68 (PUP)

http://d2xvc2nqkduarq.cloudfront.net/.../nbybr_su.exe (e6e3e5ccf35c1122880ca46fb0bca574)

2 / 68 (PUP)

http://d2xvc2nqkduarq.cloudfront.net/.../epf_ht.exe (04485af16b8071fab61c5ee37234e164)

1 / 68 (PUP)

http://113.171.224.168/.../clc_jq.exe (5695dfda71bdfaed0c02d9ddeb194116)

1 / 68 (PUP)

http://d2xvc2nqkduarq.cloudfront.net/.../wsy_ly.exe (e6e3e5ccf35c1122880ca46fb0bca574)

1 / 68 (PUP)

http://d2xvc2nqkduarq.cloudfront.net/.../bzt_jq.exe (0e1e8364b7c02cc93a4229ab2e396449)

1 / 68 (PUP)

http://d2xvc2nqkduarq.cloudfront.net/.../ftp_ht.exe (5695dfda71bdfaed0c02d9ddeb194116)

2 / 68 (PUP)

http://d2xvc2nqkduarq.cloudfront.net/.../wsy_ly.exe (04485af16b8071fab61c5ee37234e164)

1 / 68 (PUP)

http://d2xvc2nqkduarq.cloudfront.net/.../bzt_jq.exe (e6e3e5ccf35c1122880ca46fb0bca574)

1 / 68 (PUP)

http://d2xvc2nqkduarq.cloudfront.net/.../clc_jq.exe (5695dfda71bdfaed0c02d9ddeb194116)

2 / 68 (PUP)

http://d2xvc2nqkduarq.cloudfront.net/.../isr_jq.exe (04485af16b8071fab61c5ee37234e164)

1 / 68 (PUP)

http://d2xvc2nqkduarq.cloudfront.net/.../isr_jq.exe (e6e3e5ccf35c1122880ca46fb0bca574)

Distribution

The following websites host and distribute files published by VANKY TECHNOLOGY LIMITED.

d2xvc2nqkduarq.cloudfront.net

The certificates below are also signed by VANKY TECHNOLOGY LIMITED.

08B43AE243C4C89C6777B21A (Sep 30, 2016 to Jan 21, 2017)

1079AB1B32079EFF3361C7B2 (Nov 30, 2016 to Jan 21, 2017)

1121D8237D7169E88BDA04260FE3FCAF2D56 (Apr 22, 2016 to Jan 21, 2017)

4BECA26210737A5442FF8B47 (Oct 14, 2016 to Jan 21, 2017)

6D531402C1361D48B68CF128 (Sep 02, 2016 to Jan 21, 2017)

6F9DC7FFCD887F56326F147A (Sep 01, 2016 to Jan 21, 2017)

7B24900E7B64B8CA5208D4BB (Aug 11, 2016 to Jan 21, 2017)

0F203839A9C63B8798A7CB31 (Dec 05, 2016 to Jan 21, 2017)

1121154E102C9DDCCBBC71251F4FED6BA933 (May 09, 2016 to Jan 21, 2017)

112155EF0EAA630B2FE8F8739DBF123A03B1 (May 06, 2016 to Jan 21, 2017)

10 of 136 code signing certificates issued

The following publishers (by Authenticode signature organization name) are related.

Speed Low Inc.

Yu Bao

Guide Style LTD corp.

think-cell Software GmbH

* Note, the details and description above are based on the code signing digital signature issued to VANKY TECHNOLOGY LIMITED by GlobalSign nv-sa on April 14, 2016 with the serial number '11210a6fdb2b7e55904c895aaa95c5d5e668'.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.