» VANKY TECHNOLOGY LIMITED
Digital Signature
Analysis
Files (5)
Downloads (9)
Distribution (1)
Related (11)

VANKY TECHNOLOGY LIMITED

Publisher Information

VANKY TECHNOLOGY LIMITED is a software publisher located in 香港, Hong Kong*. Thre are 136 additional code signing certificates issued to this publisher.

Authority:

GlobalSign nv-sa

Valid from:

4/27/2016 1:20:24 PM

Valid to:

1/21/2017 12:11:53 PM

Subject:

CN=VANKY TECHNOLOGY LIMITED, O=VANKY TECHNOLOGY LIMITED, L=香港, S=香港, C=HK

Issuer:

CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:

1121a627188edf937bff2fd1c59a2942bc6c

Scanner detections:

Malware distribution (100% detected)

Scan engine

Details

Detections

F-Prot

W32/Slugin.B

80.00%

Microsoft Security Essentials

Threat.Undefined

80.00%

avast!

Win32:Patched-JI

60.00%

Dr.Web

Trojan.DownLoader21.29530

60.00%

McAfee

Virus.W32/Wplugin

60.00%

Kaspersky

Virus.Win32.Slugin

60.00%

ESET NOD32

Win32/Slugin.A virus, Win32/Agent.NAG virus

60.00%

Norman

Win32.SlugIn.A

60.00%

AVG

Win32/Slugin.A

60.00%

Emsisoft Anti-Malware

Win32.SlugIn

60.00%

2 / 68 (PUP)

hohosearch.exe (bb8811d7ce6fb6af461e4e2d269edfd5)

10 / 68 (Malware)

isr_jq.exe (53bab2f741ce0ac2116a6ead3537eeb1)

12 / 68 (Malware)

isr_jq.exe (8a5a2d616e8cc4c222486087d58d0214)

11 / 68 (Malware)

amz.exe (9ca218c8a5b204fefc6567926a6bc582)

1 / 68 (PUP)

isr_jq.exe (84669cc08dcfea2e93fee24931d2d47d)

Downloads URLs for files signed by VANKY TECHNOLOGY LIMITED.

1 / 68 (PUP)

http://d2xvc2nqkduarq.cloudfront.net/.../epf_ht.exe (84669cc08dcfea2e93fee24931d2d47d)

2 / 68 (PUP)

http://d2xvc2nqkduarq.cloudfront.net/.../bzt_jq.exe (bb8811d7ce6fb6af461e4e2d269edfd5)

2 / 68 (PUP)

http://d2xvc2nqkduarq.cloudfront.net/.../nbyes_su.exe (bb8811d7ce6fb6af461e4e2d269edfd5)

2 / 68 (PUP)

http://d2xvc2nqkduarq.cloudfront.net/.../wsy_ly.exe (bb8811d7ce6fb6af461e4e2d269edfd5)

1 / 68 (PUP)

http://d2xvc2nqkduarq.cloudfront.net/.../nbyes_su.exe (84669cc08dcfea2e93fee24931d2d47d)

1 / 68 (PUP)

http://d2xvc2nqkduarq.cloudfront.net/.../wsy_ly.exe (84669cc08dcfea2e93fee24931d2d47d)

1 / 68 (PUP)

http://d2xvc2nqkduarq.cloudfront.net/.../bzt_jq.exe (84669cc08dcfea2e93fee24931d2d47d)

2 / 68 (PUP)

http://d2xvc2nqkduarq.cloudfront.net/.../isr_jq.exe (bb8811d7ce6fb6af461e4e2d269edfd5)

1 / 68 (PUP)

http://d2xvc2nqkduarq.cloudfront.net/.../isr_jq.exe (84669cc08dcfea2e93fee24931d2d47d)

Distribution

The following websites host and distribute files published by VANKY TECHNOLOGY LIMITED.

d2xvc2nqkduarq.cloudfront.net

The certificates below are also signed by VANKY TECHNOLOGY LIMITED.

08B43AE243C4C89C6777B21A (Sep 30, 2016 to Jan 21, 2017)

1079AB1B32079EFF3361C7B2 (Nov 30, 2016 to Jan 21, 2017)

1121D8237D7169E88BDA04260FE3FCAF2D56 (Apr 22, 2016 to Jan 21, 2017)

4BECA26210737A5442FF8B47 (Oct 14, 2016 to Jan 21, 2017)

6D531402C1361D48B68CF128 (Sep 02, 2016 to Jan 21, 2017)

6F9DC7FFCD887F56326F147A (Sep 01, 2016 to Jan 21, 2017)

7B24900E7B64B8CA5208D4BB (Aug 11, 2016 to Jan 21, 2017)

0F203839A9C63B8798A7CB31 (Dec 05, 2016 to Jan 21, 2017)

11210A6FDB2B7E55904C895AAA95C5D5E668 (Apr 14, 2016 to Jan 21, 2017)

1121154E102C9DDCCBBC71251F4FED6BA933 (May 09, 2016 to Jan 21, 2017)

10 of 136 code signing certificates issued

The following publishers (by Authenticode signature organization name) are related.

Speed Low Inc.

Yu Bao

Guide Style LTD corp.

think-cell Software GmbH

* Note, the details and description above are based on the code signing digital signature issued to VANKY TECHNOLOGY LIMITED by GlobalSign nv-sa on April 27, 2016 with the serial number '1121a627188edf937bff2fd1c59a2942bc6c'.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.