» VANKY TECHNOLOGY LIMITED
Digital Signature
Analysis
Files (15)
Downloads (8)
Distribution (1)
Related (2)

VANKY TECHNOLOGY LIMITED

Publisher Information

VANKY TECHNOLOGY LIMITED is a software publisher located in 香港, Hong Kong*. A majority of the programs developed by the company can be classified as adware or other potentially unwanted programs. Thre are 136 additional code signing certificates issued to this publisher.

Authority:

GlobalSign nv-sa

Valid from:

6/14/2016 10:27:16 AM

Valid to:

1/21/2017 1:41:53 AM

Subject:

CN=VANKY TECHNOLOGY LIMITED, O=VANKY TECHNOLOGY LIMITED, L=香港, S=香港, C=HK

Issuer:

CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:

30e77991fcf0d1d7e9805e07

Scanner detections:

Detections (100% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.YesSearches.VANKYTEC (M), PUP.YesSearches (M)

100.00%

1 / 68 (PUP)

nbyco_zw.exe (847669ac2c5e34d7431c2dca05e294ba)

1 / 68 (PUP)

nbyit_zw.exe (9d8315f1f1cfcc269e3fe8d201ff507d)

1 / 68 (PUP)

nbyco_zw.exe (9ead85768e6c6561b558867cb481fce4)

1 / 68 (PUP)

nbycl_zw.exe (5d88ad8beafaeade072455446c6cd4c8)

1 / 68 (PUP)

nbyes_zw.exe (c86b1ec257b0a9f3d577f96f6d2bd736)

1 / 68 (PUP)

trotux.exe (2beea2333985934933cf65b479f950c6)

1 / 68 (PUP)

nbybr_zw.exe (feab8257576546aa2f83ef7a32ad70ed)

1 / 68 (PUP)

zxt_zt.exe (ee4bc866a9ee76810eda451bad7eab5d)

1 / 68 (PUP)

isr1_lj.exe (8973dc7520fe1b0d0d39a446023d989b)

1 / 68 (PUP)

nbyar_zw.exe (2e30038dfe8f0e6e2d53e0f6583dad18)

1 / 68 (PUP)

trotux.exe (f11f159ba252a138089c0ed91fb32f69)

1 / 68 (PUP)

9634.tmp (fd5afa290082380cfc0cbd612e48c5a5)

1 / 68 (PUP)

trotux.exe (8c0708aea8a2be1046a39e117fc2112b)

1 / 68 (PUP)

ex1.exe (1356b2d6ee8d65fcc5da216211c01cb2)

1 / 68 (PUP)

nbymx_zw.exe (238748a4f384f0a15c6f84df4681287e)

Downloads URLs for files signed by VANKY TECHNOLOGY LIMITED.

1 / 68 (PUP)

http://d11m2p9mpffp32.cloudfront.net/.../nbyco_zw.exe (847669ac2c5e34d7431c2dca05e294ba)

1 / 68 (PUP)

http://d11m2p9mpffp32.cloudfront.net/.../nbyes_zw.exe (c86b1ec257b0a9f3d577f96f6d2bd736)

1 / 68 (PUP)

http://d11m2p9mpffp32.cloudfront.net/.../nbyit_zw.exe (9d8315f1f1cfcc269e3fe8d201ff507d)

1 / 68 (PUP)

http://d11m2p9mpffp32.cloudfront.net/.../nbycl_zw.exe (5d88ad8beafaeade072455446c6cd4c8)

1 / 68 (PUP)

http://d11m2p9mpffp32.cloudfront.net/.../nbymx_zw.exe (238748a4f384f0a15c6f84df4681287e)

1 / 68 (PUP)

http://d11m2p9mpffp32.cloudfront.net/.../isr1_lj.exe (8973dc7520fe1b0d0d39a446023d989b)

1 / 68 (PUP)

http://d11m2p9mpffp32.cloudfront.net/.../nbyar_zw.exe (2e30038dfe8f0e6e2d53e0f6583dad18)

1 / 68 (PUP)

http://d11m2p9mpffp32.cloudfront.net/.../nbybr_zw.exe (feab8257576546aa2f83ef7a32ad70ed)

Distribution

The following websites host and distribute files published by VANKY TECHNOLOGY LIMITED.

d11m2p9mpffp32.cloudfront.net

The certificates below are also signed by VANKY TECHNOLOGY LIMITED.

08B43AE243C4C89C6777B21A (Sep 30, 2016 to Jan 21, 2017)

1079AB1B32079EFF3361C7B2 (Nov 30, 2016 to Jan 21, 2017)

1121D8237D7169E88BDA04260FE3FCAF2D56 (Apr 22, 2016 to Jan 21, 2017)

4BECA26210737A5442FF8B47 (Oct 14, 2016 to Jan 21, 2017)

6D531402C1361D48B68CF128 (Sep 02, 2016 to Jan 21, 2017)

6F9DC7FFCD887F56326F147A (Sep 01, 2016 to Jan 21, 2017)

7B24900E7B64B8CA5208D4BB (Aug 11, 2016 to Jan 21, 2017)

0F203839A9C63B8798A7CB31 (Dec 05, 2016 to Jan 21, 2017)

11210A6FDB2B7E55904C895AAA95C5D5E668 (Apr 14, 2016 to Jan 21, 2017)

1121154E102C9DDCCBBC71251F4FED6BA933 (May 09, 2016 to Jan 21, 2017)

10 of 136 code signing certificates issued

The following publishers (by Authenticode signature organization name) are related.

Xin Zhou

Beijing Caiyunshidai Technology Co., Ltd.

* Note, the details and description above are based on the code signing digital signature issued to VANKY TECHNOLOGY LIMITED by GlobalSign nv-sa on June 14, 2016 with the serial number '30e77991fcf0d1d7e9805e07'.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.