» Wang Yi
Digital Signature
Files (8)
Downloads (17)
Distribution (7)
Related (26)

Wang Yi

Publisher Information

Wang Yi is a software developer located in Jiujiang, Jiangxi in China*.

Authority:

WoSign CA Limited

Valid from:

12/7/2015 8:17:42 AM

Valid to:

12/7/2016 8:17:42 AM

Subject:

CN=Wang Yi, L=Jiujiang, S=Jiangxi, C=CN

Issuer:

CN=WoSign Class 2 Code Signing CA, O=WoSign CA Limited, C=CN

Serial number:

225b42037e04231c935b51dfb4e182ce

Status:

Inconclusive detections from multiple engines

Scan engine

Details

Detections

Reason Heuristics

Adware.Elex

50.00%

ESET NOD32

Win32/RiskWare.YouXun.A application

25.00%

Baidu Antivirus

Trojan.Win32.YouXun

25.00%

Avira AntiVirus

APPL/Agent.926162.B

25.00%

ESET NOD32

Win32/RiskWare.YouXun (variant)

25.00%

1 / 68 (PUP)

setup.exe (f6f6c06d80be3e079e3e5f5d8c97fbbf)

1 / 68 (PUP)

setup.exe (c57971215519d396db24f02a1a885996)

0 / 68

update.exe (11b29c8064c9bd29f0c4650325955126)

0 / 68

uninst.exe (58dbeb638bdeb3320fd09f69444de425)

0 / 68

ppsj.exe (f4c169272c64e975733a71c3b1245c6b)

0 / 68

pppc.exe (887c3b578e63fc59e03f7f6c410a974f)

1 / 68 (inconclusive)

ppgame.exe (e038d0cbceb9153d50163575ee4237c8)

3 / 68 (PUP)

setup.exe (bf0dad88c4ca592d85c0f26eeeb5ef83)

Downloads URLs for files signed by Wang Yi.

3 / 68 (PUP)

https://signup.duelofchampions.com/Portal/.../ (setup.exe)

3 / 68 (PUP)

http://www.497.com/api/.../down?id=6806&sid=5 (setup.exe)

3 / 68 (PUP)

http://ef68.15311223344.com/.../setupyd.exe (bf0dad88c4ca592d85c0f26eeeb5ef83)

3 / 68 (PUP)

http://db107.15311223344.com/.../setupyd.exe (bf0dad88c4ca592d85c0f26eeeb5ef83)

3 / 68 (PUP)

http://cc890.15311223344.com/.../setupyd.exe (bf0dad88c4ca592d85c0f26eeeb5ef83)

3 / 68 (PUP)

http://fe821.15311223344.com/.../setupyd.exe (bf0dad88c4ca592d85c0f26eeeb5ef83)

3 / 68 (PUP)

http://ad899.15311223344.com/.../setupyd.exe (bf0dad88c4ca592d85c0f26eeeb5ef83)

3 / 68 (PUP)

http://box64.yxdown.com/.../setupyd.exe (bf0dad88c4ca592d85c0f26eeeb5ef83)

3 / 68 (PUP)

http://fe923.15311223344.com/.../setupyd.exe (bf0dad88c4ca592d85c0f26eeeb5ef83)

3 / 68 (PUP)

http://2if.15311223344.com/.../setup.exe (bf0dad88c4ca592d85c0f26eeeb5ef83)

3 / 68 (PUP)

http://box64.yxdown.com/.../setup.exe (bf0dad88c4ca592d85c0f26eeeb5ef83)

3 / 68 (PUP)

http://ee206.15311223344.com/.../setupyd.exe (bf0dad88c4ca592d85c0f26eeeb5ef83)

1 / 68 (PUP)

http://xxx2015.15311223344.com/.../setup.exe (f6f6c06d80be3e079e3e5f5d8c97fbbf)

3 / 68 (PUP)

http://ad111.15311223344.com/.../setupyd.exe (bf0dad88c4ca592d85c0f26eeeb5ef83)

3 / 68 (PUP)

http://cdn.nextadbulkranch.com/c?x=MS y8I15qdCe5IuB3dJ2O TBnOQXpIBYQDXg73oRj70=&c=31Of2f3D70LoIkkB0zvyCBtF0kWV5CJK2ROOpklkHlUmcRY bBcYSY vFRcNOWp9yFj2WCd9DMh4glA1k6auXQ==&fallback_url=http://.../setup.exe&downloadAs=setup.exe (bf0dad88c4ca592d85c0f26eeeb5ef83)

3 / 68 (PUP)

http://xxx2015.15311223344.com/.../setup.exe (bf0dad88c4ca592d85c0f26eeeb5ef83)

3 / 68 (PUP)

http://e5m.15311223344.com/.../setup.exe (bf0dad88c4ca592d85c0f26eeeb5ef83)

Distribution

The following websites host and distribute files published by Wang Yi.

2if.15311223344.com

ee206.15311223344.com

ad111.15311223344.com

xxx2015.15311223344.com

e5m.15311223344.com

cdn.nextadbulkranch.com

box64.yxdown.com

The following publishers (by Authenticode signature organization name) are related.

Secure Download

趣游时代（北京）科技有限公司

Shanghai Youxun Information Technology Co.,Ltd.

上海游窝信息科技有限公司

Kunshan Youxun Network Technology Co., Ltd.

Kunshan Kuaila Information Technology Co., Ltd.

Duodian Online Technology Co. Ltd.

Shanghai Guangbiao Information Technology Co.,Ltd.

Digital Plugin SL

InstallationSafe

深圳市哈奇世界科技有限公司

Shanghai Youwo Information Technology Co., Ltd.

安徽嘉尚网络科技有限公司

Chengdu Jinding Shengshi Network Technology Co., Ltd.

Alpha Setup (New Media Holdings Ltd)

think-cell Software GmbH

DIGITAL PLUGIN S.L.U

上海游讯信息科技有限公司

SpeedyMax (New Media Holdings Ltd)

* Note, the details and description above are based on the code signing digital signature issued to Wang Yi by WoSign CA Limited on December 07, 2015 with the serial number '225b42037e04231c935b51dfb4e182ce'.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.