home

Xi'an TingXue Network Technology co., Ltd.

Publisher Information

Xi'an TingXue Network Technology co., Ltd. is a software publisher located in Xi'an, Shaanxi in China*. Thre are 2 additional code signing certificates issued to this publisher.
Authority:
WoSign CA Limited

Valid from:
1/21/2016 2:40:58 PM

Valid to:
5/21/2016 2:40:58 PM

Subject:
CN="Xi'an TingXue Network Technology co., Ltd.", O="Xi'an TingXue Network Technology co., Ltd.", L=Xi'an, S=Shaanxi, C=CN

Issuer:
CN=WoSign Class 3 Code Signing CA G2, O=WoSign CA Limited, C=CN

Serial number:
6190efa7a2b8f0695104a04bbe7112b5

Status:
Inconclusive detections from multiple engines

Scan engine
Details
Detections

Microsoft Security Essentials
SoftwareBundler:Win32/Xiazai
80.00%

IKARUS anti.virus
Trojan.SuspectCRC, PUA.YouXun, PUA.RiskWare.Youxun, PUA.Win32.Xiazai
50.00%

Panda Antivirus
Trj/Genetic.gen
20.00%

AegisLab AV Signature
W32.Virut.mqrO, Troj.NSIS.StartPage.lFVw
20.00%

ESET NOD32
Win32/RiskWare.YouXun (variant)
20.00%

Bkav FE
W32.ExecPriD.Trojan
10.00%

MicroWorld eScan
Trojan.GenericKD.3207058
10.00%

McAfee
Artemis!D900AB6D70C2
10.00%

K7 AntiVirus
Riskware
10.00%

Arcabit
Trojan.Generic.D30EF92
10.00%

1 / 68      (inconclusive)
system.dll  (ea5fde9ce4406f1d520b12fa93f828e5)

4 / 68      (PUP)
processwork.dll  (240f75e72bd897097e97fb487cac6ced)

1 / 68      (inconclusive)
ontop.dll  (210b35a9cd162415fd75af421978e64d)

0 / 68
nsdialogs.dll  (7c5cd6a5985616c1fc29c446790c54dc)

0 / 68
inetc.dll  (954301c0c196dfbcd0ca21bcbac926e1)

2 / 68
dui.dll  (d24a4b96393dbab69b7ec67c7b1b550b)

0 / 68
zlib1.dll (zlib)  (8a1bbe21f5fdb49fca8a65dadd51c856)

0 / 68
xlcrypto.dll  (a255907894042fc37f2aba579b26e50f)

0 / 68
XLBugReport.exe  (a6bf0ba024043dfc0070c8e1855ecd24)

0 / 68
xlbughandler.dll (XLBugHandle)  (7667d5967839347c4ad3401035e1eaf8)

0 / 68
MSVCR71.DLL (Microsoft Visual Studio .NET by Microsoft)  (4c0bd64d8ca0242a55dfe74ac96339cf)

0 / 68
MSVCP71.DLL (Microsoft Visual Studio .NET by Microsoft)  (6fd9ae3988b78677f8a91d651d6606d8)

0 / 68
minizip.dll  (47324114edf03681204aaef815ecbc93)

0 / 68
minithunderplatform.exe  (6ebf8085df63127649bfe652370049eb)

0 / 68
download_engine.dll (Thunder by Thunder Networking Technologies,LTD)  (4c42a1754b88191cfd2564e149bf56f5)

0 / 68
dl_peer_id.dll (Thunder7 by ShenZhen Xunlei Networking Technologies,LTD)  (db6a5743a26e0c91d9eff77087005a88)

0 / 68
dl_lib.dll (Thunder by Thunder Networking Technologies,LTD)  (7a247cc814ea360a7d43c923f8d9d418)

0 / 68
ATL71.DLL (Microsoft Visual Studio .NET by Microsoft)  (6272fc51ae08157c66467b1a058e7b77)

0 / 68
AdbWinUsbApi.dll (Android SDK by Google, inc)  (f2d08a34f0819ad70136231d6707d4a7)

0 / 68
AdbWinApi.dll (Android SDK by Google, inc)  (d57dacad3cd4ab75cf71ae3a38dae97e)

0 / 68
adb.exe  (f8baf8ba3822829499da7f7a25fd8ff7)

0 / 68
aapt.exe  (d87f12226256a550ebbff7df0738706a)

0 / 68
xldl.dll  (402fd17de5feef7145257ce4891f6d7a)

0 / 68
update.exe  (ab906fb17a7f1d80e812180656a8cbde)

0 / 68
Unrar.dll (RAR decompression library by Alexander Roshal)  (e3ecb3ebf0f7470b0a8f2a195ff7abb9)

0 / 68
MSVCR71.DLL (Microsoft Visual Studio .NET by Microsoft)  (ab258cf1693688fb783043fcf3809dd8)

0 / 68
MSVCP71.DLL (Microsoft Visual Studio .NET by Microsoft)  (1095a591e917815e7c4c6fd57007d1d0)

0 / 68
jxsjzs.exe  (8fe8d49d44eae979d934264865e6c67b)

0 / 68
jxsj.exe  (de5975a96c6ac05ac32615e9655fd36e)

0 / 68
jxpc.exe  (d73626a901bd10e350fa6dd44c87e0d5)

 
Latest 30 of 55 files

The certificates below are also signed by Xi'an TingXue Network Technology co., Ltd..

5451A8E67DCCD396C3BEF61E2EF9A151  (Jan 21, 2016 to May 21, 2016)

335183F94C563B4721865B606129EFBA  (May 06, 2015 to May 06, 2016)

* Note, the details and description above are based on the code signing digital signature issued to Xi'an TingXue Network Technology co., Ltd. by WoSign CA Limited on January 21, 2016 with the serial number '6190efa7a2b8f0695104a04bbe7112b5'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.