» Xiaoqing Liu
Digital Signature
Analysis
Files (180)
Downloads (10)
Distribution (2)
Related (14)

Xiaoqing Liu

Publisher Information

Xiaoqing Liu is a software publisher located in Zaozhuang, Shandong in China*. The company is a primary distributor of unwanted software. Thre are 4 additional code signing certificates issued to this publisher.

Authority:

DigiCert Inc

Valid from:

8/13/2014 2:00:00 AM

Valid to:

8/17/2015 2:00:00 PM

Subject:

CN=Xiaoqing Liu, O=Xiaoqing Liu, L=Zaozhuang, S=Shandong, C=CN

Issuer:

CN=DigiCert Assured ID Code Signing CA-1, OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:

0ebab4ac38b70a33ee517d238bde49d7

Scanner detections:

Detections (100% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.ELEX.XiaoqingLiu (M), PUP.ELEX.Xiaoqing (M), PUP.ELEX (M)

100.00%

1 / 68 (Adware)

sien_mystartsearch.exe (2867_sien_mystartsearch by TabMain) (fdc088656b23efa24ab4f1e00947d148)

1 / 68 (Adware)

nss9a7e.tmp (3179_cmi_mystartsearch by gsuwo) (d267f34c6eee95103aed8a1ddec8b8c6)

1 / 68 (Adware)

ill_webssearches.exe (2546_ill_webssearches by TabMain) (ac0d04a84144122e6fc1d56a1b45c9ca)

1 / 68 (Adware)

rzbtyjdxcz.exe (2610_exp_webssearches by XMain) (e7ea8c35ce5274b46f0102e8e9d67b9d)

1 / 68 (Adware)

istartsurf.exe (2945_pcs_istartsurf by ylsn) (d8ff64e9f28120db7ffa8555da37131f)

1 / 68 (Adware)

uni_key-find.exe (2936_uni_key-find by TabMain) (b40ab56931c5dc7d1ff5d4f0a2f08d3a)

1 / 68 (Adware)

squadm_omiga-plus.exe (2541_squadm_omiga-plus by TabMain) (108b7bd988509ad3832db51ebcbc161a)

1 / 68 (Adware)

sfpsnew1_mystartsearch.exe (2873_sfpsnew1_mystartsearch by ylsn) (cc01538975df7bab921ee91acb9b9c7b)

1 / 68 (Adware)

4ndxwimu8i.exe (2749_exp_webssearches by dbji) (58a06fec39ddde2155fce45d232b3e30)

1 / 68 (Adware)

red_omniboxes.exe (3163_red_omniboxes by ylsn) (9e181bd52bc08e82343bbaec2acecb80)

1 / 68 (Adware)

sien_mystartsearch.exe (2584_sien_mystartsearch by XMain) (6a43f1fa62f08b12785865f3412ceb33)

1 / 68 (Adware)

nsbit_key-find.exe (2728_nsbit_key-find by TabMain) (700bf42ce37e4632cdef8c6cfd475c22)

1 / 68 (Adware)

nsbes_luckysearches.exe (3087_nsbes_luckysearches by ylsn) (864e7e506ae0415bef4a09a90625f783)

1 / 68 (Adware)

nsbuk_mystartsearch.exe (2988_nsbuk_mystartsearch by Spy union) (f3ff47072691589ebe86850885ce51b3)

1 / 68 (Adware)

sien_mystartsearch.exe (2916_sien_mystartsearch by TabMain) (0159938dd317d4e38b9417d7b36af317)

1 / 68 (Adware)

sien_mystartsearch.exe (3038_sien_mystartsearch by TabMain) (25e0c25ce00fa173a7e8b9a510b0f87d)

1 / 68 (Adware)

mp3_mystartsearch.exe (3249_mp3_mystartsearch by WDT) (ceae25d1258316f478cb7c9da3a88e4d)

1 / 68 (Adware)

kmp_luckysearches.exe (2989_kmp_luckysearches by Spy union) (9d1e6f91269e9f343283d799c1be7e37)

1 / 68 (Adware)

sien_mystartsearch.exe (2984_sien_mystartsearch by Spy union) (dae3b0bdf088458463f1e34701130a02)

1 / 68 (Adware)

sfpsnew3_mystartsearch.exe (2446_sfpsnew3_mystartsearch by One Syn) (65d90eac27516c79fb1549ef325a6250)

1 / 68 (Adware)

nribljjxxw.exe (2642_exp_webssearches by TabMain) (b46e8018e827a1bec5db5b4f55ec3f61)

1 / 68 (Adware)

7kk0ikuin0.exe (2748_exp_webssearches by TabMain) (e05d2ef3becf7782fdc3e79a457d6dd9)

1 / 68 (Adware)

sfpsnew3_mystartsearch.exe (3254_sfpsnew3_mystartsearch by WDT) (58ec8b8a0bac759adb89db5dec270df3)

1 / 68 (Adware)

sien_mystartsearch.exe (3203_sien_mystartsearch by ogu) (1db8ead51d378bf6a4c985b5988ea0c2)

1 / 68 (Adware)

wuygwj7ony.exe (2642_exp_webssearches by TabMain) (0a4517546f3e5dcc1382b20089b223a5)

1 / 68 (Adware)

vtt_mystartsearch.exe (3147_vtt_mystartsearch by ylsn) (26fe06b5b78739595154a9a2c3bd650b)

1 / 68 (Adware)

rbm_key-find.exe (3044_rbm_key-find by TabMain) (b76e1cf187861358c368e90f21ec5692)

1 / 68 (Adware)

rbm_istartsurf.exe (3043_rbm_istartsurf by TabMain) (16058b7deb1fc01dca62684b0453df49)

1 / 68 (Adware)

red_omniboxes.exe (3216_red_omniboxes by ogu) (ee5162eaf5d2b3ba456ccb688abe5e96)

1 / 68 (Adware)

nsbit_luckysearches.exe (2987_nsbit_luckysearches by Spy union) (5b55643a3666b84b8743e00ebe65a07f)

Latest 30 of 180 files

Downloads URLs for files signed by Xiaoqing Liu.

1 / 68 (Adware)

http://d2drfrdurj6mvo.cloudfront.net/.../kmp_luckysearches.exe (9d1e6f91269e9f343283d799c1be7e37)

1 / 68 (Adware)

http://www.girlliuxiaoqing.com/.../ill_webssearches.exe (ac0d04a84144122e6fc1d56a1b45c9ca)

1 / 68 (Adware)

http://www.girlwurina.com/.../sfpsnew3_mystartsearch.exe (65d90eac27516c79fb1549ef325a6250)

1 / 68 (Adware)

http://d2drfrdurj6mvo.cloudfront.net/.../nsbes_luckysearches.exe (864e7e506ae0415bef4a09a90625f783)

1 / 68 (Adware)

http://www.girlquzijin.com/.../red_omniboxes.exe (9e181bd52bc08e82343bbaec2acecb80)

1 / 68 (Adware)

http://www.girlwurina.com/.../sfpsnew4_mystartsearch.exe (21038fc6becc550216d9c7c0d35498ea)

1 / 68 (Adware)

http://www.girlquzijin.com/.../uni_key-find.exe (b40ab56931c5dc7d1ff5d4f0a2f08d3a)

1 / 68 (Adware)

http://cdn2.chironexfleckerigray.com/downloads/offers/.../air_istartsurf_E.exe (a217ef8742a577fae1d6ae7024c75ded)

1 / 68 (Adware)

http://d2drfrdurj6mvo.cloudfront.net/.../kmp_luckysearches.exe (95fabbe1bae6d25f3cd21c8cf470f545)

1 / 68 (Adware)

http://www.girlquzijin.com/.../squadm_istartsurf.exe (2d3638d01e36ca09efdedf0847bd91fe)

Distribution

The following websites host and distribute files published by Xiaoqing Liu.

www.girlquzijin.com

d2drfrdurj6mvo.cloudfront.net

The certificates below are also signed by Xiaoqing Liu.

01D9E1C9DEA81DDCA65062CC18203480 (Aug 13, 2014 to Aug 17, 2015)

01FE476BB35D5C01EABE81B9438B7B75 (Aug 13, 2014 to Aug 17, 2015)

0889CED821C1220A4F950101C71E977B (Aug 13, 2014 to Aug 17, 2015)

04EED95FE18B1B4413D68A12F53663C0 (Aug 13, 2014 to Aug 17, 2015)

The following publishers (by Authenticode signature organization name) are related.

Thinknice Co., Limited

Giner Tech Inc

Yuxin WANG

Minidigital Technology Co., Limited

Thinknice Co. Limited

Banyan Tree Technology Limited

Skytouch Technology Co., Limited

EasyVpn

* Note, the details and description above are based on the code signing digital signature issued to Xiaoqing Liu by DigiCert Inc on August 13, 2014 with the serial number '0ebab4ac38b70a33ee517d238bde49d7'.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.