» Yuxin WANG
Digital Signature
Analysis
Files (10)
Downloads (5)
Distribution (2)
Related (12)

Yuxin WANG

Publisher Information

Yuxin WANG is a software publisher located in Beijing, China*. Thre are 46 additional code signing certificates issued to this publisher.

Authority:

thawte, Inc.

Valid from:

9/13/2015 5:00:00 PM

Valid to:

8/12/2017 4:59:59 PM

Subject:

CN=Yuxin WANG, OU=Individual Developer, O=No Organization Affiliation, L=Beijing, S=Beijing, C=CN

Issuer:

CN=thawte SHA256 Code Signing CA, O="thawte, Inc.", C=US

Serial number:

418fb18ff89bbdce65418aca100a77c1

Scanner detections:

Detections (100% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.ELEX.YuxinWANG (M)

100.00%

Malwarebytes

PUP.Optional.IStartSurf.ShrtCln, PUP.Optional.OurSeaching, PUP.Optional.MyStartSearch.ShrtCln

80.00%

ESET NOD32

Win32/ELEX.EY potentially unwanted (variant), Win32/ELEX.FG potentially unwanted (variant), Win32/ELEX.FC potentially unwanted (variant)

80.00%

K7 AntiVirus

Adware

60.00%

Agnitum Outpost

Riskware.Agent

60.00%

avast!

Win32:SaliCode

60.00%

VIPRE Antivirus

Threat.4758034

60.00%

Baidu Antivirus

Adware.Win32.ELEX

50.00%

Qihoo 360 Security

HEUR/QVM10.1.Malware.Gen

30.00%

herdProtect (fuzzy)

a variant of be9ccda80b3373ec69960a61616e0a897bb49625, a variant of 61232f28ab629696f3df89b46260bee2108f72cb

30.00%

1 / 68 (Adware)

cvs_mystartsearch.exe (4817_cvs_mystartsearch by 7th) (85431840c5b1b89849c0bf419880bd74)

11 / 68 (Adware)

iWill.exe (4842_cmi_mystartsearch by IWill.com) (893d2948e73d83df095d6a756a6e8ca0)

10 / 68 (Adware)

adv_46.exe (4768_ima_istartsurf by Portmon/EE) (373d4a9232750f34667c2f08cbd0cae9)

10 / 68 (Adware)

oursurfing.exe (4772_2sq3_oursurfing by Portmon/EE) (ee47f7204756b1ac1fa33d6bc46915a0)

9 / 68 (Adware)

adv_76.exe (4767_ima_mystartsearch by Portmon/EE) (a90666bd692d8dd7f3bbe94b868abbde)

7 / 68 (Adware)

0p1i9lkpusw==1.exe (4770_2sq_oursurfing by Portmon/EE) (1614485205c1ae8d30f3d8dfc6953051)

5 / 68 (Adware)

nse87c.tmp (4804_cmi_mystartsearch by 7th) (8e5c8d8472e3e577ccd8e27fd92ff9af)

8 / 68 (Adware)

smt_oursurfing.exe (4766_smt_oursurfing by Portmon/EE) (d9fe4e2bd921f5623e55d9e38ea49968)

8 / 68 (Adware)

smt_istartsurf.exe (4765_smt_istartsurf by Portmon/EE) (477948b47b84dcfa6772110cdb436d70)

1 / 68 (Adware)

ms7783.tmp.exe (4828_ium6_mystartsearch by WillLink.net) (ab60b46425a6aac61bfe6a483d3924fd)

Downloads URLs for files signed by Yuxin WANG.

7 / 68 (Adware)

http://d2drfrdurj6mvo.cloudfront.net/.../2sq_oursurfing.exe (1614485205c1ae8d30f3d8dfc6953051)

8 / 68 (Adware)

http://www.girlliuxiaowei.com/.../smt_istartsurf.exe (477948b47b84dcfa6772110cdb436d70)

5 / 68 (Adware)

http://d2drfrdurj6mvo.cloudfront.net/.../cmi_mystartsearch.exe (8e5c8d8472e3e577ccd8e27fd92ff9af)

11 / 68 (Adware)

http://d2drfrdurj6mvo.cloudfront.net/.../cmi_mystartsearch.exe (893d2948e73d83df095d6a756a6e8ca0)

5 / 68 (Adware)

http://113.171.224.165/.../cmi_mystartsearch.exe (8e5c8d8472e3e577ccd8e27fd92ff9af)

Distribution

The following websites host and distribute files published by Yuxin WANG.

www.girlliuxiaowei.com

d2drfrdurj6mvo.cloudfront.net

The certificates below are also signed by Yuxin WANG.

2C416DD3D70B97FC4234C97961D44A24 (Dec 07, 2015 to Aug 14, 2017)

42B89DFF0EF561EC67F3D06741ADE295 (Nov 25, 2015 to Aug 14, 2017)

56493BF0156090CDE0540B795E8541C0 (Feb 10, 2016 to Aug 14, 2017)

0AB62C6D3E19ADF07A06CAFBBBAA27A5 (Feb 08, 2016 to Aug 14, 2017)

2DA55CBA91AF41B2B38306063798B9CB (Jan 11, 2016 to Aug 14, 2017)

32FE5013D2C7ECC50B6FCEF24F95BE42 (Jan 15, 2016 to Aug 14, 2017)

53780CF050BA35CB5EB86E310BA4C82A (Jan 13, 2016 to Aug 14, 2017)

5EA44E193FCC51F5A02C23795BDE703B (Nov 27, 2015 to Aug 14, 2017)

778C2E8E17E285D4882E35D29D8224A9 (Jan 05, 2016 to Aug 14, 2017)

13910B2C74A5DDEADB91E4270330B489 (Dec 31, 2015 to Aug 14, 2017)

10 of 46 code signing certificates issued

The following publishers (by Authenticode signature organization name) are related.

Giner Tech Inc

Skytouch Technology Co., Limited

Minidigital Technology Co., Limited

Thinknice Co., Limited

Thinknice Co. Limited

EasyVpn

Banyan Tree Technology Limited

* Note, the details and description above are based on the code signing digital signature issued to Yuxin WANG by thawte, Inc. on September 13, 2015 with the serial number '418fb18ff89bbdce65418aca100a77c1'.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.