» ZUNSHANG INFO TECH CO. LTD.
Digital Signature
Analysis
Files (118)
Downloads (43)
Distribution (4)
Related (57)

ZUNSHANG INFO TECH CO. LTD.

Publisher Information

ZUNSHANG INFO TECH CO. LTD. is a software publisher located in Changzhou, Jiangsu in China*. A majority of the programs developed by the company can be classified as adware or other potentially unwanted programs.

Authority:

WoSign CA Limited

Valid from:

3/10/2016 3:08:55 PM

Valid to:

3/10/2017 3:08:55 PM

Subject:

CN=ZUNSHANG INFO TECH CO. LTD., O=ZUNSHANG INFO TECH CO. LTD., L=Changzhou, S=Jiangsu, C=CN

Issuer:

CN=WoSign Class 3 Code Signing CA, O=WoSign CA Limited, C=CN

Serial number:

4f1846359241387e3efe5a631480eefe

Scanner detections:

Detections (98% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.TopTools (M), PUP.TopTools.ZUNSHANG (M)

98.00%

ESET NOD32

Win32/Adware.Eszjuxuan.B application

12.00%

Dr.Web

Adware.TopTools.26

8.00%

F-Secure

Variant.Adware.Razy

2.00%

MicroWorld eScan

Gen:Variant.Adware.Razy.63718

2.00%

Bitdefender

Gen:Variant.Adware.Razy.63718

2.00%

Baidu Antivirus

Win32.Adware.Eszjuxuan

2.00%

ESET NOD32

Win32/Adware.Eszjuxuan (variant)

2.00%

Lavasoft Ad-Aware

Gen:Variant.Adware.Razy.63718

2.00%

F-Secure

Gen:Variant.Adware.Razy

2.00%

1 / 68 (PUP)

尚未確認的 911126.crdownload (Monxeing Box) (b0c2d42d60f8ac6c6f049a86a9df22c8)

1 / 68 (PUP)

uninstall.exe (Monxeing Box) (4e15034a171d25d839b244cb5d19166b)

1 / 68 (PUP)

mxbh.exe (Monxeing Box) (a2557d9dfcfcfa748d2962af8709d293)

1 / 68 (PUP)

qvod_315okp.exe (ZunShan Station Squrels Box by Changzhou Zunsan Infomaton Company Group Station) (1b60e1b87736d671c37e44980f430db1)

1 / 68 (PUP)

setup_262xw5.exe (Monxeng Box) (2de6f5480b7785f6c72221b66b195715)

1 / 68 (PUP)

setup_262niz.exe (Monxeng Box) (6c7022dc87d3cc18f9ca4411c0e2578a)

1 / 68 (PUP)

uninstall.exe (Monxeng Box) (9fd89c87ff4823182678bef66e188e27)

1 / 68 (PUP)

mxbh.exe (Monxeng Box) (99e82a7828ba4889e41fcd77adb403b6)

1 / 68 (PUP)

uninstall.exe (Monxeng Box) (9ad37b1bba6b2a046e59691764a16969)

1 / 68 (PUP)

uninstall.exe (Monxeng Box) (c9403c052ed2a0a70e150c8c058c003e)

1 / 68 (PUP)

mxbh.exe (Monxeng Box) (d4a2d4240dad1217ba178dafbf7ca1e6)

1 / 68 (PUP)

qvod_354a0x.exe (Monxeng Box) (59f7e416d0e1f0a7d64ddb3ab4ca2ae2)

1 / 68 (PUP)

mxbh.exe (Monxeng Box) (312b45791563c08bde185aa6588a0bca)

1 / 68 (PUP)

qvod_296zzu.exe (Monxeng Box) (808c9f35d3c2888aff633c8cb7c650f4)

1 / 68 (PUP)

game_284g88.exe (SongSu Case) (5518d1a6c2963a74857465ae52ceeac8)

1 / 68 (PUP)

sshz.exe (ZunShan Station Squrels Box by Changzhou Zunsan Infomaton Company Group Station) (68a7068d4dff92aba0b7aac418595564)

1 / 68 (PUP)

zssj.exe (quirel box) (bcf6f7486cbc2a85d6c83fadc0b2aa33)

1 / 68 (PUP)

uninstall.exe (SongSu Case) (55152cbf9dff144fe1c8ff06a033f002)

1 / 68

7z.dll (7-Zip by Igor Pavlov) (71cf06a9819421f6ca0b8279465bde45)

1 / 68 (PUP)

uninstall.exe (e5335988239bb2ec86a3e9fb595f93e0)

1 / 68 (PUP)

mxbh.exe (d95ccc780998f23c87d3f418fdb787ef)

1 / 68 (PUP)

setup_207ibi.exe (852e2591ba48f842f6c6a18ef7ee13b9)

1 / 68 (PUP)

uninstall.exe (9f64319008ab8b1f730c608f4c23e6ee)

2 / 68 (PUP)

mxbh.exe (55f0699192b26d381315dca5a62af07e)

1 / 68 (PUP)

game_259oko.exe ()

1 / 68 (PUP)

uninstall.exe (f196251710fd7b5862279f7a8af70222)

1 / 68 (PUP)

mxbh.exe (b01a814f8eabf913b64924fdcafaba7d)

1 / 68 (PUP)

qvod_296qnx.exe (54ed764b1f023e78a484f0d651bfd744)

1 / 68 (PUP)

uninstall.exe (a3569b510d7b4333327c0e8ce99bbe8b)

1 / 68 (PUP)

mxbh.exe (193e18d4b69f8684d54b02751ccb08e2)

Latest 30 of 118 files

Downloads URLs for files signed by ZUNSHANG INFO TECH CO. LTD..

1 / 68 (PUP)

http://dt.tu8s.com/.../iVMS-4200(V1.03.00.03)_395t5f.exe (808c9f35d3c2888aff633c8cb7c650f4)

1 / 68 (PUP)

http://dt.tu8s.com/.../Gemvision.Matrix.8.0.x64_367e3v.exe (808c9f35d3c2888aff633c8cb7c650f4)

1 / 68 (PUP)

http://ss.cywl5.com/jx.php?id=833 (game_265vty.exe)

1 / 68 (PUP)

http://www.baidu.com/cb.php?c=IgF_pyfqnHRdP1R1nWR0IZ0qnfK9ujYznW6YP1nk0Aw-5HcYPWfdrjR0TAq15HcvnHRknH00T1YYmHKBPWDdrHb1nWR3rAcL0AwY5HDYP1fsn1m3PHR0IgF_5y9YIZ0lQzq1Tz4WXgI_Pi4WUvYEpM68TA9s5v-b5HDkPHc0ThfqPsKBUHYk0ZKz5H00Iy-b5Hn3P1fYnWb0Uv-b5HDsnjmYrHb0mv-b5Hcsn16zP6KEIv3qn0KsXHYznjm0mLFW5HRdnj0z (qvod_296zzu.exe)

1 / 68 (PUP)

http://dt.tu8s.com/.../???vpn_207z1t.exe (6c7022dc87d3cc18f9ca4411c0e2578a)

1 / 68 (PUP)

http://ss.cywl5.com/jx.php?id=1162 (qvod_296zzu.exe)

1 / 68 (PUP)

http://dt.tu8s.com/.../???????????????????_417w1f.exe (808c9f35d3c2888aff633c8cb7c650f4)

3 / 68 (PUP)

http://afptrack.alimama.com/clk?bid=0a6734230000578370465f650010b504&pid=mm_115406906_14102322_56078039&cid=32645&mid=23739&oid=4561&productType=1&qytInfoMTime=1468159240&e=JLOoF6Tpq7uMpq0A4M5XO//.../t8FlOsnuHPjEy18bEJiz c6JjA==&k=121 (setup_303roz.exe)

3 / 68 (PUP)

http://dt.39photo.net/rd.aspx?id=334 (setup_303pk5.exe)

1 / 68 (PUP)

http://dt.tu8s.com/.../??????V2.2_400g3d.exe (808c9f35d3c2888aff633c8cb7c650f4)

1 / 68 (PUP)

http://dt.tu8s.com/.../GHOST XP???.rar_365g2c.exe (808c9f35d3c2888aff633c8cb7c650f4)

1 / 68 (PUP)

http://dt.tu8s.com/.../??????????????????_417w1f.exe (6c7022dc87d3cc18f9ca4411c0e2578a)

1 / 68 (PUP)

http://dt.tu8s.com/.../????3:??????????_417w1f.exe (6c7022dc87d3cc18f9ca4411c0e2578a)

3 / 68 (PUP)

http://dt.39photo.net/rd.aspx?id=277 (setup_316icr.exe)

1 / 68 (PUP)

http://www.pc18.com/index.php?m=poster&c=index&a=poster_click&siteid=1&id=12&url=http://.../rd.aspx?id=358 (qvod_354a0x.exe)

11 / 68 (PUP)

http://www.xiazaiba.com/.../aWQ9MjYy (setup_277trj.exe)

1 / 68 (PUP)

http://dt.tu8s.com/.../????????DS?????????_417w1f.exe (6c7022dc87d3cc18f9ca4411c0e2578a)

1 / 68 (PUP)

http://up.3c-automation.com.cn/.../game_261trm.exe (54ed764b1f023e78a484f0d651bfd744)

1 / 68 (PUP)

http://dt.tu8s.com/.../??IPAD???(iPadian)???_207z1t.exe (808c9f35d3c2888aff633c8cb7c650f4)

1 / 68 (PUP)

http://dt.tu8s.com/.../?????????_367e3v.exe (808c9f35d3c2888aff633c8cb7c650f4)

11 / 68 (PUP)

http://afptrack.alimama.com/clk?bid=0ab7411c0000577f6e2502b200bae318&pid=mm_115406906_14102322_56078039&cid=32645&mid=23739&oid=4561&productType=1&qytInfoMTime=1467903640&e=uU5gGhbTJ3Ksjluw4xAyS /.../t8FlOsnuHPjEy18bEJiz c6JjA==&k=121 (setup_277trj.exe)

1 / 68 (PUP)

http://dt.tu8s.com/.../????????????_417w1f.exe (808c9f35d3c2888aff633c8cb7c650f4)

1 / 68 (PUP)

http://dt.tu8s.com/.../???NETSHOW_367e3v.exe (808c9f35d3c2888aff633c8cb7c650f4)

1 / 68 (PUP)

http://www.baidu.com/cb.php?c=IgF_pyfqnHRdPjmknWT0IZ0qnfK9ujYkPW03rjcL0Aw-5HDvnj0YPWc0TAq15HDsnHc3Pjm0T1dBn1TdPWI-nvf4nymkP1ub0AwY5HDYPW6YnWR4rHn0IgF_5y9YIZ0lQzqbIa31rgKCULwEQh4-Iaqzua49TLK35v-b5HcdrfKzujYd0AFV5H00TZcqn0KdpyfqnHn4nHDYr0KEpyfqnH0snH6LPsKWpyfqn1ndnjRY0AqLUWYs0ZK45HDsPfKWThnqPjfsn16 (qvod_296qnx.exe)

3 / 68 (PUP)

http://dt.39photo.net/rd.aspx?id=210 (setup_303pk5.exe)

1 / 68 (PUP)

http://www.baidu.com/cb.php?c=IgF_pyfqnHRdPHcsrjb0IZ0qnfK9ujYkPHn1PjRv0Aw-5HDdP1f1nWc0TAq15HDsnjcknjm0T1YsPyDvujbkn1IbryRvPhu-0AwY5HDYPW6drHcsP1m0IgF_5y9YIZ0lQzqbIa31rgKCULwEQh4-Iaqzua49TLK35v-b5HnsnsKzujYknfKBUHYs0ZKz5H00Iy-b5HnsPW6vrjf0Uv-b5HDkrHTdPsKWpyfqPHc4n1f0ULI85H00TZbqnH0d0APzm1YzrHDznf (game_259oko.exe)

11 / 68 (PUP)

http://www.baidu.com/cb.php?c=IgF_pyfqnHRdPjmknWm0IZ0qnfK9ujYkPW03rjcY0Aw-5HDvnj0YPWm0TAq15HDsnHc3PHc0T1Y3rjK-P1nznHRzPyu9mhFW0AwY5HDYPWT4PjTkrjc0IgF_5y9YIZ0lQzqbIa31rgKCULwEQh4-Iaqzua49TLK35v-b5Hcvn0KzujYL0AFV5H00TZcqn0KdpyfqnHn4nHDYr0KEpyfqnH0snH6LPsKWpyfqPHD3P100ULI85H00TZbqnH0d0APzm1YvPjT3ns (setup_277trj.exe)

11 / 68 (PUP)

http://afptrack.alimama.com/clk?bid=0a67349c00005780dd8f1ed701973750&pid=mm_115406906_14102322_56074051&cid=32650&mid=23743&oid=4562&productType=1&qytInfoMTime=1467986439&e=hKk6Wj3yqHKMpq0A4M5XOy9Fsvytu/qkm2FTEtvImVQx3Kk75WhGFFc7t5fg/.../t8Flq9A55df8x7AbEJiz c6JjA==&k=121 (setup_277trj.exe)

1 / 68 (PUP)

http://www.baidu.com/cb.php?c=IgF_pyfqnHRdPjmknWR0IZ0qnfK9ujYkPW03rjc30Aw-5HDvnj0YPWR0TAq15HcvnHn3PWR0T1dhP1DvPjm3PWfLmHNbmH7B0AwY5HDYPW61PW6LPWb0IgF_5y9YIZ0lQzqbIa31rgKCULwEQh4-Iaqzua49TLK35v-b5HcvnfKzujYL0AFV5H00TZcqn0KdpyfqnHn4nHDYr0KEpyfqnH0snH6LPsKWpyfqP1Rv0AqLUWYs0ZK45HDsPfKWThnqn1m4rHm (qvod_296qnx.exe)

3 / 68 (PUP)

http://afptrack.alimama.com/clk?bid=0ab7411c000057847fef075000e66991&pid=mm_115406906_14102322_56074051&cid=32650&mid=23743&oid=4562&productType=1&qytInfoMTime=1468249243&e=y6o MuCOBTSsjluw4xAyS /.../t8Flq9A55df8x7AbEJiz c6JjA==&k=121 (setup_303roz.exe)

Latest 30 of 43 download URLs

Distribution

The following websites host and distribute files published by ZUNSHANG INFO TECH CO. LTD..

ss.cywl5.com

up.3c-automation.com.cn

dt.39photo.net

www.baidu.com

The following publishers (by Authenticode signature organization name) are related.

Beijing Sohu New Media Information Technology Co., Ltd.

Beijing baidu Netcom science and technology co.ltd

Baidu (China) Co., Ltd.

Shanghai Weilu Network Technology Co., Ltd.

广西南宁市昇泰安电子商务发展有限公司

重庆话语科技有限公司

Youbo Network Technology Co.,Ltd

Shanghai Zhenrui Network Technology Studio

上海冰狗网络科技有限公司

Changzhou Zunshang Information Technology Co., Ltd

Tencent Technology(Shenzhen) Company Limited

Shanghai Gaoxin Computer System Co.,ltd

Beijing Kingsoft Security software Co.,Ltd

GuangxiNanningshi Shengjuguangzaixian Info Tech Co.,LTD.

Shanghai kuaiping Network Technology Co., Ltd

SHANGRAO WANGJU TIANXIA TECHNOLOGY CO.,LTD.

SHANGHAI FENGHAN NETWORK INFORMATION TECHNOLOGY STUDIO

易书海

Xi'an TingXue Network Technology co., Ltd.

BEIJING QIYI CENTURY SCIENCE&TECHNOLOGY CO.,LTD.

ZhongXiang ZhiXing Network Service Co., Ltd.

刘诗诗

Youqu Network Technology Co.Ltd

Chongqing QuWan Technology Co., Ltd.

Yantai ZhengHao Network Technology Co.,Ltd.

Yantai Zhenghao Network Technology (Zhifu Branch) Co., LTD.

30 of 57 publishers

* Note, the details and description above are based on the code signing digital signature issued to ZUNSHANG INFO TECH CO. LTD. by WoSign CA Limited on March 10, 2016 with the serial number '4f1846359241387e3efe5a631480eefe'.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.