3thelqxn.exe
downer for windows
Riyue Tongxing Information Technology (Beijing) Co.,Ltd.
The file 3thelqxn.exe by Riyue Tongxing Information Technology (Beijing) Co.,Ltd has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat.
Product:
downer for windows
MD5:
bd6f4f82babe0bf7d1a94365503e6cfa
SHA-1:
c53721edac55c46dc951288272a084deadc49694
Scanner detections:
1 / 68
Status:
Potentially unwanted
Analysis date:
5/21/2024 6:30:43 PM UTC (today)
Scan engine
Detection
Engine version
Reason Heuristics
PUP.Gaofenquming (M)
16.10.13.15
File size:
1002.8 KB (1,026,896 bytes)
Copyright:
Riyue Tongxing Information Technology (Beijing) Co.,Ltd.
Original file name:
downer
Language:
Chinese (Simplified, PRC)
Common path:
C:\users\{user}\appdata\local\temp\3thelqxn.exe.part
Authority:
WoSign CA Limited
Valid from:
11/2/2015 4:43:59 PM
Valid to:
11/2/2016 4:43:59 PM
Subject:
CN="Riyue Tongxing Information Technology (Beijing) Co.,Ltd.", O="Riyue Tongxing Information Technology (Beijing) Co.,Ltd.", STREET="B801A,8F,Block B,S&T Fortune Center,No.8,Xueqing Road,Haidian District", PostalCode=100083, L=Beijing, S=Beijing, C=CN, SERIALNUMBER=110108011321704, OID.2.5.4.15=Private Organization, OID.1.3.6.1.4.1.311.60.2.1.1=Beijing, OID.1.3.6.1.4.1.311.60.2.1.2=Beijing, OID.1.3.6.1.4.1.311.60.2.1.3=CN
Issuer:
CN=WoSign EV Code Signing CA, O=WoSign CA Limited, C=CN
Serial number:
52DC4C31F7609AF339EF3228BD510B83