home

上海游窝信息科技有限公司

Publisher Information

上海游窝信息科技有限公司 is a software publisher located in Shanghai, China*. Thre are 2 additional code signing certificates issued to this publisher.
Authority:
Thawte, Inc.

Valid from:
5/28/2014 8:00:00 AM

Valid to:
5/29/2015 7:59:59 AM

Subject:
CN=上海游窝信息科技有限公司, O=上海游窝信息科技有限公司, L=Shanghai, S=Shanghai, C=CN

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
3d83199431c4a0ac1748ff6257f4275e

Status:
Inconclusive detections from multiple engines

Scan engine
Details
Detections

Kaspersky
Trojan-Dropper.Win32.Gamedrop
50.00%

Vba32 AntiVirus
Trojan.KillAV
16.67%

MicroWorld eScan
Trojan.Generic.16398888
16.67%

nProtect
Trojan-Dropper/W32.Gamedrop.1008784
16.67%

K7 AntiVirus
Riskware
16.67%

Arcabit
Trojan.Generic.DFA3A28
16.67%

Bitdefender
Trojan.Generic.16398888
16.67%

NANO AntiVirus
Trojan.Win32.Siggen6.dzssbt
16.67%

Lavasoft Ad-Aware
Trojan.Generic.16398888
16.67%

Emsisoft Anti-Malware
Trojan.Generic.16398888
16.67%

0 / 68
17210.exe  (2caf76ea53faa4a4ea465903cf0d7a62)

0 / 68
yxdown.com_sanguoqunying7_cht.exe  (7fa48976130f302b52abdc99efd4eba3)

0 / 68
YouXun.exe  (d4c796efd25a647aba522f1a6ba84cd4)

0 / 68
metalgearrisingrevengeancev1_chs_setup.exe  (712733fcec34efc0f51bbe26ea1f090a)

0 / 68
开始游戏.exe (by www.yxdown.com)  (3a9537bbc6c86df776962f96807310f1)

0 / 68
32435.exe  (39eb8601326fe2e67667caf176ef6795)

1 / 68      (inconclusive)
66093.exe  (47c3b62a8aac9281459140e9e64e2cd2)

1 / 68
shouji56_nulishaonvxihhb.exe  (cd2c5ad6573456e2a9a8f16c78c53937)

15 / 68    (PUP)
开始游戏.exe (by www.yxdown.com)  (7bd23a8f0c8e121793cb38b4110d11aa)

0 / 68
netframework合集.exe  (d243b9cf0648709bae736cb6809cd263)

0 / 68
trz94a5.tmp  (aa25cb05bb087bc705221baf2165bbaa)

0 / 68
watchdogs_chs_setup.exe  (64f079a1e60b586d2dff3133cf3310d7)

1 / 68
setup.exe  (75bfdfffb23f92c3143cd9ac788aaa7c)

0 / 68
wolfensteintheoldblood_chsv2.0_setup.exe  (779b751f99e24e2c4a18b79601d5549a)

0 / 68
yxdown.com_warhammer40000regicide_en.exe  (a530a4165baf1539737a27d68f37765f)

0 / 68
yxdown.com_gameofthronesatelltalegamesseries_chs.exe  (000f084ce62ffdd62053ae2f062f7d2e)

0 / 68
yxdown.com_citiesskylinesv1.0.5_chs2.5.exe  (fae59d5b71bdd81fc191958237c5bb12)

0 / 68
battle_realms_f.exe  (88923eb26bb2554f19bd7283a5aa94b1)

0 / 68
开始游戏.exe (by www.yxdown.com)  (59b622a9995a33fe2d701986d54ad90a)

0 / 68
华夏风云-精修版.exe  (f24c8229aca1b2c969f81cc482ef1eda)

0 / 68
shinsangokumusou7_cht_setup.exe  (8e78984689029fbca452d73959f222a4)

0 / 68
farcry2_chsv1.02_setup.exe  (11b81880fe5d9351089f2f4f9cffae06)

0 / 68
yxdown.com_csonst_chsv2.1.exe  (e1e2cf9e0c6d792ac209fc4bc11ba870)

0 / 68
47582.exe  (c42e1578059e46d83aa7aa6c0c154891)

0 / 68
33750.exe  (4dc1e16b96483ade7a012701ca71380f)

0 / 68
shouji56_xaindanjiazhibo.exe  (d2a427c2528c417bd2f3bf67d09925a6)

0 / 68
54358.exe  (820971b4a872bb3f16ed61ccbe576f24)

0 / 68
开始游戏.exe (by www.yxdown.com)  (06d9e00f968d11c661fe98ff139ebab4)

1 / 68      (inconclusive)
开始游戏.exe (by www.yxdown.com)  (433b7c0bfe6504f8492cb396b806fa44)

1 / 68      (inconclusive)
开始游戏.exe (by www.yxdown.com)  (0adb5496c3e591f1007975d75eda0213)

 
Latest 30 of 319 files

Downloads URLs for files signed by 上海游窝信息科技有限公司.

0 / 68
http://box64.yxdown.cn/.../17210.exe  (2caf76ea53faa4a4ea465903cf0d7a62)

0 / 68
http://box64.yxdown.cn/.../32435.exe  (39eb8601326fe2e67667caf176ef6795)

0 / 68
http://www.shouji56.com/d?id=212937  (shouji56_xaindanjiazhibo.exe)

0 / 68
http://box64.yxdown.cn/.../54358.exe  (820971b4a872bb3f16ed61ccbe576f24)

0 / 68
http://box64.yxdown.cn/.../69474.exe  (61e1362d392adfc4b106d24b338d9524)

The certificates below are also signed by 上海游窝信息科技有限公司.

64691980F470928AB46BFA717C739F98  (Sep 18, 2013 to Dec 19, 2014)

40331C1849D0E74E9793CEF9F62216  (Dec 05, 2012 to Dec 06, 2013)

* Note, the details and description above are based on the code signing digital signature issued to 上海游窝信息科技有限公司 by Thawte, Inc. on May 28, 2014 with the serial number '3d83199431c4a0ac1748ff6257f4275e'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.