home

github

Publisher Information

github is a software publisher located in Sokar, Vadir in AO*. There is one additional code signing certificate issued to this publisher.
Authority:
github

Valid from:
5/27/2016 12:53:57 PM

Valid to:
5/28/2017 12:53:57 PM

Subject:
CN=www.github.com, O=github, L=Sokar, S=Vadir, C=AO

Issuer:
CN=www.github.com, O=github, L=Sokar, S=Vadir, C=AO

Serial number:
00c61014451a061296

Status:
Inconclusive detections from multiple engines

Scan engine
Details
Detections

Bkav FE
W32.HfsAtITA
50.00%

ESET NOD32
Win32/TrojanDownloader.Autoit.OBR (variant)
50.00%

Qihoo 360 Security
HEUR/QVM10.1.0000.Malware.Gen
50.00%

ESET NOD32
Win32/TrojanDownloader.Autoit.OBR trojan
50.00%

0 / 68
1475236982.exe  (6178317b875e90579b58315337370e0b)

0 / 68
sysgv.exe  (1b69dd6ae8452595428fd4a71edff057)

0 / 68
flashplayer_21.0.0.242_win-setup.exe  (1abc53c99fa413336173f278008dbad1)

0 / 68
flash_upgrade.exe  (5a382101d4bd093368f5fbf84100ad31)

0 / 68
cbwqugxyasc.exe  (1a54e0494aad9bb6d35c18de50ef877a)

1 / 68      (inconclusive)
boleto_19833002 formato pdf.exe  (575bd3a07a8787edf87feb9cffef24ff)

3 / 68      (inconclusive)
sac-protesto-br-processo-254885589548-052016.exe  (b5bf222539b6ad79331f1a184992e146)

0 / 68
sagx.exe  (01980918042c17fa5703157d2fd0d9a4)

Downloads URLs for files signed by github.

0 / 68
http://cdnfiles.4shared.com/web/cdn/popular/download/btEM0595ce?contDisp=attachment; filename="Flash_Upgrade.exe"; filename*=utf-8''Flash_Upgrade.exe&contType=APPLICATION/.../  (5a382101d4bd093368f5fbf84100ad31)

3 / 68      (inconclusive)
https://www.sugarsync.com/.../D3254443_166_822243801?directDownload=true  (sac-protesto-br-processo-254885589548-052016.exe)

0 / 68
https://www.4shared.com/web/directDownload/.../g3plsy.fa47bf0ea2113977bca79791b7200d4c  (flashplayer_21.0.0.242_win-setup.exe)

0 / 68
https://www.4shared.com/web/directDownload/.../fzt5c8.d155e20e525c918bd40dc6b3b99f1bad  (flash_upgrade.exe)

The following websites host and distribute files published by github.

cdnfiles.4shared.com

www.4shared.com

www.sugarsync.com

The following certificate is also signed by github.

0096523EFD638437BE  (Jun 23, 2016 to Jun 24, 2017)

The following publishers (by Authenticode signature organization name) are related.

SugarSync, Inc.

UNINFO SISTEMAS LTDA ME

Guangzhou Tieren Network Technology Co.,Ltd.

The Excellence Life Insurance Company

NSA

PasteBIN

Apple INC

INDUSTRIELLE ALLIANCE ASSURANCE ET SERVICES FINANCIERS INC.

think-cell Software GmbH

SAPO

Novinsoft, Inc.

* Note, the details and description above are based on the code signing digital signature issued to github by github on May 27, 2016 with the serial number '00c61014451a061296'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.