» Ma Lin
Digital Signature
Analysis
Files (140)
Downloads (3)
Distribution (2)
Related (8)

Ma Lin

Publisher Information

Ma Lin is a software publisher located in 北京市, China*. The company is a primary distributor of unwanted software. Thre are 3 additional code signing certificates issued to this publisher.

Authority:

WoSign CA Limited

Valid from:

11/24/2014 4:00:56 AM

Valid to:

7/24/2015 5:00:56 AM

Subject:

CN=Ma Lin, L=北京市, S=北京市, C=CN

Issuer:

CN=WoSign Class 2 Code Signing CA, O=WoSign CA Limited, C=CN

Serial number:

26954ae19a551b1d622a23c25dbe2503

Scanner detections:

Detections (100% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.MaLin, PUP.MaLin (M), PUP.ELEX.MaLin (M), PUP.ELEX (M)

100.00%

MicroWorld eScan

Gen:Application.Elex.1

14.00%

Bitdefender

Gen:Application.Elex.1

14.00%

G Data

Gen:Application.Elex

14.00%

AVG

Generic

14.00%

Lavasoft Ad-Aware

Gen:Application.Elex.1

8.00%

F-Secure

Gen:Application.Elex.1

8.00%

McAfee

Artemis!202424C8C622, Artemis!47E016AC10F0, Artemis!E702FCAF961D

6.00%

F-Secure

Riskware.Gen:Application.Elex.1

6.00%

Dr.Web

Adware.Mutabaha.94

6.00%

1 / 68 (Adware)

cvs_webssearches.exe (2218_cvs_webssearches by SynWk) (0e31a4bc8d2c38d291181db97e46b0aa)

1 / 68 (Adware)

nsbes_webssearches.exe (2069_nsbes_webssearches by JWTab) (da00b04e40abd4c128283c3001490165)

1 / 68 (Adware)

cvs_webssearches.exe (2218_cvs_webssearches by SynWk) (5a80343e7e00a07e949cb2800751a61c)

1 / 68 (Adware)

2075_vtt_mystartsearch.exe (2075_vtt_mystartsearch by JWTab) (3cc5c4bd85536b01e1faa8e245ae94bd)

1 / 68 (Adware)

1cj1z8cuwt.exe (2213_exp_webssearches by SynWk) (4581d1088ee3bb5935bd3c88c947b4b5)

1 / 68 (Adware)

cvs4_webssearches.exe (2249_cvs4_webssearches by One Syn) (d20a1ffe1f12cd253e0c7f8a59484f11)

1 / 68 (Adware)

smt_mystartsearch.exe (2198_smt_mystartsearch by JWTab) (c099cae36073ea4544961cc32fba7d53)

1 / 68 (Adware)

lly_mystartsearch.exe (2202_tugs_mystartsearch by JWTab) (338ce6184d59e24316aa77c80f282570)

1 / 68 (Adware)

sfpsnew4_mystartsearch.exe (2066_sfpsnew4_mystartsearch by JWTab) (82c9e52ca9db255ef962b24cdbc015a2)

1 / 68 (Adware)

fhtjigqkzs.exe (2213_exp_webssearches by SynWk) (a60052ede36b4e29dcd98c954ef29185)

1 / 68 (Adware)

lly_mystartsearch.exe (2202_tugs_mystartsearch by JWTab) (77b302f6150e1f5853f69e8683ad2c49)

1 / 68 (Adware)

sfpsnew1_mystartsearch.exe (2063_sfpsnew1_mystartsearch by JWTab) (a9b532eb4c18ca3b1b64c22bc8defc79)

1 / 68 (Adware)

cvs_webssearches.exe (2187_cvs_webssearches by JWTab) (325debc7ec5b0afb338bb0ef53e71228)

1 / 68 (Adware)

squadm_omiga-plus.exe (1868_squadm_omiga-plus by JWTab) (707cb110ee33f01b6f37d4831a07ada9)

1 / 68 (Adware)

web searches.exe (2254_ika_webssearches by JWTab) (bf19a856fe64e6de6d6ea0c0519af86b)

1 / 68 (Adware)

omiga-plus.exe (2157_free_omiga-plus by One Syn) (b97442d1188d0e56185c41c6cdd38d14)

1 / 68 (Adware)

yooupujt4m.exe (2234_exp_webssearches by JWTab) (93f8a7c8dda42cc94e7b70f465fa1f5f)

1 / 68 (Adware)

ex.exe (2310_adc_omiga-plus by NaNi) (af53216fe2c1fb7c6b3f30007d63db13)

1 / 68 (Adware)

adv_48.exe (2277_step_mystartsearch by One Syn) (8430e212e3182c452572848fe5b58a13)

1 / 68 (Adware)

vtt_mystartsearch.exe (2235_vtt_mystartsearch by JWTab) (68084ee31a4ee4800a9cafd723e4a831)

1 / 68 (Adware)

omigaplus.exe (2259_ill_omiga-plus by JWTab) (58e33b1ed9c033072d8ed44dc7e9a43a)

1 / 68 (Adware)

kmp_webssearches.exe (2297_kmp_webssearches by JWTab) (3c66ee916a72bff1f0419ddac7406475)

1 / 68 (Adware)

cvs5_webssearches.exe (2250_cvs5_webssearches by One Syn) (c0eecacd030809cba79f67c06b0650d6)

1 / 68 (Adware)

amt_omiga-plus.exe (2262_amt_omiga-plus by One Syn) (e8653b16b0b8390c8e8395b7d46f2502)

1 / 68 (Adware)

vtt_mystartsearch.exe (2142_vtt_mystartsearch by One Syn) (bf59cd06ddfef967d8bdc7b15b3a7088)

1 / 68 (Adware)

cvs_webssearches.exe (2187_cvs_webssearches by JWTab) (7b1f944f0fedd408763ca375cd3a78ad)

1 / 68 (Adware)

mystartsearch.exe (1859_sky_mystartsearch by JWTab) (35b6e8610a61ba978396cb73a94c1631)

1 / 68 (Adware)

lly_mystartsearch.exe (2233_tugs_mystartsearch by JWTab) (ba42346904de0eb151d7100e60e1408f)

1 / 68 (Adware)

lly_omiga-plus.exe (2269_tugs_omiga-plus by JWTab) (1f2eed4efcef5391e889e1742d8143c9)

1 / 68 (Adware)

sfpsnew1_mystartsearch.exe (2063_sfpsnew1_mystartsearch by JWTab) (62da5717979010bff6f64724a92e124d)

Latest 30 of 140 files

Downloads URLs for files signed by Ma Lin.

1 / 68 (Adware)

http://www.girlliuxiaoqing.com/.../nsbes_webssearches.exe (da00b04e40abd4c128283c3001490165)

1 / 68 (Adware)

http://www.girlwurina.com/.../lly_mystartsearch.exe (ba42346904de0eb151d7100e60e1408f)

1 / 68 (Adware)

http://www.girlliuxiaoqing.com/.../sfpsnew1_mystartsearch.exe (62da5717979010bff6f64724a92e124d)

Distribution

The following websites host and distribute files published by Ma Lin.

www.girlwurina.com

www.girlliuxiaoqing.com

The certificates below are also signed by Ma Lin.

1972DAA9B51FE3DDD85BAF2096319CF6 (Jan 05, 2015 to Aug 05, 2015)

760E23ABF26CF75AE5C944881CCA6DA7 (Aug 20, 2014 to Jul 20, 2015)

0FC83FBFE11653F06215DCA7EACE7E7D (Jun 26, 2014 to Jun 26, 2015)

The following publishers (by Authenticode signature organization name) are related.

Liyan Liu

Beijing ELEX Technology Co., Ltd.

Li Mo

Hefei Zhimingxingtong Software&Technology Co., Ltd.

* Note, the details and description above are based on the code signing digital signature issued to Ma Lin by WoSign CA Limited on November 24, 2014 with the serial number '26954ae19a551b1d622a23c25dbe2503'.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.