» Riyue Tongxing Information Technology (Beijing) Co.,Ltd.
Digital Signature
Analysis
Files (22)
Downloads (347)
Distribution (19)
Related (46)

Riyue Tongxing Information Technology (Beijing) Co.,Ltd.

Publisher Information

Riyue Tongxing Information Technology (Beijing) Co.,Ltd. is a software publisher located in Beijing, China*. A majority of the programs developed by the company can be classified as adware or other potentially unwanted programs. There is one additional code signing certificate issued to this publisher.

Authority:

WoSign CA Limited

Valid from:

11/2/2015 4:43:59 PM

Valid to:

11/2/2016 4:43:59 PM

Subject:

CN="Riyue Tongxing Information Technology (Beijing) Co.,Ltd.", O="Riyue Tongxing Information Technology (Beijing) Co.,Ltd.", STREET="B801A,8F,Block B,S&T Fortune Center,No.8,Xueqing Road,Haidian District", PostalCode=100083, L=Beijing, S=Beijing, C=CN, SERIALNUMBER=110108011321704, OID.2.5.4.15=Private Organization, OID.1.3.6.1.4.1.311.60.2.1.1=Beijing, OID.1.3.6.1.4.1.311.60.2.1.2=Beijing, OID.1.3.6.1.4.1.311.60.2.1.3=CN

Issuer:

CN=WoSign EV Code Signing CA, O=WoSign CA Limited, C=CN

Serial number:

52dc4c31f7609af339ef3228bd510b83

Scanner detections:

Detections (100% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.Gaofenquming (M)

59.09%

IKARUS anti.virus

PUA.Gaofenquming

31.82%

Rising Antivirus

PE:Malware.Generic(Thunder)!1.A1C4 [F], PE:Malware.Generic/QRS!1.9E2D [F], Malware.Generic!fOQQk4IwuzE@4 (thunder)

27.27%

ESET NOD32

Win32/Gaofenquming.B potentially unwanted (variant)

27.27%

Emsisoft Anti-Malware

Gen:Variant.Symmi.60792

27.27%

G Data

Gen:Variant.Symmi.60792, Win32.Application.RiyueDowner

27.27%

avast!

Win32:Malware-gen, Win32:Evo-gen [Susp]

27.27%

MicroWorld eScan

Gen:Variant.Symmi.60792

22.73%

K7 AntiVirus

Adware

22.73%

Bitdefender

Gen:Variant.Symmi.60792

22.73%

1 / 68 (PUP)

Setup.exe (downer for windows by Riyue Tongxing Information Technology (Beijing) Co.,Ltd) (5aeb25bb73893c0655157d2b1c59998f)

1 / 68 (PUP)

office2016_wps_8100000088707035361.exe (downer for windows by Riyue Tongxing Information Technology (Beijing) Co.,Ltd) (f16cecdfb47c13a0600c3780c826e35f)

1 / 68 (PUP)

c4a8d6f9796de496d1e8bba4b8e57c5d301a2d02 (downer for windows by Riyue Tongxing Information Technology (Beijing) Co.,Ltd) (64a392f7015dd3a9af916205c3fd8d5a)

1 / 68 (PUP)

office 2010_21@403816.exe (downer for windows by Riyue Tongxing Information Technology (Beijing) Co.,Ltd) (0e526b8491eecb02576c4747fbdf34f9)

1 / 68 (PUP)

口袋妖怪黑白2_49@96799.exe (downer for windows by Riyue Tongxing Information Technology (Beijing) Co.,Ltd) (d20086c851178a094f383b5ac4fd0f54)

1 / 68 (PUP)

wirelessmon中文版_31@30519.exe (downer for windows by Riyue Tongxing Information Technology (Beijing) Co.,Ltd) (460e2f60ab7c1666516d1413becb957b)

1 / 68 (PUP)

qt4.6.22.17784_8100000440907017999.exe (downer for windows by Riyue Tongxing Information Technology (Beijing) Co.,Ltd) (3ba3f3bbb7bad09b0eccc4ef5eaec766)

21 / 68 (PUP)

osnlfuzu.exe (downer for windows by Riyue Tongxing Information Technology (Beijing) Co.,Ltd) (d41981ea2fc45e6c11a6e1fed330856b)

1 / 68 (PUP)

愤怒的小鸟2012季节版v2_49@7088.exe (downer for windows by Riyue Tongxing Information Technology (Beijing) Co.,Ltd) (56a848835e059bcb625f79e44bcc890a)

1 / 68 (PUP)

totalmedia_31@19747.exe (downer for windows by Riyue Tongxing Information Technology (Beijing) Co.,Ltd) (a4fd038dc63a18c355c26aa5d20fd09e)

3 / 68 (PUP)

360安全卫士_5100000379737067280.exe (downer for windows by Riyue Tongxing Information Technology (Beijing) Co.,Ltd) (67d03670f35ff02b97592827c199655a)

1 / 68 (PUP)

bitcomet_1.42_x86_setup_8100000082647069200.exe (downer for windows by Riyue Tongxing Information Technology (Beijing) Co.,Ltd) (e382b1767fbe7c77d680af7bd6dddd0e)

4 / 68 (PUP)

5d4546a496f155bfee6a6680baa72d5f4e3c1e55 (downer for windows by Riyue Tongxing Information Technology (Beijing) Co.,Ltd) (4d9b0ef4074a0e2ccb9e1943dbf86da6)

1 / 68 (PUP)

xl7.9updateto9.0.9.exe.td (downer for windows by Riyue Tongxing Information Technology (Beijing) Co.,Ltd) (45a864a8de9771e6941ed8771896bbe9)

5 / 68 (PUP)

ec977d393d0952e0140a724959790c54d5821a5a (downer for windows by Riyue Tongxing Information Technology (Beijing) Co.,Ltd) (efcf1a89e8ef3ffdd935954e0fd4b569)

1 / 68 (PUP)

3thelqxn.exe (downer for windows by Riyue Tongxing Information Technology (Beijing) Co.,Ltd) (bd6f4f82babe0bf7d1a94365503e6cfa)

15 / 68 (PUP)

sogou_pinyin_79c_8100000377427033054.exe (downer for windows by Riyue Tongxing Information Technology (Beijing) Co.,Ltd) (e382b1767fbe7c77d680af7bd6dddd0e)

14 / 68 (PUP)

超级兔子2013 2.0.0.3_3@2636.exe (downer for windows by Riyue Tongxing Information Technology (Beijing) Co.,Ltd) (c80758fbf3932987ecb195198a00c884)

15 / 68 (PUP)

winrar_5.30_8100000001687019769.exe (downer for windows by Riyue Tongxing Information Technology (Beijing) Co.,Ltd) (2ea315ceacfdd901c9dcea161d9f3e8f)

10 / 68 (PUP)

ios模拟器电脑版_31@166677.exe (downer for windows by Riyue Tongxing Information Technology (Beijing) Co.,Ltd) (92ddfff8d431946fa51d42b6d6765394)

10 / 68 (PUP)

vtut6rg9.exe (downer for windows by Riyue Tongxing Information Technology (Beijing) Co.,Ltd) (ab2870738cd59e8b3fe02ff53f37b13e)

4 / 68 (PUP)

downer_20@51048.exe (downer for windows by Riyue Tongxing Information Technology (Beijing) Co.,Ltd) (75550917082e49979ee8678c97ab5cb1)

Downloads URLs for files signed by Riyue Tongxing Information Technology (Beijing) Co.,Ltd..

1 / 68 (PUP)

http://dl.dhfszh.com/.../Adobe Flash Player_18@2116.exe (460e2f60ab7c1666516d1413becb957b)

15 / 68 (PUP)

http://c5.97you.net/.../???30???_36@7216.exe (e382b1767fbe7c77d680af7bd6dddd0e)

15 / 68 (PUP)

http://dl.pconline.com.cn/intf/.../downLoadTool.jsp?masterId=8264&ipType=1&riYueToken=0tC5O9Et (sogou_pinyin_79c_8100000377427033054.exe)

1 / 68 (PUP)

http://c1.9377wan.cn/.../SanteDICOMEditor_1@570383.exe (460e2f60ab7c1666516d1413becb957b)

15 / 68 (PUP)

http://c2.9377wan.cn/.../???????_31@168519.exe (e382b1767fbe7c77d680af7bd6dddd0e)

1 / 68 (PUP)

http://dl.wylbdml.com/.../????_31@3106.exe (460e2f60ab7c1666516d1413becb957b)

15 / 68 (PUP)

http://dl.pconline.com.cn/intf/.../downLoadTool.jsp?masterId=51224&ipType=1&riYueToken=BqSaeEmc (sogou_pinyin_79c_8100000377427033054.exe)

15 / 68 (PUP)

http://dlc2.pconline.com.cn/filedown3_91039_17010773/.../BaiduYun_3.9.6_5100000910397010773.exe (e382b1767fbe7c77d680af7bd6dddd0e)

15 / 68 (PUP)

http://c4.97you.net/.../D3DWindower_3@39421.exe (e382b1767fbe7c77d680af7bd6dddd0e)

15 / 68 (PUP)

http://c5.97you.net/.../solarwinds??? 10.0 (????)_54@81160.exe (e382b1767fbe7c77d680af7bd6dddd0e)

15 / 68 (PUP)

http://c5.97you.net/.../office_11@48963.exe (e382b1767fbe7c77d680af7bd6dddd0e)

15 / 68 (PUP)

http://dl.pconline.com.cn/intf/.../downLoadTool.jsp?masterId=51224&ipType=1&riYueToken=f1reBzgE (sogou_pinyin_79c_8100000377427033054.exe)

1 / 68 (PUP)

http://dl.pconline.com.cn/intf/.../downLoadTool.jsp?masterId=8264&ipType=1&riYueToken=k6T56xQr (wirelessmon中文版_31@30519.exe)

15 / 68 (PUP)

http://dl.pconline.com.cn/intf/.../downLoadTool.jsp?masterId=90131&ipType=1&riYueToken=IFTnQ33R (sogou_pinyin_79c_8100000377427033054.exe)

15 / 68 (PUP)

http://dlc2.pconline.com.cn/filedown3_9882_17100953/.../BitTorrent_5100000098827100953.exe (e382b1767fbe7c77d680af7bd6dddd0e)

15 / 68 (PUP)

http://c2.9377wan.cn/.../setup_33@76436.exe (e382b1767fbe7c77d680af7bd6dddd0e)

1 / 68 (PUP)

http://cl2.cjsdxz.com/.../X-Scan_1@1498.exe (460e2f60ab7c1666516d1413becb957b)

1 / 68 (PUP)

http://cl2.qnxzq.com/.../OBS_61@91057.exe (460e2f60ab7c1666516d1413becb957b)

15 / 68 (PUP)

http://c5.97you.net/.../??4?????_58@867.exe (e382b1767fbe7c77d680af7bd6dddd0e)

15 / 68 (PUP)

http://dl.pconline.com.cn/intf/.../downLoadTool.jsp?masterId=8264&ipType=1&riYueToken=LZQaKa8t (sogou_pinyin_79c_8100000377427033054.exe)

1 / 68 (PUP)

http://dlc2.pconline.com.cn/filedown3_90565_27097695/.../kugou_k14327359_1381606_5200000905657097695.exe (460e2f60ab7c1666516d1413becb957b)

15 / 68 (PUP)

http://dl.pconline.com.cn/intf/.../downLoadTool.jsp?masterId=3771&ipType=1&riYueToken=QpScqX6z (sogou_pinyin_79c_8100000377427033054.exe)

15 / 68 (PUP)

http://c5.97you.net/.../???????1.30???_36@80743.exe (e382b1767fbe7c77d680af7bd6dddd0e)

15 / 68 (PUP)

http://c1.97you.net/.../EDrawFlowchartSoftware_1@56251.exe (e382b1767fbe7c77d680af7bd6dddd0e)

1 / 68 (PUP)

https://dl.cjsdxz.com/.../?????????W2kXpCJK_1@29126.exe (460e2f60ab7c1666516d1413becb957b)

15 / 68 (PUP)

http://c1.97you.net/.../DirectX_1@5288.exe (e382b1767fbe7c77d680af7bd6dddd0e)

1 / 68 (PUP)

http://cl2.cjsdxz.com/.../H-EFSRecovery(??efs????)_1@382610.exe (460e2f60ab7c1666516d1413becb957b)

15 / 68 (PUP)

http://dlc2.pconline.com.cn/filedown3_10103_17003983/.../picasa39-setup_5100000101037003983.exe (e382b1767fbe7c77d680af7bd6dddd0e)

15 / 68 (PUP)

http://c2.9377wan.cn/.../Dreamweaver_51@72633.exe (e382b1767fbe7c77d680af7bd6dddd0e)

1 / 68 (PUP)

https://dl.cjsdxz.com/.../????????_1@519794.exe (460e2f60ab7c1666516d1413becb957b)

Latest 30 of 347 download URLs

Distribution

The following websites host and distribute files published by Riyue Tongxing Information Technology (Beijing) Co.,Ltd..

ftp16-dg.pcgames.com.cn

ftp-idc.pconline.com.cn

dlc2.pconline.com.cn

The following certificate is also signed by Riyue Tongxing Information Technology (Beijing) Co.,Ltd..

55950E596B6D1EB045BBED7DEE696932 (Nov 02, 2015 to Nov 02, 2016)

The following publishers (by Authenticode signature organization name) are related.

Riyue peer information technology (Beijing) Co., Ltd

Wang Xin'gang

Qihoo 360 Software (Beijing) Company Limited

Disc Soft Ltd

Xing Wang

ShenZhen Thunder Networking Technologies Ltd.

Chongqing Yifei Technology Co., Ltd.

Zhuhai Kingsoft Office Software Co.,Ltd

CPUID

BEIJING QIYI CENTURY SCIENCE&TECHNOLOGY CO.,LTD.

Shenzhen QVOD Technology Co.,Ltd

Tencent Technology(Shenzhen) Company Limited

Foxit Software Incorporated

Wiziple software

BeiJing Baidu Netcom Science Technology Co., Ltd

SANDBOXIE L.T.D

上海广乐网络科技有限公司

GuangZhou KuGou Computer Technology Co.,Ltd.

Guangzhou Tieren Network Technology Co.,Ltd.

Connectify

GRETECH

Maanshan Zhiye Software Technology Co.,Ltd.

Xiao Fei

北京悠然天地科技有限公司

sina.com Technology(China)Co.,ltd

Shenzhen Thinksky Technology Co.,Ltd

30 of 46 publishers

* Note, the details and description above are based on the code signing digital signature issued to Riyue Tongxing Information Technology (Beijing) Co.,Ltd. by WoSign CA Limited on November 02, 2015 with the serial number '52dc4c31f7609af339ef3228bd510b83'.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.