» Shulan Hou
Digital Signature
Analysis
Files (246)
Related (6)

Shulan Hou

Publisher Information

Shulan Hou is a software publisher located in Dingzhou, Hebei in China*. The company is a primary distributor of unwanted software. Thre are 45 additional code signing certificates issued to this publisher.

Authority:

DigiCert Inc

Valid from:

12/24/2014 1:00:00 AM

Valid to:

1/6/2016 1:00:00 PM

Subject:

CN=Shulan Hou, O=Shulan Hou, L=Dingzhou, S=Hebei, C=CN

Issuer:

CN=DigiCert SHA2 Assured ID Code Signing CA, OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:

0fb6fd4a80d186219716435ab3762fb2

Scanner detections:

Detections (100% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.ELEX.ShulanHou (M), PUP.ELEX.ShulanHo (M), PUP.ELEX.ShulanHo.Installer (M), PUP.ELEX (M)

100.00%

1 / 68 (Adware)

110748eb.exe (2564_food_omiga-plus by TabMain) (6870a854ad56cc9f82e0b0dc50daf1a6)

1 / 68 (Adware)

smt_istartsurf.exe (3004_smt_istartsurf by TabMain) (ba6310873852c6fd2a2c2860d82cf058)

1 / 68 (Adware)

ild_istartsurf.exe (2854_ild_istartsurf by TabMain) (f2eed1222628906cfb1c9bb06a9a76f3)

1 / 68 (Adware)

cvs2_mystartsearch.exe (3081_cvs2_mystartsearch by HTabp.com) (22c166b8c08433353f3d877174383f99)

1 / 68 (Adware)

smt_istartsurf.exe (3090_smt_istartsurf by HTabp.com) (f988f9a95987ec9739c5e5ebde1b0162)

1 / 68 (Adware)

mystartsearch.exe (3121_sky_mystartsearch by HTabp.com) (f2e484d764b4013a9238e37152ca4067)

1 / 68 (Adware)

adv_76.exe (3076_ima_mystartsearch by HTabp.com) (817c5e8f72dfe461dc3c87cc4da0e0ed)

1 / 68 (Adware)

unt8009.tmp.exe (3443_epom1_omniboxes by BaiSix) (7eefc4fd9b4276904c2eebdce7cd691a)

1 / 68 (Adware)

cvs2_mystartsearch.exe (2777_cvs2_mystartsearch by TabMain) (82368f2bb518b5f2b1870dfd923d23ac)

1 / 68 (Adware)

ex.exe (3119_adc_istartsurf by HTabp.com) (11e50dd693761921f5d3629d99a4ca62)

1 / 68 (Adware)

setup.exe (2606_smt_mystartsearch by TabMain) (0cdd5c97fe490f9dec01d392de2ca049)

1 / 68 (Adware)

amt_omniboxes.exe (3140_amt_omniboxes by HTabp.com) (263d1a15685c9d36c93306733109f7b2)

1 / 68 (Adware)

Worker.exe (2249_cvs4_webssearches by One Syn) (e7485e601998038e2165111040d861fa)

1 / 68 (Adware)

smt_mystartsearch.exe (3003_smt_mystartsearch by TabMain) (e410ea82942f2dcda79f81c67a5c4b0b)

1 / 68 (Adware)

ild_omiga-plus.exe (2356_ild_omiga-plus by One Syn) (f1d6316018509d0a3303530493bcce68)

1 / 68 (Adware)

untd292.tmp.exe (3356_epom1_omniboxes by HTabp.com) (9694f4cab68cffa9a32cf5b31ef0f9a2)

1 / 68 (Adware)

smt_mystartsearch.exe (3424_smt_mystartsearch by HTabp.com) (623c7c5b72da627a303a7c22eef5dc04)

1 / 68 (Adware)

smt_istartsurf.exe (fdd404ec172a880681408dda2bf3c26e)

1 / 68 (Adware)

smt_mystartsearch.exe (3003_smt_mystartsearch by TabMain) (fb679ba24ea6d64d8db7f76dd9da95ed)

1 / 68 (Adware)

cvs6_mystartsearch.exe (2844_cvs6_mystartsearch by TabMain) (1d207632b7b64b2ab9894c36670f135c)

1 / 68 (Adware)

adv_69.exe (2659_ima_omiga-plus by TabMain) (e9283cd3ea3d20b8f97de1aa9d2ea55c)

1 / 68 (Adware)

setup.exe (2606_smt_mystartsearch by TabMain) (d7aae5d466638c8d95a2993372c26431)

1 / 68 (Adware)

bpr_omniboxes.exe (3385_bpr_omniboxes by HTabp.com) (0cfcb9147ca1446ac25d646592937abd)

1 / 68 (Adware)

smt_mystartsearch.exe (2389_smt_mystartsearch by One Syn) (0a454dd9f36ff7eda39b61bdf00321fd)

1 / 68 (Adware)

setup.exe (2606_smt_mystartsearch by TabMain) (9b2b6140049aa3dd70a792300ae121b3)

1 / 68 (Adware)

ex.exe (3214_adc_istartsurf by ogu) (6f3bbff43d7fcd28d978c7a5fb3b14db)

1 / 68 (Adware)

ild_istartsurf.exe (3330_ild_istartsurf by HTabp.com) (81d20937af54a6c111745876c5585247)

1 / 68 (Adware)

ex.exe (2837_adc_istartsurf by TabMain) (81ee776190536e17bb778d2d9ff07d5c)

1 / 68 (Adware)

unt2907.tmp.exe (3358_epom3_omniboxes by HTabp.com) (43b8f30e7424dddf582465cf6523649d)

1 / 68 (Adware)

mystartsearch.exe (2627_sky_mystartsearch by TabMain) (d05658bf066dfb272ac52d106bfc1455)

Latest 30 of 246 files

The certificates below are also signed by Shulan Hou.

2A5B578B2DA9A441D2C1AECD265EEFBF (Jul 25, 2016 to Jun 14, 2017)

18DB51E9C16B714FFCB04CB5C35983FA (Oct 08, 2016 to Jun 14, 2017)

77C4983B630ECB2C08FBC858271E3D45 (Jul 20, 2016 to Jun 14, 2017)

74702DFF5D4056B847D009A2265FB1B3 (Jul 28, 2016 to Jun 14, 2017)

2F1AD76761251F239B649AF9F2D2627C (Aug 11, 2016 to Jun 14, 2017)

03254EAC08CFABB19414DAE3BD08D149 (Jul 18, 2016 to Jun 14, 2017)

21E3000980B30029C251639A0B0AF0FD (Aug 25, 2016 to Jun 14, 2017)

3261BAE34D602AACC22105B22CB5F2E9 (Sep 12, 2016 to Jun 14, 2017)

58D977998990941725A12A8E95E680E8 (Aug 22, 2016 to Jun 14, 2017)

462365CDA754706F2441F8D42815B0E8 (Sep 08, 2016 to Jun 14, 2017)

10 of 45 code signing certificates issued

The following publishers (by Authenticode signature organization name) are related.

* Note, the details and description above are based on the code signing digital signature issued to Shulan Hou by DigiCert Inc on December 24, 2014 with the serial number '0fb6fd4a80d186219716435ab3762fb2'.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.