» Xi'an TingXue Network Technology co., Ltd.
Digital Signature
Files (32)
Downloads (16)
Distribution (4)
Related (62)

Xi'an TingXue Network Technology co., Ltd.

Publisher Information

Xi'an TingXue Network Technology co., Ltd. is a software publisher located in Xi'an, Shaanxi in China*. Thre are 2 additional code signing certificates issued to this publisher.

Authority:

WoSign CA Limited

Valid from:

5/6/2015 5:35:18 PM

Valid to:

5/6/2016 6:35:18 PM

Subject:

CN="Xi'an TingXue Network Technology co., Ltd.", O="Xi'an TingXue Network Technology co., Ltd.", L=Xi'an, S=Shaanxi, C=CN

Issuer:

CN=WoSign Class 3 Code Signing CA, O=WoSign CA Limited, C=CN

Serial number:

335183f94c563b4721865b606129efba

Status:

Inconclusive detections from multiple engines

Scan engine

Details

Detections

Comodo Security

Application.Win32.MeinV.AK

92.86%

avast!

Win32:Evo-gen [Susp]

57.14%

Dr.Web

Trojan.Upload.106, Trojan.Upload.107

35.71%

Microsoft Security Essentials

SoftwareBundler:Win32/Xiazai

21.43%

McAfee

Artemis!FDE23A45B46D, Artemis!EDC32C794515, Artemis!EF1E53094BE2

21.43%

Clam AntiVirus

Win.Trojan.Agent-953715, Win.Downloader.84425-1

14.29%

AegisLab AV Signature

Troj.NSIS.StartPage

14.29%

IKARUS anti.virus

Trojan.SuspectCRC

14.29%

Bkav FE

W32.ExecPriD.Trojan

7.14%

Zillya! Antivirus

Downloader.DownloadHelper.Win32.2494

7.14%

0 / 68

qiqiGameBox.exe (253f605a429c3cea64d2cd344033dc8d)

4 / 68 (PUP)

setup_3981x.exe (ef1e53094be270ef4884d01853038804)

4 / 68 (PUP)

setup_3981x.exe (edc32c79451596fcd3a753f96f585c92)

0 / 68

processwork.dll (c0e71f646ac0bdccc174f161aad392f7)

7 / 68 (PUP)

setup_6124z.exe (fde23a45b46daa0d1c0a48bef5f1c9a0)

0 / 68

processwork.dll (681bd8eb37215d9ded2e8b951220234b)

4 / 68 (inconclusive)

setup_2499x.exe (3c9b6bef1eb25c6aa76523e06485670c)

0 / 68

processwork.dll (79f2dba7941d42b5f66976a219d62702)

0 / 68

processwork.dll (3d73134a09170ffb51c23e4572cff984)

0 / 68

setup_6124x.exe (dcec2a8240e03f7ad58f0c7a1c5f20d7)

0 / 68

setup_6124x.exe (292715973e4aac26a1f34172707724de)

3 / 68 (PUP)

setup_6124x.exe (8f4f4fb58970974e63ac74f3a6c73b0b)

3 / 68 (inconclusive)

uninst.exe (62eeaaf637877a5f147db98d76e37d1e)

0 / 68

commlib.dll (CommLib.dll) (62850946ae2c139a15b317a0d5347f64)

2 / 68

setup_6124x.exe (7a1f782fa6550fac799a13aeb41481c8)

1 / 68

uninst.exe (ccd667b7953e7cce50cd1c7e163a8756)

0 / 68

qiqiGameBox.exe (93312e0e5e80e740c40e4f5416b0a3a0)

0 / 68

commlib.dll (CommLib.dll) (68d1ce2f14b25660dcb97333638e11e8)

2 / 68

setup_6124x.exe (afa0b6129eb9d618168287f96fc16f33)

0 / 68

processwork.dll (c860f4666cfb8c3b22d2309bc7899a84)

0 / 68

setup_6124x.exe (d3927d48a9c0204b2f84b7152ddf23de)

0 / 68

system.dll (8e529ae5fa2e1de5d3c314a69cbb2bda)

0 / 68

processwork.dll (519894b1480b732804922f6f2ac431f0)

0 / 68

ontop.dll (4a934631dbd1d7eda68296073d336d5b)

0 / 68

nsdialogs.dll (c2b17d9b25d5b07d2b87d91d42443699)

1 / 68

inetc.dll (b714ac1b36133695529f105cc5d47e17)

0 / 68

dui.dll (4480886ccf12c4960ef4ddb47832d03e)

2 / 68

setup_6124x.exe (f3064c34a1fac62cb720c6a9aefed6d2)

0 / 68

jfgamebox.exe (93ad08b164ce349d26ae09e5e8cdc07e)

3 / 68 (inconclusive)

setup_8767x.exe (b6eff57c6d15a4ac88302abea822437f)

Latest 30 of 32 files

Downloads URLs for files signed by Xi'an TingXue Network Technology co., Ltd..

0 / 68

http://www.baidu.com/cb.php?c=IgF_pyfqnHRdnj03Pjm0IZ0qnfK9ujYkPHn1PjRv0Aw-5HDdP1f1nWc0TAq15HDsnjcknjm0T1d9ujf4ujwhPhfYmhDLrHn30AwY5HDYPH0zrjmYPjc0IgF_5y9YIZ0lQzqbUa4hUZbsrjm8mvqVQvf8TA9s5v-b5HmknWf0ThfqrHb40AFV5H00TZcqn0Kdpyfqn10vrjm3P0KEpyfqnHD4P1RL0APGujYdnWb1P0KEIv3qnHDdrjnv0ZK45HDsPfKWThnqnWmdnjD (setup_6124x.exe)

0 / 68

http://www.baidu.com/cb.php?c=IgF_pyfqnHRdnjbkP1D0IZ0qnfK9ujYkrHb4PH0s0Aw-5HckPHRsPH00TAq15HDkPWmknHR0T1Y4PWDvnWRYuHKbP1-hmWT30AwY5HDYPHnsnWmYP1n0IgF_5y9YIZ0lQzqbUa4hUZbsrjm8mvqVQvf8TA9s5v-b5Hc1rj00ThfqP6KBUHYs0ZKz5H00Iy-b5HczPWTvPW60Uv-b5HcznHD40APGujYYPjmkrHm0ULI85H00TZbqnH0d0APzm1Y1Pjf4Ps (setup_6124x.exe)

0 / 68

http://dl.fly086.com/ul.php?id=9982&u=aHR0cDovL3R4Y2RuLnFpcWlyaWxpLmNvbS9kb3dubG9hZC9TZXR1cF85OTgyeC5leGU= (setup_6124x.exe)

0 / 68

http://www.baidu.com/cb.php?c=IgF_pyfqnHRdnjbkP1D0IZ0qnfK9ujYkrHb4PH0s0Aw-5HckPHRsPH00TAq15HDkPWmknHR0T1d9rAu9mW6LujF-rAN-uH610AwY5HDYPH03P1Rvn1c0IgF_5y9YIZ0lQzqbUa4hUZbsrjm8mvqVQvf8TA9s5v-b5Hc1rj00ThfqPsKBUHYs0ZKz5H00Iy-b5HczPWTvPW60Uv-b5HcznHD40APGujYYPjmkrHm0ULI85HckPHT10ZK45HDsPfKWThnqPH01nWn (setup_6124x.exe)

2 / 68

http://www.baidu.com/cb.php?c=IgF_pyfqnHRdnj03Pjm0IZ0qnfK9ujYkPHn1PjRv0Aw-5HDdP1f1nWc0TAq15HDsnjcknjm0T1dBrjNhm1f1mW03nymdPjw-0AwY5HDYPHc1njbLrjb0IgF_5y9YIZ0lQzqbUa4hUZbsrjm8mvqVQvf8TA9s5v-b5HmknWf0ThfqrHb40AFV5H00TZcqn0Kdpyfqn10vrjm3P0KEpyfqnHD4P1RL0APGujYdnWb1P0KEIv3qn0KsXHYknjR0mLFW5HR1rHbY (setup_6124x.exe)

0 / 68

http://dl.fly086.com/ul.php?id=1292&u=aHR0cDovL3R4Y2RuLnFpcWlyaWxpLmNvbS9kb3dubG9hZC9TZXR1cF8xMjkyeC5leGU= (setup_6124x.exe)

3 / 68 (PUP)

http://www.xiazaiba.com/.../aWQ9Mzk4MQ== (setup_3981x.exe)

2 / 68

http://www.baidu.com/cb.php?c=IgF_pyfqnHRdnj03Pjm0IZ0qnfK9ujYkPHn1PjRv0Aw-5HDdP1f1nWc0TAq15HDsnjcknjm0T1YvrjT4uAm3nWK-mWbkm1w-0AwY5HDYPjbkn1DYrHD0IgF_5y9YIZ0lQzqbUa4hUZbsrjm8mvqVQvf8TA9s5v-b5HmknWf0ThfqrHb40AFV5H00TZcqn0Kdpyfqn10vrjm3P0KEpyfqnHD4P1RL0APGujYdnWb1P0KEIv3qnHDdrjnv0ZK45HDsPfKWThnqPj0kPWR (setup_6124x.exe)

4 / 68 (inconclusive)

http://www.xiazaiba.com/.../aWQ9Mzk4MQ== (setup_2499x.exe)

0 / 68

http://dl.fly086.com/d.php?id=6170 (setup_6124x.exe)

0 / 68

http://dl.fly086.com/ul.php?id=8767&u=aHR0cDovL3R4Y2RuLnFpcWlyaWxpLmNvbS9kb3dubG9hZC9TZXR1cF84NzY3eC5leGU= (setup_6124x.exe)

2 / 68

http://www.baidu.com/cb.php?c=IgF_pyfqnHRdnjbkP1D0IZ0qnfK9ujYkrHb4PH0s0Aw-5HckPHRsPH00TAq15HDkPWmknHR0T1Y4nyubmHcYm19brARvuhRk0AwY5HDYPHckPHbdn1b0IgF_5y9YIZ0lQzqbUa4hUZbsrjm8mvqVQvf8TA9s5v-b5Hc1rj00ThfqrHb40AFV5H00TZcqn0KdpyfqnWcvP1mvr0KEpyfqnWcknHb0mv-b5HfYPWD4P6KEIv3qn0KsXHYknjR0mLFW5Hn3rjcd (setup_6124x.exe)

2 / 68

http://www.baidu.com/cb.php?c=IgF_pyfqnHRdnj03Pjm0IZ0qnfK9ujYkPHn1PjRv0Aw-5HDdP1f1nWc0TAq15HDsnjcknjm0T1Y3PAPhnjRLPH7-nAD4PADd0AwY5HDYPj6LrHczrjm0IgF_5y9YIZ0lQzqbUa4hUZbsrjm8mvqVQvf8TA9s5v-b5HmknWf0ThfqPsKBUHYs0ZKz5H00Iy-b5HnsPW6vrjf0Uv-b5HDkrHTdPsKWpyfqPHc4n1f0ULI85HDkPH61P6KsXHYknjR0mLFW5HcvnjT1 (setup_6124x.exe)

2 / 68

http://www.baidu.com/cb.php?c=IgF_pyfqnHRdnj03Pjm0IZ0qnfK9ujYkPHn1PjRv0Aw-5HDdP1f1nWc0TAq15HDsnjcknjm0T1dbPAFbmW-hPymdPH7BnhuB0AwY5HDYPjb1rHckn1D0IgF_5y9YIZ0lQzqbUa4hUZbsrjm8mvqVQvf8TA9s5v-b5HmknWf0ThfqPsKBUHYs0ZKz5H00Iy-b5HnsPW6vrjf0Uv-b5HDkrHTdPsKWpyfqPHc4n1f0ULI85HDkPH61P6KsXHYknjR0mLFW5HDknj6L (setup_6124x.exe)

0 / 68

http://cdn.laoma5.com/.../Setup_6124x.exe (dcec2a8240e03f7ad58f0c7a1c5f20d7)

3 / 68 (PUP)

http://www.baidu.com/cb.php?c=IgF_pyfqnHRdnj03Pjm0IZ0qnfK9ujYkPHn1PjRv0Aw-5HDdP1f1nWc0TAq15HDsnjcknjm0T1d-mH01nH63nHD3n19bPjTk0AwY5HDYPHDkPW6knHR0IgF_5y9YIZ0lQzqbUa4hUZbsrjm8mvqVQvf8TA9s5v-b5HmknWf0ThfqrHb40AFV5H00TZcqn0Kdpyfqn10vrjm3P0KEpyfqnHD4P1RL0APGujYdnWb1P0KEIv3qnHDdrjnv0ZK45HDsPfKWThnqnWmvPWD (setup_6124x.exe)

Distribution

The following websites host and distribute files published by Xi'an TingXue Network Technology co., Ltd..

The certificates below are also signed by Xi'an TingXue Network Technology co., Ltd..

5451A8E67DCCD396C3BEF61E2EF9A151 (Jan 21, 2016 to May 21, 2016)

6190EFA7A2B8F0695104A04BBE7112B5 (Jan 21, 2016 to May 21, 2016)

The following publishers (by Authenticode signature organization name) are related.

ZUNSHANG INFO TECH CO. LTD.

Beijing Sohu New Media Information Technology Co., Ltd.

Baidu (China) Co., Ltd.

Beijing baidu Netcom science and technology co.ltd

Shanghai Weilu Network Technology Co., Ltd.

Changzhou Zunshang Information Technology Co., Ltd

广西南宁市昇泰安电子商务发展有限公司

Shanghai Zhenrui Network Technology Studio

Shanghai Gaoxin Computer System Co.,ltd

Tencent Technology(Shenzhen) Company Limited

重庆话语科技有限公司

Youbo Network Technology Co.,Ltd

Shanghai kuaiping Network Technology Co., Ltd

上海冰狗网络科技有限公司

Beijing Kingsoft Security software Co.,Ltd

GuangxiNanningshi Shengjuguangzaixian Info Tech Co.,LTD.

ZhongXiang ZhiXing Network Service Co., Ltd.

SHANGRAO WANGJU TIANXIA TECHNOLOGY CO.,LTD.

SHANGHAI FENGHAN NETWORK INFORMATION TECHNOLOGY STUDIO

易书海

刘诗诗

上海快屏网络科技有限公司

Youqu Network Technology Co.Ltd

BEIJING QIYI CENTURY SCIENCE&TECHNOLOGY CO.,LTD.

Yantai ZhengHao Network Technology Co.,Ltd.

Yantai Zhenghao Network Technology (Zhifu Branch) Co., LTD.

潘文帅

Chongqing QuWan Technology Co., Ltd.

Sogou.com

上海瑞创网络科技股份有限公司

30 of 62 publishers

* Note, the details and description above are based on the code signing digital signature issued to Xi'an TingXue Network Technology co., Ltd. by WoSign CA Limited on May 06, 2015 with the serial number '335183f94c563b4721865b606129efba'.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.