» Xiaoqing Liu
Digital Signature
Analysis
Files (9)
Downloads (5)
Distribution (2)
Related (6)

Xiaoqing Liu

Publisher Information

Xiaoqing Liu is a software publisher located in Zaozhuang, Shandong in China*. Thre are 4 additional code signing certificates issued to this publisher.

Authority:

DigiCert Inc

Valid from:

8/13/2014 2:00:00 AM

Valid to:

8/17/2015 2:00:00 PM

Subject:

CN=Xiaoqing Liu, O=Xiaoqing Liu, L=Zaozhuang, S=Shandong, C=CN

Issuer:

CN=DigiCert Assured ID Code Signing CA-1, OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:

04eed95fe18b1b4413d68a12f53663c0

Scanner detections:

Detections (100% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.XiaoqingLiu.O, PUP.XiaoqingLiu.R, PUP.XiaoqingLiu.P, PUP.ELEX.XiaoqingLiu (M), PUP.ELEX.Xiaoqing (M), PUP.ELEX (M)

100.00%

MicroWorld eScan

Gen:Application.Elex.1

66.67%

Bitdefender

Gen:Application.Elex.1

66.67%

F-Secure

Gen:Application.Elex.1

66.67%

AhnLab V3 Security

PUP/Win32.SearchHijacker

66.67%

G Data

Gen:Application.Elex

66.67%

IKARUS anti.virus

PUA.LiMo, Gen.Application.Elex

66.67%

McAfee

Artemis!08F6C6D610D9, Artemis!47E016AC10F0, Artemis!29D1486945B7, Artemis!94AAA88BB8A4

55.56%

Dr.Web

Adware.Mutabaha.84

44.44%

Malwarebytes

PUP.Optional.Bundle

44.44%

1 / 68 (Adware)

lly_omiga-plus.exe (1871_tugs_omiga-plus by JWTab) (94ca2e1241ba3966ae7d7a555ee58a16)

1 / 68 (Adware)

sky_mystartsearch.exe (1859_sky_mystartsearch by JWTab) (650f8f551c3da94612f6ad71d4c2d97c)

1 / 68 (Adware)

smt_omiga-plus.exe (2031_smt_omiga-plus by JWTab) (6b5701cdc9547cf953060eff82274796)

11 / 68 (Adware)

ild_omiga-plus.exe (2136_ild_omiga-plus by One Syn) (108d68772dde53e817ca4c2825caaeea)

19 / 68 (Adware)

squadm_omiga-plus.exe (2168_squadm_omiga-plus by JWTab) (94aaa88bb8a4622a17c9fc17dc9b698c)

25 / 68 (Adware)

adks_omiga-plus.exe (2055_adks_omiga-plus by JWTab) (29d1486945b762e9af960e8e2c2c4af6)

13 / 68 (Adware)

lly_mystartsearch.exe (2147_tugs_mystartsearch by One Syn) (5f497e051552c82d114e2a68df8f0ab8)

16 / 68 (Adware)

smt_omiga-plus.exe (2031_smt_omiga-plus by JWTab) (1dfed76f955971010b2d25aa47e7ca70)

18 / 68 (Adware)

lly_omiga-plus.exe (1871_tugs_omiga-plus by JWTab) (08f6c6d610d9670ae96e3f64d55d1c38)

Downloads URLs for files signed by Xiaoqing Liu.

19 / 68 (Adware)

http://www.girlhenanwei.com/.../squadm_omiga-plus.exe (94aaa88bb8a4622a17c9fc17dc9b698c)

13 / 68 (Adware)

http://www.girlliuxiaoqing.com/.../lly_mystartsearch.exe (5f497e051552c82d114e2a68df8f0ab8)

18 / 68 (Adware)

http://www.girlwurina.com/.../lly_omiga-plus.exe (08f6c6d610d9670ae96e3f64d55d1c38)

25 / 68 (Adware)

http://www.girlliuxiaoqing.com/.../adks_omiga-plus.exe (29d1486945b762e9af960e8e2c2c4af6)

18 / 68 (Adware)

http://www.girlliuxiaoqing.com/.../lly_omiga-plus.exe (08f6c6d610d9670ae96e3f64d55d1c38)

Distribution

The following websites host and distribute files published by Xiaoqing Liu.

www.girlwurina.com

www.girlliuxiaoqing.com

The certificates below are also signed by Xiaoqing Liu.

01D9E1C9DEA81DDCA65062CC18203480 (Aug 13, 2014 to Aug 17, 2015)

01FE476BB35D5C01EABE81B9438B7B75 (Aug 13, 2014 to Aug 17, 2015)

0889CED821C1220A4F950101C71E977B (Aug 13, 2014 to Aug 17, 2015)

0EBAB4AC38B70A33EE517D238BDE49D7 (Aug 12, 2014 to Aug 17, 2015)

The following publishers (by Authenticode signature organization name) are related.

* Note, the details and description above are based on the code signing digital signature issued to Xiaoqing Liu by DigiCert Inc on August 13, 2014 with the serial number '04eed95fe18b1b4413d68a12f53663c0'.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.