home

北京盛世传奇科技有限公司

Publisher Information

北京盛世传奇科技有限公司 is a software publisher located in 北京市, China*.
Authority:
WoSign eCommerce Services Limited

Valid from:
3/1/2013 11:34:08 AM

Valid to:
3/3/2014 3:40:13 PM

Subject:
E=admin@najiuwan.com, CN=北京盛世传奇科技有限公司, O=北京盛世传奇科技有限公司, L=北京市, S=北京市, C=CN

Issuer:
CN=WoSign Class 3 Code Signing CA, O=WoSign eCommerce Services Limited, C=CN

Serial number:
1f3f41c2e6fd13

Status:
Inconclusive detections from multiple engines

Scan engine
Details
Detections

Vba32 AntiVirus
suspected of Trojan.Downloader.gen.h
50.00%

VIPRE Antivirus
Trojan.Win32.Generic, Threat.4150696
50.00%

Zillya! Antivirus
Trojan.Tepfer.Win32.84128
25.00%

G Data
NSIS.Adware.BundleDL
25.00%

Avira AntiVirus
TR/Dropper.Gen
25.00%

0 / 68
duilib.dll  (9f827c09a16bee15d0de02f9934d27a3)

0 / 68
gameassistant.exe  (f52a05b5faf7991d00eade25ae89cd4e)

0 / 68
setup.exe  (5d9ef48077f02313ac804b4fd0afca1f)

0 / 68
smallsecretary.exe  (cb06d9453c2830490418964fe0c040b7)

0 / 68
notepad.exe  (51fdfd5b995f961f9e498e3c9a6f6def)

0 / 68
mouserecorder.exe  (877395a8f7302363d00edde99fa52eb0)

0 / 68
managegame.exe  (588a3b7370d5965cfa7b8acc827603b7)

0 / 68
gamehelperupdate.exe  (25a4515d29438e0cd45a59e0b7477b09)

0 / 68
gamebrowser.exe  (79728cdad0669541ffc5ee9c89b43bdf)

0 / 68
CP.exe (CP Module)  (98f60b4ee8eea701139cec9ee09a9ff2)

0 / 68
autospeech.exe  (fedb77016c04f0e1a135dd17995086c8)

0 / 68
setup.exe  (b2e05dfe9593800d4baeccc6cc7ac997)

0 / 68
setup.exe  (46563bffc89659763ab5631ace00bccb)

0 / 68
notepad.exe  (3b1168796a6817e1fc4470ef5c245d71)

0 / 68
mouserecorder.exe  (83014fd639ab1a387855b8491d24d3fc)

0 / 68
managegame.exe  (3a3a95dfb038514f4537229b3feeb51d)

0 / 68
gamehelperupdate.exe  (8e604f31ffc4b0883937ec4bce0a14bb)

0 / 68
gamebrowser.exe  (8fb85403ff2db636c001a44133fe7019)

0 / 68
CP.exe (CP Module)  (35d1b56c907b46e2b68764939d191cca)

0 / 68
autospeech.exe  (2259284220c65d3081c9298d283838c5)

0 / 68
smallsecretary.exe  (f80a6ef3c32737f7d46d480d4a330f67)

0 / 68
webcore.exe  (bfe63cebbccf33da0d6643014bc84fb6)

0 / 68
FlashWrapper.exe  (e91675b45d1522b4f47270118926f504)

0 / 68
notepad.exe  (09e4f220d021a763fd00dd2cf7d3ca67)

0 / 68
mouserecorder.exe  (30f944c2601430278992e77a84f7afef)

0 / 68
managegame.exe  (86c1c6e51c7bb8187fe49c7c9f330195)

0 / 68
libxsse.dll (Huorong eXtendible Stream Scanning Engine by Huorong Borui (Beijing) Technology Co.)  (05e7236eab12e4257e62c302947f0ac8)

0 / 68
ghmon.dll  (45771ed31716b90d2e6aad1b28095b4a)

0 / 68
gamehelperupdate.exe  (711d821dca2ff0efcdd2c9cd0db0cd09)

0 / 68
gamebrowser.exe  (38537c3755664fc449cd448da183f40c)

 
Latest 30 of 46 files

Downloads URLs for files signed by 北京盛世传奇科技有限公司.

3 / 68
http://www.baidu.com/cb.php?c=IgF_pyfqrHf1PjDsnfKYTjYk0A7b5Hb4P16sr0KbuHY4nWcznHT0TAq15HmYnHT3PfK15HNWnjPbryNbnAD1PW03mW60uZfqnHnLnWTYPH6kPfKdThsqpZwYTjCEQvf8pykGIZN9UB4WUvYEnjmzPaqHugwdT7qknjD1QhN3ufKzujYL0AFV5H00TZcqn0KdpyfqnWcvPjbLPsKEpyfqrHfkPjR0mv-b5HD1nHnYnsKEIv3qrHD1rHb0mLFW5HfsnHfs  (setup.exe)

2 / 68      (inconclusive)
http://www.baidu.com/cb.php?c=IgF_pyfqPWb4PHnYr0KYTjYk0A7b5HbYrjRLP6KbuHY3P1n1PjD0TAq15HR3PWnkPfK15H0YnjKbmvDsujnsPHf4mHb0uZfqnHnvrj6Lnj0Yr0KdThsqpZwYTjCEQvP8Thw8QhPEUitswhtd0ZFb5HT0mhYqn0KsTWYs0ZNGujYznWmYrHTL0AqGujY4PjDYPfKWpyfqnHnkn1f10AqLUWY4nHn4rfKWThnqP1n3P6  (setup.exe)

1 / 68
http://c.ilituan.com/box/.../Setup.exe  (47bf398f501d9542e7fa81569e7aa98b)

The following websites host and distribute files published by 北京盛世传奇科技有限公司.

c.ilituan.com

* Note, the details and description above are based on the code signing digital signature issued to 北京盛世传奇科技有限公司 by WoSign eCommerce Services Limited on March 01, 2013 with the serial number '1f3f41c2e6fd13'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.