home

Beijing YiDaHongTian Technology Co., LTD

Publisher Information

Beijing YiDaHongTian Technology Co., LTD is a software publisher located in Beijing, China*. Thre are 2 additional code signing certificates issued to this publisher.
Authority:
WoSign CA Limited

Valid from:
9/10/2015 9:42:58 AM

Valid to:
9/10/2016 9:42:58 AM

Subject:
CN="Beijing YiDaHongTian Technology Co., LTD", O="Beijing YiDaHongTian Technology Co., LTD", L=Beijing, S=Beijing, C=CN

Issuer:
CN=WoSign Class 3 Code Signing CA, O=WoSign CA Limited, C=CN

Serial number:
63a7ea201b8453201dc7ae973da3abd7

Status:
Inconclusive detections from multiple engines

Scan engine
Details
Detections

ESET NOD32
Win32/Adware.Xiaoxiong.A application
66.67%

Dr.Web
Adware.ShouQu.10
66.67%

avast!
Win32:Adware-gen [Adw]
33.33%

Reason Heuristics
PUP.TianHengyu
16.67%

ESET NOD32
Win32/Packed.NSISmod.E suspicious (variant)
16.67%

Rising Antivirus
PE:Malware.Generic(Thunder)!1.A1C4 [F]
16.67%

IKARUS anti.virus
PUA.Generic
16.67%

0 / 68
Unrar.dll (RAR decompression library by Alexander Roshal)  (13bf2eed334aa508d54c0a3b87338339)

0 / 68
install64.exe  (995dafa60398fc303e70dd1a0ba458e4)

0 / 68
install32.exe  (8b79cc43913ceeb56f7efc9a547046d1)

0 / 68
cfg.exe  (50a7e593bc73373503141af8de3775da)

0 / 68
sulang.exe  (0635f335c2caa56c8e542935769a8d7c)

0 / 68
uninst.exe  (e8d9aefc72ab6c9bbebc3f2eb4b0c448)

0 / 68
sltool.exe  (769b38addaf34c998873d8d5293c3268)

0 / 68
sulang.ime  (a47dc0432c255025f4f011cfdcb8dc8d)

0 / 68
Unrar.dll (RAR decompression library by Alexander Roshal)  (42b2eeba17afa8d5d71cca2057580b2e)

0 / 68
install64.exe  (45bcd7c0d2c524517cc525d58d351572)

0 / 68
install32.exe  (88ff6ad6a4a05612c6e7a58706397bd3)

0 / 68
sltool.exe  (63cf4a9cb264a26075a79a6b742764cc)

0 / 68
sulang.ime  (c5fc391984159b2adb2f506d7878b96b)

0 / 68
cfg.exe  (bad63955e579819b74a79f62443f72e0)

0 / 68
crypto.dll  (f6e287e51f3e34abed5af1dd20d7b14b)

3 / 68      (PUP)
srfpro.exe  (d773bb0578cd113ed341fef8925fd236)

0 / 68
srfmgr.exe  (dfefbefb98a093063ff6d909b25ab6c9)

0 / 68
setup_150.exe  (dad692f1ac3b1105ad81be6cc782aead)

0 / 68
sulang.exe  (e9a053f8baa763af7f22ac4e009a39af)

3 / 68
setup_481apox.exe  (82dc7012ae0f3d946a94d56c1df0d565)

0 / 68
un.exe  (61482407002450643473adb62f89258a)

0 / 68
crypto.dll  ()

0 / 68
setup_150.exe  ()

0 / 68
srfmgr.exe  (c5d1ea9ef981f960a40e4ccd6342338b)

3 / 68      (PUP)
srfpro.exe  (f3de5fc8bcfa73bba1532f4ece395de8)

0 / 68
Unrar.dll (RAR decompression library by Alexander Roshal)  (a777d751c0cdbd71243bd0207fbc983c)

0 / 68
cfg.exe  (1d368c572fd24affcd36e57550075bf3)

0 / 68
install64.exe  (2b9645f82048f2d15b6c7090c09b6e48)

0 / 68
sltool.exe  (018373320ac86b355105b9444deeef6e)

0 / 68
sulang.exe  (57da462904f126f1cc138b830421ac93)

 
Latest 30 of 67 files

Downloads URLs for files signed by Beijing YiDaHongTian Technology Co., LTD.

0 / 68
http://dl.ke8u.com/down.php?sid=358  (game_358rayh.exe)

The following websites host and distribute files published by Beijing YiDaHongTian Technology Co., LTD.

dl.ke8u.com

The certificates below are also signed by Beijing YiDaHongTian Technology Co., LTD.

1E098D793F39F190794F930ABD5D1276  (Sep 10, 2015 to Sep 10, 2016)

69690408C9A441B3F0296DA6697B3F65  (Aug 28, 2015 to Aug 28, 2016)

The following publishers (by Authenticode signature organization name) are related.

Yantai Daocaoren Network Technology Co.,Ltd.

Yantai Zhenghao Network Technology (Zhifu Branch) Co., LTD.

Yantai ZhengHao Network Technology Co.,Ltd.

Yantai PengXin Network Technology Co.,LTD.

UC Mobile Limited

Baidu (China) Co., Ltd.

TAOBAO (CHINA) SOFTWARE CO.,LTD.

Beijing Haowang Media Co., Ltd.

Beijing Yu Jin Cheng Technology Co., Ltd.

* Note, the details and description above are based on the code signing digital signature issued to Beijing YiDaHongTian Technology Co., LTD by WoSign CA Limited on September 10, 2015 with the serial number '63a7ea201b8453201dc7ae973da3abd7'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.