home

Hithink RoyalFlush Information Network Co.,Ltd.

Publisher Information

Hithink RoyalFlush Information Network Co.,Ltd. is a software developer located in HangZhou, Zhejiang in China*. Thre are 2 additional code signing certificates issued to this publisher.
Authority:
Symantec Corporation

Valid from:
12/1/2016 8:00:00 AM

Valid to:
1/1/2020 7:59:59 AM

Subject:
CN="Hithink RoyalFlush Information Network Co.,Ltd.", OU=IT Department, O="Hithink RoyalFlush Information Network Co.,Ltd.", L=HangZhou, S=ZheJiang, C=CN

Issuer:
CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
013ffe0ab939b60955f0fe7ded7a49e4

Status:
No known positive detections

Scan engine
Details
Detections

Reason Heuristics
PUP.InstallCore.CSH (L)
85.71%

IKARUS anti.virus
PUA.HideBaid
14.29%

0 / 68
ThsXlsSlug.dll  (e452e7e28f21d51a1458fe0f2f316f34)

0 / 68
res__36_0.dll  (f4d861f19b5d74b72bda021dfd947dfc)

0 / 68
xiadan.exe  (73a8a328e52b6344d2468097582a5a19)

1 / 68      (PUP)
ths_monigw.exe  (9cbc7752bb34920bd86d2c0d1f78d17e)

0 / 68
xiadan.exe  (e660b5269bb3c640457a36cceb31e96a)

0 / 68
tongflower.exe  (2f2a15293e42d446375db9306a2a56e4)

0 / 68
xiadan.exe  (92707de9e692dc0c60475d1eb434dec7)

0 / 68
hexin.exe  (e47b7a630a1f2a4a3f6d27b87618301a)

0 / 68
dgzq_ycjrzd_v2.1.0.20170123.exe  (35c64701b06f00430e1a7d6d99636d54)

0 / 68
htzq_20161202.exe  (7c8c0f9a1a253ce33ae8ff7cf6303ab8)

0 / 68
hstart.exe  (7d811d475b218e9d5b8b2904c6d7bff5)

0 / 68
happ.exe  (a4d7b17fd6da043f49edc223fd2c4d5b)

0 / 68
ftres.dll  (e09ae47fec00f81d6641a81a5acd3fb9)

0 / 68
FTDataTable.dll  (d8af9ff583c34d4c5b675d280044b558)

0 / 68
FTXMLParserEX.dll  (a6ecb59ff5c00a25db136e3083828ce4)

0 / 68
FTJGBLog.dll  (3c2c41b5b0ff48be2dcff9e9c89c2d8f)

0 / 68
FTComm.dll  (2034b8bbe6c5c8de4f480a424eaedcb1)

0 / 68
FTFunctional.dll  (7f29f531102f78ac1fdaadc0b732d182)

0 / 68
xiadan.exe  (7859f23007dbd35f6393bc1a096c08e6)

0 / 68
happ.exe  (0d9079aac7449bcda6f7549f3fb162af)

0 / 68
ifind_setup_v1.10.12.312.001.exe  (c9923be4e17f865cfb80ef8477c01fbf)

0 / 68
xiadan.exe  (a350c2114f3baadab2339682d5a9f4b2)

0 / 68
xiadan.exe  (c82a446769a5eddaf5e02a8dc5a3225c)

1 / 68      (PUP)
tonghuashunsetup_2017.2.6.0.exe  (65f4429082ad19cc95091dbc78a49647)

0 / 68
binarystar.exe  (25215a891dc158039eb47f5992096cab)

0 / 68
binarystar3.2.exe  (cfe7d838e8019e3d1ea1431e0b5586e1)

0 / 68
iFinDWeb.exe  (411daf139baa0f24b23ba24074e16846)

0 / 68
ifind.exe  (ab34621e8deb9b40d6d68af5d15893a4)

0 / 68
binarystar.exe  (ac03289088169df42e2f16610b2e93e7)

0 / 68
zyzq_zyb_v7.95.60.03.exe  (e7098750118350356cce40f04272466f)

 
Latest 30 of 216 files

Downloads URLs for files signed by Hithink RoyalFlush Information Network Co.,Ltd..

0 / 68
http://www.tfzq.com/.../download?id= 4121  (天风新一代专业版.exe)

The certificates below are also signed by Hithink RoyalFlush Information Network Co.,Ltd..

7211FC4C88BF71B3F78DE71E49AD65D3  (Mar 03, 2016 to Dec 02, 2016)

6A0C70B209A6ECB18786C4A3C1953BFC  (Dec 02, 2013 to Dec 02, 2016)

* Note, the details and description above are based on the code signing digital signature issued to Hithink RoyalFlush Information Network Co.,Ltd. by Symantec Corporation on December 01, 2016 with the serial number '013ffe0ab939b60955f0fe7ded7a49e4'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.