home

北京昌华礼泰科技有限公司

Publisher Information

北京昌华礼泰科技有限公司 is a software publisher located in Beijing, China*.
Authority:
Thawte, Inc.

Valid from:
5/28/2013 8:00:00 AM

Valid to:
5/29/2014 7:59:59 AM

Subject:
CN=北京昌华礼泰科技有限公司, OU=技术部, O=北京昌华礼泰科技有限公司, L=Beijing, S=Beijing, C=CN

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
12eb3279cfbc2d30c6fa2e709e0a4a40

Status:
Inconclusive detections from multiple engines

Scan engine
Details
Detections

Comodo Security
Heur.Suspicious
50.00%

Trend Micro House Call
TROJ_GEN.F47V0804, Suspicious_GEN.F47V0805, TROJ_GE.E926DE17
28.57%

IKARUS anti.virus
AdWare.Meinhudong
14.29%

Qihoo 360 Security
Trojan.Generic
14.29%

Sophos
Troj/StartP-HW
14.29%

ESET NOD32
Win32/Meinhudong.C potentially unwanted application
14.29%

Dr.Web
Trojan.DownLoader10.45902
7.14%

ViRobot
Adware.Agent.1934104
7.14%

VIPRE Antivirus
Win32.Malware!Drop
7.14%

1 / 68      (inconclusive)
kllhnr2013082210.exe  (ceb137dfc528da38837cd706d8cdad5b)

1 / 68
lb_between_1.exe  (90aaa165ba45c0f2925d03633c9ddc41)

0 / 68
lb_bosom_6.exe  (23e0638ceedcaae54412067e7a1aef38)

1 / 68
liaoban201309022.exe  (47702afe1c0b7289c4ab525b1311cdb1)

1 / 68      (inconclusive)
kl1snr2013082321.exe  (299cb1c0dd38df76142ac7fcf1ad91f6)

4 / 68      (inconclusive)
lb_bosom_6.exe  (34f744356eeb36b4e95cc5c207f0ccfc)

0 / 68
lb_bosom_6.exe  (e8787a760f71c17031167dbb57a18f1e)

0 / 68
80005_lban.exe  (1576b22428722f5079d1f662e5c2d764)

0 / 68
kl2cnr201309012u.exe  (48dc671b70fe80d7d0233d0e0d919ff5)

0 / 68
kl2cnr201309012.exe  (5ab4d1fe4bd6d901f17f736d60e1d602)

0 / 68
liaoban201307162.exe  (41622071c5b50dc45430ab36f34075bc)

0 / 68
yubnnjk2013073113.exe  (a9fc9c1f4ceda6b3f0cabae8f86790cf)

0 / 68
kl2cnr2015011916d.exe  (b705c00f3888e75431d4c1bd2679fbd8)

0 / 68
a0035016.exe  (275e670927a4aa7263eb3aabd3f009fe)

0 / 68
a0035015.exe  (b99fa390ab9a52fc6f09deb577ee54c4)

0 / 68
a0035012.exe  (f8e273dfc3b35f3d4e77db215c1ecae7)

0 / 68
yubanjk2013080811.exe  (feaef3b0bc60f5d69de28a3687062b4d)

0 / 68
lb_bind_3.exe  (1a552fa26473a9b1a0d071365262af87)

0 / 68
hubpnjk2013081716u.exe  (3a19834d5907b3772956347a5a049ca2)

0 / 68
hubpnjk2013081716d.exe  (9c6bd8f4237f1143f204172d4f7abd09)

1 / 68
lb_between_2.exe  (8006d3c797a252f95ed5a5fbba89d7c0)

0 / 68
lb_between_4.exe  (24e1a88747b5d1ad300a4a9fd05cc6a2)

0 / 68
liaoban.exe  (2650cda06919cc95a2a47dab18b79b0b)

0 / 68
iurdd_h7.exe  (a0d94fc641505bb1da42b63ebf2edc87)

0 / 68
liaobanupd.exe  (d083ee96c3a78fe25fd0b55aab124ce3)

0 / 68
lbdesk.exe  (db3bdb11fd82934e69527e48ff60e44c)

1 / 68
kl2snr2013090514.exe  (7643f6e6f6f6c93613eced20f534178e)

0 / 68
liaoban.exe  (8eff6cfd0687f2e9b4848ef45ba91b64)

0 / 68
klljnr2013081720.exe  (a4ee125420e6281bc0c68febd5b2694d)

0 / 68
lb_bosom_6.exe  (62792a29b8eed5dbd347bc6f1a970ba0)

 
Latest 30 of 37 files

Downloads URLs for files signed by 北京昌华礼泰科技有限公司.

0 / 68
http://download.n152.com/ndl.aspx?uid=7845&sid=109863&tid=3&f=11  (lb_bosom_6.exe)

1 / 68
http://jump.sanboke.com/ndl.aspx?uid=7762&sid=86&tid=3  (lb_between_2.exe)

0 / 68
http://jump.sanboke.com/ndl.aspx?uid=7762&sid=86&tid=3  (lb_between_4.exe)

0 / 68
http://1377107854.listentoy.com/chat/.../lb_bosom_6.exe  (62792a29b8eed5dbd347bc6f1a970ba0)

0 / 68
http://download.n152.com/ndl.aspx?uid=7845&sid=78214&tid=3&f=11  (lb_bosom_6.exe)

1 / 68
http://1376664068.liuxingzixun.com/chat/.../lb_bosom_6.exe  (78c09b348cf7eec81731d1b804c15543)

1 / 68
http://download.n152.com/ndl.aspx?uid=7845&sid=78214&tid=3&f=11  (lb_between_6.exe)

3 / 68      (inconclusive)
http://20130823233434804.feidown.com/chat/.../lb_bunch_1.exe  (26a302897ebcfd5ac70138b7b1506471)

The following websites host and distribute files published by 北京昌华礼泰科技有限公司.

jump.sanboke.com

1377107854.listentoy.com

1376664068.liuxingzixun.com

download.n152.com

20130823233434804.feidown.com

The following publishers (by Authenticode signature organization name) are related.

同创无限（北京）科技有限公司

* Note, the details and description above are based on the code signing digital signature issued to 北京昌华礼泰科技有限公司 by Thawte, Inc. on May 28, 2013 with the serial number '12eb3279cfbc2d30c6fa2e709e0a4a40'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.