» 北京耘升天下科技有限公司
Digital Signature
Files (74)
Downloads (5)
Distribution (3)
Related (39)

北京耘升天下科技有限公司

Publisher Information

北京耘升天下科技有限公司 is a software publisher located in Beijing, China*. Thre are 4 additional code signing certificates issued to this publisher.

Authority:

thawte, Inc.

Valid from:

2/4/2015 7:00:00 AM

Valid to:

5/6/2016 6:59:59 AM

Subject:

CN=北京耘升天下科技有限公司, OU=IT, O=北京耘升天下科技有限公司, L=Beijing, S=Beijing, C=CN

Issuer:

CN=thawte SHA256 Code Signing CA, O="thawte, Inc.", C=US

Serial number:

159ab5bc01e88459954dbfd18aa17519

Status:

Inconclusive detections from multiple engines

Scan engine

Details

Detections

Bkav FE

W32.HfsAdware

100.00%

Quick Heal

Android.Igexin.C8332 (PUP), Android.Igexin.Ad9ac (PUP)

22.22%

avast!

Android:Igexin-AJ [PUP]

22.22%

VIPRE Antivirus

Trojan.AndroidOS.Generic.A

22.22%

Avira AntiVirus

SPR/ANDR.Igexin.A.Gen

22.22%

ESET NOD32

Android/Odpa.B potentially unwanted (variant), Android/Qysly (variant)

22.22%

McAfee

Artemis!F8C67345272F, Artemis!D9C4F84E64D4

11.11%

Baidu Antivirus

Hacktool.Android.Igexin

11.11%

Rising Antivirus

PE:Malware.Generic/QRS!1.9E2D [F]

5.56%

K7 AntiVirus

Unwanted-Program

5.56%

0 / 68

ZRoot2.exe (Super Root Android by Super Root Studio) (51cdc7531ac6869d5d1150607050e34e)

0 / 68

zds_setup_5.2.16.3_azrjy.exe (92f0781f1124f8a7d8f17b250c8488d8)

0 / 68

zds_setup_anfensi.exe (885ecd2d1a45e44199de16482b0bdbd1)

0 / 68

zdsrooter_2.8.1.0.exe (24789aff6ab1e110c3e076d37cd07f44)

0 / 68

zdsrooter_setup_2.8.0.0_opda(root).exe (96c8070adf86712121baac9e2da5f2dc)

0 / 68

zhuodashi3.exe (194c94a9508ec014c7c1f3e2aebb9ae2)

0 / 68

ZDSRooter.exe (1c64c20a456ad08fb3f7a8e51348b5cb)

0 / 68

zhuodashi3.exe (32b3e3c6210e5c8bac216aa4639bacbc)

0 / 68

super_root_setup.exe (Super Root Android by Super Root Studio) (63a45e8972e87a5cfb14b6dcc96caeb3)

0 / 68

zds_setup_anfensi.exe (be77b7c7b9241787f06d1b4d87e31f28)

0 / 68

ZDSRooter.exe (3620c2e5be100fe431c62b679623efd6)

0 / 68

zdsrooter_setup_opda(root).exe (4aea382babc78318e2c65ffd8ac130d8)

0 / 68

zds_setup_opda.exe (5cc550a37ce202420c2cbe6ebcd1f9aa)

0 / 68

ZDSRooter.exe (af11f8894d65e758368f9dba867b83e2)

0 / 68

zhuodashi3.exe (1a1111bb7f196ce9cc2afc7c512ec512)

0 / 68

zlib.dll (c5f3882bfcb57b2dc953ce355deb3f93)

0 / 68

SuperRoot.exe (Super Root Android by Super Root Studio) (0fbf9cb3523d47112aa4a3b4e6857edf)

0 / 68

ssleay32.dll (The OpenSSL Toolkit by The OpenSSL Project, http://www.openssl.org/) (fd170834e624942bb0d8c91c671a883b)

0 / 68

sqlite3.dll (ab3d960a40748739bc13236801ace47e)

0 / 68

libeay32.dll (The OpenSSL Toolkit by The OpenSSL Project, http://www.openssl.org/) (befad5a8804c1b6917971e215c6e563d)

0 / 68

libcurl.dll (The cURL library by The cURL library, http://curl.haxx.se/) (1400e2fbd76249b4fe6bbaad94bd567f)

0 / 68

fastboot.exe (033dcb021c795daccb5c76c39659c46c)

0 / 68

duilib.dll (6a4815f63ba5b116cfdc70bb2bc6634e)

0 / 68

devices.dll (bfa992acb41256be264c8efb2392fd56)

0 / 68

AdbWinUsbApi.dll (Android SDK by Google, inc) (15bd51a365d1831af907feb9fe04460f)

0 / 68

AdbWinApi.dll (Android SDK by Google, inc) (01af702a68b6bfecc3782484facbfde9)

0 / 68

adb.exe (2660b89f0ecc76d6eb7b15320f9d3820)

9 / 68 (PUP)

zds_setup_opda.exe (d57d82c749a7b640ce06529e92fa1839)

6 / 68 (PUP)

zds_setup_xrecovery.exe (c872d398aa6f983307765ffc58dd2187)

0 / 68

zds_setup_5.6.0.0_liqu.exe (d19243fcd594f1b1c8acab67c415345d)

Latest 30 of 74 files

Downloads URLs for files signed by 北京耘升天下科技有限公司.

9 / 68 (PUP)

http://220.243.233.8/ws.cdn.baidupcs.com/file/.../1hcW3ebp1CV7q0=&to=lc&fm=Nan,B,M,ny&sta_dx=9&sta_cs=1060&sta_ft=exe&sta_ct=5&fm2=Nanjing02,B,M,ny&newver=1&newfm=1&secfm=1&flow_ver=3&pkey=000044d27af4d9b5179feba8e8b9d86d4087&sl=81264719&expires=8h&rt=sh&r=821735347&mlogid=7880383658030065705&vuk=-&vbdid=3769625324&fin=zdsrooter_setup_2.8.1.0_OPDA(root).exe&fn=zdsrooter_setup_2.8.1.0_OPDA(root).exe&slt=pm&uta=0&rtype=1&iv=0&isw=0&dp-logid=7880383658030065705&dp-callid=0.1.1&wshc_tag=0&wsts_tag=5664102d&wsid_tag=547eb98c&wsiphost=ipdbm (f8c67345272f9a19fe3be443f619b097)

0 / 68

http://msgdown.lockstudio.com/.../zds_setup_anfensi.exe (885ecd2d1a45e44199de16482b0bdbd1)

9 / 68 (PUP)

http://d.pcs.baidu.com/.../d9c4f84e64d40052f7c8fc92b8eebf9f?fid=828310475-250528-691135299848762&time=1448806549&rt=sh&sign=FDTAERVY-DCb740ccc5511e5e8fedcff06b081203-39IKq74xWGKpOO5TwamvoSc8Ifw=&expires=8h&chkv=1&chkbd=0&chkpc=et&dp-logid=7721532254520668503&dp-callid=0&r=224825033 (zds_setup_5.6.1.0_opda.exe)

0 / 68

http://static.kfkx.net/.../zds_setup_OPDA.exe (5cc550a37ce202420c2cbe6ebcd1f9aa)

6 / 68 (PUP)

http://msgdown.lockstudio.com/.../zds_setup_xrecovery.exe (c872d398aa6f983307765ffc58dd2187)

Distribution

The following websites host and distribute files published by 北京耘升天下科技有限公司.

static.kfkx.net

msgdown.lockstudio.com

d.pcs.baidu.com

The certificates below are also signed by 北京耘升天下科技有限公司.

54A2ED0F11093ABEFA26905916E8DAE9 (May 18, 2016 to Jun 18, 2017)

590F491E02EBFD32ADBC3B51A5A8E94A (Dec 31, 2013 to Apr 02, 2015)

31319ECFE88565C288BB66FDF72D8B13 (Jan 15, 2013 to Mar 17, 2014)

1BE41B34127CA9E6270830D2070DB426 (Feb 07, 2012 to Feb 07, 2013)

The following publishers (by Authenticode signature organization name) are related.

Beijing Yunhai Collaboration Technology Limited Company

Shenzhen QVOD Technology Co.,Ltd

北京悠然天地科技有限公司

北京文安卓立科技有限公司

Bluestack Systems, Inc.

Stanislav Zinukhov

Duodian Online Technology Co. Ltd.

geekuninstaller.com

TECMO KOEI GAMES CO., LTD.

Python Software Foundation

竞技世界（北京）网络技术有限公司

永杨安风（北京）科技有限公司

Hangzhou Shenya Technology Co., Ltd.

Tixati Software Inc.

Environmental Systems Research Institute

Madcatz Europe Ltd

Fresco Logic Inc

Xiaomi Technology Inc

Riot Games, Inc.

30 of 39 publishers

* Note, the details and description above are based on the code signing digital signature issued to 北京耘升天下科技有限公司 by thawte, Inc. on February 04, 2015 with the serial number '159ab5bc01e88459954dbfd18aa17519'.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.