home

Zhenjiang Xinqu Guangcaixingchen Information Technology Co., Ltd

Publisher Information

Zhenjiang Xinqu Guangcaixingchen Information Technology Co., Ltd is a software publisher located in Zhenjiang, Jiangsu in China*.
Authority:
WoSign eCommerce Services Limited

Valid from:
10/12/2013 11:47:14 AM

Valid to:
10/14/2014 6:59:22 AM

Subject:
E=masterwannen@sina.com, CN="Zhenjiang Xinqu Guangcaixingchen Information Technology Co., Ltd", O="Zhenjiang Xinqu Guangcaixingchen Information Technology Co., Ltd", L=Zhenjiang, S=Jiangsu, C=CN

Issuer:
CN=WoSign Class 3 Code Signing CA, O=WoSign eCommerce Services Limited, C=CN

Serial number:
11fe5b39872580

Status:
Inconclusive detections from multiple engines

Scan engine
Details
Detections

Vba32 AntiVirus
suspected of Trojan.Downloader.gen.h
30.77%

Dr.Web
Adware.Downware.2850, Adware.Downware.2155
30.77%

ESET NOD32
Win32/RSoftware.A potentially unwanted (variant), Win32/RSoftware (variant)
30.77%

Qihoo 360 Security
Trojan.Generic
30.77%

Zillya! Antivirus
Trojan.TDSS.Win32.41692
23.08%

avast!
Other:Malware-gen [Trj], Win32:Malware-gen
23.08%

VIPRE Antivirus
Trojan.Win32.Generic
15.38%

McAfee
Artemis!EDA8AFC79836
7.69%

ESET NOD32
Win32/RSoftware.A potentially unwanted application
7.69%

IKARUS anti.virus
Trojan-Dropper.Win32.Dapato
7.69%

0 / 68
godcalendar.exe  (a2fb51e963785fe559a2ea51d4899232)

2 / 68
pswg_14_149815.exe (Universal Calendar)  (954f0611fd11f167850fd0d5047763f1)

0 / 68
godrun.exe  (88cf68734a1254e57811e81afd6ce0d3)

1 / 68
pswg_18_44.exe (Universal Calendar)  (ab9d20722c0137260bf2f6e68066aadd)

2 / 68      (inconclusive)
App.dll (AppCore by Zhenjiang Nuoya Network Technology Co.)  (b6433957943efb448d792da1a04aec1b)

0 / 68
godcalendar.exe  (4508f57529115286286371d6cb7e9821)

0 / 68
godcalendar.exe  (f7fde3e74dd6d4d96efb50a8f937c9a0)

4 / 68      (Malware)
尚未確認的 96818.crdownload (Universal Calendar)  (f8d67f8939fb1e631f438a52334be3a6)

0 / 68
update.exe  (17904f2eab68cebbacc71c9b909ae4f0)

0 / 68
mydll.dll  (8f81c39c8b674d374e126b3a69f9108b)

0 / 68
godrun.exe  (def31407950c33d1117374c2213b5246)

0 / 68
godcalendar.exe  (c75be8a9458f6cae33f4a44993bc23e3)

1 / 68
pswg_6_5276.exe (Universal Calendar)  (6254279696b396dccaf332356f721a74)

0 / 68
update.exe  (21b1f6bb4c7ece97676dcb00243d06a4)

1 / 68
pswg_64_8888.exe (Universal Calendar)  (a76067df047a87878a183194914558e6)

0 / 68
App.dll (AppCore by Zhenjiang Nuoya Network Technology Co.)  (66db77dfdc7eb2f065b0da3498f07990)

1 / 68
godrun.exe  (343b6c4f702fce147be0046523f210a0)

0 / 68
godcalendar.exe  (47f73858a00d8a66e565041ec97d7de9)

0 / 68
mydll.dll  (f4d9182579ae089a3fed5268c452bbd3)

2 / 68
pswg_25_3255.exe (Universal Calendar)  (f73b4c83ac8d3725fae589dea020ebd1)

0 / 68
高清播放器_47_25087.exe  (51fd2d04f5819bf2af053b8e4f64d294)

0 / 68
pswg_47_25087.exe (Universal Calendar)  (3ef00cebdffb9cea4c24cf7e0588d943)

0 / 68
HappyBox.exe (by HappyBox)  (c96ab5598ba17b0388f6cffd6a34b897)

0 / 68
godrun.exe  (505d4c1dd1761c99b0fd612ffcf00fd1)

0 / 68
mydll.dll  (8cafafefead4eb9f33ed3eb63faed706)

0 / 68
update.exe  (fd194e4d8c1a8b972fa50d6a85d44228)

0 / 68
godcalendar.exe  (a7b486ca4339d05ea8c0b410c04f18c9)

0 / 68
godcalendar.exe  (7fca8fa4d41327f6297df0e12337b3c3)

6 / 68      (PUP)
pswg_67_700.exe (Universal Calendar)  (7fe5793956b937803f9d96be5775cde9)

1 / 68      (inconclusive)
App.dll (AppCore by Zhenjiang Nuoya Network Technology Co.)  (a0b6f44b55e5717a775656f8d98fb377)

 
Latest 30 of 34 files

Downloads URLs for files signed by Zhenjiang Xinqu Guangcaixingchen Information Technology Co., Ltd.

6 / 68      (PUP)
http://www.biaop.com/pswg_67_700.exe  (7fe5793956b937803f9d96be5775cde9)

6 / 68      (PUP)
http://www.sxsldz.com/pswg_67_701.exe  (eda8afc79836de3f70de61f918c6737e)

The following websites host and distribute files published by Zhenjiang Xinqu Guangcaixingchen Information Technology Co., Ltd.

www.biaop.com

www.sxsldz.com

* Note, the details and description above are based on the code signing digital signature issued to Zhenjiang Xinqu Guangcaixingchen Information Technology Co., Ltd by WoSign eCommerce Services Limited on October 12, 2013 with the serial number '11fe5b39872580'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.