home

Fengling Network Co., Ltd.

Publisher Information

Fengling Network Co., Ltd. is a software publisher located in Ili Kazak Autonomous Prefecture, Xinjiang Uygur Autonomous Region in China*. Thre are 2 additional code signing certificates issued to this publisher.
Authority:
WoSign CA Limited

Valid from:
10/9/2015 11:08:45 AM

Valid to:
10/9/2016 11:08:45 AM

Subject:
CN="Fengling Network Co., Ltd.", O="Fengling Network Co., Ltd.", L=Ili Kazak Autonomous Prefecture, S=Xinjiang Uygur Autonomous Region, C=CN

Issuer:
CN=WoSign Class 3 Code Signing CA, O=WoSign CA Limited, C=CN

Serial number:
692c51cdfd465ffdec8b49a631f79866

Status:
No known positive detections

Scan engine
Details
Detections

Reason Heuristics
PUP.InstallCore.CSH (L)
100.00%

0 / 68
unins000.exe  (441234e45c7957b9b99b64f642c24bb4)

0 / 68
MicroclientLauncher.exe  (63f2434809132fa42d5f093cb642459c)

0 / 68
unins001.exe  (ac4f5a5543e792d4efc80c9abd63eee7)

1 / 68      (PUP)
斗罗大陆_秒下微端-ledobu.exe  (3a5abc9400c09f9e851669386348b97b)

0 / 68
unins000.exe  (8d95013159407748f7aa84008b1875eb)

1 / 68      (PUP)
mh-diyoze.exe  (4e9e059c4781ab5ab5ae09bc3fa782f1)

0 / 68
斗罗大陆_秒下微端-kafexo.exe  (bf56833da656b18bde571ac51ce4cf12)

0 / 68
雪鹰领主.exe  (c2565bfd3a5a1994b38b88f110c15e26)

0 / 68
loader.exe  (65e38861da3b5ce14649f3af3f721c82)

0 / 68
Tencent.dll  (2d73bc581d07f8612c77ddeccc0f883d)

0 / 68
mcqqgameprocmsghelper.dll  (e401d631dfc1e34df153255a18cf955c)

0 / 68
YDOnceClick_DLDL.exe (by Fengling Network Co.)  (8736ba12c9243007e179d05148a92697)

0 / 68
gameloader.exe  (969a6966513d318cfb3eccf05139dc88)

0 / 68
MicroclientLauncher.exe  (5c6aa3dcca5ac41d11d75ac50f93897b)

0 / 68
斗罗大陆_秒下微端-dapidu.tmp  (04462d8b405a6ee8fbb41dd7eebb852e)

0 / 68
MicroclientLauncher.exe  (ef9f9ce9222ed99c696bdb00d9c317de)

0 / 68
斗罗大陆_秒下微端-hozoxu.tmp  (ad647e5408c2164ac16ee7fe942187c1)

0 / 68
loader.exe  (73a7ef3747b390430f9c6732f0622433)

0 / 68
xylzhelper.exe  (be2bf9a5dd4131fea1d6b4f49935e622)

0 / 68
loader.exe  (4d62b8ea6f93c355600fc036f33c0bda)

0 / 68
xajhhelper.exe  (21f6e2bd83724ce7a6bf481d69f3bddd)

0 / 68
loader.exe  (8aee8368b93fa77e7a257226381be6aa)

0 / 68
zplus.dll  (595c116d8d622e813d99dd7bd0d6bc58)

0 / 68
Pyramid3D.dll  (e3ca27d287625871ca39769a54b4045c)

0 / 68
zplus.dll  (7b57b8540001b10b098ba4a37e499e1d)

0 / 68
dldl.tmp  (fb2fd5b83d647a9a8786fbd9fd031cdc)

0 / 68
37斗罗大陆-hatodo.exe  (6bd45116ade15bd35dd6d84320380845)

0 / 68
qidianxylz.exe  (8cf57750240eaf368c69d30abab6dc93)

0 / 68
MicroclientLauncher.exe  (a8841b57ed2f35c07555b84ba96017a6)

0 / 68
MicroclientLauncher.exe  (035ad54f43391c093841313d4b2a69d6)

 
Latest 30 of 65 files

Downloads URLs for files signed by Fengling Network Co., Ltd..

0 / 68
http://api-dldl.3595.com/behavior/autoclient/.../al.ashx?uid=sun123jin123long123&pid=2003&sid=s1&s=?uid=sun123jin123long123&skey=1&platform=37wan&gkey=dldl&time=1469430121&is_adult=1&type=web&sign=da9091f6e2472e87e974d67e92bc4aad&pid=2003  (37斗罗大陆-hatodo.exe)

0 / 68
http://360.behavior-yhzg.yd173.com/autoclient/.../al.ashx?uid=2660306204&pid=1200&sid=s58&s=?qid=2660306204&server_id=S58&time=1459268535&sign=c7aab034643bdd3710200044cada33af&isAdult=1&tmptoken=266030620412000058,1459267680,1,83501cf018a9c13a633ca060ef79c79a&UserId=2660306204&ServerId=12000058&UserIP=109.166.128.126  (mh-duzapo.exe)

The following websites host and distribute files published by Fengling Network Co., Ltd..

api-dldl.3595.com

360.behavior-yhzg.yd173.com

The certificates below are also signed by Fengling Network Co., Ltd..

6645A14DA0C8F60025DE81738F5A0B4E  (Sep 06, 2016 to Nov 06, 2017)

454619D3E29CADFC052768B4B9153BD9  (Oct 09, 2015 to Oct 09, 2016)

* Note, the details and description above are based on the code signing digital signature issued to Fengling Network Co., Ltd. by WoSign CA Limited on October 09, 2015 with the serial number '692c51cdfd465ffdec8b49a631f79866'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.