» FENGSHANG YUNQI Culture Media (Beijing) Co., Ltd
Digital Signature
Files (20)
Downloads (16)
Distribution (4)
Related (57)

FENGSHANG YUNQI Culture Media (Beijing) Co., Ltd

Publisher Information

FENGSHANG YUNQI Culture Media (Beijing) Co., Ltd is a software publisher located in Beijing, China*. There is one additional code signing certificate issued to this publisher.

Authority:

WoSign CA Limited

Valid from:

10/27/2015 2:51:09 PM

Valid to:

10/27/2016 2:51:09 PM

Subject:

CN="FENGSHANG YUNQI Culture Media (Beijing) Co., Ltd", O="FENGSHANG YUNQI Culture Media (Beijing) Co., Ltd", L=Beijing, S=Beijing, C=CN

Issuer:

CN=WoSign Class 3 Code Signing CA G2, O=WoSign CA Limited, C=CN

Serial number:

5ba22dd56638592fa5283cafd23a41d9

Status:

No known positive detections

Scan engine

Details

Detections

Dr.Web

probably STPAGE.Trojan, probably DLOADER.Trojan

100.00%

AegisLab AV Signature

AdWare.W32.MultiPlug.miB8

50.00%

0 / 68

shelltray.exe (by kuaikan studio) (cba482aa1cd196e9fa239cf70e40f7e1)

0 / 68

kkflimsrvc.exe (by kuaikan studio) (8e3ec687fcbb6c370d1c7d8e5ec14f49)

2 / 68 (inconclusive)

nnvip1_44072.exe (by kuaikan studio) (92ecaaed08b2db063c66eb5280224978)

0 / 68

kkshowedfilms.exe (by kuaikan studio) (18103d01ee73ec96f82a078e99af2f05)

1 / 68 (inconclusive)

nnvip9_36996.exe (by kuaikan studio) (8b2c497c979f8738568fa48fe656b2fa)

0 / 68

kkshowedfilms.exe (by kuaikan studio) (7aa5883d1480ff180134bec97131980f)

0 / 68

kkflimsrvc.exe (by kuaikan studio) (6d36f740afac6f49bc7ea2ae1fba841b)

0 / 68

shelltray.exe (by kuaikan studio) (ccc6cccd8e07e6736347c13eb25634b5)

2 / 68 (inconclusive)

nvp6_2315.exe (by kuaikan studio) (7ab3543b47e7a8d0c484da623ec64f31)

0 / 68

kkupdate.exe (by kuaikan studio) (89cefb6eccc7d5755ca706f28a7d417d)

1 / 68 (inconclusive)

nn_02982.exe (by kuaikan studio) (51f40864c95a5a5bb5f8ea3140b33220)

0 / 68

shelltray.exe (by kuaikan studio) (7529c89dc95b4aa0d1668ae56038919f)

0 / 68

kkshowedfilms.exe (by kuaikan studio) (076245c3b9b28767efb37fdd2336355e)

0 / 68

kkflimsrvc.exe (by kuaikan studio) (2131586d04d494ab52c7c9196933b04a)

0 / 68

nnvip10_00004.exe (by kuaikan studio) (11a0b8471d79d4c07871c1bd98de9179)

0 / 68

kkshowedfilms.exe (by kuaikan studio) (db39fd47afa668239b1e80ea90669ec0)

0 / 68

shelltray.exe (by kuaikan studio) (3aad15fd7db1d7068e2636589ef3d05f)

0 / 68

kkflimsrvc.exe (by kuaikan studio) (6304eb55a67dd4ec36d256a32261963d)

0 / 68

kkflimsrvc.exe (by kuaikan studio) (e4ef7c3bbf0c9fca53c71ed30ceb971c)

0 / 68

shelltray.exe (by kuaikan studio) (f1d40a6a95be05dbe5237dfaae95f2e4)

Downloads URLs for files signed by FENGSHANG YUNQI Culture Media (Beijing) Co., Ltd.

0 / 68

http://www.baidu.com/cb.php?c=IgF_pyfqnHRdPHc4n1R0IZ0qnfK9ujYznHR4P1f40Aw-5Hc1nHmdPWn0TAq15Hc1rjcYPjb0T1YzrAuWmvmvuAnduyfdrHnv0AwY5HDYPWDYrHcvn1n0IgF_5y9YIZ0lQzqbULI8QhF4IAN9TB4WUvYEpv_EnH0kPBtzn1Dd0ZFb5Hm0mhYqn0KsTWYkrj00Iy-b5HD1rHnkPjm0Uv-b5Hc3nH640APGujYdnjfvPfKEIv3qn0KsXHYznjm0mLFW5HRYPW0k (nnvip10_00004.exe)

0 / 68

http://www.baidu.com/cb.php?c=IgF_pyfqnHRdPHc4n1R0IZ0qnfK9ujYznHR4P1f40Aw-5Hc1nHmdPWn0TAq15Hc1rjcYPjb0T1dhmHKbnHmsryn3nhnsn1TL0AwY5HDYPW03P163rH60IgF_5y9YIZ0lQzqbULI8QhF4IAN9TB4WUvYEpv_EnH0kPBtzn1Dd0ZFb5HT0mhYqn0KsTWYkrj00Iy-b5HD1rHnkPjm0Uv-b5Hc3nH640APGujYdnjfvPfKEIv3qn0KsXHYznjm0mLFW5Hc3nWT3 (nnvip10_00004.exe)

0 / 68

http://www.baidu.com/cb.php?c=IgF_pyfqnHRdPHc4n1R0IZ0qnfK9ujYznHR4P1f40Aw-5Hc1nHmdPWn0TAq15Hc1rjcYPjb0T1d9uHcdnj7WPWwWuWfzuHwW0AwY5HDYPWDYnWD1rj60IgF_5y9YIZ0lQzqbULI8QhF4IAN9TB4WUvYEpv_EnH0kPBtzn1Dd0ZFb5HT0mhYqn0KsTWYkrj00Iy-b5HD1rHnkPjm0Uv-b5Hc3nH640APGujYdnjfvPfKEIv3qn0KsXHYznjm0mLFW5HnvPj0d (nnvip10_00004.exe)

0 / 68

http://down.bytear.com/kk/.../36772 (nnvip10_00004.exe)

1 / 68 (inconclusive)

http://download.soft798.com/.../xq_00002.exe (51f40864c95a5a5bb5f8ea3140b33220)

0 / 68

temp:nvp6_2315.exe (11a0b8471d79d4c07871c1bd98de9179)

0 / 68

http://www.baidu.com/cb.php?c=IgF_pyfqnHRdPHc4n1R0IZ0qnfK9ujYznHR4P1f40Aw-5Hc1nHmdPWn0TAq15Hc1rjcYPjb0T1d-nHmsmhDvryfLPjwWPHuW0AwY5HDYPWDYrHRvrj60IgF_5y9YIZ0lQzqbULI8QhF4IAN9TB4WUvYEpv_EnH0kPBtzn1Dd0ZFb5HT0mhYqn0KsTWYkrj00Iy-b5HD1rHnkPjm0Uv-b5Hc3nH640APGujYdnjfvPfKEIv3qn0KsXHYznjm0mLFW5HmsPjR4 (nnvip10_00004.exe)

0 / 68

http://down.bytear.com/kk/.../13095 (nnvip10_00004.exe)

0 / 68

http://download.soft798.com/.../nnvip1_46395.exe (11a0b8471d79d4c07871c1bd98de9179)

0 / 68

http://down.bytear.com/kk/.../02182 (nnvip10_00004.exe)

0 / 68

http://download.soft798.com/.../nn_02165.exe (11a0b8471d79d4c07871c1bd98de9179)

0 / 68

http://www.baidu.com/cb.php?c=IgF_pyfqnHRdPHc4n1R0IZ0qnfK9ujYznHR4P1f40Aw-5Hc1nHmdPWn0TAq15Hc1rjcYPjb0T1Y1PARLmymsuhm1Pvf1nvfd0AwY5HDYPW04P1Tvn1c0IgF_5y9YIZ0lQzqbULI8QhF4IAN9TB4WUvYEpv_EnH0kPBtzn1Dd0ZFb5HT0mhYqn0KsTWYkrj00Iy-b5HD1rHnkPjm0Uv-b5Hc3nH640APGujYdnjfvPfKEIv3qn0KsXHYznjm0mLFW5HRvPWn3 (nnvip10_00004.exe)

0 / 68

http://www.baidu.com/cb.php?c=IgF_pyfqnHRdPHc4n1R0IZ0qnfK9ujYznHR4P1f40Aw-5Hc1nHmdPWn0TAq15Hc1rjcYPjb0T1YvuymdrHI-nvN-ujIhPyDz0AwY5HDYPW04njfLPW60IgF_5y9YIZ0lQzqbULI8QhF4IAN9TB4WUvYEpv_EnH0kPBtzn1Dd0ZFb5HT0mhYqn0KsTWYkrj00Iy-b5HD1rHnkPjm0Uv-b5Hc3nH640APGujYdnjfvPfKEIv3qn0KsXHYznjm0mLFW5HndPHRv (nnvip10_00004.exe)

0 / 68

http://download.soft798.com/.../nvp6_2315.exe (11a0b8471d79d4c07871c1bd98de9179)

0 / 68

http://c.c125x.com/.../g?p=2 (nnvip10_00004.exe)

1 / 68 (inconclusive)

http://download.soft798.com/.../nn_02982.exe (51f40864c95a5a5bb5f8ea3140b33220)

Distribution

The following websites host and distribute files published by FENGSHANG YUNQI Culture Media (Beijing) Co., Ltd.

The following certificate is also signed by FENGSHANG YUNQI Culture Media (Beijing) Co., Ltd.

1F08B1E568DBF8BADE1BF5945C8C1B29 (Oct 27, 2015 to Oct 27, 2016)

The following publishers (by Authenticode signature organization name) are related.

ZUNSHANG INFO TECH CO. LTD.

Beijing Sohu New Media Information Technology Co., Ltd.

Beijing baidu Netcom science and technology co.ltd

Baidu (China) Co., Ltd.

Shanghai Weilu Network Technology Co., Ltd.

广西南宁市昇泰安电子商务发展有限公司

重庆话语科技有限公司

Youbo Network Technology Co.,Ltd

Shanghai Zhenrui Network Technology Studio

上海冰狗网络科技有限公司

Changzhou Zunshang Information Technology Co., Ltd

Tencent Technology(Shenzhen) Company Limited

Shanghai Gaoxin Computer System Co.,ltd

Beijing Kingsoft Security software Co.,Ltd

GuangxiNanningshi Shengjuguangzaixian Info Tech Co.,LTD.

Shanghai kuaiping Network Technology Co., Ltd

SHANGRAO WANGJU TIANXIA TECHNOLOGY CO.,LTD.

SHANGHAI FENGHAN NETWORK INFORMATION TECHNOLOGY STUDIO

易书海

Xi'an TingXue Network Technology co., Ltd.

BEIJING QIYI CENTURY SCIENCE&TECHNOLOGY CO.,LTD.

ZhongXiang ZhiXing Network Service Co., Ltd.

刘诗诗

Youqu Network Technology Co.Ltd

Chongqing QuWan Technology Co., Ltd.

Yantai ZhengHao Network Technology Co.,Ltd.

30 of 57 publishers

* Note, the details and description above are based on the code signing digital signature issued to FENGSHANG YUNQI Culture Media (Beijing) Co., Ltd by WoSign CA Limited on October 27, 2015 with the serial number '5ba22dd56638592fa5283cafd23a41d9'.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.