qksee.exe

Jinnan Wu

The application qksee.exe by Jinnan Wu has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat.
Publisher:
Jinnan Wu  (signed and verified)

MD5:
4f54dcbd0209f89b6ee4d7d282d963a9

SHA-1:
71f888be60d2b0b373e2c0eeb0b79bcac8ea26ec

SHA-256:
1b9be93d23042a28f47ee77c1b2712bdaf579c7692c5162e9e41aa075f10568a

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
12/26/2024 12:17:54 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.Elex (M)
16.7.30.18

File size:
1.2 MB (1,305,240 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\qksee\qksee.exe

Digital Signature
Signed by:

Authority:
thawte, Inc.

Valid from:
1/18/2016 2:00:00 AM

Valid to:
1/18/2017 1:59:59 AM

Subject:
CN=Jinnan Wu, OU=Individual Developer, O=No Organization Affiliation, L=Beijing, S=Beijing, C=CN

Issuer:
CN=thawte SHA256 Code Signing CA, O="thawte, Inc.", C=US

Serial number:
18229C0F3250464B242D5DD76615C1EC

File PE Metadata
Compilation timestamp:
4/8/2016 6:16:08 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
3072:7uduqMAAln+nyoQ79NWNxcBwIR6QJDSY+7C8YF+TC/N:7+uqMAAd+yoQ79NWUvR6QJGY+7C8YEuV

Entry address:
0xA85DF

Code size:
822 KB (841,728 bytes)

Remove qksee.exe - Powered by Reason Core Security