Jinnan Wu

Publisher Information

Jinnan Wu is a software developer located in Beijing, China*. A majority of the programs developed by the company can be classified as adware or other potentially unwanted programs. Thre are 50 additional code signing certificates issued to this publisher.
Authority:
thawte, Inc.

Valid from:
1/18/2016 12:00:00 AM

Valid to:
1/17/2017 11:59:59 PM

Subject:
CN=Jinnan Wu, OU=Individual Developer, O=No Organization Affiliation, L=Beijing, S=Beijing, C=CN

Issuer:
CN=thawte SHA256 Code Signing CA, O="thawte, Inc.", C=US

Serial number:
18229c0f3250464b242d5dd76615c1ec

Scanner detections:
Detections  (98% detected)

Scan engine
Details
Detections

Reason Heuristics
Adware.Elex.Qksee.Meta (M), PUP.Elex.Qksee.Meta (M), Adware.Elex.JinnanWu.Meta (M), PUP.Elex.JinnanWu.Meta (M), PUP.Elex.Qksee.Installer.Meta (M), PUP.Elex.Qksee (M), Adware.Elex.Qksee (M), PUP.Elex (M)
72.73%

Microsoft Security Essentials
Threat.Undefined
40.91%

Dr.Web
Adware.Mutabaha.1166, Win32.Wplugin.2, Adware.Mutabaha.1230, Adware.Mutabaha.1166
40.91%

ESET NOD32
Win32/Obfuscated.NFV trojan, Win32/Slugin.A virus, Win32/ELEX.HW potentially unwanted application
29.55%

Norman
Application.Elex.AL, Win32.SlugIn.A
27.27%

McAfee
Virus.W32/Wplugin, Trojan.Artemis!83AA9918F743, Trojan.Artemis!95E153E45696
27.27%

avast!
Win32:Patched-JI
22.73%

Emsisoft Anti-Malware
Win32.SlugIn
22.73%

F-Prot
W32/Slugin.B
22.73%

AVG
Win32/Slugin.A
20.45%

1 / 68      (PUP)
qkseeSvc.exe (qksee by Qksee Pvt)  (83aa9918f743b65cff77cbbfca5b6e5f)

1 / 68      (PUP)
tmp0000000adbc0c284057184a2  (b9749a809158f5052fc63e0e380d509b)

1 / 68      (PUP)
qksee.exe (qksee by Qksee Pvt)  (95e153e45696825117c766866ede70c7)

1 / 68      (PUP)
Uninstall.exe (qksee by Qksee Pvt)  (cc9cb26b6e4f9e6a6d262e9c4759d6f4)

1 / 68      (PUP)
qkseeSvc.exe (qksee by Qksee Pvt)  (83aa9918f743b65cff77cbbfca5b6e5f)

1 / 68      (PUP)
qkseeSvc.exe (qksee by Qksee Pvt)  (83aa9918f743b65cff77cbbfca5b6e5f)

1 / 68      (PUP)
Uninstall.exe (qksee by Qksee Pvt)  (0f0ded4188bdda8bfc25f609374a0ea4)

1 / 68      (PUP)
qksee.exe  (4f54dcbd0209f89b6ee4d7d282d963a9)

1 / 68      (PUP)
qkseeSvc.exe (qksee by Qksee Pvt)  (93921863385db1920dd07181bb00c6fd)

4 / 68      (PUP)
{blocked}.tdl (qksee by Qksee Pvt)  (0ed9c82828cd90abbcbe2ba1b457c1ca)

10 / 68    (PUP)
qkseeSvc.exe (qksee by Qksee Pvt)  (1a4aa9c6b3d6b03c26d61e0fcc799f82)

11 / 68    (PUP)
qksee.exe (qksee by Qksee Pvt)  (8177217da09d6d2645a89123ba2e205b)

1 / 68      (PUP)
qkdup.exe  (87a4d8021ec61cbbd979e5e71f5c3d29)

10 / 68    (PUP)
qkseeSvc.exe (qksee by Qksee Pvt)  (db018b41e14996775d97e2cc22a93913)

11 / 68    (PUP)
qksee.exe (qksee by Qksee Pvt)  (eb3492377a0a8d72b1a16ca919a99d89)

2 / 68      (PUP)
qkseeSvc.exe (qksee by Qksee Pvt)  (83aa9918f743b65cff77cbbfca5b6e5f)

1 / 68      (PUP)
Uninstall.exe (qksee by Qksee Pvt)  (861fae292e4faca3e70c966b430e967e)

3 / 68      (PUP)
qkdup.exe (qksee by Qksee Pvt)  (3ae574e9bc90ca58ae7b787a089fa686)

3 / 68      (PUP)
qkdl.exe (qksee by Qksee Pvt)  (34c32bf8113c8ae477e1628875e058ad)

3 / 68      (PUP)
myuser.exe  (7db1baf0f92a82bfb463e4cf9fd6f316)

11 / 68    (PUP)
qkseeSvc.exe (qksee by Qksee Pvt)  (007e29280f94449bc888eb9d0bf352d1)

11 / 68    (PUP)
qksee.exe (qksee by Qksee Pvt)  (9a6bbf1021685ef1394e2b6fe62f6729)

1 / 68      (PUP)
qksee.exe (qksee by Qksee Pvt)  (7eaabd470581977191a16a4fa4327602)

2 / 68      (PUP)
qkseeSvc.exe (qksee by Qksee Pvt)  (83aa9918f743b65cff77cbbfca5b6e5f)

3 / 68      (PUP)
qkseeSvc.exe (qksee by Qksee Pvt)  (bd2e240f6bc1d39b652580f757d156ac)

3 / 68      (PUP)
qkseeSvc.exe (qksee by Qksee Pvt)  (257ed12e966d1bab2d6ec02fac6dd484)

10 / 68    (Malware)
qkseeSvc.exe (qksee by Qksee Pvt)  (ac2941986400d4d1632cd6344fac0fee)

11 / 68    (Malware)
qksee.exe (qksee by Qksee Pvt)  (cb8f3cdeee2bdf3e42342d53471a14c7)

10 / 68    (Malware)
qkseeSvc.exe (qksee by Qksee Pvt)  (1ef09f5e2a8a0377843135a9793f9f50)

9 / 68      (Malware)
qksee.exe (qksee by Qksee Pvt)  (cbaa42d06f964063ab780dd8867e72ae)

 
Latest 30 of 45 files

The certificates below are also signed by Jinnan Wu.

6ECBC3532E98D7E46FBB30356BBC3891  (Aug 16, 2016 to Jan 18, 2017)

705DA81E30855999BF51AE10B6CD259A  (Aug 30, 2016 to Jan 18, 2017)

02C9891C691E3A392587D448059C2998  (Apr 19, 2016 to Jan 18, 2017)

1C616CDB4B340E2663ED8917D6C79F59  (Jul 07, 2016 to Jan 18, 2017)

1DFEB55D3D5F00F08ECABA69C8A687CA  (Aug 03, 2016 to Jan 18, 2017)

2ACD3D3D3B8DB87E84787577AE013208  (Sep 13, 2016 to Jan 18, 2017)

4E2606B2C9EA9EF64A37654A8FAC0D71  (Jun 16, 2016 to Jan 18, 2017)

6660F513F20AD5EFE5316715A1FD2B7F  (Jun 28, 2016 to Jan 18, 2017)

6D8446650B66D918337964A70120EAC2  (Sep 14, 2016 to Jan 18, 2017)

7018702E62B6F4A4A0D122B123F7EB21  (Aug 26, 2016 to Jan 18, 2017)

10 of 50 code signing certificates issued

* Note, the details and description above are based on the code signing digital signature issued to Jinnan Wu by thawte, Inc. on January 18, 2016 with the serial number '18229c0f3250464b242d5dd76615c1ec'.