home

Uninstall.exe

qksee

Jinnan Wu

The application Uninstall.exe by Jinnan Wu has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. This is a setup and installation application and has been known to bundle potentially unwanted software. This is the uninstaller utility registered in the Windows Control Panel for the program qksee by Taiwan Shui Mu Chih Ching Technology Limited.
Publisher:
Qksee Pvt Ltd.  (signed by Jinnan Wu)

Product:
qksee

Version:
3.1.0.0

MD5:
cc9cb26b6e4f9e6a6d262e9c4759d6f4

SHA-1:
e6f73cdaca0a1b0659a4839b4bccde6b2dcdf805

SHA-256:
c19a0d857c73b3dbb2f8496fba59ec96de2feea0ff9d8fd73cddf451d9179dce

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
11/5/2024 8:26:44 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.Elex.Qksee (M)
16.9.11.8

File size:
1.4 MB (1,433,240 bytes)

Product version:
3.1.0.0

Copyright:
Copyright (c) 2015 Qksee Pvt Ltd. All Rights Reserved.

Original file name:
Uninstall.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\qksee\uninstall.exe

Digital Signature
Signed by:
Jinnan Wu

Authority:
thawte, Inc.

Valid from:
1/18/2016 1:00:00 AM

Valid to:
1/18/2017 12:59:59 AM

Subject:
CN=Jinnan Wu, OU=Individual Developer, O=No Organization Affiliation, L=Beijing, S=Beijing, C=CN

Issuer:
CN=thawte SHA256 Code Signing CA, O="thawte, Inc.", C=US

Serial number:
18229C0F3250464B242D5DD76615C1EC

File PE Metadata
Compilation timestamp:
4/8/2016 5:17:27 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
24576:TiOij3zeTEbw93CdT2fLHOBXimK7tP+ilnqumQ1AaJPdtT7S8krPJt:TiOijDVKfPrncQ1FbtT7S8cPJt

Entry address:
0xB6BC2

Entry point:
E8, 32, BB, 00, 00, E9, 7F, FE, FF, FF, 55, 8B, EC, FF, 75, 0C, 6A, 00, FF, 75, 08, 68, 65, E1, 4B, 00, E8, 05, 00, 00, 00, 83, C4, 10, 5D, C3, 55, 8B, EC, 83, EC, 20, 57, 6A, 07, 33, D2, 59, 33, C0, 8D, 7D, E4, 89, 55, E0, F3, AB, 5F, 39, 45, 0C, 75, 15, E8, 1D, 0E, 00, 00, C7, 00, 16, 00, 00, 00, E8, CB, 73, 00, 00, 83, C8, FF, C9, C3, FF, 75, 14, 8D, 45, E0, FF, 75, 10, C7, 45, E4, FF, FF, FF, 7F, FF, 75, 0C, C7, 45, EC, 42, 00, 00, 00, 50, 89, 55, E8, 89, 55, E0, FF, 55, 08, 83, C4, 10, C9, C3, E9, 2A...
 
[+]

Code size:
906.5 KB (928,256 bytes)

Program Uninstaller
Program name:
qksee

Display publisher:
Taiwan Shui Mu Chih Ching Technology Limited

Uninstall string:
C:\Program Files (x86)\qksee\uninstall.exe


Remove Uninstall.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.