home

Beijing Wenyue Technology Co.,Ltd.

Publisher Information

Beijing Wenyue Technology Co.,Ltd. is a software publisher located in Beijing, China*. Thre are 2 additional code signing certificates issued to this publisher.
Authority:
Thawte, Inc.

Valid from:
9/24/2012 8:00:00 AM

Valid to:
9/25/2013 7:59:59 AM

Subject:
CN="Beijing Wenyue Technology Co.,Ltd.", OU=IThelp, O="Beijing Wenyue Technology Co.,Ltd.", L=Beijing, S=Beijing, C=CN

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
58fd6dc5b97b2ba3d40a475127ef2dcc

Status:
Inconclusive detections from multiple engines

Scan engine
Details
Detections

ESET NOD32
Win32/QiqiBox.B potentially unwanted application, Win32/QiqiBox.A potentially unwanted application
33.33%

Trend Micro House Call
TROJ_GEN.RCBH1B2, TROJ_GEN.R047H01GI13, TROJ_GEN.F47V0630
26.67%

Sophos
Mal/RootKit-A, Virus 'Mal/RootKit-A'
20.00%

K7 AntiVirus
Trojan, Adware
13.33%

F-Prot
W32/SelfStarterInternetTrojan, W32/SelfStarterInternetTrojan!M
13.33%

IKARUS anti.virus
not-a-virus:AdWare.Win32.Cinmus
13.33%

Baidu Antivirus
PUA.Win32.QiqiBox
6.67%

F-Secure
Adware:W32/Cinmus.gen!H
6.67%

0 / 68
QiqiBox.exe (by Yuku)  (74d4830972fde49a6b8caca5f66640a4)

0 / 68
qiqibox_1007.exe  (e01bddf4f643910faefdb7c0c520b6e8)

2 / 68      (inconclusive)
newshelper.dll (3 by newshelper)  (94ddfce3dd2348915ec4fd1e9ba66d92)

1 / 68
foxse.dll (Windows)  (eaea17c7416a320ffacf16d07e21c405)

0 / 68
qiqibox_1017.exe  (145c81129012b138d7d9c79e3a39a36c)

0 / 68
qiqibox_1012_0.0.0.0.exe  (2bf4b3be93a2e1ebb6e86343d8be6e56)

0 / 68
dailynews.exe  (e2c8a12b22aa04c6b0d3b65d9433419f)

0 / 68
qiqibox_1007.exe  (d02669be19361bcfd900af45f45d68f2)

2 / 68
ifoxdaily.exe  (34c9e6146c49ba9b35aac5ad3def2c59)

1 / 68      (inconclusive)
QiqiBox.exe (by Yuku)  (47f841b473f2fb34ac49113c98d53f22)

1 / 68      (inconclusive)
qiqibox_1006.exe  (d86370174756a2ebc3ff5107393cb528)

0 / 68
qiqibox_1017.exe  (c82d74c2b1a53b091d144aafb7befa46)

0 / 68
littletornado.dll (ToolBand Module)  (1a9655e9fb8e4c3a2810944d0be70e26)

0 / 68
dailynews.exe  (5787df247a9de2db009c193311bcf62b)

0 / 68
setup012.exe  (90df95b32bed9f704b34257d45d0bb7b)

1 / 68
daily.exe  (a1e63a416f2d503df6a0f692df088d7c)

0 / 68
qiqibox_1001.exe  (3ef7e0eba29c44b688fca7b25486fc76)

2 / 68
QiqiBox.exe (by Yuku)  (7e2c5eeadf7ea9193b0e7eff5db8a7f8)

0 / 68
QiqiBox.exe (by Yuku)  (3596a87cc633136a6e1c278dd2433f27)

0 / 68
QiqiBox.exe (by Yuku)  (74268f1275027ff2755dee0b9cb0bd1c)

1 / 68      (inconclusive)
qiqibox_1005.exe  (74584bb0a3134d58235d62ee9f5e863c)

0 / 68
QBUpdate.exe (UpdateModule by Yuku)  (f9cc6e98d7cd7a632e542a8edb37eba1)

0 / 68
extract.dll (7-Zip by Igor Pavlov)  (0f3c00f810acdd16755902d957bbe4b4)

0 / 68
qbdownload.dll (DownLoadModule by Yuku)  (88bfc36502aa6c7d7b5af56cb480c2f6)

0 / 68
QiqiBox.exe (by Yuku)  (feeda7d51ac851bc8db389e40e0f6376)

1 / 68      (inconclusive)
QiqiBox.exe (by Wenyue)  (5c212980d82076f4697284762fd87185)

0 / 68
QiqiBox.exe (by Wenyue)  (20e9d0e92139ceb42e6a1e7f289c0453)

0 / 68
newshelper.dll (3 by newshelper)  (c171420cdefcb70dfbc5af05db7920b1)

0 / 68
QiqiBox.exe (by Yuku)  (3ade01acf703e66e027339d1f425bc70)

0 / 68
qbdownload.dll (DownLoadModule by Yuku)  (f8f9a8b5bde997e24004cbef7bddc1d4)

 
Latest 30 of 45 files

Downloads URLs for files signed by Beijing Wenyue Technology Co.,Ltd..

1 / 68      (inconclusive)
http://www.baidu.com/cb.php?c=IgF_pyfqrjfkrjDzn6KYTjYk0A7b5HbvrHRkr0KbuHY3rHc4rH60TAq15Hm3nHcYr0K15yf1PhPhuWu-rH7-rj7Wuj00uZfqnHnLnjmvPH64PsKdThsqpZwYTjCEQLILIz4BmywdTgD8mvqVQvwEIv4_Uv7bQL7GTy-BUL9xnH0sPB4-XAR0ThfqPsKBUHYs0ZKz5H00Iy-b5HD4n16YPHm0Uv-b5HDsrH030APGujY1P1fdP0KEIv3qnH0LnHm0mLFW5HRsrjR  (qiqibox_1006.exe)

0 / 68
http://cnrdn.com/Ry16  (qiqibox_1006.exe)

The following websites host and distribute files published by Beijing Wenyue Technology Co.,Ltd..

cnrdn.com

www.baidu.com

The certificates below are also signed by Beijing Wenyue Technology Co.,Ltd..

08135830C8AE230D4A11FEE36774A0A6  (Oct 14, 2014 to Nov 14, 2015)

265E6914040F4A740B16B1E0D9E67CFE  (Oct 21, 2013 to Oct 22, 2014)

The following publishers (by Authenticode signature organization name) are related.

ZUNSHANG INFO TECH CO. LTD.

Beijing Sohu New Media Information Technology Co., Ltd.

Beijing baidu Netcom science and technology co.ltd

广西南宁市昇泰安电子商务发展有限公司

Baidu (China) Co., Ltd.

重庆话语科技有限公司

Shanghai Zhenrui Network Technology Studio

Shanghai Weilu Network Technology Co., Ltd.

Shanghai Gaoxin Computer System Co.,ltd

GuangxiNanningshi Shengjuguangzaixian Info Tech Co.,LTD.

Youbo Network Technology Co.,Ltd

Tencent Technology(Shenzhen) Company Limited

上海冰狗网络科技有限公司

Changzhou Zunshang Information Technology Co., Ltd

Yantai ZhengHao Network Technology Co.,Ltd.

Beijing Kingsoft Security software Co.,Ltd

Shanghai kuaiping Network Technology Co., Ltd

上海快屏网络科技有限公司

SHANGRAO WANGJU TIANXIA TECHNOLOGY CO.,LTD.

SHANGHAI FENGHAN NETWORK INFORMATION TECHNOLOGY STUDIO

易书海

Xi'an TingXue Network Technology co., Ltd.

BEIJING QIYI CENTURY SCIENCE&TECHNOLOGY CO.,LTD.

ZhongXiang ZhiXing Network Service Co., Ltd.

刘诗诗

Youqu Network Technology Co.Ltd

Sogou.com

上海瑞创网络科技股份有限公司

潘文帅

Chongqing QuWan Technology Co., Ltd.

30 of 60 publishers

* Note, the details and description above are based on the code signing digital signature issued to Beijing Wenyue Technology Co.,Ltd. by Thawte, Inc. on September 24, 2012 with the serial number '58fd6dc5b97b2ba3d40a475127ef2dcc'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.