home

Chongqing QuWan Technology Co., Ltd.

Publisher Information

Chongqing QuWan Technology Co., Ltd. is a software publisher located in Chongqing, China*. There is one additional code signing certificate issued to this publisher.
Authority:
WoSign CA Limited

Valid from:
2/19/2014 5:04:27 PM

Valid to:
2/19/2015 5:04:27 PM

Subject:
CN="Chongqing QuWan Technology Co., Ltd.", E=69650343@qq.com, O="Chongqing QuWan Technology Co., Ltd.", L=Chongqing, S=Chongqing, C=CN

Issuer:
CN=WoSign Class 3 Code Signing CA, O=WoSign CA Limited, C=CN

Serial number:
27e41047825795855f19cc7565e51e9e

Status:
Inconclusive detections from multiple engines

Scan engine
Details
Detections

Dr.Web
Adware.Weiduan.14
16.67%

Clam AntiVirus
Exploit.Java.KaiXin-1, Win.Trojan.Maozhi
16.67%

Norman
Agobot.CX, OnLineGames.STR
11.11%

Vba32 AntiVirus
suspected of Trojan.Downloader.gen.h
11.11%

ESET NOD32
Win32/Kuping.J potentially unwanted application, Win32/Kuping.B potentially unwanted application
11.11%

Trend Micro House Call
Suspicious_GEN.F47V0126
11.11%

Comodo Security
Heur.Packed.Unknown
11.11%

IKARUS anti.virus
Backdoor.Win32.Agobot
5.56%

NANO AntiVirus
Trojan.Win32.Siggen6.csjqgr
5.56%

Bkav FE
W32.HfsAdware
5.56%

1 / 68      (inconclusive)
KPTOOLBAR.EXE  (947e4f3b5e5e2ff9b843892a03c00f7f)

0 / 68
TongJICNZZ.dll (DataAna Dynamic Link Library)  (40e3899b01616fcaa8f9a6653504dd8b)

0 / 68
DxKankan.exe  (e6e06c09cd8d9845e74f1e3ccc5caea2)

0 / 68
UniversalFunction.DLL (UniversalFunction Dynamic Link Library)  (4eaa266cf0ecaa63a27c68b0fd295755)

0 / 68
TongJICNZZ.DLL (TongJICNZZ Dynamic Link Library)  (da50347c515b0e17074118a841b7220f)

0 / 68
kuping5_5.0.1.9.exe  (b457b0ecfab792c9374595cf104bf3a9)

2 / 68      (inconclusive)
KPMsgBoxDll.DLL (KPMsgBoxDll Dynamic Link Library)  (e0e46342e9c2672ca38f68302c339b9b)

0 / 68
ThemeInstall.DLL (ThemeInstall Dynamic Link Library)  (db17fe8cfdae2749ee1520fb4102e692)

0 / 68
KpInstallTheme.EXE  (6d3ff8d2a7559876ff3488a71fe6756e)

1 / 68
TongJICNZZ.DLL (TongJICNZZ Dynamic Link Library)  (abae2511289b0512efbae6ac58a07c6b)

1 / 68
userbehaviorstatistics.dll  (0a18c320e4d08a5639e23e83b53f07f8)

0 / 68
uploadimg.dll  (d4a9585b19b40f020c1370a0664d3329)

0 / 68
Unrar.dll (RAR decompression library by Alexander Roshal)  (74736d7da236b417a2c7f3a33ad240bb)

0 / 68
zlib1.dll (zlib)  (cde1a126911bf763fbc924c6989f1fa0)

2 / 68
bassenc.dll (by Un4seen Developments)  (207eca21b8a4a1f01481be038050e22c)

2 / 68
bass.dll (by Un4seen Developments)  (af01c2194b708e35ee392a66f251c655)

1 / 68
setup_s90158.exe  (421c3a9a5c6b302eccf772182d487cd0)

0 / 68
universal.exe  (7fbdadcea7cccf643f064e03a531a35a)

0 / 68
kptoolbar_b_27692.exe  (c9048a452b7f128550668e6be203bb5e)

0 / 68
zlib1.dll (zlib)  (4cea02367a02d81b6b1694695731f3b2)

0 / 68
uninst.exe  (e35fda6c09f34506e69a0c4d6b04f6c1)

0 / 68
TongJICNZZ.DLL (TongJICNZZ Dynamic Link Library)  (77a0a4ffd0b77534391ac6a5de4f38c5)

0 / 68
tongji.exe  (9ccc626caa6c01def5727b10b28ce811)

0 / 68
repair.exe  (57c7e8821a652dab114dae6e0600abab)

0 / 68
libcurl.dll  (2380e1f02a3eab6a6dd854cd8aeeda86)

0 / 68
dxupdate.exe  (df570457175bb8260d12e9c2eac8b7b3)

0 / 68
dxrepair.exe  (02b49e908e19395522935a86213e2950)

0 / 68
cdownload.exe  (cc3ef3b0e0037a26feeae5f77d17fc7d)

1 / 68      (inconclusive)
KP_5.EXE  (ff498911f13af73e0646ca93d50a9fa6)

0 / 68
TongJICNZZ.dll (DataAna Dynamic Link Library)  (ef741696db374da963dc7a280bb6e7a0)

 
Latest 30 of 44 files

Downloads URLs for files signed by Chongqing QuWan Technology Co., Ltd..

1 / 68
http://www.baidu.com/cb.php?c=IgF_pyfqnHRsrjbknHb0IZ0qnfK9ujYknjDYPHD10Aw-5Hb1rHn1r0KsULnqP10YnW0d0ZnqmhmLmWDYPAc3nyfzuhfLufKbIjYkPj0vrHf1nWfs0ZNzUjdCIZwsrBtEThf8ph-MIy78uv--QhPEUiqzua4spZ0OTv-Yuy-b5Hcd0ZFb5HT0mhYqn0KsTWYs0ZNGujY1nj01nWbd0AqGujYLPH6zn0KWpyfqnWb3PWb40AqLUWYLn1T4nsKWThnqnHnkn16  (setup_a_34871.exe)

1 / 68
http://210.6.198.7/.../rmvb_a_41434.exe  (db67c8203d753bcfffd94c37d89a3677)

1 / 68
http://down.qunasou.com/.../rmvb_a_41434.exe  (db67c8203d753bcfffd94c37d89a3677)

1 / 68
http://rd.jiguangie.com/rd.php?siteid=144  (setup_a_34871.exe)

1 / 68
http://rd.jiguangie.com/rd.php?siteid=203  (setup_a_34871.exe)

The following websites host and distribute files published by Chongqing QuWan Technology Co., Ltd..

down.qunasou.com

rd.jiguangie.com

The following certificate is also signed by Chongqing QuWan Technology Co., Ltd..

18AD187BD1370732A4DEEE0367218BD1  (Feb 13, 2015 to Mar 13, 2016)

The following publishers (by Authenticode signature organization name) are related.

SHANGRAO WANGJU TIANXIA TECHNOLOGY CO.,LTD.

重庆话语科技有限公司

重庆趣玩科技有限公司

天宁区茶山极速图文设计工作室

JINHUA 9158 NETWORK SCIENCE AND TECHNOLOGY CO.,LTD.

Beijing baidu Netcom science and technology co.ltd

* Note, the details and description above are based on the code signing digital signature issued to Chongqing QuWan Technology Co., Ltd. by WoSign CA Limited on February 19, 2014 with the serial number '27e41047825795855f19cc7565e51e9e'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.