Hefei Lewei Information Technology Co.,Ltd.

Publisher Information

Hefei Lewei Information Technology Co.,Ltd. is a software publisher located in Hefei, Anhui in China*. A majority of the programs developed by the company can be classified as adware or other potentially unwanted programs.
Authority:
WoSign CA Limited

Valid from:
10/29/2015 2:17:37 PM

Valid to:
10/29/2016 2:17:37 PM

Subject:
CN="Hefei Lewei Information Technology Co.,Ltd.", O="Hefei Lewei Information Technology Co.,Ltd.", L=Hefei, S=Anhui, C=CN

Issuer:
CN=WoSign Class 3 Code Signing CA, O=WoSign CA Limited, C=CN

Serial number:
5ab7015b756534acc678e7db75d22d97

Scanner detections:
Detections  (90% detected)

Scan engine
Details
Detections

avast!
Win32:Adware-gen [Adw], Win32:Evo-gen [Susp]
54.29%

Dr.Web
Adware.Qjwmonkey.47, Adware.Qjwmonkey.49, Adware.Qjwmonkey.60, Adware.Qjwmonkey.64, Adware.Qjwmonkey.62, Adware.Qjwmonkey.67
54.29%

ESET NOD32
Win32/Adware.Qjwmonkey (variant)
51.43%

G Data
Win32.Adware.Qjwmonkey, Gen:Variant.Application.Bundler.84
48.57%

Avira AntiVirus
APPL/Qjwmonkey.cfk
45.71%

IKARUS anti.virus
PUA.Qjwmonkey
45.71%

VIPRE Antivirus
Trojan.Win32.Generic, Threat.4150696
40.00%

K7 AntiVirus
Adware
37.14%

Rising Antivirus
PE:Adware.Qjwmonkey!1.A299 [F], PE:Malware.Generic/QRS!1.9E2D [F], PE:Malware.Generic(Thunder)!1.A1C4 [F], Malware.Undefined!8.C-OvPOhWADn0M (Cloud)
37.14%

Reason Heuristics
(M), Adware.Qjwmonkey
34.29%

0 / 68
batterymon@81_41985.exe (downloader)  (7364d2a9cc6768aa4e203cbc2951cd2a)

1 / 68      (PUP)

26 / 68    (PUP)
echo回声辅助@34_126756.exe (downloader)  (fb6999986e7eab47328c1758d531e120)

14 / 68    (PUP)

0 / 68
xiuxiu-v4.3.1@249_13688.exe (downloader)  (0bdfbf5ec0bca4be63e1e73efaac11b5)

0 / 68
hosts解析器@34_132899.exe (downloader)  (c48d8c9064528b4952c62993a6e02d3f)

1 / 68      (Malware)
adobe+cc+2015+激活补丁@135_50325.exe (downloader)  (8433214e4c68dc9033314d8a29b27a7c)

27 / 68    (PUP)
风越文件批量改名器@34_130941.exe (downloader)  (d646213298b3f7920b3e6e8e1a7cf160)

4 / 68      (PUP)

6 / 68      (PUP)
qvodsetup5.19.196@81_328754.exe (downloader of lewell)  (bb174f22f28e8ee57a3f4f6f83baa7c8)

4 / 68      (PUP)
qvodsetup5.19.196@81_328754.exe (downloader of lewell)  (c0e4827671dc35fc00493e797a807f19)

7 / 68      (PUP)
qvodplayer_3.0.1.59@81_428724.exe (downloader of lewell)  (667b8c066219fac67414a20173d4f829)

13 / 68    (PUP)
扑克牌特效展示@177_64996.exe (downloader)  (a50cefc83739a0b57c4251351be37895)

1 / 68      (Malware)
46w+4ol6.exe (downloader)  (2b34de7855fd9966c038391cd441d2e0)

1 / 68      (Malware)
edius下载@25_67035.exe (downloader)  (dcf2047f5e3d843fd77b55b291d231b4)

1 / 68      (Malware)
p2p种子搜索神器@25_67533.exe (downloader)  (5b6387f919f44accd6f189b82e6126aa)

1 / 68      (Malware)
telegram(telegram电脑版)@34_68643.exe (downloader)  (8404b09e2a136e4fa4f56cd420a356b8)

1 / 68      (Malware)
视频转换快手@83_65.exe (downloader)  (14c5b85d57e23e212315818c08512457)

1 / 68      (Malware)

19 / 68    (PUP)
qq8.2@81_428274.exe (downloader of lewell)  (5db5eed1d3dab624ba936c6ec524fcec)

1 / 68      (Malware)
virtual@34_82833.exe (downloader)  (42bdc6ce946f90787505185cce285139)

1 / 68      (Malware)
360流量防火墙@34_18013.exe (downlaoder of lewell)  (a5f26d8e83042cd72cf4418b532c1756)

6 / 68      (PUP)

22 / 68    (PUP)

5 / 68      (PUP)

19 / 68    (PUP)
w.p.s.4885.20.2394@81_420641.exe (downloader of lewell)  (e977bc103bd21974bf3f484ac2b0db63)

1 / 68      (Malware)
pdf@34_148369.exe (downloader of lewell)  (3914b4dc194f252c319da9387d5c16ee)

28 / 68    (PUP)
baofeng5.57.0202@81_109667.exe (downloader of lewell)  (bb5c89621b8f02f0cea5ce2ff4452efb)

 
Latest 30 of 39 files

Downloads URLs for files signed by Hefei Lewei Information Technology Co.,Ltd..

22 / 68    (PUP)
http://url.goosai.com/.../Internet@34_146302.exe  (ca4453b6111f3c903cb7e410de9aae69)

1 / 68      (Malware)
http://url.tduou.com/.../????????mega??@271_86232.exe  (dcf2047f5e3d843fd77b55b291d231b4)

1 / 68      (Malware)

1 / 68      (Malware)

1 / 68      (Malware)

1 / 68      (Malware)
http://url.tduou.com/.../????@260_38458.exe  (dcf2047f5e3d843fd77b55b291d231b4)

0 / 68
http://url.tduou.com/.../?????ios?@206_54986.exe  (060721e2838775b11bb8217375009259)

1 / 68      (Malware)
http://driver.zol.com.cn/.../432458_6_9.shtml  (edius下载@25_67035.exe)

1 / 68      (Malware)

1 / 68      (Malware)
http://url.tduou.com/.../????Primo@68_30538.exe  (dcf2047f5e3d843fd77b55b291d231b4)

1 / 68      (Malware)
http://url.tduou.com/.../Honey@212_150848.exe  (dcf2047f5e3d843fd77b55b291d231b4)

1 / 68      (Malware)

1 / 68      (Malware)
http://url.tduou.com/.../bb4050@220_460173.exe  (dcf2047f5e3d843fd77b55b291d231b4)

0 / 68
http://url.tduou.com/.../wulogo11203@220_506863.exe  (c48d8c9064528b4952c62993a6e02d3f)

13 / 68    (PUP)
http://url.tudown.com/.../Windows@34_147488.exe  (a50cefc83739a0b57c4251351be37895)

1 / 68      (Malware)
http://url.tduou.com/.../??@260_98952.exe  (dcf2047f5e3d843fd77b55b291d231b4)

1 / 68      (Malware)

1 / 68      (Malware)
http://url.tduou.com/down/.../64?)@240_77371.exe  (dcf2047f5e3d843fd77b55b291d231b4)

1 / 68      (Malware)

1 / 68      (Malware)
http://url.tduou.com/.../????PC???@225_289093.exe  (dcf2047f5e3d843fd77b55b291d231b4)

1 / 68      (Malware)
http://url.tduou.com/.../????go@198_125585.exe  (dcf2047f5e3d843fd77b55b291d231b4)

19 / 68    (PUP)

 
Latest 30 of 255 download URLs

The following websites host and distribute files published by Hefei Lewei Information Technology Co.,Ltd..

The following publishers (by Authenticode signature organization name) are related.

* Note, the details and description above are based on the code signing digital signature issued to Hefei Lewei Information Technology Co.,Ltd. by WoSign CA Limited on October 29, 2015 with the serial number '5ab7015b756534acc678e7db75d22d97'.