home

Wuhan kuaiyou Technology Co.Ltd.

Publisher Information

Wuhan kuaiyou Technology Co.Ltd. is a software publisher located in Wuhan, Hubei in China*. There is one additional code signing certificate issued to this publisher.
Authority:
Thawte, Inc.

Valid from:
7/10/2014 8:00:00 AM

Valid to:
7/10/2016 7:59:59 AM

Subject:
CN=Wuhan kuaiyou Technology Co.Ltd., O=Wuhan kuaiyou Technology Co.Ltd., L=Wuhan, S=Hubei, C=CN

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
4795821c89414d031d0b816bc3a51f4a

Status:
Inconclusive detections from multiple engines

Scan engine
Details
Detections

Reason Heuristics
PUP.QiqiBox
50.00%

ESET NOD32
Win32/QiqiBox.A potentially unwanted application
35.71%

Vba32 AntiVirus
suspected of Trojan.Downloader.gen.h
14.29%

IKARUS anti.virus
PUA.WDJiange
7.14%

Zillya! Antivirus
Downloader.Adload.Win32.19410
7.14%

AVG
Adware Generic6.BDAV
7.14%

ESET NOD32
Win32/QiqiBox.A potentially unwanted (variant)
7.14%

1 / 68      (PUP)
qbox5087.exe (by Wenyue)  (51a6339053df7b51b44c96dd984f455c)

1 / 68      (inconclusive)
qiqibox.exe  (f0aad7c746da38c9680fe86f6660ee45)

0 / 68
setup@9553_1.exe  (cc5b10ca06b625369a30249b183b6147)

1 / 68      (PUP)
qbox5585.exe (by Wenyue)  (51a6339053df7b51b44c96dd984f455c)

0 / 68
XKUpdate.exe  (f4a8a73168e2247ba452fe1c1c8796ea)

0 / 68
xkcalendar.exe  (38f6d859095862410e73d8e5e2f36ef0)

0 / 68
autohookx64.exe  (9574ea653ac5c439b3b31aa38c2d7095)

0 / 68
qiqibox_1018.exe  (670ec1c89d00753b2643f08f7aa99c65)

0 / 68
xkcalendar.exe  (da7f0a5010f2950a50ca0f4e96b0603b)

0 / 68
xkcalendar.exe  (32e6af4a571301ecd5a4c5310f74df30)

1 / 68      (PUP)
qbox9108.exe (by Wenyue)  (51a6339053df7b51b44c96dd984f455c)

2 / 68      (PUP)
qiqibox514.exe (by Wenyue)  (f9b2c14eae429f8bf06b6ea64d6721d6)

1 / 68      (inconclusive)
qbdownload.dll (DownLoadModule by Wenyue)  (2b6db34a161df7f0d24e15a49ef06e18)

3 / 68      (PUP)
qiqibox513.exe (by Wenyue)  (2794b89199891b44a2b5a9a40319d569)

0 / 68
extract.dll (7-Zip by Igor Pavlov)  (a9c330be6fc36ca8103a185c2c60cded)

0 / 68
qiqibox_1020.exe  (4c2da22571932ac70bf10951ee0d45cf)

1 / 68
setup@9553_1.exe  (6c11c2403d5ba3c5991ae76d8dacc6d0)

0 / 68
setup@9553_1.exe  (0f148833bccf8dd4637eb7863c00742c)

0 / 68
QBUpdate.exe (UpdateModule by Wenyue)  (0ec88ce6cbd969ebc9ab9c75c9e32189)

1 / 68      (PUP)
qiqibox515.exe (by Wenyue)  (21830e95dd485b3daab5771f1460ac0c)

0 / 68
qiqibox_1001.exe  (e5fe16cbe6eb592af3b68d4642ed5a88)

0 / 68
QBUpdate.exe (UpdateModule by Wenyue)  (839159efaf37440562bcdedda634ce52)

0 / 68
qbdownload.dll (DownLoadModule by Wenyue)  (dd957f020e266ded46b5044a22171fd2)

0 / 68
extract.dll (7-Zip by Igor Pavlov)  (fadf20d8957be44f07e0314b02407292)

2 / 68      (PUP)
qiqibox514.exe (by Wenyue)  (51a6339053df7b51b44c96dd984f455c)

1 / 68      (inconclusive)
qiqibox_1020.exe  (cf72d2b2cbf9d862d5b19a97812ae00a)

1 / 68
setup@9553_1.exe  (1440595c2cf84f92ac83909a6fc15838)

0 / 68
qs_14.exe  (66c007d8e9225544c6eb5679152f6d0c)

0 / 68
xkrlupdate_new.exe  (f5c9fc371a99c084813daf161e8b7104)

0 / 68
autohookx86.exe  (e91145e2afb63be351029c65acb965b4)

 
Latest 30 of 36 files

Downloads URLs for files signed by Wuhan kuaiyou Technology Co.Ltd..

0 / 68
http://www.hds18.com/down.php?id=1  (setup@9553_1.exe)

1 / 68      (inconclusive)
http://www.baduqq.com/.../qiqibox.exe  (f0aad7c746da38c9680fe86f6660ee45)

1 / 68
http://d.pcs.baidu.com/file/6c11c2403d5ba3c5991ae76d8dacc6d0?fid=3825708089-250528-54780399181752&time=1417513108&rt=pr&sign=FDTAERVCY-DCb740ccc5511e5e8fedcff06b081203-GsnWyVsO4G9ICLHf9g HFWpPdOI=&expires=8h&prisign=OPlXeyLLE60gMv0/.../3SKcGzuw x45oLOM2ebDsA7W9Ml4qnqaYWCq8K F5CgaPnWGDcoBg1n66jBjnRESUE6BqcnCjzdHwRkSHRECJlQ3r7yn40Q5Q2eQPP0qbAVdJCcyRAxqlRYSzmPiwHb2tiVFS5eEBYxBsN5mVfUfQAHaw1ZIxi0=&chkv=1&chkbd=1&chkpc=et&r=280307761&cflg=65534:2  (setup@9553_1.exe)

1 / 68      (inconclusive)
http://download.pplive.com/vas/bss/.../qiqibox_1020.exe  (cf72d2b2cbf9d862d5b19a97812ae00a)

1 / 68
http://down.9553.com/.../9553setup@17555@.exe  (43a6a3eb1e7a5eb37a363ed7a7163b7d)

1 / 68
http://down.9553.com/.../???????? v1.4.0 PC?@26802@.exe  (43a6a3eb1e7a5eb37a363ed7a7163b7d)

1 / 68
http://down.9553.com/.../???????? v1.0 ???@38660@.exe  (43a6a3eb1e7a5eb37a363ed7a7163b7d)

1 / 68
http://down.9553.com/.../9553setup@17342@.exe  (43a6a3eb1e7a5eb37a363ed7a7163b7d)

The following websites host and distribute files published by Wuhan kuaiyou Technology Co.Ltd..

down.9553.com

download.pplive.com

The following certificate is also signed by Wuhan kuaiyou Technology Co.Ltd..

18889B2D0FA7041E6A4F2A1E052B031A  (Jun 29, 2016 to Jul 30, 2018)

The following publishers (by Authenticode signature organization name) are related.

PPLive Corporation

Shanghai Oriental Webcasting Co. Ltd.

2345.com

Beijing Wenyue Technology Co.,Ltd.

Wuhan Yu Ku of Network Technology Co., Ltd

TAOBAO (CHINA) SOFTWARE CO.,LTD.

Shenzhen DriveTheLife Software Technology Co.Ltd

NetEase Youdao Information Technology (Beijing) Co.,Ltd.

Baidu Online Network Technology (Beijing) Co., Ltd.

* Note, the details and description above are based on the code signing digital signature issued to Wuhan kuaiyou Technology Co.Ltd. by Thawte, Inc. on July 10, 2014 with the serial number '4795821c89414d031d0b816bc3a51f4a'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.