Sample: 306b1f94e55214e59ecb6608e448db1b

Note: if you are new to ThreatMiner, check out the how-to page to find out how you can get the most out of this portal.

Metadata
File name:N/A
File type:PE32 executable (GUI) Intel 80386, for MS Windows
File size:972780
Analysis date:N/A
MD5:306b1f94e55214e59ecb6608e448db1b
SHA1:79d73650a626aa873e8590fc444edbf7a903fa43
SHA256:7363697b1d9dbbb9d18750f5a2e22f80bb8a777d1c0c1a459523748dc91622b7
SHA512:N/A
SSDEEP:N/A
IMPHASH:N/A
Authentihash:N/A
Related resources
PE TypePE32
Internal NameRunGameExeModule
File Size950 kB
Machine TypeIntel 386 or later, and compatibles
File OSWin32
Code Size290816
OS Version4.0
Entry Point0xc4000
File Flags Mask0x003f
Linker Version8.0
File SubtypeN/A
Uninitialized Data SizeN/A
File Version1, 5, 60, 401
Initialized Data Size491520
File DescriptionQQ旋风更新助手
Product Version Number1.5.60.401
Product NameQQ旋风更新助手
Company NameTencent Technology (Shenzhen) Company Limited
MIME Typeapplication/octet-stream
Character SetWindows, Latin1
Language CodeEnglish (U.S.)
File Version Number1.5.60.401
File TypeWin32 EXE
Original FilenameRunGameExeModule.exe
Legal CopyrightCopyright (C) 2013-2014 Tencent. All Rights Reserved.
SubsystemWindows GUI
Object File TypeExecutable application
Image Version0.0
File Flags(none)
Subsystem Version4.0
Product Version1, 5, 60, 401
Source:
APTNotes
Cyber threat intelligence reports associated with 306b1f94e55214e59ecb6608e448db1b.
Loading...
Domains
Domains the malware sample communicates with.
Hosts
Hosts the malware sample communicates with.
HTTP Requests
HTTP requests the malware sample makes.
Mutants
Mutants created by the malware sample.
Registry keys
Registry keys created by the malware sample.
Comments
User comments about 306b1f94e55214e59ecb6608e448db1b.
NOTICE: We have updated our privacy terms and conditions in accordance to GDPR. By using our site, you acknowledge that you have read and understand our Privacy Policy. Your use of ThreatMiner’s Products and Services is subject to these policies and terms.