41302daad8e25eb2ad8d9d03bb3b0d2b File Analysis Results

Metadata

File name:	N/A
File type:	PE32 executable (GUI) Intel 80386, for MS Windows
File size:	322704
Analysis date:	N/A
MD5:	41302daad8e25eb2ad8d9d03bb3b0d2b
SHA1:	9f718711996d1c2b811664dd8d2acee1ba0c1626
SHA256:	ac418cecf07dace9b5c74c25e434abf94ac80e13c924ad6dfda7d8d6cddd12b2
SHA512:	N/A
SSDEEP:	N/A
IMPHASH:	N/A
Authentihash:	N/A
Related resources

PE Type	PE32
Internal Name	TSULoader
Product Code	{1298F6E9-9E4C-4B3B-9549-0E50C623D394}
Package Code	{9A674617-25EF-4731-A5DA-6DCD418464E1}
A Product Version	N/A
Comments	WinNT (x86) Unicode Lib Rel
File Size	315 kB
Machine Type	Intel 386 or later, and compatibles
Original Filename	TSULoader.exe
File OS	Win32
Tag 03	N/A
Code Size	7680
OS Version	4.0
Entry Point	0x14db
File Flags Mask	0x003f
Linker Version	8.0
File Subtype	N/A
Uninitialized Data Size	N/A
File Version	N/A
Initialized Data Size	308736
A File Description	N/A
A Web Site	N/A
Product Version Number	1.0.0.3
A Email	N/A
Product Name	SnowApp
Company Name	SnowApp
MIME Type	application/octet-stream
A Special Build	N/A
Character Set	Unicode
Language Code	Neutral
File Version Number	2014.3.11.1505
File Type	Win32 EXE
A Legal Copyright	N/A
Yright 2014 Snow App	N/A
Tag 43111505	N/A
Subsystem	Windows GUI
Tallerfor Snow App	N/A
Object File Type	Executable application
Image Version	6.0
File Flags	Special build
Subsystem Version	4.0
Arguments	/x
Source:

APTNotes
Cyber threat intelligence reports associated with 41302daad8e25eb2ad8d9d03bb3b0d2b.

Domains
Domains the malware sample communicates with.

Hosts
Hosts the malware sample communicates with.

HTTP Requests
HTTP requests the malware sample makes.

AV Detections
AV detection names associated with the malware sample.

AVG	MalSign.Generic.256
AhnLab-V3	PUP/Win32.TSULoader
AntiVir	TR/AntiFW.b.47
Avast	Win32:InstalleRex-BI [PUP]
Comodo	Application.Win32.InstalleRex.KG
DrWeb	Trojan.WebPick.29
ESET-NOD32	a variant of Win32/InstalleRex.Q
GData	Win32.Application.InstalleRex.E
K7GW	Unwanted-Program ( 0049574e1 )
Kingsoft	Win32.Troj.AntiFW.b.(kcloud)
Malwarebytes	PUP.Optional.Installrex
McAfee	PUP-FHQ!41302DAAD8E2
McAfee-GW-Edition	PUP-FHQ!41302DAAD8E2
Qihoo-360	Malware.QVM20.Gen
Rising	PE:PUF.InstallRex!1.9E4C
VBA32	Downloader.AdLoad
VIPRE	Installerex/WebPick (fs)

Mutants
Mutants created by the malware sample.

Registry keys
Registry keys created by the malware sample.

Comments
User comments about 41302daad8e25eb2ad8d9d03bb3b0d2b.

File: 41302daad8e25eb2ad8d9d03bb3b0d2b