home

install_flash_clinic.exe.ttd

电脑管家

VeriSign, Inc.

Publisher:
Tencent  (signed by VeriSign, Inc.)

Product:
电脑管家

Description:
QMCommDriver

Version:
12.1.18177.214

MD5:
cfe29466e3ca2562af0d720b57f125fa

SHA-1:
b39fca671c3fbef43f7c82d016ba8d545411a516

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/25/2024 9:50:00 AM UTC  (today)

File size:
17.5 MB (18,362,048 bytes)

Product version:
12,1,18177,214

Copyright:
Copyright ? 2016 Tencent. All Rights Reserved.

Original file name:
QMCommDriver

Common path:
C:\Documents and Settings\{user}\Local settings\temp\{random}.tmp\install_flash_clinic.exe.ttd

Digital Signature
Signed by:
VeriSign, Inc.

Authority:
VeriSign, Inc.

Valid from:
2/8/2010 8:00:00 AM

Valid to:
2/8/2020 7:59:59 AM

Subject:
CN=VeriSign Class 3 Secure Server CA - G3, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Issuer:
CN=VeriSign Class 3 Public Primary Certification Authority - G5, OU="(c) 2006 VeriSign, Inc. - For authorized use only", OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
6ECC7AA5A7032009B8CEBCF4E952D491

File PE Metadata
Compilation timestamp:
10/14/2016 12:07:46 PM

OS version:
6.1

OS bitness:
Win64

Subsystem:
Native (none required)

Linker version:
9.0

Entry address:
0x2E064

Entry point:
48, 83, EC, 28, 4C, 8B, C2, 4C, 8B, C9, E8, 95, FF, FF, FF, 49, 8B, D0, 49, 8B, C9, 48, 83, C4, 28, E9, 92, 34, FD, FF, CC, CC, E8, E0, 02, 00, 00, 00, 00, 00, 00, 00, 00, 00, 56, F0, 02, 00, 28, E0, 01, 00, C0, E0, 02, 00, 00, 00, 00, 00, 00, 00, 00, 00, E6, F0, 02, 00, 00, E0, 01, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, A8, F0, 02, 00, 00, 00, 00, 00, 8C, F0, 02, 00, 00, 00, 00, 00, 64, F0, 02, 00, 00, 00, 00, 00, C8, F0, 02, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
7.8695  (probably packed)

Code size:
119.5 KB (122,368 bytes)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.