home

thunder5.9.28.1564.exe

迅雷5安装程序

深圳市迅雷网络技术有限公司

This is a setup program which is used to install the application. The file has been seen being downloaded from down.sandai.net.
Publisher:
深圳市迅雷网络技术有限公司

Product:
迅雷5安装程序

Version:
5.9.28.1564

MD5:
0a209f6fbde9d194732585be746857d4

SHA-1:
847b13aef078061a6a81d9528514ce742f4e096c

SHA-256:
b5673526f9907eee90221e50488d24e5d36d7f920f6954ed38870bdb0d4dcca3

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/24/2024 6:01:41 AM UTC  (today)

File size:
14.7 MB (15,420,256 bytes)

File type:
Executable application (Win32 EXE)

File PE Metadata
Compilation timestamp:
5/3/2008 7:08:42 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
393216:pmawLHOLV7JcK7ApKfk0QCEPcXDCg/cHmtSVnns0RmYPhR/C:pKLuLV7aKsmk0QlPcXDCcvtonnFEYf6

Entry address:
0x3225

Entry point:
3A, EC, F7, C6, BA, 39, 3D, E9, 43, F6, C6, B4, F7, C0, 09, 1A, BB, B9, 47, 84, E3, 81, CE, E3, 3B, 05, B0, 8D, 2D, D4, DE, 4B, F7, 85, C7, 0F, AF, E9, 2A, D8, E8, 53, 00, 00, 00, 41, 25, 77, 98, B6, 1F, 69, C0, 11, CF, F9, 0A, 78, 01, 4F, 8D, 1D, F1, B9, A9, F5, 87, D8, B5, 43, BF, C5, CB, FF, FF, 89, DE, 81, F7, 34, 91, 00, 00, 69, DA, AE, E3, A8, 97, 4E, 80, F8, 1C, 48, F6, C0, 5E, 11, E8, 8B, EF, 8D, 1D, 8A, E4, D7, 5D, FE, C8, 81, C5, 3C, 9B, 01, 00, 80, DD, 60, 2B, D5, 89, E9, F7, C0, C1, 6E, E2, 3C...
 
[+]

Entropy:
7.9998  (probably packed)

Code size:
22.5 KB (23,040 bytes)

The file thunder5.9.28.1564.exe has been seen being distributed by the following URL.

http://down.sandai.net/Thunder5.9.28.1564.exe

Scan thunder5.9.28.1564.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.