home

tgpminiloader.1450.1.26.3.3391.tgp.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from dldir1.qq.com.
MD5:
d292bdbf1e8879aa138316c6e11fb65b

SHA-1:
ac3462b3443c38fd4498b30988650ab07c8115d5

SHA-256:
e5f41fa53c5a775dd005f5db8168aef625b48366eef42a1b348570e84bf5cf45

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/27/2024 12:10:23 AM UTC  (today)

File size:
3.3 MB (3,454,120 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\tgpminiloader.1450.1.26.3.3391.tgp.exe

File PE Metadata
Compilation timestamp:
12/6/2009 5:50:46 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
98304:WDnRJmf37IBZTKRxqT9epCP8x8OlnoMigpF:OnRJHZTXT9eRxrrX7

Entry address:
0x323C

Entry point:
84, FC, 89, FE, EB, 0A, F7, D9, F7, C1, 76, DD, 51, 83, 0F, CE, 81, FF, B8, 0F, 00, 00, F6, D1, 68, 5C, 69, A5, 00, 8D, 35, B0, 89, 69, 4B, BF, AA, 56, 80, 37, 75, 03, C6, C7, 60, E8, 6D, 00, 00, 00, 81, CB, DA, 72, 13, CE, 77, 06, 8D, 15, 2E, 02, 76, 6B, 2B, C1, C6, C2, BF, 8D, 1D, 57, 49, 15, C5, 35, 54, 1C, 6D, 6F, FE, CD, FF, CF, 8D, 1D, E4, D9, FF, FF, 22, C7, 81, C3, 7B, 0F, 00, 00, 8B, EB, 88, D3, 81, C5, 7D, 08, 00, 00, 49, 8D, 75, 00, 80, E1, CE, 81, C6, 24, 0E, 00, 00, FF, CF, F7, C5, D2, 98, 98...
 
[+]

Entropy:
7.9832  (probably packed)

Code size:
23 KB (23,552 bytes)

The file tgpminiloader.1450.1.26.3.3391.tgp.exe has been seen being distributed by the following URL.

http://dldir1.qq.com/tgc/tgp/full/mini/.../TGPMiniLoader.1450.1.26.3.3391.tgp.exe

Scan tgpminiloader.1450.1.26.3.3391.tgp.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.