home

wechat_c1012.exe

微信电脑版

This is a setup program which is used to install the application. The file has been seen being downloaded from dldir1.qq.com.
Product:
微信电脑版

Description:
微信电脑版安装程序

Version:
2.1.0.1012

MD5:
601c2e179caa83d26fb97659323df6f6

SHA-1:
213bdcbc0b04bf32fdc8838811f528dd99355f6d

SHA-256:
15f61dd053fd2a356590a764a26b13ccb4553f94cb509eabcf4eddd92810f1cb

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
6/19/2025 10:15:57 AM UTC  (today)

File size:
5.5 MB (5,733,700 bytes)

Product version:
2.1.0.0

Copyright:
Copyright © 2016 Tencent. All Rights Reserved.

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\wechat_c1012.exe

File PE Metadata
Compilation timestamp:
8/5/2015 12:46:30 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
98304:bTXFXAZgIoTtUGGfcNwuGnpM+uDKlTFL7xWt5O0ZAjOjHxFhlExx:/++IoTtUGGjhpeDiPWt5Oj6u

Entry address:
0x335A

Entry point:
FE, CD, 88, FD, 84, E3, 68, FF, 52, F7, 00, 8B, F3, 69, DB, A7, 85, 73, 32, FE, C4, 0F, B7, D2, 85, C1, 69, D1, C2, 1F, 64, 10, 69, F6, B8, 7C, 89, DF, 0F, AF, FE, 89, D0, F7, C6, 17, DC, ED, E4, 68, E5, 89, F6, FF, 71, 09, 8B, C5, 69, F8, 44, 56, 58, 36, F3, 59, 85, F3, 40, 86, D0, 81, E9, B9, 0A, 00, 00, 71, 0D, BD, 56, 6D, 76, 0B, 80, EE, F4, BF, E4, BB, 6A, 22, 2B, D9, 69, C5, 8B, 8A, B9, A1, 8B, F2, 81, EB, 3F, 86, 09, 00, 89, D1, 8A, C7, F3, 10, F9, 8A, C5, 02, E7, C6, C6, 7B, 86, FF, 87, D5, 0F, AF...
 
[+]

Code size:
24 KB (24,576 bytes)

The file wechat_c1012.exe has been seen being distributed by the following URL.

http://dldir1.qq.com/weixin/.../WeChat_C1012.exe

Scan wechat_c1012.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.