Information about El9I.exe

El9I.exe

File Details

Product Name:

腾讯QQ8.9.5
Company Name:

Tencent
MD5: bee94bd2b563601b19d8102c8045025f
Size: 64 KB
First Published: 2017-10-24 03:08:05 (7 years ago)
Latest Published: 2018-09-21 09:13:26 (6 years ago)
Status: Undefined (on last analysis)
Analysis Date: 2018-09-21 09:13:26 (6 years ago)

Overview

Signed By: Tencent Technology(Shenzhen) Company Limited
Status: Valid

Common Places:

%programfiles%\tencent\qq\bin
%commonappdata%\tencent\qqupdate\23
%appdata%\tencent\qq\autemp\2853731112\778gtu03\newfiles\install\bin
%appdata%\tencent\qq\autemp\3073859600\778gtu03\newfiles\install\bin
%programfiles%\tencent\qq
%sysdrive%\daily application\腾讯qq
%commonappdata%\tencent\qqupdate
%sysdrive%\adwcleaner\quarantine\3solbph71y\qq
%sysdrive%\adwcleaner\quarantine\1xvpfvjcrg\qq
%sysdrive%\adwcleaner\quarantine\rywtiizs2t\qq

File Names:

QQExternal.exe
El9I.exe
hGNX896K9k.exe
I9xUBrd.exe
ikwbB2M2Z.exe

Geography:

45.2%
29.0%
12.9%
3.2%
1.6%
1.6%
1.6%
1.6%
1.6%
1.6%

OS Version:

Windows 10 72.6%
Windows 7 12.9%
Windows 8 4.8%
Windows Server 2012 R2 4.8%
Windows 8.1 3.2%
Windows Server 2008 R2 1.6%

Analysis

Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x00007b08

PE Sections:

Name Size of data MD5
.text 30208 cf825f5edf269b70ed1a4964ad862c24
.rdata 15360 74273cb08c19f20133bc051477c61efd
.data 512 cfa4190e0c434f5bca667b4936dab9c7
.gfids 512 ca4392ef68f77e17b958ac554f59775c
.tls 512 bf619eac0cdf3f68d496ea9344137e8b
.rsrc 2048 5af2cd00ddd85f1781dfa02b69136afc
.reloc 3072 81865fc30c2c0b1777a71e9bdd0197e9

More information:

Search on Virustotal
copyright for information about El9I.exe