home

anti ss.exe

MD5:
a3764badeecf612d047ac2df998fe911

SHA-1:
4ccdee461241d1bc60f227bc577bf00c3f425619

SHA-256:
b86684d9e12def57ff9056a94c47bd3b3d0de9472fdcc70fa43bbfd893a3e483

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
1/15/2025 2:32:57 PM UTC  (today)

File size:
883 KB (904,192 bytes)

File type:
Executable application (Win32 EXE)

File PE Metadata
Compilation timestamp:
6/19/1992 11:22:17 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
12288:qEU/Pye4nrk9vDqSNQM23jtHWKSqLvZGGwO04poV4AZva:qZ/qvrklDj23jtHICvZGGwORua

Entry address:
0x6A768

Entry point:
55, 8B, EC, 83, C4, F0, B8, 1C, 96, 46, 00, E8, 60, BF, F9, FF, A1, CC, CB, 46, 00, 8B, 00, E8, 50, 56, FF, FF, 8B, 0D, D0, CC, 46, 00, A1, CC, CB, 46, 00, 8B, 00, 8B, 15, D8, 64, 46, 00, E8, 50, 56, FF, FF, 8B, 0D, 0C, CD, 46, 00, A1, CC, CB, 46, 00, 8B, 00, 8B, 15, 5C, 56, 46, 00, E8, 38, 56, FF, FF, 8B, 0D, 6C, CA, 46, 00, A1, CC, CB, 46, 00, 8B, 00, 8B, 15, CC, 5C, 46, 00, E8, 20, 56, FF, FF, A1, CC, CB, 46, 00, 8B, 00, E8, 94, 56, FF, FF, E8, DB, 9F, F9, FF, 8D, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
6.1864

Developed / compiled with:
Microsoft Visual C++

Code size:
420.5 KB (430,592 bytes)

The file anti ss.exe has been seen being distributed by the following 4 URLs.

http://s6424.chomikuj.pl/File.aspx?e=gxu7jiZhCF9XA3X-zAqrK_C3Z0i6-32-pg0MJBt80wPUP_MsHiGzrFRqITi2nBkD9u51vY6HuuP2Og6P4YP1RlUaXcUX7irlC8UJEUVbSrXwDPP0DVk5WQ-IIaFM1Euo1Ny7dTs3KiaNPCvUAfR_SQ&pv=2

http://s10793.chomikuj.pl/File.aspx?e=gxu7jiZhCF9XA3X-zAqrKyvJjIaDDOAQ_MuS3Glir4J1bFpDS9PizHiHw61idVVoJtVN9aqbebHClGLafVydvsTshR3y8IaTNJPhfupcL8xPAC0ViCUP6H-WHjR2LPrjvyMAn7GJbgvQdfpEPY-dbg&pv=2

http://s10793.chomikuj.pl/File.aspx?e=gxu7jiZhCF9XA3X-zAqrKyvJjIaDDOAQ_MuS3Glir4Ko7ayYJnIfe7yAInx1U7mhonwMPHrMznwDEkyVFcCGsXpWIv3PNbx-wQNnFnyLBXlxaZxP1X6Oq3Ep6xib20FE1qX5Vutfc9kXTtILtujRIg&pv=2

http://s6206.chomikuj.pl/File.aspx?e=YNwBEjWjoF3FTQplAy4rvOY7CKMfQ27Akh4QS_YGL0ObNhVJOi5hc7WRtH-MH2rs40hVpw8I-J3oJCY1AjZXx7LQ_MIpVSdIFXCe2WKwhrDkItcs9Rmzj-3l187wfv4lYi_AtK0wCLWTb_DnbZsAsg&pv=2

Scan anti ss.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.