home

Preference_x86_ru.exe

Preference_x86_ru

Toncha Communication

This is a setup program which is used to install the application. The file has been seen being downloaded from www.1001soft.com.
Publisher:
Toncha Communication

Product:
Preference_x86_ru

Description:
Gambling-House

Version:
1.1.1

MD5:
060256a20d6de0c4592c5f32527d68cd

SHA-1:
916331488922fd59791046d0b791cdb767a37641

SHA-256:
0c9a1005591eb0625287ce9131a788ceb47ac0b7ab2d1b73beb4c3a661e35407

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/25/2024 10:51:36 PM UTC  (today)

File size:
6.4 MB (6,688,028 bytes)

Product version:
1.1.1

Copyright:
2013 © Toncha Communication

Original file name:
Preference_x86_ru.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\preference_x86_ru.exe

File PE Metadata
Compilation timestamp:
9/20/2013 12:14:45 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
2.23

CTPH (ssdeep):
49152:D8E2/TsRdnLUJG2sznmPe7N7uRqY/sKKQ8710hQ9eqgej8n:DLnLR2TWN7WqY/sK/8710h6U

Entry address:
0x1280

Entry point:
83, EC, 1C, C7, 04, 24, 01, 00, 00, 00, FF, 15, 8C, 22, 42, 00, E8, 6B, FD, FF, FF, 8D, 74, 26, 00, 8D, BC, 27, 00, 00, 00, 00, 83, EC, 1C, C7, 04, 24, 02, 00, 00, 00, FF, 15, 8C, 22, 42, 00, E8, 4B, FD, FF, FF, 8D, 74, 26, 00, 8D, BC, 27, 00, 00, 00, 00, A1, A4, 22, 42, 00, FF, E0, 89, F6, 8D, BC, 27, 00, 00, 00, 00, A1, 98, 22, 42, 00, FF, E0, 90, 90, 90, 90, 90, 90, 90, 90, 90, 55, 89, E5, 83, EC, 18, C7, 04, 24, 00, B0, 41, 00, E8, 2A, 1F, 01, 00, 52, 85, C0, 74, 65, C7, 44, 24, 04, 13, B0, 41, 00, 89...
 
[+]

Code size:
80.5 KB (82,432 bytes)

The file Preference_x86_ru.exe has been seen being distributed by the following URL.

http://www.1001soft.com/download.php?go=file&id=28582&d=1

Scan Preference_x86_ru.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.