home

ss_drugiestarcie.exe

The program is a setup application that uses the Wise Installer installer. The file has been seen being downloaded from s7895.chomikuj.pl and multiple other hosts.
MD5:
bd4f3677b5d98dc278a287601b3591ea

SHA-1:
7fa8b76a592e2bc0f87c2d2d7a85fe456f6274dd

SHA-256:
ea1d6e63b95abd660af4f61662a2f7d6b6e18b7c09cb481a197707a77b7f4553

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/23/2025 2:52:40 PM UTC  (today)

File size:
452.5 MB (474,522,827 bytes)

File type:
Executable application (Win32 EXE)

Installer:
Wise Installer

Language:
English (United States)

File PE Metadata
Compilation timestamp:
10/25/2001 9:47:11 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
12582912:NwSutLwQLGzBnLDCN9HhPu409cXTLcaD2otVXiXoqGT:OSQVQ5f0hP0yDgovVXOoqGT

Entry address:
0x21AF

Entry point:
55, 8B, EC, 81, EC, 2C, 05, 00, 00, 53, 56, 57, 6A, 01, 5E, 6A, 04, 89, 75, E8, FF, 15, 54, 40, 40, 00, FF, 15, 50, 40, 40, 00, 8B, F8, 89, 7D, F4, 8A, 07, 3C, 22, 0F, 85, CC, 00, 00, 00, 8A, 47, 01, 47, 89, 7D, F4, 33, DB, 3A, C3, 74, 0D, 3C, 22, 74, 09, 8A, 47, 01, 47, 89, 7D, F4, EB, EF, 80, 3F, 22, 75, 04, 47, 89, 7D, F4, 80, 3F, 20, 75, 09, 47, 80, 3F, 20, 74, FA, 89, 7D, F4, 53, FF, 15, 6C, 40, 40, 00, 80, 3F, 2F, 89, 45, F8, 75, 64, 8A, 47, 01, 3C, 53, 74, 04, 3C, 73, 75, 06, 89, 35, 58, 53, 40, 00...
 
[+]

Packer / compiler:
Wise Installer Stub

Code size:
8.5 KB (8,704 bytes)

The file ss_drugiestarcie.exe has been seen being distributed by the following 9 URLs.

http://s7895.chomikuj.pl/File.aspx?e=oF-BLRRe5vk4bmtRYkbeuBKHzh6PhSMqHiA_zLJCyOqjj2_09S98yHXG0MPnZRyhbCBucasXobFO01Xiuch0sfqbi65EmxNBg1Kd72Km5wn5icTfF17DHxhObBb3NcDCgIf6r00l_MZRMbEnUHEPtE8M86sbNrbk7w0CNLhJ-zo&pv=2

http://s7895.chomikuj.pl/File.aspx?e=oF-BLRRe5vk4bmtRYkbeuPqsbbeVlyw4T5LQetEBBE4RraoIIKpjhei_Z2v7O_SP9hcZpepOSccMjuQxZOAbuaKU4814679yVATgIAHbSSLUekScv0oVvzAcfH-L9xpkSWxarADv12KL02gPvLUpgE8HsMk0KgVya1F-_K7oEpI&pv=2

http://s7895.chomikuj.pl/File.aspx?e=oF-BLRRe5vk4bmtRYkbeuBKHzh6PhSMqHiA_zLJCyOoWznjp4MCvOS3_EE98pLC_0SVFCHyEA3nn-Dd2tqV4EKOGYaumJQrvByDpeKU15f5eKxyYPq0PPJ-9mOUMysAuBbl5_S6w4QdjycTKMQfkl1dlbLtJNFmPJ5gcyDPwKUs&pv=2

http://s7895.chomikuj.pl/File.aspx?e=oF-BLRRe5vk4bmtRYkbeuI4tKnQ7-31zVIHyY8IkNdlH_I4lNazTn6NnFFlVEWXX7-ZFRx9EkR6sV1ZggbNdhsqYFTrrOqD7Q4wEhamBItjkzhCSOCR3TTMhhCuoBadve-yNgGjEdMdgpnK2-DyF0U6Jrf_hwwOwMyfTVqeOp7M&pv=2

http://s7895.chomikuj.pl/File.aspx?e=oF-BLRRe5vk4bmtRYkbeuClZWqq0BetYF3hqJrpG6ke56GP1WPMUldy1N0zwfAXJmtamcLdC1IvlV4tLN7oWTCFSj2U5Qb9ag6YyQIPjI3SXcEgAAGM5U771QkCUt_7dE_dDhSTd0PxUtBOquXJF3JAXvxjSWG0UudWmMmkvsVo&pv=2

http://s7895.chomikuj.pl/File.aspx?e=oF-BLRRe5vk4bmtRYkbeuIICSS2Osgxbqf2KllX2E8sB-qBglq5P_whl4c6jBQ6JGQX7EcCpk4Q_RW_OFh-h5EZNE0qUVmk7ljjivCuTSBTWg-ItwDatgBcsf44oxKxgS1AP4U6MP_QvH0-P3mw-DPZxycQQfG9_apL5Lw-WQGg&pv=2

http://s7895.chomikuj.pl/File.aspx?e=oF-BLRRe5vk4bmtRYkbeuL2DTcYBLRCVi1zUtOiQTulUSrVV86T76crRCoWJ3zH6td2415ssF9YYB9WZPqnCVd-3a-ONstEgDRgv5qEWTrcU4ulA_B_S_8803uBAqJ7MqjERMuKqtyL2H5RkesTMaZFitgOndHVR9XyzUeJUswU&pv=2

http://s7895.chomikuj.pl/File.aspx?e=oF-BLRRe5vk4bmtRYkbeuBKHzh6PhSMqHiA_zLJCyOpAvpLSV1UgCuRY48tjcsRWgA37HMr5MT0nP8yiAM7a8eBE3YzVgyQZzqQTLPmxJG7SbZp090KYCsPmobznq8362m0XN2ISUuD9hIw_5ZGS-Ki42bPQgq3b8bgZWlBYKWw&pv=2

http://s7895.chomikuj.pl/File.aspx?e=oF-BLRRe5vk4bmtRYkbeuClZWqq0BetYF3hqJrpG6kdfgsvrNf7mbNqhfbiie0KGGavMn9oiZqGlYM76sJCPeabnNQEgi0fBPXQNR-66rMDjG1OrOe3i9RjEDYENdqZx6fK2V3T-Bvsw6Ki9L1JfSG43i7SNk0vb8G8OijhqYQE&pv=2

Scan ss_drugiestarcie.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.