home

teleport v6 th.exe

The executable teleport v6 th.exe has been detected as malware by 9 anti-virus scanners. This is a setup program which is used to install the application. The file has been seen being downloaded from fs06n4.sendspace.com and multiple other hosts.
MD5:
3f92e61ae49a92536cb89a5eabd42be6

SHA-1:
fb85f796ea5dc3ffa66f1c70528eed73455177f5

SHA-256:
018c10a15f46139d827856ac52b3d3c88617994ec4dbb1cc15aca79171561ba3

Scanner detections:
9 / 68

Status:
Malware

Analysis date:
11/23/2024 10:00:35 AM UTC  (today)

Scan engine
Detection
Engine version

Agnitum Outpost
HackTool.CheatEngine
7.1.1

Baidu Antivirus
HackTool.Win32.CheatEngine
4.0.3.151210

ESET NOD32
Win32/HackTool.CheatEngine.AF potentially unsafe (variant)
9.12433

Fortinet FortiGate
W32/Generic.AC.1569906
12/10/2015

F-Prot
W32/CheatEngine.B.gen
v6.4.7.1.166

Malwarebytes
HackTool.CheatEngine
v2015.12.10.02

McAfee
Artemis!3F92E61AE49A
5600.6555

Sophos
Generic PUA PL (PUA)
4.98

VIPRE Antivirus
Trojan.Win32.Generic
44670

File size:
3.9 MB (4,077,056 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\teleport v6 th.exe

File PE Metadata
Compilation timestamp:
6/28/2013 5:45:44 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
98304:5FhYsq2FIau77oZxFksHAbnCIEh2o+geTHI:ThYpKuExGXb0CT

Entry address:
0x15EB

Entry point:
E8, 1C, 1B, 00, 00, E9, 78, FE, FF, FF, 8B, FF, 55, 8B, EC, 51, 56, 8B, 75, 0C, 56, E8, AC, 27, 00, 00, 89, 45, 0C, 8B, 46, 0C, 59, A8, 82, 75, 17, E8, 6A, 03, 00, 00, C7, 00, 09, 00, 00, 00, 83, 4E, 0C, 20, 83, C8, FF, E9, 2F, 01, 00, 00, A8, 40, 74, 0D, E8, 4F, 03, 00, 00, C7, 00, 22, 00, 00, 00, EB, E3, 53, 33, DB, A8, 01, 74, 16, 89, 5E, 04, A8, 10, 0F, 84, 87, 00, 00, 00, 8B, 4E, 08, 83, E0, FE, 89, 0E, 89, 46, 0C, 8B, 46, 0C, 83, E0, EF, 83, C8, 02, 89, 46, 0C, 89, 5E, 04, 89, 5D, FC, A9, 0C, 01, 00...
 
[+]

Entropy:
7.9663  (probably packed)

Code size:
35.5 KB (36,352 bytes)

The file teleport v6 th.exe has been seen being distributed by the following 17 URLs.

https://fs06n4.sendspace.com/dl/a7ef523176e29152c1617d16b94f8b32/5852a84b19f5d6f2/.../Teleport V6 TH.EXE

https://fs06n3.sendspace.com/dl/71826356ce9cb6eea5f1a68ba084e6e3/580ffda435a0c45d/.../Teleport V6 TH.EXE

https://fs06n5.sendspace.com/dl/edf2ed06956d681ef07adc9374549d95/565e0fb446a04177/.../Teleport V6 TH.EXE

https://fs06n3.sendspace.com/dl/9d89064718c3444d893bf551026227b8/581d0af76f2ecd11/.../Teleport V6 TH.EXE

https://fs06n5.sendspace.com/dl/e2d7e1aba86dcaed964bc93764b40374/57ea58af316fcc30/.../Teleport V6 TH.EXE

https://fs06n5.sendspace.com/dl/baeebf9c5fbae60c61edacf4dfcc72be/55f5993c2cd862f6/.../Teleport V6 TH.EXE

https://fs06n3.sendspace.com/dl/ea622112c2a5500280af5ef486db7c61/56d06dff13822721/.../Teleport V6 TH.EXE

https://fs06n4.sendspace.com/dl/b037b38e8100af98a850c7d5ed6a6fa9/57759fae061c7989/.../Teleport V6 TH.EXE

https://fs06n3.sendspace.com/dl/d3596837490c25d81dcd5fee9a21a78e/5774f0d5369fdec7/.../Teleport V6 TH.EXE

https://fs06n3.sendspace.com/dl/c78d6eee656b13fd4335d8f3390be2eb/576a981931337b7e/.../Teleport V6 TH.EXE

https://fs06n5.sendspace.com/dl/ac43f8f39d2f1a5879660b893ac8e4d3/573cca257b7d5583/.../Teleport V6 TH.EXE

https://fs06n4.sendspace.com/dl/5047c43f8f962ff0be5abc057e74b170/573a6a157a942b79/.../Teleport V6 TH.EXE

https://fs06n1.sendspace.com/dl/326dd3a3101d19a06f4d9df02121956c/569153945b7d7cb9/.../Teleport V6 TH.EXE

https://fs06n4.sendspace.com/dl/4f653a13340d7ae1b3f5b5d5192e0206/56be10e64138ba17/.../Teleport V6 TH.EXE

https://fs06n1.sendspace.com/dl/f29a3b1f5feca7eaae7fc78c13f7fcdc/56cdb4a106653fb1/.../Teleport V6 TH.EXE

https://fs06n4.sendspace.com/dl/b34bfff38ce9f820d576202eefde7c52/56b87c72159241c9/.../Teleport V6 TH.EXE

https://fs06n5.sendspace.com/dl/6551a1e4573dd3ce33695ede0ba86af8/56a2e01b359a5479/.../Teleport V6 TH.EXE

Remove teleport v6 th.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.