home

ts1.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from s10198.chomikuj.pl.
MD5:
1edae64b376eaa35b3664c7ef3b18cb8

SHA-1:
8b92bb43c36a9fe7666905857edab5c16d2af9bd

SHA-256:
415b3ed5bc41606ba227b27256772ee7a81aead067f788f096fd75234013a174

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/24/2024 2:30:33 PM UTC  (today)

File size:
730 KB (747,520 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\ts1.exe

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
12288:5tNYFPNRWtuRe7aQYy39nEGvoGyQLXzypz9anTT/JwbFEyZ1H:j61ytuE+Qj9ERG7Dc+TTAK4

Entry address:
0x7E9D0

Entry point:
55, 8B, EC, 83, C4, F0, B8, C0, E7, 47, 00, E8, E8, 79, F8, FF, A1, 9C, 42, 48, 00, 8B, 00, E8, B0, 86, FD, FF, A1, 9C, 42, 48, 00, 8B, 00, BA, 30, EA, 47, 00, E8, AF, 82, FD, FF, 8B, 0D, B0, 40, 48, 00, A1, 9C, 42, 48, 00, 8B, 00, 8B, 15, 58, AF, 47, 00, E8, 9F, 86, FD, FF, A1, 9C, 42, 48, 00, 8B, 00, E8, 13, 87, FD, FF, E8, 9E, 5A, F8, FF, 00, 00, FF, FF, FF, FF, 03, 00, 00, 00, 54, 53, 31, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
503 KB (515,072 bytes)

The file ts1.exe has been seen being distributed by the following URL.

http://s10198.chomikuj.pl/File.aspx?e=FEkiwH2i4FPy025Yb2KNBMy_HS5rFt-yuYGpFVSLLNZdQ9HY5u4yMaJkVJCM6fEK-5G8sX-7iDq3gQL1AeKloSUQY2G1EvlQNeO1BcITPvLTbvP1V8tZ0B7PbyTR6vf0&pv=2

Scan ts1.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.