home

calc_thc.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from s10567.chomikuj.pl and multiple other hosts.
MD5:
094367303eefe43bb45ad8f40553c98b

SHA-1:
b42a11a3f4cbe45a24f1103ef8efe7386e1fc935

SHA-256:
1622a89fc10269ee311ea42e5212f2c2d3e5bca1545255a4df86b1246390d4ff

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 7:39:30 PM UTC  (today)

File size:
49.1 KB (50,280 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\downloads\calc_thc.exe

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
1536:dN5VT2v02tm5VHF/gHQka0xUPIG7Gs0g5:dN5VT2vdAHF/gwd0y7qs

Entry point:
4D, 5A, 68, 00, 63, 00, 58, 00, 20, 00, E7, 00, FF, FF, 8D, 0C, 00, 08, B2, E4, 54, 2C, 00, 00, 1E, 00, 00, 00, 01, 00, 7F, 01, 00, 00, 8B, 01, 00, 00, 9A, 01, 00, 00, A6, 01, 00, 00, B5, 01, 00, 00, 83, 02, 00, 00, 92, 02, 00, 00, A1, 02, 00, 00, AD, 02, 00, 00, BC, 02, 00, 00, C8, 02, 00, 00, D7, 02, 00, 00, 2A, 03, 00, 00, 3F, 03, 00, 00, 85, 03, 00, 00, B2, 03, 00, 00, 0A, 05, 00, 00, 1A, 05, 00, 00, 2A, 05, 00, 00, 3A, 05, 00, 00, 4A, 05, 00, 00, 5A, 05, 00, 00, 66, 05, 00, 00, 8D, 05, 00, 00, B4, 05...
 
[+]

The file calc_thc.exe has been seen being distributed by the following 2 URLs.

http://s10567.chomikuj.pl/File.aspx?e=8bg2PalPxug-eeoG0uT6rD_vK4uPWzSB_k9zhU2TArhRkQ6p9e0sceHKJfuuuPCBFzQWkoLSvt_dnE7CCFsd6JsBVhk85sVotOdFCS7nMhSsuMAAAKmYx7j2DqyZKZpwI7kP6Mc9iXy3_v9u2X7New&pv=2

http://www.drugs-plaza.com/.../calc_thc.exe

Scan calc_thc.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.