home

windows-chewing-tsf-2013-09-26.exe

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from 123.briian.com and multiple other hosts.
MD5:
c434fd1dc1eb0efe6107ba0f1d899802

SHA-1:
e92a4323bcfee630f61be1d3d4ca169c5dc9b538

SHA-256:
b6b8bb401056f5945581d7b592bbf6771f8432958708b21c47d8d9b2663f9c2d

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 7:11:57 AM UTC  (today)

File size:
1.7 MB (1,762,841 bytes)

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

File PE Metadata
Compilation timestamp:
7/15/2013 4:09:41 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
49152:cYJzsowcYdFamAOsIXCYacGe/3Q7VhkpwlFdytcZ+qr:79853a6YYacGe/3YsKDtRr

Entry address:
0x31B1

Entry point:
81, EC, D4, 02, 00, 00, 53, 55, 56, 57, 6A, 20, 33, ED, 5E, 89, 6C, 24, 14, C7, 44, 24, 10, D8, 92, 40, 00, 89, 6C, 24, 1C, FF, 15, 34, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, 34, 71, 40, 00, 55, FF, 15, AC, 72, 40, 00, 6A, 08, A3, 58, 92, 42, 00, E8, 95, 2E, 00, 00, A3, A4, 91, 42, 00, 55, 8D, 44, 24, 34, 68, B4, 02, 00, 00, 50, 55, 68, 58, 06, 42, 00, FF, 15, 7C, 71, 40, 00, 68, C0, 92, 40, 00, 68, A0, 81, 42, 00, E8, 00, 2B, 00, 00, FF, 15, 38, 71, 40, 00, BB, 00, 40, 43, 00, 50, 53, E8, EE, 2A, 00, 00...
 
[+]

Entropy:
7.9897

Packer / compiler:
Nullsoft install system v2.x

Code size:
23.5 KB (24,064 bytes)

The file windows-chewing-tsf-2013-09-26.exe has been seen being distributed by the following 32 URLs.

http://123.briian.com/forum.php?mod=attachment&aid=MjUyNnxhMDg5NjRkYXwxNDM4NTc2MjkxfDB8Nzc1

http://123.briian.com/forum.php?mod=attachment&aid=MjUyNnwwZmQ4ZGE1OXwxNDUwNTk2NTAyfDB8Nzc1

http://123.briian.com/forum.php?mod=attachment&aid=MjUyNnw4NmIwZDA4YnwxNDM1NjU2OTQ2fDB8Nzc1

http://123.briian.com/forum.php?mod=attachment&aid=MjUyNnw1YWZlZmU0MHwxNDIzMjYwMTM0fDB8Nzc1

http://123.briian.com/forum.php?mod=attachment&aid=MjUyNnw0ZWM5ZTlkNXwxNDA3ODM3MTExfDB8Nzc1

https://doc-0c-1c-docs.googleusercontent.com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/i0v7vce0skeqr2iu17h1nc1tccrms5pt/1390017600000/00281720047524736911/.../0B4BhmC8V2mivYnZkRUw2SnRVNlk?h=16653014193614665626&e=download

https://doc-0c-1c-docs.googleusercontent.com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/27o7dvlqlt97blcbpi96fhi8vpbcc85c/1392120000000/00281720047524736911/.../0B4BhmC8V2mivYnZkRUw2SnRVNlk?h=16653014193614665626&e=download

http://123.briian.com/forum.php?mod=attachment&aid=MjUyNnwwMWVmN2M2M3wxMzkyODQ5MDcwfDB8Nzc1

http://123.briian.com/forum.php?mod=attachment&aid=MjUyNnw0Y2I4MzdiNXwxMzg3NzA0MzMxfDB8Nzc1

https://doc-0c-34-docs.googleusercontent.com/docs/securesc/s8t3hgos3uve8ljscr8k8c2ak1q8ugfq/p3eicqhggfk23rff0paph3oago22k7p0/1380333600000/00281720047524736911/.../0B4BhmC8V2mivYnZkRUw2SnRVNlk?h=16653014193614665626&e=download

https://docs.google.com/nonceSigner?nonce=11gdso53g2oo6&continue=https://doc-0c-34-docs.googleusercontent.com/docs/securesc/s8t3hgos3uve8ljscr8k8c2ak1q8ugfq/p3eicqhggfk23rff0paph3oago22k7p0/1380333600000/00281720047524736911/.../0B4BhmC8V2mivYnZkRUw2SnRVNlk?e=download&h=16653014193614665626&hash=6hp7sfbdshotdhoe03u6qi1fkptrkkfi

https://doc-0c-34-docs.googleusercontent.com/docs/securesc/s8t3hgos3uve8ljscr8k8c2ak1q8ugfq/p3eicqhggfk23rff0paph3oago22k7p0/1380333600000/00281720047524736911/.../0B4BhmC8V2mivYnZkRUw2SnRVNlk?e=download&h=16653014193614665626&nonce=11gdso53g2oo6&user=16057243509033773662&hash=l3kjbcalfu9ntqs9erajlccmfukguhpq

https://doc-0o-8o-docs.googleusercontent.com/docs/securesc/k3rtegprp13srcaahn1f3f4dlvkpisnu/8bjl8mc7v95jbvf88v6pplgaln2vssja/1380614400000/00281720047524736911/.../0B4BhmC8V2mivYnZkRUw2SnRVNlk?h=16653014193614665626&e=download

https://docs.google.com/nonceSigner?nonce=qp59kvoq9lffi&continue=https://doc-0o-8o-docs.googleusercontent.com/docs/securesc/k3rtegprp13srcaahn1f3f4dlvkpisnu/8bjl8mc7v95jbvf88v6pplgaln2vssja/1380614400000/00281720047524736911/.../0B4BhmC8V2mivYnZkRUw2SnRVNlk?e=download&h=16653014193614665626&hash=vtvo0ih2bc8r0plvtt6nuav5c00qsfc1

https://doc-0o-8o-docs.googleusercontent.com/docs/securesc/k3rtegprp13srcaahn1f3f4dlvkpisnu/8bjl8mc7v95jbvf88v6pplgaln2vssja/1380614400000/00281720047524736911/.../0B4BhmC8V2mivYnZkRUw2SnRVNlk?e=download&h=16653014193614665626&nonce=qp59kvoq9lffi&user=15845935785854693373&hash=9qo5ra4ge1bsqmiv7ufvcfmvuog9lib5

https://doc-08-cc-docs.googleusercontent.com/docs/securesc/cci8qu2a29ufce947tjmf1fmb7iikaqa/4469ta5v548sg8oq9km8368on2lbd55h/1380189600000/00281720047524736911/.../0B4BhmC8V2mivYnZkRUw2SnRVNlk?h=16653014193614665626&e=download

https://docs.google.com/nonceSigner?nonce=697tkkrrlkikq&continue=https://doc-08-cc-docs.googleusercontent.com/docs/securesc/cci8qu2a29ufce947tjmf1fmb7iikaqa/4469ta5v548sg8oq9km8368on2lbd55h/1380189600000/00281720047524736911/.../0B4BhmC8V2mivYnZkRUw2SnRVNlk?e=download&h=16653014193614665626&hash=93vclicv7us7asu754f40tmcmnumqokt

https://doc-08-cc-docs.googleusercontent.com/docs/securesc/cci8qu2a29ufce947tjmf1fmb7iikaqa/4469ta5v548sg8oq9km8368on2lbd55h/1380189600000/00281720047524736911/.../0B4BhmC8V2mivYnZkRUw2SnRVNlk?e=download&h=16653014193614665626&nonce=697tkkrrlkikq&user=16194156096466109643&hash=5vkjg248nk5306kch63078q25npqadu9

https://docs.google.com/uc?id=0B4BhmC8V2mivYnZkRUw2SnRVNlk&export=download

https://doc-0c-5g-docs.googleusercontent.com/docs/securesc/nun3kqs8aut9rvh825cf3ikofolughsn/5iuger32m39ifdcqsacnp9j10ppnkli7/1380290400000/00281720047524736911/.../0B4BhmC8V2mivYnZkRUw2SnRVNlk?h=16653014193614665626&e=download

https://docs.google.com/nonceSigner?nonce=1m5ro4pkakgks&continue=https://doc-0c-5g-docs.googleusercontent.com/docs/securesc/nun3kqs8aut9rvh825cf3ikofolughsn/5iuger32m39ifdcqsacnp9j10ppnkli7/1380290400000/00281720047524736911/.../0B4BhmC8V2mivYnZkRUw2SnRVNlk?e=download&h=16653014193614665626&hash=mmbg9th16r0vvpq6clssil3jm25jjssf

https://doc-0c-5g-docs.googleusercontent.com/docs/securesc/nun3kqs8aut9rvh825cf3ikofolughsn/5iuger32m39ifdcqsacnp9j10ppnkli7/1380290400000/00281720047524736911/.../0B4BhmC8V2mivYnZkRUw2SnRVNlk?e=download&h=16653014193614665626&nonce=1m5ro4pkakgks&user=16427380446006498947&hash=atnr2rq9c7s74d34clv8sm8fuodrkt67

http://beta101.com/attachment.php?aid=MjUyNnw4YmMwZDBlZnwxMzgxMTA2NTI1fDc1Mjg5RjFEdXhaQXIwSTdnazRUUE9ISG5XWmhOellUYzNEc2N2V3ZnU2ZDdjhR

http://download.briian.com/attachment.php?aid=MjUyNnw5ZTRjZmZjZXwxMzgxNDE5ODc0fDkyOWNldEtCUUpqay9mSUs2c0srTzFDb05FYnRLbXBZVndvSDBuRWRmRmdwZ2Rj

http://beta101.com/attachment.php?aid=MjUyNnwyZjViY2QxNnwxMzgwNTIyNTAwfDZkZjkySW54M2FWcFpmbVlqQW1kUGZoK2VSVzZueU45N09YM0F4ODdySGhkdzRJ

http://beta101.com/attachment.php?aid=MjUyNnwxYWI5NGYwZHwxMzgwNDQ3NDY4fDJmMWQ4Rm51cTJmQkdaT29xT1VydzFCUFN0SXFPc1RxUjM1VjZwVmRkUzFjQmh3

http://download.briian.com/attachment.php?aid=MjUyNnwwZTRlYTRiMnwxMzgyMzM1MzI0fDlkODM3VGpDa2RIbDZyK29HcW9uekFlZFlWNEIvUVA0N1M5SWhTaDMvbTQvcXZj

http://beta101.com/attachment.php?aid=MjUyNnxmMjBjM2EwNXwxMzgwODYzNzUzfDhiZWFpR1paMTdqODdOZFpadEtxdnZjeFhNbFNjM2NxcVNUbVFhWlhia0NKaU80

http://beta101.com/attachment.php?aid=MjUyNnwwNWNhZjEyNXwxMzgwNTIyMjcxfDQwNjR3M1RtRkxtRkdvRHN0SVBjeHZsbFZLSkpZTlV3WStULzlZZVM0WnpIRy93

http://beta101.com/attachment.php?aid=MjUyNnxkOTA5M2I4ZHwxMzgxMDQ3NTczfDk3NjFwWE9vVmJtQ2ZoeXZNVzV3UUF6MnZ0SUl2bHhUeE9HMW5FYXROZ0thbVVF

Latest 30 of 32 download URLs

Scan windows-chewing-tsf-2013-09-26.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.