home

1703755_stp.exe

Pendrive Virus Remover Install Program

This is a setup and installation application. The file has been seen being downloaded from www.ranchsendgift.com and multiple other hosts.
Product:
Pendrive Virus Remover Install Program

Version:
2, 0, 0, 34

MD5:
8fcfc1fb025d5a337f51845faf798459

SHA-1:
633e5c51099c75613741cf7df0fff35ecbb50d9f

SHA-256:
cd52af5ee0d4d2bc4afb14a63e28858f3615182cdc1e102284b6e1cb153887a9

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/18/2024 6:20:55 PM UTC  (today)

File size:
1.4 MB (1,474,388 bytes)

Product version:
2, 0, 0, 34

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\1703755_stp.exe

File PE Metadata
Compilation timestamp:
7/22/2009 5:12:58 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
24576:e7WtT8vZLE4QI49gWkGaGC7RpPKg/tnONTP0KM9EZPdI8p7ZRJzKUOoE7:nTa7F4hkGaLd/tnOl09Ef3RJ2U67

Entry address:
0x13DBC

Entry point:
55, 8B, EC, 6A, FF, 68, 98, 87, 41, 00, 68, E0, 6A, 41, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 58, 53, 56, 57, 89, 65, E8, FF, 15, A4, 80, 41, 00, 33, D2, 8A, D4, 89, 15, B0, F2, 41, 00, 8B, C8, 81, E1, FF, 00, 00, 00, 89, 0D, AC, F2, 41, 00, C1, E1, 08, 03, CA, 89, 0D, A8, F2, 41, 00, C1, E8, 10, A3, A4, F2, 41, 00, 33, F6, 56, E8, BB, 03, 00, 00, 59, 85, C0, 75, 08, 6A, 1C, E8, B0, 00, 00, 00, 59, 89, 75, FC, E8, FD, 2A, 00, 00, FF, 15, 10, 81, 41, 00, A3, CC, F7, 41, 00, E8...
 
[+]

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
92 KB (94,208 bytes)

The file 1703755_stp.exe has been seen being distributed by the following 20 URLs.

http://www.ranchsendgift.com/AECqxY rOIIxGY7XcD8bv7cztuD_E5kjwPrAX bmCQzyY7QS1wNgsIjjCXeO51ayG6ZQttMB2X5FsmKsm2nkc4vT0AepklBPu2RlcnijBzatp7JiLHoGFJ2ic9TDcXGE3C9FQBOAiAy9qLiu1BYdwpYMLETYnWyN2y_PGPuu45hN95YwXWcVicJqmx71E iiC8uUcz4_27kBkavxEK7J8nl0u7nN7A==-G1QAAMRyW2xPKdAZbFSCHBb9_52 EzbgdGBJJh1wAFsHh5zI5VDLYo2f2E5ZlzwWPLCNJwLEnOTQVdwi7lSh aXgAdW2feDseMNnUcEP

http://www.towerbitscenter.com/eUf Aprir0L_5TzePi uiu5IW 1VY2SnXXrejy4slzorh1mPFI5IHo3H8fnse7agttM PyWhDcQiNAWF3XbY1QaV4XQTLXMrbkt7uX8gTYGpgzCIYcGdVri3p18N31ybjhmdt0KZFI7sJVyivpu3mAZLeq3yVpYxmEgdGTou78aU0f5mFgD3QZyddLfLGcL7DS1A8kCKV4vF A96IsNJkE_gIMwm3TirNyde5K61K_2ld8LIFCc=-G1QAAMRyW2xPKdAZbFSCHBb9_52 EzbgdGBJJh1wAFsHh5zI5VDLYo2f2E5ZlzwWPLCNJwLEnOTQVdwi7lSh aXgAdW2feDseMNnUcEP

http://www.towerbitscenter.com/_18phrR0NOPn0qJ 1APDG5_Qy5e8hwinxDlg2TEXRSDXeuPkvAIYtFfGIshztanIrEmNz EMi9meeV_geq42Cm6xgPCZuZ8ia2d5NQQa4aGItwn05f9wlNM9RWvnKRLy3e464tWTA9joCZZlwX_6EyocK_ekcZzVjtHdQVedlX8PWEnTE9tX PpE F2o ApkoQMeqFmI krwRAQ6I5ILRABDnoGT40Vyp5vOK3MjTm _bHvY1UDPDYNuZWZz6azDoDjreWDahgC0Bv2BS9sUMhllxlfcYFdVb jK3VOmDlRS7maKbvagAq_12CzsGc8SvLuUy4fMav08 xJT0U4Vj06s9 VDtmzzCHh4SS1Uqh1gg3gR32plRwEXJnEpRMr7egDFOiBdLH0uQnHJhPgSoWIVnR62 2bQUvaBDm3RqhlZY_qyviJflczyRpcRCQc6nQ0whlwzeksjsw4Rhd CZKPtSdrWSy5FpWgK_2KOziXEHUcQmo0XjCwoQuuACVFMlQ6MXjP9 sU4vJOQoe7JNpCxxNqnMSaUsjRnsYyiYtkw_N4ZUkos0Kwe_cgJyVhA9WizO78t7DF_WmtgI1_iAW_aaw_KnmzKST10nxsdBFOn3QSe5D0EYnEFZyzx_J9QVXC2zt87-G1QAAMRyW2xPKdAZbFSCHBb9_52 EzbgdGBJJh1wAFsHh5zI5VDLYo2f2E5ZlzwWPLCNJwLEnOTQVdwi7lSh aXgAdW2feDseMNnUcEP-e

http://www.ranchsendgift.com/UUwpceYCEHTRY3bcvCpU1NKviFgcGsjTyrmHF7S6YAQhlCOrS76ZLGsv0yk0l6V677H5u53p0xWTMb5C 9CpxKtOzYd4nsbs9YaBmjY6 A8vEM2x1O3ss4EdB_z8SUpOQLYx4ad_eydBZMTSXF1yfaY2UTk6FqWkyEEqez9XNRxCmdJf_Ck0zPiftGbh_5MIeSFtTTsQf7q34VWHqut7iMKp_AwKYw==-G1QAAMRyW2xPKdAZbFSCHBb9_52 EzbgdGBJJh1wAFsHh5zI5VDLYo2f2E5ZlzwWPLCNJwLEnOTQVdwi7lSh aXgAdW2feDseMNnUcEP

http://www.towerbitscenter.com/Xcw8TxroMPefRqsDBtDs7R8n6PmG9BJ TTo2F6mi0Blzxa_1tU4VC_y7OcS0 TiQhtbP5iEmW4ZEfzMGvfQCc9mP AiVDIUZiE nxoww0DgznIYZmCpl3xj7B0qSw2rh9ibzJRfGld7vZjKA6x1 qSEAdd_vPdZhXx rxfaePlNRODgZ8cYBE3DQPHGlLV3Ule6MJsgEBRQxg6hdQVYnBH2SYEcEw==-G1QAAMRyW2xPKdAZbFSCHBb9_52 EzbgdGBJJh1wAFsHh5zI5VDLYo2f2E5ZlzwWPLCNJwLEnOTQVdwi7lSh aXgAdW2feDseMNnUcEP

http://download.softpedia.com/dl/e632482e8273b4037a8b75075ca321b8/572c396a/100178982/software/.../PenDriveVirusRemover_Setup_En.exe

http://www.ranchsendgift.com/SkwbzYBvePTDLlnlvm8_g0YVUtBaTJ4CpciQ9lDeyGeYFocVLrb_ytpRTfozqXuZPiMdZ0r T7gtp3 swHTiJrRZDKLjeX1ErySHmqWHbCYf_Ic4gV41CfybYGEhTyx4B_AITtNH6nqEoWiFztE8sZj38GhUijJI3gX8S3REkWsTkuuuHP5jDJObbZaZtR9eJaPHHyeaG21dKe4qxbX1LAJFyucUHA==-G1QAAMRyW2xPKdAZbFSCHBb9_52 EzbgdGBJJh1wAFsHh5zI5VDLYo2f2E5ZlzwWPLCNJwLEnOTQVdwi7lSh aXgAdW2feDseMNnUcEP

http://www.ranchsendgift.com/t096tXKbdus GdVUwjKlVJFjv3ptPCL0jo SM1cyA8e1y V hNCMIkAbcEjLAjYsq5LKtoimYazCESxCefY4t i9r v8Hx2rmuh2JJ ObVCaE7nX24qdE0iExPLGAWytwue2TbMzspmx9ZQBdVntYb oAd8SsosqvhycnGoGe1CxVhkVwttXmZOMICMMsJuAJ r_KRmj9FustMB2IzIDEJ2t4 wsAA==-G1QAAMRyW2xPKdAZbFSCHBb9_52 EzbgdGBJJh1wAFsHh5zI5VDLYo2f2E5ZlzwWPLCNJwLEnOTQVdwi7lSh aXgAdW2feDseMNnUcEP

http://download.informer.com/.../pendrivevirusremover_setup_en.exe

http://www.towerbitscenter.com/5PIsaP5muKLBaguAuqX9aDpXLUetkPtN5bTrCFuUpszPisKBRZKd5rzKUnfLGuZa8Uaxa3hyxhzu7uopR_5UI_oSoBdQKVlt19E6 aGbL6K4ekrWrCoKBwkPlIxD1Rrl1482yQhl3ylyPKXhQT524IriAeCdzMDPjJbaqT54MVHNwKus1gife_H8m6gBFpnlMZ8k77km_zMLZLBgdIaNp4QXYBYlA==-G1QAAMRyW2xPKdAZbFSCHBb9_52 EzbgdGBJJh1wAFsHh5zI5VDLYo2f2E5ZlzwWPLCNJwLEnOTQVdwi7lSh aXgAdW2feDseMNnUcEP

http://www.ranchsendgift.com/zv9kdHeKqC8wdZZZ92PERM036Bt0R3 rl5kxN mKxH0TPoF7wIf pnaBVmDJFBYU5wNt91jFnXgNPiHATfW1G4X2NwrnJDjimZuP 9rkYTIvihWnntwQX7Tbo4JgaFYme4k7mbIjmkLgUzOP3hA83wmkH_9TdWrxPDSjt3YJm8qXyiUiAOSk8psrs7h8rDY8uz2wxb5yQqmin25N55oCFo2nOOvnjw==-G1QAAMRyW2xPKdAZbFSCHBb9_52 EzbgdGBJJh1wAFsHh5zI5VDLYo2f2E5ZlzwWPLCNJwLEnOTQVdwi7lSh aXgAdW2feDseMNnUcEP

http://tenet.dl.sourceforge.net/project/.../PenDriveVirusRemover_Setup_En.exe

http://superb-sea2.dl.sourceforge.net/project/.../PenDriveVirusRemover_Setup_En.exe

http://ftp2.ziggi.com.br/.../PenDriveVirusRemover_Setup_En.exe

http://ufpr.dl.sourceforge.net/project/.../PenDriveVirusRemover_Setup_En.exe

http://download.informer.com/.../pendrivevirusremover_setup_en.exe

http://pendrive-virus-remover.software.informer.com/.../

http://garr.dl.sourceforge.net/project/.../PenDriveVirusRemover_Setup_En.exe

http://kaz.dl.sourceforge.net/project/.../PenDriveVirusRemover_Setup_En.exe

http://downloads.sourceforge.net/project/.../PenDriveVirusRemover_Setup_En.exe

Scan 1703755_stp.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.