home

20680467_stp.exe

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from dw.uptodown.com and multiple other hosts.
MD5:
03604c1917a82ebf93e4344aaf4d2a43

SHA-1:
2f461ee8a09710cdaf8c4d0fb60b6b80ccc8798e

SHA-256:
0917e75b4903f47899b4b73607119af3950331bd5056f4be5894dbe1f08ab2cf

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 6:36:59 AM UTC  (today)

File size:
4 MB (4,232,888 bytes)

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\20680467_stp.exe

File PE Metadata
Compilation timestamp:
12/5/2009 8:50:46 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
98304:soTwH030WGU7etrvPHDkUIyqtUnsDkVkSeo3FeVEyfoP0ur:sSw/htQUktBDkVkSezEyfJY

Entry address:
0x323C

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, 30, 91, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, B4, 70, 40, 00, 53, FF, 15, 7C, 72, 40, 00, 6A, 08, A3, 58, 3F, 42, 00, E8, 09, 2C, 00, 00, A3, A4, 3E, 42, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, 58, F4, 41, 00, FF, 15, 58, 71, 40, 00, 68, B8, 91, 40, 00, 68, A0, 36, 42, 00, E8, BC, 28, 00, 00, FF, 15, B0, 70, 40, 00, BF, 00, 90, 42, 00, 50, 57, E8, AA, 28, 00, 00...
 
[+]

Packer / compiler:
Nullsoft install system v2.x

Code size:
23 KB (23,552 bytes)

The file 20680467_stp.exe has been seen being distributed by the following 33 URLs.

http://dw.uptodown.com/dwn/ZX14n5_FZybGbw4e43dcFDmPmBKIjv0jzR8Aa3wpUiM7w9EbTRnikw7NxT3wjobsqZbNmjNhln_cBmRWUriLP8J1jelp_9y2xki23DbMxI56L224BX6kQ6YvQ8FF7nIY/dnInSQFnQ2J4T1Nu4Qe1ExDZsWEQV4vwSE74xKtXiBQg2SceX5ewVO_HlItVja7lVwuQnnzZyvFapAFM5xKTlA1Nty7iCemTYbqW8QnPNFBZR-FS4vAbp8c38ynWOqDb/Ld-uuw7V0fydeQ2Wk1pCmu-cOt_capJHO2wnfjVx1CfsZEhCxn7-zxL6ppftciixY1TZ2WT2_zat9qxb-iA5Q8NEonpx8oIyGQpGEckHsaR_d2XZR_zu6aLABS9gRDk3/.../

http://dw.uptodown.com/dwn/uDAv1FyJAZBT6PPXotdt93n182P-BuU2dOfbpEUrI9yAvJOvSboW1GWCMMAaiCEjdOQCs9lKMJg_iPwuSJxK_v4IRM7X-eZ2_SkdSqgaVdJoWWClsm5EduvukN-tBcaU/RAOGUR4b-pGx6hO0Nm2IOkRLREXcjsQS-fm2zbvEoCZIVyM0yZRpef8FnsVXvrpAqB5D1XrURSwqM6e7TQQCIJOZlA2j9qPZaaRSVGUhx2VZBOu_5MnqvFQrPvkBcCCU/zvpVc9Splm1TlBaeMnEQFiC-RWqzH1oAK6DcWM1HHvlQEF5cM4aEwbxQ2L-IhMney6V63Ur-7CTWg28wrGrmlueh43K9oHoaTO5Cw9xdf3kwjHs-ITzx05vixhpgjT1j/.../

https://d2.driverscollection.com/2ec2dc8199c3da/44843b785bc2fb746caf564106a49ef2671f411dbac4eeb4ceaf2ddfe0f688441787ba00b1e873e4c75a5acc19f4ae7a58170cf9/3/688/21/.../XMouseButtonControlSetup.2.6.2.exe

https://d2.driverscollection.com/2ecbf4fd63addc/72951a26ceacc8819c54696403d245c26fa990f2e7121bf018f4b55fa04689e4ab264637fabf3070c98df96abddc089357ab3667/3/688/21/.../XMouseButtonControlSetup.2.6.2.exe

https://d2.driverscollection.com/4ad11a5da8809/0f74518b8d6f6fd3d496f80c6f86e3f519973afba00b43a9879e23df53737f8455823237885a41ae3eab5f8b6b4db8bb56ed7ac7/3/688/21/.../XMouseButtonControlSetup.2.6.2.exe

http://dw.uptodown.com/dwn/DXHnm39ngjjW9U8f7ZFf1XmqcIPIm2OByl7K6wWywRKyi9loKaSusXr1Terj_KuVhaeUd0URYYPLi1vqctNffIGEWbtFu56qFrokelpJUdtNNePWfKoNLsFcFXRC3bI3/GWZEuMAwOTYpdJewTPIhcDKWzmZ3PXliO7Yppo5hEzSiTN7FSKwtHGwSIhgDY5-ivZmSncbYp73_0q-zxrnw4BpdWt8Fc1zo9wtFXt3KKrCnxHsW8yIp85MizWmGP52S/JJK1duiRvS8nf9EmmtJBCv8YcZLz_PlSRzaigXr2--Un1yZtAgiNOskboa7bsbjSJ3cdfVVHQTucKTaDHi8-ZlPwBLPf6DvPCGsrYyMExHDZ9q3gOA_f8oYg_PT6fmd7/.../

http://download1uk.softpedia.com/dl/ed5abbe248f6ce4677c90c7cdfd4ab1d/52f5fff5/100069266/software/.../XMouseButtonControlSetup.2.6.2.exe

http://dw.uptodown.com/dwn/YPbJk1dA9YiYSgIW5L315JOggSPJGB29Jbw5McDrk3dGxs3_KQtNTRDEVMDVIhaY-VtzB1Goig2PHWBSvalT12EX2E-fwt_0mxESF4DZibHxQpeDk0l6YD6cAaE4j3R2/.../

http://dw.uptodown.com/dwn/QuEJN7So-eXPICeT9Ujk212IKzUrS8bpOeKfcfRSriahOOIWq-K9Siv0Zok-T1Pa2TokiPfTTqG9jCK_eQLkgNQw_lolvGB_aCoOthKXxdK3wvwm8Rwn0wWtPl_3gW2W/oEHSN-chS6RrEn88YFuIZ32qa0j84MqI6A0V_R0TpqhgZskYr87tU_Oe9heM8CywqBTYWIO2ZjkHuvZvM-wEGv4cGS0L0-nv9Y1nl3_AULf_TdNK-XAX5DJljFE29sW4/qDSl8pVyMnkpNtmhF0orcm11z-ookiqeNnqXxhF3UW-8eM7fuD29B9f4xjHqPhaym2_tJDdma2y1K5eXxIPN8e-ATYvfp16v7lzaXNOEaeAwu_4NMug-TFM9meeXKVBq/.../

https://dw.uptodown.com/dwn/wwA8YzrxKs7wUFHfHA604UxqEEG72BbIfJH5Q7OSD7ht5UTcR42eGiD4iJikvcUo0fEckqzhP5LbtasYYuS9LajbMxpysbfE8Z3e1353YQWq22cb8zM4LxcWk6j6Bovk/EKNagyHPk-pnC8_7EPO9iR7ax6T4mpRHzSwAM6a6-_q1w7D6JFpEV6dPzCZ3FZv6ERtipcnYAICfQTO1S8XO-9snxzJdgPwWLBUgEHGq1qlmV53h20GqIMmkxsbi80lM/z7CFS_cw3373IODCuUMJ9uGwEiUct-k2VMCzlUz7fODLqYIbqD0uqKOBeZ1ys8SuLAMi1UnUeReTeLh6Db3jBytDuVA0kAHaQVv3e39pjx9LqobD4sumHGBEIJCzeaAe/.../

http://dw.uptodown.com/dwn/Zb7emOTK7N_ncGt8SquswHpzXzWijSP1MudNmjax5PSaudiGUMbEY0ISJnofeZVl_A-XDRG-uI3i1GTl3yNhR5hwCooRw5pvamfgPx0K2_317D5vsQqY7KfthgQjo7ln/iCc0ouCcQ6zQgvfd2n7Qz9yRj-DpjX7KeYy27e2n39q-edIvgUvLMj3BKNTEWmSyKs43IaCrZbiw5k0u53pMO2PKr3gt6FIYZiMtRV8Gkn8Jh_85WiHbBvj9SuN7rnVu/htQUCZpGKQuzPo2Pg61s9AWW0J6rqWyHTnNTfnbQWLwgJwNym2H3sEd5H5qIo9GIGe0quou2yXIMjYxKjWtrb96jKP5DW6hXlJ4Dz4ukcnT6vw-pNWxva4fXfMmsL2j7/.../

http://dw.uptodown.com/dwn/5Si50_MIBAVKc_FWTtwFdUfvCs-BdaftjZRPGTC1f5XiFjIRdd70nE8HVImfwcQM2aYWlB5_qSe0q__i6zXMFalNZp7lcpEhAWuSU4SggOrofo0C-fXYWafA3wXKYnGT/JNHcJznmGyoe7UAvrGT-BIm7bINIr52GIriucQCzRyPAsLlrS9P_XNsuMEiVxFVBomQuSNWiL4QQimTCxhmBRPgXbXopJ2nXCrn0yVqgHvJQZ_PpjxpSUFfOzKNzYjR_/fIlixwj3MfVKHW5UJOI6lBg_mmsDaDNKqtA3EWdd_v5ULXWR30BkqaOf1Q0FD9bf-kdBqZ2DMAbUqc_4YJk8A9nh-_8uWcw8ZGe15_lfGKzWc6Jb2_bV9vtXveAxIKc7/.../

http://dw.uptodown.com/dwn/-tttohvXVOBmWCrUqve_wHVxlhIjtPYuYEr5g-wIrMNDH5A7bq3AXq0hlFMGKlyS5L5f_Id2E0a2xZ_zgBydkHPAO0fQuYTkFx9PukbzKz5WD1iN4d2yMoG8KPtqPuK7/qIIuYT9vaA9OMJimHcA2rtyD67URh4xV-TlEIZRYX42OyZcfeSCH2h6EcD92hkaUyrv0Q2--AyjXH49R8nkb1wPBBnM53zdInwwbu18rkaJpX4fQlxxJJ--3ifU3Z6Gf/TfCWeKDfY2dgFHqvyjUXsAF8c8oXkn8couXGM8oU0-tmCeilYfvGc5L7x8wnwPj1cwlJWe4my0zNd_kd8fGWXLPICc5-GqQakQ300h5twIUO6D1PFx8PD_B0VxIHgXXQ/.../

http://dw.uptodown.com/dwn/E4EUY9_TgQRHyuE1t6pcdiut9FtYTengnvNIv-EogtCmsJWcz6pGiICQBPjjCCG_oQHqAm04aOFGK0obTW7rIXkTMRwFnTkPlw7ZxRxNGSgo85_TFhi4zvK9TW2tINkP/2vN2psEKIX6xR1M50aPx9QoECTRJgWoRwO586iY4I3u9i4KOZMGf85Sz7nesOufe21pNwamFG70uvU58x01GbEWofgrpHCAkRN9m9GWRbW_z0pl_sFY9wEUQZ96kMJWh/egR5Fep_Ax1HUQDXpseP-VFby_GYMJzBFHMb_fEO0dALGmqntuc5W40hAQC_EJIV9zdHHzAZuvLV4rD8M4oAo_QT4G1m1t9P7zJRelSsx7OvnBD_S8BmPjzq5KoSuRoF/.../

http://dw.br.uptodown.com/dl/1445037809/.../x-mouse-button-control-2-6-2-en-win.exe

https://dw.uptodown.com/dwn/IE-OZYyHzL1HhACeG7FGl5PPcwR5_yiX2aNVlqLRtFKK1cfFI20Jk7099r_zV-TXd5eN6A7cRxetBBAxmkynhxtsB-mSgP7_zM7iQt1NHk3ngSUiU0VVDC5grklZqxfu/wllQgQyOrMwphmubjllk3MyONfCs17LWkpXhVs0LATsP-0QH3TuQufo1QD2dr5THr2wro9bQchAgGjEx9e-wcOSd84igu18s6msb-XVSQcJSRctAEzxpbxspzTJNZNEk/oNqMaikm92216WsxE7-eNFe2Gcjji-5bFiF5BcsRoyl1dzw0K8TuWWs7xFDmHjcy90crPHNTqPockcEpgx_Nl53EpQX7ZEwmQgs93-efep-9FfEyl0OusM-Z-q4zqJ8N/.../

http://dw.uptodown.com/dwn/0unvRkPtEpJTV8FUKJekOdwJcPzfMk2umLHQsp9fRgT2jwq9M9OK5BLPukERnYNib-3DhOuJTDc8k79c5hJIKevRnkkuza9xpTzRoBNMW_tJo990Nf9TQkZhvNwXEwC6/vJEEL6yDhDgjmdCrpkAsa5o4yPup1PMsyJuQa7JN5i_ezKiYk6j8hoLhPAXn_chFoFlvYbdaLoZkFSvO0Vxxk8WILg39e9F8B4L-VFK91v-sRk11eZKuT7WfWc5lu7Yq/nGpxk6cnh8qXcvOEng1_B7IE0-Cqw8IB9wRZJMwAs6aZ7BuVTctbOQRC6c2CLscg-Lm3b7Ycydy7GtxMtpH3nGd7CwD-o7XTMM0dYd8nNva7IaCnusVsL_TWPq1ogCi2/.../

http://dw.uptodown.com/dwn/5w2VWx9jQ_VT857HZphrRRPQtBJGbpMZvAwTksHGE_MBaM70fJUSjOyF9-RuC-7B2Cre3EFMPv4Fq_tgCKCPkaPjuhmWkoYqgnSJkZi6RCQUqBE2nUgOM-KjU6Fq2LFZ/fxV7jeHm5LJe7JneOz-u3SyT_wxN0osxWeOXeH4Q3kMVz5gpKzC5JhPf5_54zRAZzRmIjKa1pDGjRX0rvQfWc7WB3Bf_yCo6axZ0MjQIbwULF56Q7RvnJ3Or1btAM7gw/N1EROanBZDkPiK11B3Smqyb3P0XspbckxNSnn2nGmtW94bkyxiZu98aSipF0L8MBV8HbJUOnaIUS-GoI9osocTWOLLJAU__Wo9HotW_V9ShhYZmIiRrN8RMnUb_bRHjU/.../

http://dw.br.uptodown.com/dl/1442093629/.../x-mouse-button-control-2-6-2-en-win.exe

http://dw.th.uptodown.com/dl/1447245863/.../x-mouse-button-control-2-6-2-en-win.exe

https://d2.driverscollection.com/6e85332fb861/8e893f80e45b4ee7ad53c60455b1e16ef4301d72e401bf31237c17303902e3840a188daad5abf2503f4b07258916a4aa56dc25e0/3/688/21/.../XMouseButtonControlSetup.2.6.2.exe

http://dw5.br.uptodown.com/dw/1445998822/.../x-mouse-button-control-2-6-2-en-win.exe

http://dw.uptodown.com/dwn/ipFK1P-w2l0WQ4yOZZHy7Nao--iFg3OjNnqvwQiy7Jz0qzuD-Syr4o3OGIyufy1BTb63L4mkcOhW3wpZm5qB_l296Gii-uGr8led8y4-PJIYvtgSBMRS8XaUI-Ldoqzu/AwGz9fYuFd0fyPbWc8xa9ipFqLbJpI4w5Dv17vITA-pWiOtZoGII9_8LCqAgihDMpliBQLcjBw-gsXTqtXKdTKEfKSxSVZbM3DowfZdISjc9dWktWgln0INjJAIn7AxC/.../

http://dw.br.uptodown.com/dl/1447194006/.../x-mouse-button-control-2-6-2-en-win.exe

http://dw.th.uptodown.com/dl/1448185231/.../x-mouse-button-control-2-6-2-en-win.exe

http://dw.uptodown.com/dwn/IPQbubbkQcfZGW9PPJ520AhH0mkqROMxIjm78lg8z6_aGIgmx2LJqKM5Hu82QwgOBbGFfHmC09t4N1C8NxQ5L0lVe2xy5SJGhEwi5-vY-lsydlKRHJD1wJnV2i3rZe2M/.../

http://dw.ru.uptodown.com/dl/1445106595/.../x-mouse-button-control-2-6-2-en-win.exe

http://telechargement2.pcastuces.com/temp6bs2/.../XMouseButtonControlSetup.2.6.2.exe

http://dl.cdn.chip.de/downloads/.../XMouseButtonControlSetup.2.6.2.exe

http://hrvm.highrez.co.uk/.../XMouseButtonControlSetup.2.6.2.exe

Latest 30 of 33 download URLs

Scan 20680467_stp.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.