» 3070197_stp.exe
Overview
Analysis
File Details
Programs (1)
Downloads (5)

3070197_stp.exe

IObit Malware Fighter

IObit Information Technology

This is a setup program which is used to install the application. This is installed with IObit Malware Fighter. The file has been seen being downloaded from download.iobit.com and multiple other hosts.

File name:

3070197_stp.exe

Publisher:

IObit (signed by IObit Information Technology)

Product:

IObit Malware Fighter

Version:

2.2

MD5:

afb7f546c7bed1a9b0346daf3e21813b

SHA-1:

8e9e88adeacc5f94769636b57b71774315bc5292

SHA-256:

94a9c19ab53150918b3b3023767acce54c62fd1a73194cb39fa53f46c4ecb283

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/26/2024 6:31:15 AM UTC (today)

File size:

23.9 MB (25,095,200 bytes)

Product version:

2.2

File type:

Executable application (Win32 EXE)

Language:

Language Neutral

Common path:

C:\users\{user}\appdata\local\temp\{random}.tmp\3070197_stp.exe

Digital Signature

Signed by:

IObit Information Technology

Authority:

VeriSign, Inc.

Valid from:

1/14/2013 10:00:00 PM

Valid to:

2/14/2016 9:59:59 PM

Subject:

CN=IObit Information Technology, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=IObit Information Technology, L=Chengdu, S=Sichuan, C=CN

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

11CADAF29DA4C3CB113BF1877B120103

File PE Metadata

Compilation timestamp:

7/9/2012 10:41:29 AM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

393216:sdjtBb3gKE0N2rPu+b+YF4BdzDsfbNeZevrmKuZRmuADhHqo1WRYTaBhX0Yi:sxtRgKepb+YGBdnsfReFwuS1yhav

Entry address:

0x16478

Entry point:

55, 8B, EC, 83, C4, A4, 53, 56, 57, 33, C0, 89, 45, C4, 89, 45, C0, 89, 45, A4, 89, 45, D0, 89, 45, C8, 89, 45, CC, 89, 45, D4, 89, 45, D8, 89, 45, EC, B8, B8, 52, 41, 00, E8, AC, 03, FF, FF, 33, C0, 55, 68, 45, 6B, 41, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 01, 6B, 41, 00, 64, FF, 32, 64, 89, 22, A1, 48, AB, 41, 00, E8, 56, EC, FF, FF, E8, FD, E7, FF, FF, 8D, 55, EC, 33, C0, E8, 7F, 84, FF, FF, 8B, 55, EC, B8, E8, D6, 41, 00, E8, E2, E9, FE, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, E8, D6, 41, 00, B2, 01... 
[+]

Developed / compiled with:

Microsoft Visual C++

Code size:

84 KB (86,016 bytes)

The file 3070197_stp.exe has been discovered within the following program.

IObit Malware Fighter by IObit

Publisher's description - “IObit Malware Fighter is an advanced malware & spyware removal utility that detects, removes the deepest infections, and protects your PC from various potential spyware, adware, trojans, keyloggers, bots, worms, and hijackers.”

www.iobit.com/malware-fighter.html

22% remove it

The file 3070197_stp.exe has been seen being distributed by the following 5 URLs.

http://download.iobit.com/imf-setup.exe

http://cdn.avangate.com/software/1/1139/9920b3832325b2a974fe4890142432db/.../imf-setup.exe

https://software.avangate.com/.../dda1hLWYwJji2o2RrpZ3mnLxkKB1kbWLp8K6qqvZcbWbv4 sxqySt3xsmZapgYWcb76uiNSrjLvjpqKilbPt18KhrICkr2XOk4B9l8yhpeCrhMHaeON pA==

https://store.iobit.com/order/.../CbbQ==

http://software-files-a.cnet.com/s/software/13/45/83/.../imf-setup.exe

Scan 3070197_stp.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.