414366_stp.exe

Yahoo! Inc.

The program is a setup application that uses the Wise Installer installer. The file has been seen being downloaded from fs36.filehippo.com and multiple other hosts.
Publisher:
Yahoo! Inc.  (signed and verified)

Description:
Yahoo! Messenger

Version:
11.5.0.0228

MD5:
16d88d109bae202f18039b686a743f40

SHA-1:
22b3ee6951572035948db22f006c3b1c94afd3e8

SHA-256:
66c980fabfb35ea599ab75a989bb2f87167eb8bd7abca105a4637d267f74b534

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
7/19/2018 1:22:15 AM UTC  (today)

File size:
18.5 MB (19,377,536 bytes)

Copyright:
1997-2010 Yahoo! Inc.

File type:
Executable application (Win32 EXE)

Installer:
Wise Installer

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\414366_stp.exe

Digital Signature
Signed by:

Authority:
VeriSign, Inc.

Valid from:
8/13/2009 3:00:00 AM

Valid to:
9/3/2012 2:59:59 AM

Subject:
CN=Yahoo! Inc., OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Yahoo! Inc., L=Santa Clara, S=CA, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
3D7A9A7D12556AB8688CA048C60F6018

File PE Metadata
Compilation timestamp:
4/8/1999 11:24:47 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
393216:71ClcNpE+0R1/B0WLy+mOsgncINC/HEiS2V8qLayYjqQb2WsZmI1:71ClcNpeeW2ROsmPMcibVHLlfQb2WsIq

Entry address:
0x1000

Entry point:
55, 8B, EC, 81, EC, 78, 05, 00, 00, 53, 56, BE, 04, 01, 00, 00, 57, 8D, 85, 94, FD, FF, FF, 56, 33, DB, 50, 53, FF, 15, 34, 20, 40, 00, 8D, 85, 94, FD, FF, FF, 56, 50, 8D, 85, 94, FD, FF, FF, 50, FF, 15, 30, 20, 40, 00, 8B, 3D, 2C, 20, 40, 00, 53, 53, 6A, 03, 53, 6A, 01, 8D, 85, 94, FD, FF, FF, 68, 00, 00, 00, 80, 50, FF, D7, 83, F8, FF, 89, 45, FC, 0F, 84, 7B, 01, 00, 00, 8D, 85, 90, FC, FF, FF, 50, 56, FF, 15, 28, 20, 40, 00, 8D, 85, 98, FE, FF, FF, 50, 53, 8D, 85, 90, FC, FF, FF, 68, 10, 30, 40, 00, 50...
 
[+]

Entropy:
7.9974

Packer / compiler:
Wise Installer Stub

Code size:
512 Bytes (512 bytes)

The file 414366_stp.exe has been discovered within the following programs.

Firefox 12 was released on April 24, 2012. Firefox 12 introduced few new features, but it made many changes and laid the ground work for future releases. Firefox 12 for Windows added the Mozilla Maintenance Service which can update Firefox to a newer version without UAC prompt.
www.mozilla.org/firefox
10% remove it
Firefox 19 features a built-in PDF viewer. Mozilla Firefox is a free and open source is a web browser coordinated by Mozilla Corporation and Mozilla Foundation that is a heavily localized.
www.mozilla.com/en-US
11% remove it
Mozilla Firefox is a free and open source is a web browser coordinated by Mozilla Corporation and Mozilla Foundation that is a heavily localized. Firefox uses the Gecko layout engine to render web pages, which implements current and anticipated web standards.
10% remove it
Orbit Downloader  by www.orbitdownloader.com
Orbit Downloader is a download manager for Windows that has the ability to grab and download embedded Flash Video files from sites like YouTube, Dailymotion, Metacafe, etc.
www.orbitdownloader.com
22% remove it
Yahoo! Messenger  by Yahoo! Inc.
Yahoo! Messenger (YIM) is an ad-supported instant messaging client and protocol by Yahoo!.
messenger.yahoo.com
7% remove it
 
Powered by Should I Remove It?

The file 414366_stp.exe has been seen being distributed by the following 50 URLs.

http://fs36.filehippo.com/8524/.../ymsgr1150_0228_us.exe

http://filehippo.com/download/file/.../

http://filehippo.com/download/file/.../

http://filehippo.com/download/file/.../

http://filehippo.com/download/file/.../

http://filehippo.com/download/file/.../

http://filehippo.com/download/file/.../

http://filehippo.com/download/file/.../

http://filehippo.com/download/file/.../

http://filehippo.com/download/file/.../

http://filehippo.com/download/file/.../

http://w7.getpedia.net/Data/Soft/2011/12/.../ymsgr1150_0228_us.exe

http://filehippo.com/download/file/.../

http://filehippo.com/download/file/.../

http://fs31.filehippo.com/2556/.../ymsgr1150_0228_us.exe

http://filehippo.com/download/file/.../

http://filehippo.com/download/file/.../

http://installs.innovativesys.co/.../yahoo-messenger-11.5.0.228.exe&u={779D2486-9C93-4345-84D6-C955943CF537}

http://filehippo.com/download/file/.../

http://filehippo.com/download/file/.../

http://filehippo.com/download/file/.../

http://filehippo.com/download/file/.../

http://filehippo.com/download/file/.../

http://www.filehippo.com/download/file/.../

http://fs7.earthlinktele.com/UploadedFiles/Public/.../1400282956-ymsgr1150_0228_us.exe

http://filehippo.com/download/file/.../

http://www.filehippo.com/download/file/.../

http://filehippo.com/download/file/.../

http://download.softpedia.com/dl/e55ede0343d9776d05c9588f2337b30a/57d54f17/100004411/software/internet/.../ymsgr1150_0228_us.exe

http://filehippo.com/download/file/.../

Latest 30 of 1,604 download URLs