home

5032201_stp.exe

Dual-Core Optimizer

Advanced Micro Devices, Inc.

This is a setup program which is used to install the application. The file has been seen being downloaded from www.blockland.us and multiple other hosts.
Publisher:
AMD   (signed by Advanced Micro Devices, Inc.)

Product:
Dual-Core Optimizer

Description:
AMD Dual-Core Optimizer

Version:
1.1.4.0169

MD5:
1bebcb107cc46d6b2f9af89860d47019

SHA-1:
ae9b25ce5f7f6d19a8c5c67da7d42c2051ad1fdd

SHA-256:
d0604c873146ebfb253f803bbc1f85e0ecb7459a97361a17ee50c4c53ddc87a6

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/28/2024 7:53:09 AM UTC  (today)

File size:
4.7 MB (4,903,208 bytes)

Product version:
1.1.4.0169

Copyright:
(c)2008 Advanced Micro Devices, Inc.

Original file name:
Setup.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\5032201_stp.exe

Digital Signature
Signed by:
Advanced Micro Devices, Inc.

Authority:
VeriSign, Inc.

Valid from:
3/24/2008 9:00:00 PM

Valid to:
4/25/2009 8:59:59 PM

Subject:
CN="Advanced Micro Devices, Inc.", OU=Developer Systems Support, OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Advanced Micro Devices, Inc.", L=Austin, S=Texas, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
19201E5AE135CE9C8C77CE0C7B8ACA13

File PE Metadata
Compilation timestamp:
5/25/2006 12:46:08 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
98304:ZQt4FZIXBdEFV1MoXNdmJiV2mYqFi8b9IYb/oCDgpfw:ZQtuIEj1Mo9dpPY+b9RbrDg6

Entry address:
0x25DC1

Entry point:
55, 8B, EC, 6A, FF, 68, 20, 30, 43, 00, 68, F8, 90, 42, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 58, 53, 56, 57, 89, 65, E8, FF, 15, C0, 20, 43, 00, 33, D2, 8A, D4, 89, 15, 54, FF, 43, 00, 8B, C8, 81, E1, FF, 00, 00, 00, 89, 0D, 50, FF, 43, 00, C1, E1, 08, 03, CA, 89, 0D, 4C, FF, 43, 00, C1, E8, 10, A3, 48, FF, 43, 00, 6A, 01, E8, 5D, 20, 00, 00, 59, 85, C0, 75, 08, 6A, 1C, E8, C3, 00, 00, 00, 59, E8, 5B, 11, 00, 00, 85, C0, 75, 08, 6A, 10, E8, B2, 00, 00, 00, 59, 33, F6, 89, 75...
 
[+]

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
196 KB (200,704 bytes)

The file 5032201_stp.exe has been discovered within the following programs.

Dual-Core Optimizer  by Advanced Micro Devices, Inc.
Publisher's description - “The AMD Dual-Core Optimizer can help improve some PC gaming video performance by compensating for those applications that bypass the Windows API for timing by directly using the RDTSC (Read Time Stamp Counter) instruction.”
www.amd.com
6% remove it
Duke Nukem Forever  by Gearbox Software
Publisher's description - “Put on your shades and step into the boots of Duke Nukem. The alien hordes are invading and only Duke can save the world.”
www.dukenukemforever.com
9% remove it
Marvel Heroes  by Gazillion Entertainment
Publisher's description - “Marvel Heroes is a FREE-TO-PLAY action-packed massively multiplayer online game created by David Brevik, the visionary behind Diablo and Diablo 2.”
marvelheroes.com/?pcode=steamh
About 3% of users remove it
Marvel Heroes 2015  by Gazillion Entertainment
About 1% of users remove it
XCOM: Enemy Unknown  by 2K Games
XCOM: Enemy Unknown is a turn-based tactical role-playing video game, developed by Firaxis Games and published by 2K Games. Much like its predecessor, XCOM: Enemy Unknown casts the player as the commander of an elite military organization.
www.xcom.com/enemyunknown
About 8% of users remove it
 
Powered by Should I Remove It?

The file 5032201_stp.exe has been seen being distributed by the following 3 URLs.

http://www.blockland.us/.../AMD-Dual-Core-Optimizer-1.1.4.exe

http://blockland.us/.../AMD-Dual-Core-Optimizer-1.1.4.exe

https://www.blockland.us/.../AMD-Dual-Core-Optimizer-1.1.4.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.