home

5420638_stp.exe

Fengtao Software Inc.

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from dw.uptodown.com and multiple other hosts.
Publisher:
Fengtao Software Inc.

Description:
DVD Region+CSS Free Setup

MD5:
0b51d86cf6ef5e40f95a94ae50b9fd7d

SHA-1:
0de85b9b81e2be1c030f0413062e9c8612fcb2e0

SHA-256:
1efe0fcb0405d5905705b158de8222b744fcc45475146cd5b56d149280c2a7f4

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
6/26/2025 5:07:08 AM UTC  (today)

File size:
1.2 MB (1,242,773 bytes)

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\5420638_stp.exe

File PE Metadata
Compilation timestamp:
6/19/1992 7:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:7I39d/9onjRjf3PaJYeOKZ6WQoj9yvMtBz3l3GV0Eb8neAUx381:76d2jffEYVWQS99Bp3GVjb8eAQs1

Entry address:
0x97F0

Entry point:
55, 8B, EC, 83, C4, CC, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, D6, 98, FF, FF, E8, DD, AA, FF, FF, E8, 00, CD, FF, FF, E8, 47, CD, FF, FF, E8, 3E, F3, FF, FF, E8, A5, F4, FF, FF, 33, C0, 55, 68, 9A, 9E, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 50, 9E, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, B0, 40, 00, E8, 9B, FE, FF, FF, E8, 5A, FA, FF, FF, 8D, 55, F0, 33, C0, E8, C0, D1, FF, FF, 8B, 55, F0, B8, D4, BD, 40, 00, E8, 87, 99, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, D4, BD, 40, 00, B2, 01, B8...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
36 KB (36,864 bytes)

The file 5420638_stp.exe has been seen being distributed by the following 12 URLs.

http://dw.uptodown.com/dwn/h65m1qCL93XxglJ21SDxJK856SmyXbJC-S9hr0xZ22LkXx3OLgKo-hXrwmakL-U4y5joxxuPGFZwcn7JQJ8StHaQi65l11D6aOP8L24w6f6wG04pgV_BGyJkO8ptavgJ/vhhgax8AEjZSAncmcl-R6F0ECbAp26BtHoiWvX5WLyPGEEHhTyMn2M99KFVG4vcxHB3Ip163IckAYPLRtzJhSLusRdS73hNUrJLUdv1wSFu4j_k2wflyHmuMo9cRGS2m/iUVlsu0_7SsWhOnqe_DiSHLHm4CGFL-w5MTl2RCvBd21jK8GAdezYBvIJ8lsywU10hUFA1RCrL6OTtV0Qi-im9JCVZyLTKQTj-Q5J3lVp3Zf1xyAWUT_dRHvyPTYA1w4/.../

http://dw.uptodown.com/dwn/zjO4cTwyzu81nM6b8Tn_V8z-6JgajWPKsZO08MBv4ZffubD5TDtowQf8ejGUAf_gUgD2udLzNIQbtG-wBBR9ibC54NDboVSKy-fi2sn33VWpFaUxghaGsRl76dl40StZ/ocKDHA4vfPQ8q7vn0EMEI2J2iUQPODPVX8uUNdOXRebQ6NhuPYXlqQhdOBjFxT88CCBEYm7LSI_Tv53T0jT8kPo-J01HvcLcnf_vPku4yMhDZNTeRAt8ZtD-UqUTN5mj/Dmkj8Fua4bV7Z7aFjKKoo59Dh7c43mEepD5QhYyzYGdP7xiV2OwGrAoh6t73e5n8qZw0PzKmMiM64X4eEM-q7k3tO1uHGdQRM8WRjp9eqwdr04REVPn31fK4RV3M-hNq/.../

http://dw4.uptodown.com/ic/.../DVD-Region-CSS-Free-5.9.8.5.exe

http://www.dvdidle.com/.../DVDRegionFree59.exe

http://dw.uptodown.com/dwn/6SJKoWMvDXnT2xbKADw2suB5zQsbnwjSJsIJ93Ly1RqTanOwVTXbGlZ2ngKDOvZQEB2JUpDA5teDgQbDb3a6gRwqvQ0xdm8oiU-dkaXZki_9BGnTj7WlD9Dd72DgyhtP/TJ7wYr7pAhzSOnKmQVRz1hpPmS4JWGwh4IU3iRCng5Ae8XfGGUI3y3iXxV01suTzlcFy3S7m7UiA6kN4L1v3WYaaa7iAY_qDdeAZeLJ8-7bUig2p12O4NJXjrGZFj-3z/5MsREqkR4BJLtDKUElzzUiJNQC20L5aKaKzi4Pda10fvJ517iO7h9IvHLZUUlBErbKRe1pbCbecVDa-B5MlEAZsy8oa66NzKraPvtEY-R9A0-1UNGAxt7FqgOFrAJZrz/.../

http://dw.uptodown.com/dwn/nfgWjmjh_YZ2pAdwgES5QQJ3LnYo51v8YWvsnBS6rKZ6ZQlktLITCXscDJWhTgjG-LmjodUHGuju5mwA1yESqJ2y3KlDA9WRKGV9wQDB2opOuCTZ-RoLUyO7nNtazqgy/Ik7eeRzIsqjHO6ali-xJq2is0XhYAa-Z1YKX0y9iuVoZWjeLjcgWEWodB79HGB2f07E2nVnVAeCUX2Q8SF9caA0CNFYWSisvgHzBmSIcaIZzmpv_2F3pnVcOgQBoGsw3/5tVy0MzF5xtdONU2XKgh3kxRhYFczDZXxpn2WczbpPEe7hlgf6-hB65bh9W2cuv6q4uuFLx0Mv5GRzRP5NGJp_qTqz402lnlYg-40Gm5zmAck3qrz_8Zt7Z-iP0_JXlA/.../

http://lb.cdn.m6web.fr/d/c/a/ba5739aad6ab58e2800c6ca4df43bf57/56abdd6e/soft/.../dvd-region-free_dvd_region-free_5.9.8.5_multi-langues_11068.exe

http://dvd-region-css-free.software.informer.com/.../

http://download.informer.com/.../dvdregionfree59.exe

http://dvd-region-free.software.informer.com/.../

http://www.dvdidle.com/.../DVDRegionFree36.exe

http://www.programosy.pl/.../pobierz,dvd-region-css,1.html

Scan 5420638_stp.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.