home

7923785_stp.exe

FileCleaner

WebMinds, Inc.

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from soft.mydiv.net and multiple other hosts.
Publisher:
WebMinds, Inc.   (signed by WebMinds, Inc.)

Product:
FileCleaner

Description:
FileCleaner 4.5.0.37

Version:
4.5.0.37

MD5:
6d907bbfc3373ae0456069591c7b6208

SHA-1:
5f4d85d3bf7115e168c075538622d919073cc1cb

SHA-256:
e2321c1def369e3a23192e5ab5045458b4375db696b2cc114650ece1c6511b67

Scanner detections:
1 / 68

Status:
Inconclusive  (not enough data for an accurate detection)

Analysis date:
4/25/2024 6:07:47 AM UTC  (today)

Scan engine
Detection
Engine version

ESET NOD32
Win32/MyPCBackup
8.9315

File size:
11.6 MB (12,195,672 bytes)

Product version:
4.5.0.37

Copyright:
Copyright © 2012 Webminds Inc

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\7923785_stp.exe

Digital Signature
Signed by:
WebMinds, Inc.

Authority:
GoDaddy.com, Inc.

Valid from:
2/5/2013 8:58:35 PM

Valid to:
2/5/2015 8:58:35 PM

Subject:
CN="WebMinds, Inc.", O="WebMinds, Inc.", L=Fort Myers, S=FL, C=US

Issuer:
SERIALNUMBER=07969287, CN=Go Daddy Secure Certification Authority, OU=http://certificates.godaddy.com/repository, O="GoDaddy.com, Inc.", L=Scottsdale, S=Arizona, C=US

Serial number:
042E36B8DA530E

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
196608:Uv0FOpeZmLYBwc8zbvKcFKx1hz8cDUylVHUOFO/WN51a3ABua3/1AefbsntDSCfg:aBcN2c8v1ob8cDu+TWAvOJSDl

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, 53, C9, FF, FF, E8, 9A, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, E8, CD, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, E8, CD...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file 7923785_stp.exe has been discovered within the following program.

IDT Audio  by IDT
This program contains the driver that enables the IDT High-Definition (HD) Audio in supported notebook models that are running a supported operating system.
www.idt.com
9% remove it
 
Powered by Should I Remove It?

The file 7923785_stp.exe has been seen being distributed by the following 4 URLs.

http://soft.mydiv.net/win/dlfile89ecc_252498/.../filecleaner_setup.exe

https://www.filecleaner.com/.../filecleaner_setup.exe

http://www.filecleaner.com/.../filecleaner_setup.exe

http://email.easyduplicatefinder.com/.../click?upn=ju1qjoQbOEUhfN-2FufsOYPIxJGReZblfn-2BP57FY4mWAR6ZNZVl7ksjLvz-2BoVF41ZQjExv5VJIkveEfVekLpcWHJ4VByPrM7tjDATRv2Q67gYD4t7VlrPZcTA0LHv5YlR1RzVs-2BxlUlwTnJBnsp0nmbGcRdWEVMZC08jjBZ1B-2FDfEwqghGFLDni-2BHKQhpXEriV_m9CKadOP-2B2xGL5I-2F1i7CKo3-2B57cirPlqulMEKV-2BI7x4GwAkJ5sKm5L3UtLmItFdHWL50JyjnxJvwPjH7vz6e6V-2FYJ4jDF0-2FNkomorcrMyHeGZxl0axeHAeAzkwEZ2TKWpCSpoNvLmYeLcfb32Qa4KIAoEsLPpb9xzpDn34Lc8ttfaSL-2B2wWVkW00PcpxpToZHnff54jv0kpIls-2FbsDeEjASDP7ufRRvCUPlWhiTH-2Bco-3D

Scan 7923785_stp.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.