home

pthsetup.exe

PSP Thumbnail Handler

Bot Productions

This is a setup and installation application. The file has been seen being downloaded from files.downloadnow.com and multiple other hosts.
Publisher:
Bot Productions

Product:
PSP Thumbnail Handler

Description:
PSP Thumbnail Handler Setup

Version:
2.10.49.0

MD5:
35e23a7a52aac21da574169b230dc9c0

SHA-1:
a2aa9b3cf0e1c427e0d65868e949f967720f7e37

SHA-256:
d8429842218b205f5272c722c8bffc5d3d8ac9e9487d9b4a4f40866fda05a95f

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
7/15/2025 8:09:23 AM UTC  (today)

File size:
315.6 KB (323,220 bytes)

Product version:
2.10.49.0

Copyright:
Copyright 2005 Bot Productions

Original file name:
LAUNCHER.EXE

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\pthsetup.exe

File PE Metadata
Compilation timestamp:
12/6/2005 3:41:03 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
6144:6vOojDuUl+BQoO0AZzFl6De3k1CgXflhO5G4oPlTbqT2K1yD:AOeDuUl+BN1AZzFrk1RXC815+yND

Entry address:
0x2D02

Entry point:
55, 8B, EC, 83, EC, 5C, 6A, 00, FF, 15, A8, 80, 40, 00, 89, 45, F8, FF, 15, B4, 80, 40, 00, 89, 45, FC, 80, 65, EC, 00, 83, 4D, F0, FF, 83, 65, F4, 00, 83, 7D, FC, 00, 0F, 84, CB, 00, 00, 00, 8B, 45, FC, 0F, BE, 00, 85, C0, 0F, 84, BD, 00, 00, 00, 8B, 45, FC, 0F, BE, 00, 83, E8, 22, F7, D8, 1A, C0, 24, FE, 04, 22, 88, 45, EC, FF, 75, FC, FF, 15, 08, 81, 40, 00, 89, 45, FC, 8B, 45, FC, 0F, BE, 00, 0F, BE, 4D, EC, 3B, C1, 74, 0A, 8B, 45, FC, 0F, BE, 00, 85, C0, 75, DC, 8B, 45, FC, 0F, BE, 00, 0F, BE, 4D, EC...
 
[+]

Entropy:
7.7306

Developed / compiled with:
Microsoft Visual C++

Code size:
28 KB (28,672 bytes)

The file pthsetup.exe has been seen being distributed by the following 2 URLs.

http://files.downloadnow.com/s/software/13/17/69/.../pthsetup.exe

http://www.botproductions.com/pspthumb/v2/.../pthsetup.exe

Scan pthsetup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.