wwhpt.exe

Vega Stp

Fst Teaf

The application wwhpt.exe has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. This is a self-extracting archive and installer, however the file is not signed with an authenticode signature from a trusted source. The installer uses the InstallMonetizer platform which will donwload and install adware toolbars and other potentially unwanted software offers during setup. The file has been seen being downloaded from www.panningmanybanded.site.
Publisher:
Fst Teaf

Product:
Vega Stp

Description:
smart install

Version:
80.193.150.163

MD5:
e05b2a2137cbe0f404b12956bb08d186

SHA-1:
0e3a08a1c8982d79f53570503652bb95582eb509

SHA-256:
4a62ad47898ce1bb291e51ad259a891261a392f7a91b5e81cd5beee9b84bafa0

Scanner detections:
1 / 68

Status:
Potentially unwanted

Explanation:
Uses the InstallMonetizer distribution platform to bundle adware.

Analysis date:
5/12/2025 5:15:41 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
Adware.InstallMonetizer.FstTeaf.Installer.Meta (M)
16.7.12.13

File size:
830 KB (849,920 bytes)

Product version:
80.193.150.163

Copyright:
CR 2015

Trademarks:
Kocl

Original file name:
sstup.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\wwhpt.exe

File PE Metadata
Compilation timestamp:
5/10/2016 12:06:10 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
24576:fkrkf4X9gpOxYs55NfLATN4FzgrHvnhtL2OYaf:eks2po5NVx6H/hsOYa

Entry address:
0x9CAB

Entry point:
E8, 5F, 28, 00, 00, E9, 89, FE, FF, FF, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 51, 8D, 4C, 24, 04, 2B, C8, 1B, C0, F7, D0, 23, C8, 8B, C4, 25, 00, F0, FF, FF, 3B, C8, 72, 0A, 8B, C1, 59, 94, 8B, 00, 89, 04, 24, C3, 2D, 00, 10, 00, 00, 85, 00, EB, E9, 8B, FF, 55, 8B, EC, 83, 7D, 08, 00, 74, 2D, FF, 75, 08, 6A, 00, FF, 35, 70, 56, 41, 00, FF, 15, 6C, 00, 41, 00, 85, C0, 75, 18, 56, E8, 4D, 1E, 00, 00, 8B, F0, FF, 15, 14, 00, 41, 00, 50, E8, FD, 1D, 00, 00, 59, 89, 06, 5E, 5D, C3, C7, 01, 1C, 06, 41, 00...
 
[+]

Code size:
56.5 KB (57,856 bytes)

The file wwhpt.exe has been seen being distributed by the following URL.

Remove wwhpt.exe - Powered by Reason Core Security