home

08e7437a_stp.exe

KitchenDraw

Pragma

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from dw.uptodown.com and multiple other hosts.
Publisher:
Pragma

Product:
KitchenDraw

Description:
KitchenDraw Setup

MD5:
a8bdf8c96ab2bf0564391571c97dc059

SHA-1:
67a358bd25cffe88ee4f39279b173a6000ee4ee8

SHA-256:
1d618101bd1e1a32229ee159974eeee78fa4444f7ea10b6363f0200458a0569e

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/26/2024 10:56:29 AM UTC  (today)

File size:
16.1 MB (16,933,939 bytes)

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\08e7437a_stp.exe

File PE Metadata
Compilation timestamp:
2/18/2010 2:52:05 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
393216:RXYqojqO4UAZt10IEZauDQCUS3ZLYkT6X8JQFlvqwopbLo:iqojP47r1dVCXPT6X8qFlywoFo

Entry address:
0x163C4

Entry point:
55, 8B, EC, 83, C4, A4, 53, 56, 57, 33, C0, 89, 45, C4, 89, 45, C0, 89, 45, A4, 89, 45, D0, 89, 45, C8, 89, 45, CC, 89, 45, D4, 89, 45, D8, 89, 45, EC, B8, F0, 54, 41, 00, E8, 70, 04, FF, FF, 33, C0, 55, 68, 91, 6A, 41, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 4D, 6A, 41, 00, 64, FF, 32, 64, 89, 22, A1, 48, AB, 41, 00, E8, 42, EF, FF, FF, E8, 4D, EA, FF, FF, 8D, 55, EC, 33, C0, E8, FB, 87, FF, FF, 8B, 55, EC, B8, AC, D6, 41, 00, E8, A6, EA, FE, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, AC, D6, 41, 00, B2, 01...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
85 KB (87,040 bytes)

The file 08e7437a_stp.exe has been seen being distributed by the following 18 URLs.

https://dw.uptodown.com/dwn/VjuhIPXcIGBkLP3ztCGZllh13bkz4XaoLLk7ZdFk1M9yWGQqEAq78y3dXxsdec8jm8LtUPycUzmwVtk6653n-IgjuHVLD5vGJKFRGAwBskBGflYNKBdl-Sjb9rGHKpSw/KUWYjn8ztFgxZfBJ6jaQ-u7YDWtRCH0pY9fUL39GXJ8wV9HYPngkY9kCjgdSfFwoBjDpmPJ7U44EiR4XYe_lMPbkZcnforywdJwkzrtiMtv5tlbcG8w8ERWcAO4uQEF1/YvMG5l8m7jX-3g94Cgu3BNqmTG5CtrGYdBZ_reKPMs7KCn8ebq7Xa9O5N4leWJhaTUDUfZj139W3v9HvNjEiYWnjdV3Xa5lDB7t5Qtzz7adIzs9MDrWp6B1FjU7mZxuw/.../

http://dw.uptodown.com/dwn/buY9XaBqDSWtMK3huV5p2BrievyYUPhrNzoVQSaqtxv3gS5sCoyu8DSz_r281tuBbCivJrarzXGWPfnAeGAPZNdCe9jKBQoUSDTF_dlG4M1wW5RbJMG80ZFmixyDE96x/84SYlKFqJghEBwqGQdZbomVxLL0M0Jzo1re-4s_WTZRDAEWdIicFa-x8ymuUE8j3jRCYA53S6VdEO0keAEXcgeGca1AhIClhn_NlOfwDvVBBzd1Qfb6fIcK0Ectsf0m4/octWIBZDaB6s37Eu9QWUsBsWAgq6Xh1Tm4rCo1FQM18Eit0fQ16FbB3Jp3rLk1LC26ni7ouMf3As1FmDTU8fTxjeV8wzUQY6ffzNTShCyUM0xJfIOvOhBBeWy2xfhOxa/.../

https://dw.uptodown.com/dwn/CdpHKTEB4oN5vZ_dF_epstiU2lcu1EmUzJ9SNEHVVBflqXeUe4Ck8ddE4Usnw7_7tmlLr0HrdFokbgtrhsuG1tBU8x0U0WRKXT4PE1GviZoCGxyluPQzF-PU4Bo_wy3W/lrWYoOPiLL3uy8SDO5AyRGZ1PhCFsp3cQVMxCjur54fpc8P3ZgVJza91OvKvDzOpaUyIIpLr_f0wwd5W2-JtLpPF5uTOgzN4dPHo5JISEfRIv19weFYKvI42hNiQ8vX2/8w3TmIV--4pK1ZJDIFRYGV1UHbOZnQbosSOcVl8x6tPHRoj4qXHK2gBKXGgcBUHkuodT_RlQyj3tIuBFw8oCwXMwddDQr8AG3VNGwN3mO8VzS_1V2erX60yTZjOnwZ_x/.../

https://dw.uptodown.com/dwn/YVYEVFmCqQ1i0YDABtUdx-_8PSCAjmYxxx6ayvnYKLjhoeCXeUg7wu8VOkh-EJ0kLxnf5z-AF83BJhIS-VLgU1j4MBIE1Sa4E4NXLTquDwy_ocDIlF5-cYySBeYhJcms/57FFQcmk4guwb2n2nG-n0-8rx6UyQJ9fBizVScEiYUe3XYlgG5-OSVBFm4fgsNGZG_uFjcl-PkS-NXJEzdIOS97wC_o7I7aVlOgnlbrvqCFcdc0sF3NsGkeeXN3zjYGF/7k_ODdoKbCyVEv0v3f8lUbZng7nIIXXcOt_EPhlUSAPXIH9C_BuM1mSGdRLB7FTMar3Me3RqA_4dY0sT8FWOXz8Y2vFGK7hogdLfkyzmBYK0VSm4yPF_wg0uTuncGS3i/.../

http://dw.uptodown.com/dwn/lYroYANUt33ouFc91fuV18Q0Pag82HRZWGQAlxTtPgOBwCZ0hdbP_GwyWwhMmHptYdfdAt4NFYEagJUA8Q9-La6_X13rqkUpL1z-dq2VToZ0XauYVcAi0Mtb3GnZwZNi/ROOwjp8iTp4RbgzRTqyVCKBc1ipxrKkytdujugpK7aoGxfi42QyerN8M4ryCAc3SMo7INs5yZc-DyoShwdaIQdrG10SoEES67YsxngXSyJSrqkhX7pVQtSM-rKy0HtNN/.../

http://kitchendraw.software.informer.com/.../

https://dw.uptodown.com/dwn/fksGGbbGXZtgJKMlJ1qox6RIg7CYnppGs6Nym1r3nJKmJTufpX81JvLahORfRa_krORPQl2x6mjEZPjgwLmLl8ZK2YxhTLk2QGs1mxZOmONOCwuVf5j1Q3BlnIXRLscj/L2Y_-d4cWTElM2yQhymsebcXhiDfugfUbnlIavbJFcN4q42oorEh5SxOB1CAPHPOGRKAJyUI3iPytqAQD8ph7e93KUueiEe9iFktXzFVmR5J2NVlp-iq4q1C64mZXFQI/tuaMUY0gMYNCDcYyCSOIevuvM22GZ4q4K1Pv1ffn4OTgrMt1Xq0Iz6ccskeuc73xwd39V_kDjw6UbLHv9KLEHoJAKS6ku2Bd9Mc9txzby7GksALxFgN8fJXLsXKECuTC/.../

https://dw.uptodown.com/dwn/9S6adTRFjPCD0Wv8h4KOr5C8ehSKBpbj6_9Pjeo1SXWvlNBcJ7f6VJZCsvBC9FQ1VTARD6t9_VZmaNM6ZeljbA6I0fNnex_aPvzZuoedm58F7H-LBfd-Qjf8F39MT-zH/QET8tRKRAUtUF1WtRT4p0qs2ntqUxHTKkxOZUcXGueE6DifYLab6wMMFlUaQrMJrUnPJY8UEnO_HhaxRMqHDixz-eBi-OS8SUzeTgN_IdtZy1a3nGuw3Mc1HN-Ed4GWH/iWnTeoyjDdTaO_p4LKw6WrBOXMiVqNOb6MTHEGs9Tq3l45H_SPIlJEsYaJC5XkGveI8-_U-nu2McmJYRsZSn5J_E1OdtSFJIdVg1-Rx2vuxP9RmtNdip_L5hT4nn0Lz_/.../

https://dw.uptodown.com/dwn/8waKk-p6K1sDlDrbjn_RtFWazoJ7UIQehNYPjAZs0UwGQZGSPzwY6pitDsAPhpM2KzOX6XzgW9OqZNckFvVL1r_vqlcLPfrXU3whaalsrspSVnpdSz9261xaThYIHmcm/fJSJr3s4FiN8hgiITcu7EFQlnyLwYH-eigRaxinfFW-XzaBCwjnqEBCGgnVfBrIluTPzaS4CW9tu-F6NPoY91wiXqeok_dfbSUmSe6ANjBKJJeLVILHxt2SrqZ1w0aWz/A5jkodFVvxmgLOsDt5oYldk7ZnKt3Xs415xIKLPY8xyOdNvyATu_VEEBcfcOr_FcwDXw6O14QaieSvbzN70xIHCXFWo6kIuqSC_0T2YJ1jLQXF0ZMgRbTZzJHVRehVEO/.../

https://dw.uptodown.com/dwn/Tqpu5QYvq9ssQXd1nTnOb2jA4RVIvBesDh-5XU2ZYyrR6rA9vE-fjiy6zmmN3V7gMNh4m3_c4nReLmBf0OK9QgwA9Tg4br27txAARjS8AlTg8K787I5tLDVbvOMvMpaC/xJ4HOxabNxmUVJ-Vnf0OXOcPX1UmPcfpIYuAppdxIbPYDGGR6p76faHLdt8wriA1pTskk41VUZeMv6n3AdGt81b1ImC5RoQRmP_w2TehxWoHwxOtr3n5sKS5ki7Ucq8r/L4xQ6_ock_YdKDlTj0X-ZcTkESuxu-SVhDj_d0Wu8egguOpmIKq5yxOLVnWUBZGYLP5LPTQXLeZL6g4ftvgRi4SvoKNec8v-lvNKZbe4JD8uFqox3L89esfknvjA_IkB/.../

http://dw.uptodown.com/dwn/01_08wIwXgHkyDwSm4u7ZXQ2H8XT6aoc8X9i_xUFeL6RcOZMOODNKKvQoUp6tHQTEFKzXTbWYVpm1HLjCsnI2E_jDMh-64ston1jyEjsNsjwOa6ga3Of0g-Fe69YgOeC/2wtQGZXE0H7KP3p68QYZaVy2NZhsifjOfB7ujuYHBiVqRh4FNv83Eq0cOonQnq9Jg3B4T0EdjVw4HtjcTOwhvM0mwE7sAahKpg6fE2et9qrPls-cDOuBy3shqOuiBc1w/L2ClTO1xYWu7d4mMZFa94gym9k4XSMBruOOHiod1zztJLfwgQ9tR3J7wWQxNINH7EqNp40_MeCI0mIDFTykzluBDuxbcQJjl5bx93HDIkgjX9IXBVr5LbY6N5CTqftuy/.../

https://dw.uptodown.com/dwn/LsZII3H51jjAiO_VL9qgMf-aoXh9VNAPSotG6mayYhYDUnuRG6vBKqOhGb37O7L3cZVoV_gq7_rcG1eS_b85Y3F0V97IuVWKltk3gB18a5ONLsLdWR1ggx9ZOcyUqMb0/0zHMSQ3F5zZ7Rca6LCyMQmTflxY88RCrNvQ8oTgNkeqJVYsnIQLkjWI7La5r1TXlLcap_U8ZUAom7HRsJbd2s2-tUhPIkyuOFun-BAqnm_452CyXnwGewkpip4LyZXQU/6CZcTrzVQLWNZL6XfVBOLRP8bfGGztQSHaE96cC-VJUlhGwwgIibzDkLqJ0J_yXETgTDCGKE0aH6tRJ3RJMcvmxxxhRK-avFvWyEoPPzAas6IY-DxZxqlRokfqw2Otgn/.../

https://dw.uptodown.com/dwn/HKp-7Taswcgnf4Qlba_SfrLQ9tUEldh3Mg8swSbCZfiHhAPpZjddJah8ysrsq0isEflrwJynXV8qZSmp9if1hNNDzOp9l_-xlXKnNxiuFpqxTWQ1oB_R1HB5R2bO_xyM/fyAoaivMoxFlDbBiMlwUV53mbyfoP2uTQJ_VXZjz-3lrd2Vm4GFNbOLO1abwNjaiupSqFASqt0gMmisU7-CP0JWoBo0RLaOG0J8Bdh3MKTMwFiQSYnnOwJEE467ZrQ5U/Ldd_I5BUQl4QRZqy9eVn-OrQyJFDyjICoywR4U6hvSQF94t18k3y8sgeaZbn7LLng6gUMuIUT5yuWcExJbh1YPEE7A3JWl1SoWBiWKmZH8wGIjmAtQEs1cvdpWEj_8Bb/.../

http://dw.uptodown.com/dwn/gSEfp7lh8HQRhytUS_msVm8CQSrRbzusImmfcXu74b8hV1cJqlA4bdVY0Z1GS495F35bXzMykZcKjLX3yHcx9Kp2xzHd5Q0SbtdseCvdb5n7yFJ8yspNhz4Hqig1KK7m/uJ5RtNv-BWX0eetsfqmhOeWEKbzTQyJeccYPkr-Frwg1OknAU8F2M0lZ4k_hwsCLjcCKWwc3vHZmLmKwDPnmaktmKCoMXPbkFE5ReJhI3MEsXenbvQExp74wkrUWAiOu/.../

http://dw.uptodown.com/dwn/aTIidqZtzl69rQceY0SukEwQEY1XnNWhjnXYrC541jiC_EJq2x-sljiyesRZnkuW9ZhnSDMNnex5vZZUE6mG7Ln_Dx_MXW7BIUvsxFASiZs39c_Pye_T14YxOS0AhzCy/3YUbeMjXwXUsdO5eEanzXp8qDCDVoYOqsZPLSSX53zPg4Bt-o2pBF88ToPLgHD24hx_MKNdZn6Z-Qj1e2Hc-iBMQjVFdP-8JCHwRdbw56LUCnO7sfQv2_dZuNN1SaBFo/.../

http://dw.uptodown.com/dwn/xHMVzuJidFSPzK9OUj4uWWuyudyRreEffhBa6yKaQnD52OP4qIFHIS-Rx4MP-xCf5Q1Q-gmFIqxSLId-JmQOzjpzl2e5t92s1YL5G4ZMXNusQ_Nqv5XAlSUwBFQlIkYn/eFthNwwB8K5SoRKI695W14oGHUG_-RKJB-czuWfIH4_74EWyfQ4xEMoVJ0DkQ8GQu7lQ8VAe3wGH-IUqIUsdAquUGaKLZ11gddX2PhH5cr-aC-yyg2f43geJQLrrwfBa/.../

http://s10515.chomikuj.pl/File.aspx?e=M6WGvK5CP_vBSwi56sC8AAvWWrIc3VPU6R4ujITPX3YrY3cDOBmxFXb3QtFezzStmUY-OPtnZY0jomxtE-gER0-U3DkudGl3_EcIknHDoC6SgYg2g3YvWeGWldMZEdZg&pv=2

http://dw.uptodown.com/dwn/yR1iRjK5fBlZHovjeT7d_zljxhxzX3qDsFLOxsBsj44CdwAK9L5yaW5ePAofQjbZVuTnsdgnzG71JR1C_RHFPvDqZk-dp-jC7XYgMfrm87c39k5LOwpIKFFPNZAZivUW/r5_3TstHjubYTl8JObyDRfCdbf8EOvQpWdqyOr1APeTi4r_dBEJ8YW-eJdRIs-hVPzh9zRdnQyylc7DIvloGOePVV9SCcqHc6INwxz_gXIQNw_G-BqIDM_F_qW5r65yv/.../

Scan 08e7437a_stp.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.