home

1097366_stp.exe

Ulead Photo Express 6

Ulead Systems

This is a setup program which is used to install the application. The file has been seen being downloaded from www.towerbitscenter.com and multiple other hosts.
Publisher:
Ulead Systems

Product:
Ulead Photo Express 6

Version:
6.0

MD5:
26205b8b948c45e2c4d3283144452d23

SHA-1:
084dc3efa9d085155f2d8dc40a05b536ce868f49

SHA-256:
fadde65fe250b418c74d9eea44036bb88d0d8bc5aaae0c954c8db521c61ccd5b

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/26/2024 10:54:33 PM UTC  (today)

File size:
191.4 MB (200,664,836 bytes)

Product version:
6.0

Original file name:
stub32i.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\1097366_stp.exe

File PE Metadata
Compilation timestamp:
8/2/2002 8:01:18 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
3145728:kc4zkTAmkPC4ip746XgPB/qxb8lfJK7nmlsVzrx7RSWxekP8FTkCYyUfRg8918Lt:DuXYV4nPhMwlfJKr/ddSAenJU5gGV23v

Entry address:
0x8AF7

Entry point:
55, 8B, EC, 6A, FF, 68, 20, 43, 41, 00, 68, F0, C3, 40, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 58, 53, 56, 57, 89, 65, E8, FF, 15, F0, 41, 41, 00, 33, D2, 8A, D4, 89, 15, 7C, 93, 41, 00, 8B, C8, 81, E1, FF, 00, 00, 00, 89, 0D, 78, 93, 41, 00, C1, E1, 08, 03, CA, 89, 0D, 74, 93, 41, 00, C1, E8, 10, A3, 70, 93, 41, 00, 33, F6, 56, E8, 70, 02, 00, 00, 59, 85, C0, 75, 08, 6A, 1C, E8, B0, 00, 00, 00, 59, 89, 75, FC, E8, D1, 36, 00, 00, FF, 15, F4, 41, 41, 00, A3, 4C, BA, 41, 00, E8...
 
[+]

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
76 KB (77,824 bytes)

The file 1097366_stp.exe has been seen being distributed by the following 16 URLs.

http://www.towerbitscenter.com/g4PC01lxA9EWbY7OFVKH3mnu0vPDTsEgBCenRW33qa4LmHz5asDKKrkAVzBJWAkCCAHfg6K36xFk1agkiNIfH9Rehg0UNS BdcGg2LdkD2S2XYCssrUznTqYAD6bsRqzqcwlvOf752reo9j1U4In4WAFE1wzjv_2enMHPOs ooxGG1D4UMeZpm_ NcwNylUHkZbq7RDLFNE0F8H4hiJsSuKPda4J1O6MaS4bOCVCVL5lm CPijg=-Gy4AAEQ3F5s2W5UP9_QwuMKfAu1SSAIb2I2_WzaHq2KkgfOWi0HZ EgaHwE=

http://www.applicationconecptclean.com/ckJA5LqUBv_ODCrCg2q2N9Z2bvboJRuWOgfAEkjE2PRi7x4Ilob6nwBEP40N8 YysBSbSOi7gI0r1W14v9R21hwXQFmLTIY7C00bsuKgEpo5jZjfFRFVq4KmE92bDi5JEBzNfKssieYRMCi4JwfPIyET3VJGarYPTOIo2rsJHVjYIZSBgYUpCtzfSB QFNqZWiS02vKNO1Cw3NTVjO1X4yTfG2k37QxBUxHHqN67dsCR4Wu0RJE=-G1UAAMTc2vM1h_Om ntOnEhURBIEG3DgFA60DWKLDcNELvEk_U6N2zND9_uw61aAbW2pZXNEVQikgufLicEDhVAsLalk k63QTsDIpME_x0=

http://indir.gezginler.net/i/1879/.../

http://www.bundleschucklepackage.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

http://www.ranchmetabits.com/sQsTNCfUtlmULBvA9liv2db9LRbWM YMSKFjjoe_j7AGgwmtX5lUUD3846BkNjIIzQhKWGqhDce3DCwFREHNeTobmNPwLi1TPbiE3GtkiHzwHunXEm52Qz3_rp6j86LR0OWhY6NNp7 ldTD2e7Pf5J9HjgIW1bRRnbyRcT5 5h3NQWqO7aiVV jDsNH 8S3SAVZPL8_myKLzRfXzTTXwjD9qFVlweQ==-G_kCAGS P_3v88PbXaVuH72GH4fRJyFcJMBEDtjbYoj5JPbeOPBkjZGfRWD 1MfcPNuzOp473iOt61v3zPa754vvBPO7xpxoXa3v nrtMcjqq0xUssazByaIqrDZPKfkeDRJey091g CkDAWmmO66dUI9IBuPqvDVYfVJ67Oc6Y9_25uZ7vWJsd6tzMmMiW5FvWFOqUJb7GDUs2Xb7hwKZ2AfV9HQxoQJOOTA5AM8ufNlyULWvdScBwZisBEO0IXBteOkPPTuQsfC1uKjHfQDtsXJwgzi XBjgWKSrz QNQ5PhA7HRD8lEtDeN2yNK2UKmbVRGxLUtsUWRLqu7wmzzoDEXXCd57qUaP5 _Rxo_ot6UtHGyjbnlFBJ5jxDavzrO Qk8SG5kdKOV3wPU7bV9_hZUcOwiXce_d5rKZ9VnDrksQCY tGPkX5Q4Uzmp7mHWdeoKPrKtIp9148uSXLsm674_Bx8rJWOshe7JE1uCOD_EdNrFNaC37uuYk6Js fDZf_YFfNxKHLlS0BCGIpvO1oPN Ehqx8sFPzy0Pe0rg_3oBQJug7rrRwHHXRwK_nJhUZZy6sm4gk 8v4yB1ujLaHRYheHAn5CGrAxwmpynUD83cvHK wp18IJO34SAw4tgeMuNuiS3RyM6e3qrYhgx5Cc exTH565Fh8qgmiwO3vUv7EkEuXa3qi8H3p_T _afgCgBOe5i14AuYzdeVeJnqaIIfQ079Drqq9DoIagt

http://www.downloadpresentcity.com/gp8_ Pvd NifFA6l9EWy4Y4rqHUan7QoOS7_wFkvaS5Essi3pXlxqkDpNpkddTItFnEssS0NFUeBDjqCUKkOIQR6qDSgOmOzZaGHeiLLlcRbjLWP9buv _bGBGIMORwgNj897VTHINCJivX K8GHSaPZQPbGjZAsNu5G0Xi5owWgIOpmCrwGgsb4dm4jLVy2F1UFV9Eh-GxkDAGSwOez5oO0BiuM2awYkROhyIrJGiAlM5IC9LYaYT2LvjQNP1hj5WQTmfMfds8nXG24WvMfS7vOqcxxC9WDpmbPjTuW91hY61UbYq2VzW9MLp w83KtkLQQ2zjzFj_L4OjeiUZ7ve2v6vjukFdVWg3C4mMFDTUCqDnuXIbmV0sd066qFke_J 9mhnhrVu3zj1cph9f1extag3CTZR7cGh plj_xBnEwVgZt1WpcQbnKpGk8gg64Sz0vw8i8XSvefUN48CpwGlVEIoDiKTAwiwlvKO9oo8vNuDIEFBVAWWDZ5wrl70qcRuRM9TfuxWm7n bC3zukZwH6LxWFVFBoC9_k9FRD_ h4cPhs_2T5W2oWBhiWt5d5ym4IMghJ4iYDYfbU6ByQtzw2ZCacuea8j60stleCyrxt78QQuCb4LkYdC2pZOGazteHQi RYuZsiXFpdzm 2uyewblB3K5wI7fm G2S2npVqs7FnzxSnW44PxVNFRttutyr3WXmD4FRmWlHUY3jbFZ43dePlw4vZ43JycA9ebtypTedr3GLlx0_ci1PugZiqzhb6wyk7QqQLH4GFGHpnokJd5Mw5sJocRFmJQ60ByYim47KQ2hro3Pz5prOMeuzigUT7YerxUDDoJzEF2UqJ2KzVO_Tp9BoTr43cEsoIZdXMeD6YkhY8sHy4icgn0rCguckHGF8Xf45lpS1gNiAz0dX642TCr6Zq0X00hkWXzNKQJ3VvPoryozkxsA4JAFkuVFzUF

http://www.tamindir.com/indir/MjAxNi0xMC0yMCAwMDo0OTo0NA==/ulead-photo-express-6/windows/.../

http://down01.waxoo.com/cc34f38fe65cbf56e6d383ec5c81a744.exe/ulead-photo-express?id_file=784&expire=1417454885/161/.../exe

http://www.updatelaboratoryworld.com/c?x=/od2o/U3gwF/dzEuSFVepr5QdKxwkDQMCF/ox2ebdIM=&c=LgA/SPMx 0j9uZDZPor0CnrFlgxXL5tgronsQmXwz/5WRVt2Dbek4POYvL Qh5oT3267iZPAvTfNB73I4E6VkiRTxNbGqNvj TrgvmT7oxEGAsf96aoI9jlDj IHwVB3izUVfK /YvYdvPFkRBkPelHUp7XoMXk7BROtMBSfN98=&e=0&downloadAs=ulead-photo-express-6.exe&fallback_url=http://pf.benjaminstrahs.com/s/1464350536/es/3/.../34542-1793526-ulead-photo-express.exe

http://down01.wxsrv.com/descargando/024/784/ulead-photo-express/.../ulead-photo-express.exe

http://ec.ccm2.net/ccm.net/download/.../pe6_tbyb_e_6.0.exe

http://ftp.ulead.com/pub/esd/.../pe6_tbyb_e.exe

http://down01.waxoo.com/descargando/024/784/ulead-photo-express/.../ulead-photo-express.exe

http://files3.brothersoft.com/Ulead-Photo-Express-6.0.exe

http://down01.waxoo.com/cc34f38fe65cbf56e6d383ec5c81a744.exe/ulead-photo-express?id_file=784&expire=1406844404/161/.../exe

http://www.corel.com/akdlm/6763/downloads/Ulead/.../pe6_tbyb_e.exe

Scan 1097366_stp.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.