home

11586768_stp.exe

Realtek HD Audio

Realtek Semiconductor Corp.

This is a setup program which is used to install the application. The file has been seen being downloaded from ftp-stahuj.centrum.cz and multiple other hosts.
Publisher:
Realtek Semiconductor Corp.

Product:
Realtek HD Audio

Version:
R2.70

MD5:
5da5cc3f4ba8f9a7c137bdb48f00451b

SHA-1:
c37df2de2f3afbe00336bda4c6d37aa8ba7496dd

SHA-256:
ced7d719727faad1ee16b22a5f4a076f250ab54fa0d74a9a48293c4b7761f7c3

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/25/2024 11:52:11 PM UTC  (a few moments ago)

File size:
53.7 MB (56,324,562 bytes)

Product version:
R2.70

Original file name:
stub32i.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\11586768_stp.exe

File PE Metadata
Compilation timestamp:
3/27/2000 3:09:58 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
1572864:XX3HX1Rd03TCKhPbvWD7P3NsZcGsV0x9v0PezbS:H3HFcecyD7PNs2xqx9MkS

Entry address:
0x83F7

Entry point:
55, 8B, EC, 6A, FF, 68, 10, 23, 41, 00, 68, 30, B5, 40, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 58, 53, 56, 57, 89, 65, E8, FF, 15, E8, 21, 41, 00, 33, D2, 8A, D4, 89, 15, 30, 53, 41, 00, 8B, C8, 81, E1, FF, 00, 00, 00, 89, 0D, 2C, 53, 41, 00, C1, E1, 08, 03, CA, 89, 0D, 28, 53, 41, 00, C1, E8, 10, A3, 24, 53, 41, 00, 33, F6, 56, E8, E0, 00, 00, 00, 59, 85, C0, 75, 08, 6A, 1C, E8, B0, 00, 00, 00, 59, 89, 75, FC, E8, 11, 2F, 00, 00, FF, 15, EC, 21, 41, 00, A3, E4, 68, 41, 00, E8...
 
[+]

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
68 KB (69,632 bytes)

The file 11586768_stp.exe has been seen being distributed by the following 37 URLs.

http://ftp-stahuj.centrum.cz/dl/fb8641db890c5ec8f3c348c68547f736/5818907c/stahuj/download/software/secured/r/.../64bit_Vista_Win7_Win8_R270.exe

http://ftp-stahuj.centrum.cz/dl/5e24da820e30adf8137db1b927a97e02/58a5de45/stahuj/download/software/secured/r/.../64bit_Vista_Win7_Win8_R270.exe

ftp://WebUser:n8W9ErCy@58.211.24.153/pc/.../64bit_Vista_Win7_Win8_R270.exe

https://us.softpedia-secure-download.com/dl/31cdab5ba46bc916df3bcedf512e168d/586d5d7b/300166759/drivers/.../64bit_Vista_Win7_Win8_R270.exe

http://www.avalue.com.tw/godownload.aspx?go=9071

http://download2us.softpedia.com/dl/abe4c6f8501ca5ed4f575f5d07c0f6df/566855c4/300166759/drivers/.../64bit_Vista_Win7_Win8_R270.exe

ftp://WebUser2:Lc9FuH5r@209.222.7.36/pc/.../64bit_Vista_Win7_Win8_R270.exe

http://ftp-stahuj.centrum.cz/dl/0d14882b7a9486434be59dd4395254a1/57cc7b27/stahuj/download/software/secured/r/.../64bit_Vista_Win7_Win8_R270.exe

ftp://WebUser:YbwD5pB2@209.222.7.36/pc/.../64bit_Vista_Win7_Win8_R270.exe

http://xbigfile.naver.com/bigfileupload/download?fid=drbraxpqD6KmFxUjK3YraAvjKogwKqgwKAEmKAK9KAEjKxK9axv/.../FzpoFAMqpzJ4MxgwFxEXp4MXKA2qFoKraAgrFg==

ftp://WebUser:n8W9ErCy@207.232.93.28/pc/.../64bit_Vista_Win7_Win8_R270.exe

http://download2us.softpedia.com/dl/47889fac1d751a6cbc311c8e070ff11c/571badd8/300166759/drivers/.../64bit_Vista_Win7_Win8_R270.exe

http://i.download.idg.pl/fannef/f5853eead311c287943a7e62ed996dba/5740333d//files/2012/12/.../64bit_Vista_Win7_Win8_R270.exe

http://ilocker.bsu.edu/users/zach/world_shared/.../64bit_Vista_Win7_Win8_R270.exe

http://ftp-stahuj.centrum.cz/dl/061374232542aaab087dcf652ee2480b/56c0a3ea/stahuj/download/software/secured/r/.../64bit_Vista_Win7_Win8_R270.exe

http://www.3dcenter.org/dateien/dateien/.../64bit_Vista_Win7_Win8_R270.exe

ftp://WebUser:YbwD5pB2@58.211.24.153/pc/.../64bit_Vista_Win7_Win8_R270.exe

http://download2us.softpedia.com/dl/3e87b26d9a274f23b009739fddb57739/562c471e/300166759/drivers/.../64bit_Vista_Win7_Win8_R270.exe

http://www.depo.driverindir.web.tr/.../6213-64bit_Vista_Win7_win_8.exe

http://www.overclockers.ru/download?1770:64bit_Vista_Win7_Win8_R269.exe

http://download.overclockers.ru/drivers/.../64bit_Vista_Win7_Win8_R270.exe

http://www.overclockers.ru/download?1770:64bit_Vista_Win7_Win8_R270.exe

http://ftp-stahuj.centrum.cz/dl/5fc55aca9bfcf01bc78bf268ccfa5fee/52f80bff/stahuj/download/software/secured/r/.../64bit_Vista_Win7_Win8_R270.exe

ftp://WebUser:wK9xBuD5@209.222.7.36/pc/.../64bit_Vista_Win7_Win8_R270.exe

ftp://WebUser:wK9xBuD5@202.134.71.21/pc/.../64bit_Vista_Win7_Win8_R270.exe

ftp://ftp.evga.com/.../64bit_Vista_Win7_Win8_R270.exe

ftp://WebUser:AxPL9s3k@58.211.24.153/pc/.../64bit_Vista_Win7_Win8_R270.exe

ftp://WebUser:fh7SkVT4@207.232.93.28/pc/.../64bit_Vista_Win7_Win8_R270.exe

ftp://WebUser:fh7SkVT4@209.222.7.36/pc/.../64bit_Vista_Win7_Win8_R270.exe

ftp://WebUser:Lc9FuH5r@208.70.202.219/pc/.../64bit_Vista_Win7_Win8_R270.exe

Latest 30 of 37 download URLs

Scan 11586768_stp.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.