home

176e06fc_stp.exe

MD5:
f38ba1b4c9ee4aabc19186541ff96349

SHA-1:
2062ca60aa510ca607f0483fbaca227ec0ffec17

SHA-256:
92dceeffed3d3654bdee50de0c152ed284165deae19e2f3b3651feaa57d97dba

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/27/2024 5:05:46 PM UTC  (today)

File size:
74.5 KB (76,253 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\176e06fc_stp.exe

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
768:NSLG9g5Bnb8jDTJ7YVoHOy3E9jdjtks73PP+eGbPlLCe:ICg5J7ljEsTPP+eGbPlr

Entry point:
3C, 21, 44, 4F, 43, 54, 59, 50, 45, 20, 68, 74, 6D, 6C, 3E, 0A, 3C, 68, 74, 6D, 6C, 20, 6C, 61, 6E, 67, 3D, 22, 65, 6E, 22, 3E, 0A, 20, 20, 20, 20, 3C, 21, 2D, 2D, 20, 74, 63, 20, 31, 34, 36, 33, 31, 36, 35, 35, 31, 34, 20, 2D, 2D, 3E, 0A, 20, 20, 20, 20, 3C, 68, 65, 61, 64, 3E, 0A, 20, 20, 20, 20, 0A, 20, 20, 20, 20, 3C, 6D, 65, 74, 61, 20, 63, 68, 61, 72, 73, 65, 74, 3D, 22, 75, 74, 66, 2D, 38, 22, 20, 2F, 3E, 0A, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 3C, 74, 69, 74, 6C, 65, 3E, 46, 69, 76, 65...
 
[+]

Entropy:
3.9343

The file 176e06fc_stp.exe has been seen being distributed by the following URL.

http://www.centergiftcontent.com/c?x=sIIVIUCalLBbJaax30PAuM9hSG8Q8vE44cq8NwZC9J4=&c= WEUIJeTehoUcr7fbwsfm9Pc0f83zzu1qSGUOwkT/BEGEKjnKpqWNfYGryY6hfyHBuIxApUysW4C4ewNC20PaVyiM aUxfZqFrhH UEqCD4LuaxQAItcGbtC3 P0W8dH9QK0CzQpCVrJSWVdlQXNgg==&e=0&downloadAs=five-nights-at-freddy-s-1.13.exe&fallback_url=http://pf.benjaminstrahs.com/s/1461865072/en/9/.../962637-1802831-five-nights-at-freddys.exe

Scan 176e06fc_stp.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.