home

1822185_stp.exe

K-Lite Codec Pack

This is a self-extracting archive and installer. The file has been seen being downloaded from fs30.filehippo.com and multiple other hosts.
Product:
K-Lite Codec Pack

Description:
K-Lite Codec Pack Setup

Version:
9.7.5.0

MD5:
3f442e98ac3f17912a21b78e5a323c0d

SHA-1:
a4a431f598c8112edd0589f8ee44fb59462b1196

SHA-256:
e5d9f3c8b033ca4366049dbb4451e15a0621d38832ce284a8aecc64c9d39e409

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/25/2024 1:16:18 PM UTC  (today)

File size:
18.4 MB (19,332,722 bytes)

Product version:
9.7.5

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\Documents and Settings\{user}\Local settings\temp\{random}.tmp\1822185_stp.exe

File PE Metadata
Compilation timestamp:
11/8/2012 11:04:36 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
393216:wfD/Vmg2ngiL+LF2CIPj4IfHLCQj6Q6aL1C8H3zsaUC1e5Rr:wTVpLFPI8I/OA6wblaRr

Entry address:
0xF3BC

Entry point:
55, 8B, EC, 83, C4, A4, 53, 56, 57, 33, C0, 89, 45, C4, 89, 45, C0, 89, 45, A4, 89, 45, D0, 89, 45, C8, 89, 45, CC, 89, 45, D4, 89, 45, D8, 89, 45, EC, B8, 64, ED, 40, 00, E8, E8, 71, FF, FF, 33, C0, 55, 68, 89, FA, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 45, FA, 40, 00, 64, FF, 32, 64, 89, 22, A1, 48, 3B, 41, 00, E8, BE, F7, FF, FF, E8, 65, F3, FF, FF, 8D, 55, EC, 33, C0, E8, F7, C3, FF, FF, 8B, 55, EC, B8, 4C, 66, 41, 00, E8, 6A, 58, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, 4C, 66, 41, 00, B2, 01...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
59 KB (60,416 bytes)

The file 1822185_stp.exe has been seen being distributed by the following 17 URLs.

http://fs30.filehippo.com/2295/.../K-Lite_Codec_Pack_975_Full.exe

http://software.oldversion.com/download.php?f=YTo1OntzOjQ6InRpbWUiO2k6MTQ3NzA3NjQzODtzOjI6ImlkIjtpOjE2NjE1O3M6NDoiZmlsZSI7czo1ODoiay1saXRlLWNvZGVjLXBhY2stOS03NS1mdWxsLUstTGl0ZV9Db2RlY19QYWNrXzk3NV9GdWxsLmV4ZSI7czozOiJ1cmwiO3M6NjE6Imh0dHA6Ly93d3cub2xkdmVyc2lvbi5jb20vd2luZG93cy9rLWxpdGUtY29kZWMtcGFjay05LTc1LWZ1bGwiO3M6NDoicGFzcyI7czozMjoiNWI2NWM5YWZkMjI5YTI5NzNhZGI1NjgzZTVkOWU0NjYiO30=

http://software.oldversion.com/download.php?f=YTo1OntzOjQ6InRpbWUiO2k6MTQ3MjIzNzAxNztzOjI6ImlkIjtpOjE2NjE1O3M6NDoiZmlsZSI7czo1ODoiay1saXRlLWNvZGVjLXBhY2stOS03NS1mdWxsLUstTGl0ZV9Db2RlY19QYWNrXzk3NV9GdWxsLmV4ZSI7czozOiJ1cmwiO3M6NjE6Imh0dHA6Ly93d3cub2xkdmVyc2lvbi5jb20vd2luZG93cy9rLWxpdGUtY29kZWMtcGFjay05LTc1LWZ1bGwiO3M6NDoicGFzcyI7czozMjoiZTE1NzlmMzk2NjM2NmE5M2JmNjU2YjhiM2QxNjM2ZDMiO30=

http://storage.dobreprogramy.pl/.../K-Lite_Codec_Pack_975_Full(dobreprogramy.pl).exe

http://storage3.dobreprogramy.pl/.../K-Lite_Codec_Pack_975_Full(dobreprogramy.pl).exe

temp:K-Lite_Codec_Pack_975_Full.exe

http://fs33.filehippo.com/9567/.../K-Lite_Codec_Pack_975_Full.exe

http://software.oldversion.com/download.php?f=YTo1OntzOjQ6InRpbWUiO2k6MTQ2MDY0OTgzNTtzOjI6ImlkIjtpOjE2NjE1O3M6NDoiZmlsZSI7czo1ODoiay1saXRlLWNvZGVjLXBhY2stOS03NS1mdWxsLUstTGl0ZV9Db2RlY19QYWNrXzk3NV9GdWxsLmV4ZSI7czozOiJ1cmwiO3M6NjA6Imh0dHA6Ly9hci5vbGR2ZXJzaW9uLmNvbS93aW5kb3dzL2stbGl0ZS1jb2RlYy1wYWNrLTktNzUtZnVsbCI7czo0OiJwYXNzIjtzOjMyOiJkY2ZlYTkwYjJlNzAxM2U4MzQ0MjdkYWJlYmYwZmU3NCI7fQ==

http://www.storage.programosy.pl/K-Lite_Codec_Pack_975_Full_[www.programosy.pl].exe

http://www.01net.com/.../telecharger.php?id=26950

http://fs40.filehippo.com/3274/.../K-Lite_Codec_Pack_975_Full.exe

http://sfs.mm.onet.pl/get/files/1/pclab/pliki/.../k-lite_codec_pack_975_full.exe

http://www.inndir.com/inndir.php?id=19822&inndir=a38510e7fe342120ee3d9f949e07c7b3

http://dl1.filehorse.com/dl.php?f=31xPa5cTNqZEwK_0gmTh24KxJjfa_gf_X8_wBxI6Pafn3KWn4NXetEV9YIHROBoJxcp12JbCtxI4fM31dSeROp9WUruNTocA5vg1uaU2EQqRUQ2UWwUKfVueavD3YAxo,rmA2m4Z-MzU6E_z39j-KZwmXh9RfjcZJjUB17NphIH0,jRlW4JuJwl_ryu-n4yWuA_XN3ELrlEHHVH1VDRn063o

http://91.121.96.80:8085/.../K-Lite_Codec_Pack_975_Full.exe

http://fs31.filehippo.com/2235/.../K-Lite_Codec_Pack_975_Full.exe

http://download.betanews.com/download/.../K-Lite_Codec_Pack_975_Full.exe

Scan 1822185_stp.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.