home

2353325_stp.exe

Microsoft Corporation

This is a setup program which is used to install the application. The file has been seen being downloaded from soubory.instaluj.cz and multiple other hosts.
Publisher:
Microsoft Corporation  (signed and verified)

MD5:
82f30f15eb2b9d3872dea1e9ee679613

SHA-1:
23630a65ce4133038107f3175f8fc54a914bc2f3

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
11/22/2024 10:06:16 PM UTC  (today)

File size:
23.6 MB (24,785,176 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\Documents and Settings\{user}\Local settings\temp\{random}.tmp\2353325_stp.exe

Digital Signature
Signed by:
Microsoft Corporation

Authority:
VeriSign, Inc.

Valid from:
3/19/1999 7:00:00 AM

Valid to:
4/17/2000 6:59:59 AM

Subject:
OU=Microsoft Corporation, CN=Microsoft Corporation, L=Redmond, S=Washington, C=US, OU=Digital ID Class 3 - Microsoft Software Validation v2, OU="www.verisign.com/repository/RPA Incorp. by Ref.,LIAB.LTD(c)98", OU=VeriSign Commercial Software Publishers CA, O="VeriSign, Inc.", L=Internet

Issuer:
OU=VeriSign Commercial Software Publishers CA, O="VeriSign, Inc.", L=Internet

Serial number:
550D88F53F6416D70C7300D845921634

File PE Metadata
Compilation timestamp:
10/3/1997 6:43:32 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
5.2

CTPH (ssdeep):
393216:Se2yYQCczF8+I+x28zCjZC7951Av3L3y1hckePrqJQNWGIx4IWShu4nIq/S:S7yYQCQ2+A8+Q7xnePSQex4IWULIq/S

Entry address:
0x6720

Entry point:
55, 8B, EC, 6A, FF, 68, 00, B0, 40, 00, 68, D8, 90, 40, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, C4, A8, 53, 56, 57, 89, 65, E8, FF, 15, 84, 23, 41, 00, 33, D2, 8A, D4, 89, 15, D0, EE, 40, 00, 8B, C8, 81, E1, FF, 00, 00, 00, 89, 0D, CC, EE, 40, 00, C1, E1, 08, 03, CA, 89, 0D, C8, EE, 40, 00, C1, E8, 10, A3, C4, EE, 40, 00, E8, B4, 0D, 00, 00, 85, C0, 75, 0A, 6A, 1C, E8, 69, 01, 00, 00, 83, C4, 04, C7, 45, FC, 00, 00, 00, 00, E8, 7A, 16, 00, 00, E8, 35, 28, 00, 00, FF, 15, 20, 23, 41...
 
[+]

Entropy:
7.9982

Developed / compiled with:
Microsoft Visual C++

Code size:
37 KB (37,888 bytes)

The file 2353325_stp.exe has been seen being distributed by the following 50 URLs.

http://soubory.instaluj.cz/dwl/da77192f081f4619424df902160e0f3e/hry/strategie/.../MSAoE.exe

http://ftp-stahuj.centrum.cz/dl/03a1cb419a49c51b8054393448b4d0f3/538f511a/stahuj/download/software/secured/a/ageofempires/.../MSAoE.exe

http://age-of-empires.soft32.com/get/file/id/.../?iframe=true&width=420&height=200&javascript=1&no_download_manager=1

http://indir.gezginler.net/i/1007/.../

http://w1.getpedia.net/Data/Soft/2011/.../MSAoE.exe

http://ftp-stahuj.centrum.cz/dl/c9b75b1caf4aad6064d27339c6d094af/5891ba1b/stahuj/download/software/secured/a/ageofempires/.../MSAoE.exe

http://w2.getpedia.net/Data/Soft/2011/.../MSAoE.exe

http://indir.gezginler.net/i/1007/.../

http://indir.gezginler.net/i/1007/.../

http://cdn.mien-phi.com/?ic_user_id=891

http://s10157.chomikuj.pl/File.aspx?e=T-FkjzErXHbad8lqkqnboGG-eWEzIzI4tyz-Ttaavw-WshSwN7cNJje3pBJU97xpOT3rgAZxlAdjByvLq-9btmde5aPHZKzTaKmO60B2oQRAOmC5-k24vPnWUvtnqWftOZNdTOrkd5XmseDmfaZckQ&pv=2

http://windows.indir.com/kaydet.php?x=TVRNeE1FQkFRQ0VoSVM1QmMyNHJOR1lsYlRWTnx8fGU1M2U2NmJhNzg2NjdmZGQ5YjhiZGIxOGVlZDBlZWJh&m=1

http://ftp-stahuj.centrum.cz/dl/cac9541e72aaff94716b7107fb53f4f4/580a535d/stahuj/download/software/secured/a/ageofempires/.../MSAoE.exe

https://www.classicdosgames.com/files/games/.../MSAoE.exe

&onid=7483&oid=3001-7483_4-10013361&rsid=cbsidownloadcomsite&sl=en&sc=us&topicguid=games/realtime-strategy&topicbrcrm=&pid=875954&mfgid=6298546&merid=6298546&ctype=dm&cval=NONE&devicetype=<!--esidesktop&pguid=7be81f27a865f2cd58bdf6b0&viewguid=hbUdtQkmlP3mACAbbE-ftyg8UVS4fxPWmB3R&destUrl=http://files.downloadnow.com/s/software/87/59/.../MSAoE.exe

http://w7.getpedia.net/Data/Soft/2011/.../MSAoE.exe

&onid=7483&oid=3001-7483_4-10013361&rsid=cbsidownloadcomsite&sl=en&sc=us&topicguid=games/realtime-strategy&topicbrcrm=&pid=875954&mfgid=6298546&merid=6298546&ctype=dm&cval=NONE&devicetype=desktop&pguid=7bbdc1960415e4c698e85211&viewguid=eyzV6g06utcqO1Ayb6sX82Ia3N7bALTKulee&destUrl=http://files.downloadnow.com/s/software/87/59/.../MSAoE.exe

http://indir.gezginler.net/i/1007/.../

http://nahoo.net/cgi-bin/download/load.cgi?games/.../MSAoE.exe

http://dl.khophanmem.vn/age_of_empires.exe

http://s10248.chomikuj.pl/File.aspx?e=T-FkjzErXHbad8lqkqnboJTcwl3yC2smUIiLwMABQSo3YKXLQW6mgBEFr8MplM-R1KjX502AS1twLEtn3UWM0czo14u9hrLRQdGM4YmucpyMPn-u_RUSsDpvMthSDuq4DFF3rikqxreKLRQ_HDg0wcZbc1H_WjTSx_YwXzFUQ2Y&pv=2

http://www.bytesendclear.com/v 4pctusQHzodgAs16ZL67R6kFCFN38d3UnhERkRV625KVm7Vkd2Tul CF tknkpJrexx2qSTM5A6Fc5nFUNOAawTlPWG_FFfi0yGrJsmf4I1ruIwUtA83J4fhIgtebHSP9gUUWFUh 4plAU68Sl6Y15Uv0Hu2PqSd7dcNRRMQ41PhqTGiBRu8hDW5ixSoszrSkHzFTxvUd_p0ZtCilW5ypfa2dPn6iJC46Ti6lUilezkArwhgzEgDPNVp9FkXn6q4jAhPRwujlMpAOZVYAYsYh4 M0cRfgxVKCQc3sCdecTkI7 f346YKsbIYG3t8yeZpHPuChayS9J CjjVK5jvwtLALWZiuD9D8DxkRMFgDOxantGGv jghpeeYjRNWnGJ4nYQqVcDFt_FlH 9vj6nx4EdZvY802KLzZ6Zp5WL_gPNQQAMQ2LP_dpGFv5M_AR0KkQL8SQu_qJJykYw5viMNeyloPlj11rgKL53zZa8 XIvsvnn6LedTKCtRE3bR7uHWHofIG73vYINqV7F58z5Vde_0Rbp2ynlyUBh7pXXQMiYRmtp5ARUa6F7412BOiTd_4cF8dNGsxQnUvqY7zNX X6eRfTDYGWpzraVJfiKxqAtK5F1rg=-G2QAAER17rzYjtvL Gr ZZGyEAwj81AAhxw4tCRIICC WOA4ZM8VRX15jeWoSe6m4aG515bdYtJ4eI95nL5ifk35euswrN6rgzeDl_ThZTWIFwGR ozwAw==-E

&onid=7483&oid=3001-7483_4-10013361&rsid=cbsidownloadcomsite&sl=en&sc=us&topicguid=games/realtime-strategy&topicbrcrm=&pid=875954&mfgid=6298546&merid=6298546&ctype=dm&cval=NONE&devicetype=<!--esidesktop&pguid=be5a5899c488b2f8bd7c58d1&viewguid=gUkuyj5cVCxJ8@BGuVU8kWRtQZ1TBD2ADc@Z&destUrl=http://files.downloadnow.com/s/software/87/59/.../MSAoE.exe

http://w6.getpedia.net/Data/Soft/2011/.../MSAoE.exe

http://indir.gezginler.net/i/1007/.../

http://indir.gezginler.net/i/1007/.../

http://download.freedownloadmanager.org/Windows-PC/.../FREE-4.0105.919.3236.html?ac2f403

http://indir.gezginler.net/i/1007/.../

http://soft-jeux.telecharger.com/.../MSAoE.exe

http://indir.gezginler.net/i/1007/.../

Latest 30 of 73 download URLs

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.