home

350712649_stp.exe

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from dolphin-emulator-64bit.th.softonic.com and multiple other hosts.
MD5:
438dda195690557f536ffafeb7415a3f

SHA-1:
4c86a05df4dea4afa8ff22c3e8b9797d96f0bb6a

SHA-256:
544deb605843887ba031127ed5768a92db69569918b73c244e53bb67e22999df

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/27/2024 11:09:38 PM UTC  (a few moments ago)

File size:
9.7 MB (10,150,809 bytes)

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\350712649_stp.exe

File PE Metadata
Compilation timestamp:
12/5/2009 8:50:46 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
196608:QVAJlIu1YDfXnAmpmY5jtIGZR8hMWtPE75G8liEMi/:oAYu8PhIY5vnWtIgy

Entry address:
0x323C

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, 30, 91, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, B4, 70, 40, 00, 53, FF, 15, 7C, 72, 40, 00, 6A, 08, A3, 58, 3F, 42, 00, E8, 09, 2C, 00, 00, A3, A4, 3E, 42, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, 58, F4, 41, 00, FF, 15, 58, 71, 40, 00, 68, B8, 91, 40, 00, 68, A0, 36, 42, 00, E8, BC, 28, 00, 00, FF, 15, B0, 70, 40, 00, BF, 00, 90, 42, 00, 50, 57, E8, AA, 28, 00, 00...
 
[+]

Packer / compiler:
Nullsoft install system v2.x

Code size:
23 KB (23,552 bytes)

The file 350712649_stp.exe has been discovered within the following program.

Dolphin  by Dolphin Development Team
Publisher's description - “Dolphin is an emulator for two recent Nintendo video game consoles: the GameCube and the Wii.”
dolphin-emu.org
About 3% of users remove it
 
Powered by Should I Remove It?

The file 350712649_stp.exe has been seen being distributed by the following 50 URLs.

http://dolphin-emulator-64bit.th.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-fmKaMpaKgl5w=

https://dolphin-64bit.th.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-fnKSJn5-glpc=

http://gsf-cf.softonic.com/4c8/6a0/.../file?SD_used=0&channel=WEB&fdh=no&id_file=72528&instance=softonic_es&type=PROGRAM&Expires=1467456366&Signature=aWZI4LjctlkCvbfgY-CnyPm4Q1c1inqtNh5jzD2Q9IdsHaZmJ49mvOvbp1j~yIGzkOWVaXp26ZZUQjx1NxMaJlersiOYMETukV4jr1DspKnkhvI~Ukz6IJrLN3~HU~FNesBVtqEAAvrrjlLWYTvHiIhdMFtJnhNPtNNSd1XXjyY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=dolphin-x64-4-0-2.exe

http://gsf-cf.softonic.com/4c8/6a0/.../file?SD_used=0&channel=WEB&fdh=no&id_file=72528&instance=softonic_es&type=PROGRAM&Expires=1486554135&Signature=gv1XCsmARmvOYjRuz4Iu0zMraU7GX-vDOP9-vDqmnCz6V3nYh8XPbpuXQH~KAVwwEt034m3UDYMNylNmlmeSdoF6mny-2qg9WNxvoFpNFSgB5Wdbz6yDmQJNYeURXcNJwvLvylme~-8i5GVQuxZShtUgid~3vtxOzURCOGcM1xQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=dolphin-x64-4-0-2.exe

http://gsf-cf.softonic.com/4c8/6a0/.../file?SD_used=0&channel=WEB&fdh=no&id_file=72528&instance=softonic_en&type=PROGRAM&Expires=1471118458&Signature=Y30nfiCJfTTuLRfhHPkJ74BnuIlePrydoj1YKk5pNwcScpcF0v~yY~W-SEIjCVxHwmjK0ac3T-3z71liJBt8ykpAj0ViybRT3wukcdjMSKqMj7oSNhJu-7EDF3h4dHbdGNtODS0UYUrQy0gURfI6iquVF5uTAKHJxwvRnnAPxSI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=dolphin-x64-4-0-2.exe

http://gsf-cf.softonic.com/4c8/6a0/.../file?SD_used=0&channel=WEB&fdh=no&id_file=72528&instance=softonic_it&type=PROGRAM&Expires=1430714300&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=TyEtANhK6KE~Wd2x4BkyqBJKBN0CzAYKmpT1bBNLQvrQu4f6WLHv5-Xcg61j~ObUZ4vWnp-y9oPxnddeIHa-sJcL-OlPkDOSAsYlifGac8YMbD5C7NANczIUGK9hehb3hbbyPtFAJObYOBaSKlrSwPm7Yqzcw8zNA0vvr28IV1c_&filename=dolphin-x64-4-0-2.exe

https://dolphin.it.softonic.com/download-tracker?th=1/.../1hqVlQuIH5CDjigBgo3DbWtBFThJDnYmZh9nvfJDESChOeOpWp0zMY1YGhArgZ5sBOH56ci9JbP2 4ZnfiTLHHp0x6fMMjso=

http://dolphin-64bit.ar.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-fm6ONo6CnlZo=

http://gsf-cf.softonic.com/4c8/6a0/.../file?SD_used=0&channel=WEB&fdh=no&id_file=72528&instance=softonic_es&type=PROGRAM&Expires=1484131620&Signature=YnPCrmIJLZkfJv8jGgz4giFF4PDJ1L5Ihmel6i6lyUxFc5~5NiQuytWMY0zUohrgUeYS10vk0LrucJft5-zLyx9DJvDt91apUs0nWEarmowMpjL1hPl7TAs4TThm~c7-R4nkCX4LY8FJ9AccY4900ubC4~z8JU1YK5-OSiOn1GA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=dolphin-x64-4-0-2.exe

http://gsf-cf.softonic.com/4c8/6a0/.../file?SD_used=0&channel=WEB&fdh=no&id_file=72528&instance=softonic_en&type=PROGRAM&Expires=1478654854&Signature=OqPTDNh0MMxpCOPA-fiMBuVeqttJAIzbk3HSGwBN6qwFxyYGFXme~gxM0CoaQXz71CkoIAAcfwj6zb8LKwqG02MBI-xPAr0Vucfk1sEH32FIE5VH99W5Ak1Y-rZVyysllGGaQKKHqXGOv8S9CwTXtVlooLSr8UDMZdZ6mqJqM3o_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=dolphin-x64-4-0-2.exe

http://gsf-cf.softonic.com/4c8/6a0/.../file?SD_used=0&channel=WEB&fdh=no&id_file=72528&instance=softonic_es&type=PROGRAM&Expires=1477361018&Signature=M616YPHuPgRSFmsOTuYipHvzXFB9bb6lYwl9XSMVy4XjQLElET-zvTZtC2NPMxcStp~qHj5YRLuMqQrF9FajgYaFtyf6h05t8FZMjzqiIgXY33j7-UwV0ARu22ftGO-5Qy7Xg6kZFMXfg5Vnb3jw-Q8Q-McYcwwHYi-Eq-7X6kg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=dolphin-x64-4-0-2.exe

http://cf.softonicdownloads.com/4c8/6a0/.../file?SD_used=0&channel=WEB&fdh=no&id_file=72528&instance=softonic_it&type=PROGRAM&Expires=1430873465&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=g-TDz7y0uGCrRiE0coT3GQLGON4Pkxk0M9wk-wubg6V27pq7GUXtzXx9vrFt9SzbAMIs6U6pEeB9tK9v3JpVKpV5vtrJkunGiFskmL35CkM3D5wukuNPhUTw3n196dT7t1a6xykxTDnQ0qGt--Igb4gbAe0tB7p58U4ataRJ5WA_&filename=dolphin-x64-4-0-2.exe

http://dolphin-64bit.ar.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-fm6WNn6OmlJs=

http://gsf-cf.softonic.com/4c8/6a0/.../file?SD_used=0&channel=WEB&fdh=no&id_file=72528&instance=softonic_pl&type=PROGRAM&Expires=1475810000&Signature=NHaybe74ilXLIskW0RG5HxiytGXfhlbf4yspGlCDmVmvCiB2SudZ3qp5XvbUGpBd5-bha6FUOiOkzh-SRm69JuTYcQmx50hwtGJhGpt-y~dCbc4m2MHMLGQLqgDHMhTyL58i3tLxo9LOk5u0JBnpdkR~rQMI0cTLDsa-1jssSu4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=dolphin-x64-4-0-2.exe

http://gsf-cf.softonic.com/4c8/6a0/.../file?SD_used=0&channel=WEB&fdh=no&id_file=72528&instance=softonic_es&type=PROGRAM&Expires=1477844431&Signature=UptdjKQJFcrMOqu68adhA3z1qnMaZ~65tY852insJ6Y1s7ncMfQTCyq8sYtewzUpOjgLO6PDPP1ZTu3D-z4x1zwUiOj8~gtjk8zrWckWThOkwZR0OnuBPpC5c5TzMAhvv9g~yHgp~0wi8dcgCpgf286ZKikpok3QI7V7oSEnygE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=dolphin-x64-4-0-2.exe

http://gsf-cf.softonic.com/4c8/6a0/.../file?SD_used=0&channel=WEB&fdh=no&id_file=72528&instance=softonic_es&type=PROGRAM&Expires=1477112604&Signature=KkJFb2qmDmsmQ9rLb50F3UjA5wZdaw3oILRbelxO7CzCvy3eMth~cKc4jXcsgGzYLAo6UGpMCUVKF8h0HjR6~jDBD~rLzYOy~kUjRQdrxYkV0WvTHB6dqUEfCrPwYYXL~OTIAXDuOBECk9r1nKe5EI~IrIIw9iMdUFxnwa8f7R8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=dolphin-x64-4-0-2.exe

http://gsf-cf.softonic.com/4c8/6a0/.../file?SD_used=0&channel=WEB&fdh=no&id_file=72528&instance=softonic_es&type=PROGRAM&Expires=1473789570&Signature=hK0XuxEnisVfGcVbHEGOnUefzuZj5SkSHpePIt2~JIj4Kmo3IxkQYrgL0yYbucmlx-vAVNgirVhsLQCRqFHLLl5ouXuE~7xGzm2mginQQcnzBTJDCwyTZ-LWARoDWic05Q3GrA4d-gdgQ6YKIR0bCdp67D6LqZw2nkpYJIA2NwA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=dolphin-x64-4-0-2.exe

http://gsf-cf.softonic.com/4c8/6a0/.../file?SD_used=0&channel=WEB&fdh=no&id_file=72528&instance=softonic_br&type=PROGRAM&Expires=1468662923&Signature=Z704umL2z7thH171qZxGuGEVh9mORhH0h91X0tGeA7hIUnzQJsCJgEQtwUSHIx4otkhxMlWJrhnimgC2xb40qnhzzZf17055mr29MmUCSvCQ6pxzMuU3msKvcXsowvA6b8SBjcZ5lq5MQ5Vl9kHdotjJU3qpEfULLK-jRta~25s_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=dolphin-x64-4-0-2.exe

https://secure.innodl.com/.../dolphin-64bit.exe

http://gsf-cf.softonic.com/4c8/6a0/.../file?SD_used=0&channel=WEB&fdh=no&id_file=72528&instance=softonic_es&type=PROGRAM&Expires=1477479463&Signature=N9MuERyo6QPO9vmQWHnsIoVND9fOGRo6yeHM-8Laf1w2AZRjd7bVePR9zGcRgzIoy7rRoAfmNnlPeckyI08jQLy3VdZpUksTxAHlcu5q61VyBL9WhbfiN6Zp7viPl6bqYJyYTF-OX6DzOlHqY7ltvLDDANTSNa~Lp2LFoFlaiGc_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=dolphin-x64-4-0-2.exe

http://gsf-cf.softonic.com/4c8/6a0/.../file?SD_used=0&channel=WEB&fdh=no&id_file=72528&instance=softonic_es&type=PROGRAM&Expires=1479729150&Signature=L5EONxOtlKuGGjmBfNm4sF3xtzxI6HEOAoRwYhpDM6NEydGjSUkaG4jNW3xN8tYf5fR9jAW2aaqLFi6KBbb7zl~CQVdo11kFMLh1zGjYi70pS4s-4yZcMhDDrUSFWHfC20pjO3hCBC4LNW72t0bqU9LkuXHchupTwoR0zlxtgyc_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=dolphin-x64-4-0-2.exe

http://gsf-cf.softonic.com/4c8/6a0/.../file?SD_used=0&channel=WEB&fdh=no&id_file=72528&instance=softonic_es&type=PROGRAM&Expires=1425864410&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=Hgg8-XhuJ0w4AHwQ0T9pFwUzm77qXBR8bFnWktvIisQc7DMuffP4ys6HDClTQgzZKoPCg5DUwybc7UJPvYnEbygnjjsI5pA2tzVLp~65EmjSkV~ptFk4fqRfkMXjkgxL4K~62AFz~9rqF3eBzTW6zIMRwk0qDdXn-neAgU-UOoQ_&filename=dolphin-x64-4-0-2.exe

http://gsf-cf.softonic.com/4c8/6a0/.../file?SD_used=0&channel=WEB&fdh=no&id_file=72528&instance=softonic_it&type=PROGRAM&Expires=1448598300&Signature=MhRcBeV~SUtht~LFz398ohgR7M2hKnRhAlp-ChSJArkOP-Cc6IoDGItuj1TdLGO6Q5g5k2B-UOVhezQU2AvWfXXciFjCj6FqNt8N42OHG6et5~fyWufUS2nwjQuGhiiYx9wwieThQaa8H8c2Ckxd-gXqfCdv22BYJepwNbmGq8Y_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=dolphin-x64-4-0-2.exe

http://gsf-cf.softonic.com/4c8/6a0/.../file?SD_used=0&channel=WEB&fdh=no&id_file=72528&instance=softonic_es&type=PROGRAM&Expires=1447441125&Signature=Apq9KGKx4pmb785vwpPIDxgvZmEqwhR2MSMl9DKifWrpjkAbBisAiD5~i~tsi6lfU5JPlQeLQfCC-m4Obl2Rn9jrJI6mWEmOn~xi~hxO-01h7dzwzFptUT4c5ujV6~HfVRqEkMVsx7Tl4obHrJM41Zkgt3eyOis~bNc21SLGQfA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=dolphin-x64-4-0-2.exe

http://dolphin-64bit.th.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-fm6KMoKGhmZw=

http://gsf-cf.softonic.com/4c8/6a0/.../file?SD_used=0&channel=WEB&fdh=no&id_file=72528&instance=softonic_es&type=PROGRAM&Expires=1480414484&Signature=YdWXkLNCmjGu2Nehqk1qEGnlmdKDny9eji7C7PeXk89qTwjfK-f6u2YEIDIkS34REn1zhLMjp~wQit2Pquca1ayMr6AyCKg2LNn967WJ7shpZM94DOZt4m0lxQ0GwurrnQMxy64Sw16ogGh5Q2znwbGd-hlh5mKg9TczZAM6b0I_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=dolphin-x64-4-0-2.exe

http://gsf-cf.softonic.com/4c8/6a0/.../file?SD_used=0&channel=WEB&fdh=no&id_file=72528&instance=softonic_es&type=PROGRAM&Expires=1476891946&Signature=CSPFpGWK3xR1P6PDCTyXcd108NM2Ig~EEn5DJWLBcgzdgRDqt2UMYSb-94Oscys6tBIf6QPhd6-Cc3Wxxzk945pQgn7n0KaStqY9AjQIlqRDr3lVjHGffmvuk18Ps~sFCuxidzY68QaN~zc8nR9hR9E~yjggNnRA~hMEoVHRGr8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=dolphin-x64-4-0-2.exe

http://gsf-cf.softonic.com/4c8/6a0/.../file?SD_used=0&channel=WEB&fdh=no&id_file=72528&instance=softonic_es&type=PROGRAM&Expires=1449279245&Signature=ULHgz6HfD4fMNedi9oBDXre~LMFhBkkg8xO1YYh9AVFfkIsGScgAb-wlvlNsAuS-9F9zipQUx~xC~9g7VWF1Xq353949XH8N9Qp6cI4FUzQUKOd1cL3h4djxHxE82eK5tp-LwE0GtlhV4G6O0snpZvMCaCN2zvw7uOrwESe-Jsw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=dolphin-x64-4-0-2.exe

http://www.emulation64.com/.../dolphin-x64-4.0.2.exe

http://dolphin-64bit.th.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-fm6SNpZ-ml5Q=

Latest 30 of 179 download URLs

Scan 350712649_stp.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.