home

7c7a6a48_stp.exe

Paper Mario

GameFabrique

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from cdn.games4windownloads.com and multiple other hosts.
Publisher:
GameFabrique

Product:
Paper Mario

Description:
Paper Mario Setup

MD5:
c4a81ff7a4c10bc90572e7818bfb666a

SHA-1:
bbd9d6251c3059d456d2d0a0750530feea222f8d

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/6/2024 5:36:02 AM UTC  (today)

File size:
21.8 MB (22,860,826 bytes)

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
Language Neutral

Common path:
C:\Documents and Settings\{user}\Local settings\temp\{random}.tmp\7c7a6a48_stp.exe

File PE Metadata
Compilation timestamp:
6/19/1992 6:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
393216:TeR4YOQI9FzGRIJFydEDCgK9PP6bViHEwWZCOg/vzRJ9UZH9Jrjs7:KiFCRgJFK6Vn4OgI9JrQ7

Entry address:
0xA5F8

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, CE, 8A, FF, FF, E8, D5, 9C, FF, FF, E8, 64, 9F, FF, FF, E8, 07, A0, FF, FF, E8, A6, BF, FF, FF, E8, 11, E9, FF, FF, E8, 78, EA, FF, FF, 33, C0, 55, 68, C9, AC, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 92, AC, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 26, F5, FF, FF, E8, 11, F1, FF, FF, 80, 3D, 34, B2, 40, 00, 00, 74, 0C, E8, 23, F6, FF, FF, 33, C0, E8, C4, 97, FF, FF, 8D, 55, F0, 33, C0, E8, B6, C5, FF, FF, 8B, 55...
 
[+]

Entropy:
7.9999

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
39.5 KB (40,448 bytes)

The file 7c7a6a48_stp.exe has been seen being distributed by the following 7 URLs.

http://cdn.games4windownloads.com/TYtZcYjA2mJmcoM9yxDWArymMIKXhrbgPGbkSiOcYtwQixXnPAXMfdVqjLca_b BqBf8vRsDvHO1tuIPjzLXAfnd7eMnMfDGl8DSt2UNELxAQiDRQroMpioVpl7f9oCZDvpzdAXAi9z1FlwHHZyj84yDpRUlnK3fuyzHGYwvULlnOVYYNKWpabpBepmNFyKR3rgR3yp6-Gy0AAERPFpsX06rikjHBBhxy4PBFBwwsLU9wy41xAyas6R57PgptihTd92yETw==

http://cdn.games4windownloads.com/oVrIwScD0WJO7WueyDvD4 JYF2hsFajktJfq2kUweULA I1ds4EsVazbmQy8PNL9AMBdSJNIIxBzXwXh5bMv_exGpepPso9E aa2ZVPdcrVms ijzhzc5HDfNA9uSPHEJzhrEt9B_fVDrlMLB1katDZh9bmf4lwGrUwZIFLWxxxuxHFibOKpmhxrg356bPu4fN_4Ity5-Gy0AAERPFpsX06rikjHBBhxy4PBFBwwsLU9wy41xAyas6R57PgptihTd92yETw==

http://cdn.games4windownloads.com/FM_w23uccsCe7MBVhK0om9fLiXcLTnDiT1JRYQKPk5mkyRy1bRjNBYW4n4cqux2j0oxB_bpK6Y5N5pTfHUknLoJ4Sfo Lh_QYTlw56uD6iI0l33kw0mTzvuZlCnEPcdB8ynMSgnNv_JErAO39gt4XQGPmJAQe4ZPtr7w8UnPpWkXaU6DDk23mYdqFgrbI9GfSg0gGxFjtiX3PRKAvpvFmuK6Uv21upLCRuapkKqHX024Ib5TPxmVz1qdPrM_vu8ZJA9pzGY7ApVmnLcId7FaOBbIEHlS85iF8SCU2gg7dToCqFQpvtlb7lRpbK9BXCTKQM7b Mt_CkB4Oxj3sZFiOkCR29du754TBnSrn0Y6zrmpJ SSs5PKoYvo6sju0gpZmwTNoJer64hlVtiOTsHPypKAMdxAsauYGItdZ1WGasFzpHmxpDg XFJmU a2rDt4Ilbkal8koOL_V3EzntYxToZsDrUPmjdtkFE2cG97vzTa4kXL2AFnrfg6kTESjhL_W8IfqDcofoXbUMChqQZ3MTPqC0YHJw64qXurEvHZ_RDYbEhSp7Hd1t11dQAq1B4TjGskbSvZXWsqdA0ALQF2e1T7FdEVmw==-Gy0AAERPFpsX06rikjHBBhxy4PBFBwwsLU9wy41xAyas6R57PgptihTd92yETw==-e

http://cdn.games4windownloads.com/54zOdXlg5YweQYV0LeNGlKNBW55Rx2DLdz 1 e4FSB_4t ZMyTIlQoGUQWGNBtb6uhsfWlcWHZzVHTC9wwtXQ7j0RNKtDSS8pMIXuCPdO4EXUEGbLTPyemMaTkVcd8oseX4NdfeOuaE8J42wHztnofpZTW8D 2KLDHOSU8uo_abMtL2A_ZBZPKx3u6vGWSniYyBEwtUp-Gy0AAERPFpsX06rikjHBBhxy4PBFBwwsLU9wy41xAyas6R57PgptihTd92yETw==

http://cdn.games4windownloads.com/c?x=XFcFqpYODYM NpIiqKCrRdMlr9Na0jkzXbYOhPBX0Ko=&c=qvukanL SSD/GUOhkvXQRMpORDAocoq/VlJSH0Cl2jahWas8RW31eLh/fwznM92d4OEZl0KapXA9GwrjX/fudceR49sq2SkIACNV4g0HObk1zwl9oM/lWBqoRXmne/TkLfnZfQla6DzVZRkDG1 MALqF ESL nXDs00eqDxD0 C2KQVY1HU5k 0hU9vAsh2w&e=0&downloadAs=paper_mario.exe&fallback_url=http://gamefabrique.com/dl/.../paper_mario.exe

http://www.bestbundlesbulk.com/c?x=x ykTRTJtrrFIGn0nFUYcHhfbhiDNv6cYLJp4g/ePU8=&c=eNG7uh5T pDXmx2z76ELrSQFlblt1DYNDGZrABIaLnPQEatUTWrmfF5To3I6t8/a/pVDzs29qN9H3wsjL953htkwNcacU3L8/nOz e1CdCtuZ7m7FWPAGQbpGiKjbpqpAwtP kLE6wp0dRzcsHEEpljrtZHPo0vL9VD6kqti6X/ZNENYX/Pz8Lr9QJL b7Kb&e=0&downloadAs=paper_mario.exe&fallback_url=http://gamefabrique.com/dl/.../paper_mario.exe

http://www.todaysafesend.com/c?x=zqZILsV2/qxIyU5igRXX6sZ0h0aKiI254i5dZFtPSyg=&c=mHQQpBIMKQ9YSkBG1ZdiJIzY/pCbVZAJAqHpk9TOM0/X0NfH4CWYrxXg5b2UOfTguCaR1fnJZPlyjeGyrAEqnamQ/oSPt31pmuE MIxzNbHPz2JxPx5kr6IxbPO AG0N3LN29Rx/avWUvBCxyNhsaxqy6dCjsNxsPxauKWqmWk=&e=0&downloadAs=paper_mario.exe&fallback_url=http://gamefabrique.com/dl/.../paper_mario.exe

Scan 7c7a6a48_stp.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.