home

mpcstar_4.9_setup.exe

Shuang Wu

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from download.jprj.com and multiple other hosts.
Publisher:
Shuang Wu  (signed and verified)

MD5:
8e80c9a25a81d6e21b44109212a085d5

SHA-1:
20c9bcc18908bf3753e945c41d2012cde79aa83a

SHA-256:
9619aaad9cdfd3511aabdf9076dbf1f199a01c837ae06743e3edda9a53c3f8f2

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 12:27:31 PM UTC  (today)

File size:
20.5 MB (21,499,328 bytes)

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Digital Signature
Signed by:
Shuang Wu

Authority:
The USERTRUST Network

Valid from:
8/30/2010 1:00:00 AM

Valid to:
8/30/2013 12:59:59 AM

Subject:
CN=Shuang Wu, O=Shuang Wu, STREET="4 Floor, No. 1118 Yu Yuan Road", L=Shanghai, S=Shanghai, PostalCode=210050, C=CN

Issuer:
CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:
1CCFA257A1CCF9E9400AFEA2EEC98175

File PE Metadata
Compilation timestamp:
4/10/2010 1:19:31 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
393216:bT2wORt34pqcY/X9kJ+ccpq2tS7txSSD1zc60bG3We9l1v51jXeHc4YL8/hSQo:bTURt34pqJKJ+mP3S0O60bG3X9lf1jX1

Entry address:
0x354B

Entry point:
81, EC, D4, 02, 00, 00, 53, 55, 56, 57, 6A, 20, 33, ED, 5E, 89, 6C, 24, 18, C7, 44, 24, 10, D8, 84, 40, 00, 89, 6C, 24, 14, FF, 15, 30, 80, 40, 00, 68, 01, 80, 00, 00, FF, 15, B8, 80, 40, 00, 55, FF, 15, B0, 82, 40, 00, 6A, 08, A3, 98, 06, 47, 00, E8, 67, 27, 00, 00, 55, 68, B4, 02, 00, 00, A3, B0, 05, 47, 00, 8D, 44, 24, 38, 50, 55, 68, 1C, 86, 40, 00, FF, 15, 80, 81, 40, 00, 68, 04, 86, 40, 00, 68, A0, 85, 46, 00, E8, 35, 26, 00, 00, FF, 15, B4, 80, 40, 00, 50, BF, A0, 10, 4C, 00, 57, E8, 23, 26, 00, 00...
 
[+]

Entropy:
7.9999

Packer / compiler:
Nullsoft install system v2.x

Code size:
25 KB (25,600 bytes)

The file mpcstar_4.9_setup.exe has been seen being distributed by the following 47 URLs.

http://download.jprj.com/220/.../????_4_9.exe

http://gsf-cf.softonic.com/20c/9bc/.../file?SD_used=0&channel=WEB&fdh=no&id_file=63600&instance=softonic_en&type=PROGRAM&Expires=1455324960&Signature=YjXZv4Mvvviim8-8korBV4UfB7A4O2Na0qDU3BKjfFmbQTyKXdgBTHN~sewkUt~ovgp7eQPWA5Xcj~YU2y9v3L8EA7Y0FrydpYxTpF-WC1zO4D8xA2-6i1yiLFuO3g0nZPGdleXE2u5teG4EEBpgkik3PutlQUwBhNV8Fsbej64_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=mpcstar_4.9_setup.exe

http://download.jprj.com/220/.../????_4_9.exe

http://gsf-cf.softonic.com/20c/9bc/.../file?SD_used=0&channel=WEB&fdh=no&id_file=63600&instance=softonic_en&type=PROGRAM&Expires=1477142453&Signature=U5bORyi3CVP4LHJKOml7prpuiBX9djJZ7DkfHM45e01jFBQy-ipPk0D-ONqZqmvqR1OnvnI0eO0xv-JowyzMECdI2I1Z8G~IHEDe6rjM0Npm3OWLz6tRhpTLPtzx1YxrsGmG8EJnkMcENqsPyVkF87K6BuzwXjmmgNJQThypNzg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=mpcstar_4.9_setup.exe

http://gsf-cf.softonic.com/20c/9bc/.../file?SD_used=0&channel=WEB&fdh=no&id_file=63600&instance=softonic_en&type=PROGRAM&Expires=1480113535&Signature=STzxpnmcYc1hBp1Oxlfa7LXvSQ8bDLYhdY5NX1GghnE3DeJEvnMZyxx-9n4ZABXsrgpwIiiN511M3QepqgUUQFY8dfr1Cd8lPAmch1W2B9-SIWSJvePAvDArRGkKXc-olGcOan10MQI5dwgDjO6R6McHJD2clT9-5o0mfFoFt3s_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=mpcstar_4.9_setup.exe

https://dw.uptodown.com/dwn/lEge3W2i9doaCW5ozGIK9CZljcqFEHRW3PFmxT6jbOwRR0_CCWzyUYUEACANcmMwcVSgtTblyYUa5_OP3hb89uLsqRFkOcu-CH6TH0NeiKH2TBjwLbJxEmrD1mzn7pE5/jQscH-b1uooQLR-eOfCkTR68SV7fYdsClg76CMw2Qy6JePV_9-LUOaoE16u2AYmuIloYn7knqx8EAfHd_EBt0fO0eUJ3aWZ--4FHWrN4erZs3M95iSHmQnNLEfr0txkG/f-59obBLyM3lorOW8uGLS77itSTLNH6lC2P5FNtoiZ_yKKlEeVfjIVHvlWykWFfYu-ptw1W7uu2kKDW4hYBIdpwxepi-rZPoqEUG0hfSNcbSZS4WNkGOQWNz11S_RxaQ/.../

http://gsf-cf.softonic.com/20c/9bc/.../file?SD_used=0&channel=WEB&fdh=no&id_file=63600&instance=softonic_en&type=PROGRAM&Expires=1476519602&Signature=iU9Iz-NVGKhKcJQVkhFTIm6DACdIA3RARwIJX3i3gq4Vj4OlCfDP~VD-nxzWy0lo-~tYLUmIX2aI~LkelaEe3y5HWQMC6R4rhGYbYO8z8~oeNytSOKgEUxhlHJKPH36RTdOhZZYcT2UJ0Ja~cUsiZ1gWl7DGKrxXkPiWsVs1Q2Y_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=mpcstar_4.9_setup.exe

http://download.jprj.com/220/.../????_4_9.exe

http://gsf-cf.softonic.com/20c/9bc/.../file?SD_used=0&channel=WEB&fdh=no&id_file=63600&instance=softonic_en&type=PROGRAM&Expires=1477711881&Signature=JD6k3ZSWPj0BGgO2H0sHpBamDbJxNE~CitgFAIJlkPuJLFlRP-iLiGSHx9Jb1glVGgOVec65Py0JmkvADGRokLWkTGGe3xvIzjI332YFXQVlkrChU-Cgy5hTKUtS3am3vzy4RqoPWu2oAHpvEHRJlRNaXTj0SaONdgC2~qQpp34_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=mpcstar_4.9_setup.exe

http://gsf-cf.softonic.com/20c/9bc/.../file?SD_used=0&channel=WEB&fdh=no&id_file=63600&instance=softonic_en&type=PROGRAM&Expires=1444122731&Signature=bUA1vNWgB-Uwx~iARN5Kw9gL3gmh2Gm3Ef8CnUK1Z9kKcrnNJZ5OWGuGNWPqCmXIw6RdsQzEpSnnCvLyyIIUAFBocD5iyjCNKOQISOjjYhyDbFzkZ6ovdh6CMMbDcs~nr4s7eO8sNgX-hKiqtB3VRbezBSIy9yv3pWW4NePZpIU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=mpcstar_4.9_setup.exe

http://gsf-cf.softonic.com/20c/9bc/.../file?SD_used=0&channel=WEB&fdh=no&id_file=63600&instance=softonic_en&type=PROGRAM&Expires=1433295956&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=SyZkEmFz2EXR2aQz2kNs0tL6nztdR8tJgzkTc5ptyQXnn~rftPehI90WAhLDZP0BsDgp9yKdqxjjFlGqtw0goR1Jkf5hi67pJKek7cJUQs8eQf3xxIHWM7NgAWsJWrCcjuIjIWj2GwHrEYYJP5QrOXQJKSk9lFAIPQqrmR7C8mY_&filename=mpcstar_4.9_setup.exe

http://download.jprj.com/220/.../????_4_9.exe

https://dw.uptodown.com/dwn/pSGULGlxEWaQ8VA-DHI3jNGZC1PkhugWVkKBo1TPkoOusdvVPayn5mPWl4qOwLflI5Dxh65jpc2ut5_LTzI3VbDTs9SFsIrNBS7fsbnlNUA0Cio1jIeosxmeQwDgUBUa/TlRLk6YqgtFdiz7Cm9ZuHkIUNA8HNnURFbiWDNZJqFoOpEMwfJRkWFLn9LJFjjLAkglyTXKaNf__9Ihz1DC0MtnH3r6uxk07Eojod7oqByAgSXCpeondz0B_5EwmNMjd/MvEC_vJYeOmiouGmE7TJp2wot_IjrRi16qe0ndB78V6mcqxj7rDnNFDM_j9MfT535STg-FDEuZ1j_ag0i6WHcLkVIc6BiOo_tWzl-7bdNAwTYh6QSdWZpwSj4MHbgdaS/.../

http://gsf-cf.softonic.com/20c/9bc/.../file?SD_used=0&channel=WEB&fdh=no&id_file=63600&instance=softonic_en&type=PROGRAM&Expires=1446360176&Signature=Vli9YxVTAArmi73gTE~sQf-dS-1Yo7tXZaeZkySGn4h-vm9CD495hj0~VqrmEjXtdKp6MhCdkzDIF3Pm7Wbh5Cj~8dMo6MvTJ2TaldgJYRCpd5ZfU5x1U5rTbR1ij2KqKa9t9-f7TMfYRpXISpa49Ga4xvV29STXcPTPwFWgCNc_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=mpcstar_4.9_setup.exe

http://gsf-cf.softonic.com/20c/9bc/.../file?SD_used=0&channel=WEB&fdh=no&id_file=63600&instance=softonic_en&type=PROGRAM&Expires=1476365281&Signature=C6sb98RONw53QbJWJBTpAbb9xCy6R4yksFxOJbZloHqlCwUWUwn3wVjkHXVy3gGw1yXTL0O9j6jOFJKM51Y-eDvB-AQYsCoGAEfNw8b76iehRGKI967cqbizz6kZiwdazn2JL3JpMcTkhiAfhS1gAD0cD1chJn5L4rA~7rqSgQ0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=mpcstar_4.9_setup.exe

http://gsf-cf.softonic.com/20c/9bc/.../file?SD_used=0&channel=WEB&fdh=no&id_file=63600&instance=softonic_en&type=PROGRAM&Expires=1476144135&Signature=URR0d-EStz5pemNcI7lT2FxnUmn8ZEteqYbDWMfwDCQZLYad9sBt~6GSLJmYlRN0a2RAZ0vVy1D~u3vREvcocpcKaIShzdv1n3Mv4AsaCltGNMt0CZGB5XQFOftnqTk~bR9jHGYncG0btaCwYxQpM3SXhWbTO-6Aa6abAg-jKlU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=mpcstar_4.9_setup.exe

http://gsf-cf.softonic.com/20c/9bc/.../file?SD_used=0&channel=WEB&fdh=no&id_file=63600&instance=softonic_en&type=PROGRAM&Expires=1477711498&Signature=duno3Tg~-YeeyLVwXzduX4lNaEoGAgoOwUpadQ0bsJ5fBkKL6aEz-B4YH8s6vcAsT49pevcvlmQ8VJBu9Gu27z77WNaLS1tEdEMyfmyp7WU91B3N78wkn6e15Byn6FrWfdNdGY3K4SmHmkLtZwll3D5~l356mh~fzyEx~AFAVeE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=mpcstar_4.9_setup.exe

http://gsf-cf.softonic.com/20c/9bc/.../file?SD_used=0&channel=WEB&fdh=no&id_file=63600&instance=softonic_en&type=PROGRAM&Expires=1423814446&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=I0~v1ixGH8BkxQ4a7sIiUw79rf3zzaG708Fv1wLwimelzvBsQ22MY2EoR9Psb~D7mPx3UcW2POzh2v0WjJWlwpwWERBj18gOcd4GWP-Gm9RsDGw~2N-56kX-LsCJEVrsL1a~pas3wyeU5KYHUdLoRiwpBH9n~hPk-ey~5t-8N1c_&filename=mpcstar_4.9_setup.exe

http://gsf-cf.softonic.com/20c/9bc/.../file?SD_used=0&channel=WEB&fdh=no&id_file=63600&instance=softonic_en&type=PROGRAM&Expires=1470542446&Signature=ZeowtZczTRE~3MZCZDLjn5QfADCMHEqULs7QsRHUnfkB1mUIjRaRsI5hsVPhlWxEWdcI1cBN4wUPGpBEH1azfL6Xu03IrPHunmbjlvOVEt7bqcXKW853MVWZ1vSNkZ6cxMWljm1EgsVPrTOS85xK2T7Pe1z4PoGFK1k3sDmgHJ4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=mpcstar_4.9_setup.exe

http://gsf-cf.softonic.com/20c/9bc/.../file?SD_used=0&channel=WEB&fdh=no&id_file=63600&instance=softonic_en&type=PROGRAM&Expires=1437058500&Signature=Al1WsjXo4U~DJhq6mlGYjlFQakRqSTQfLnrQCK0O9h1NH5szgn3VbjiCulnnpsrbv~j-pPbguTupkhHS8WSTmUaJeitRN0lVe3zJKI1HD-OlnoBuLaLNXOEFRVdLUuUEQ1fv1WmnK7mXJHM2VjWYoIaw7zzP9vJI6wFsroiKW9o_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=mpcstar_4.9_setup.exe

http://gsf-cf.softonic.com/20c/9bc/.../file?SD_used=0&channel=WEB&fdh=no&id_file=63600&instance=softonic_en&type=PROGRAM&Expires=1473816817&Signature=De2fNEK8o1PHgHrNEaaIkooVxqFDyktZXx2Zsn3HL~4pK5~qZdFKnjLwmwliouEUQ0amA8QoVXSsYXy9gKP0E7-kGRdnZwLbakZLNDIhXWxHu-UUqw5kN64KD-IrIWu5dmgg-rRV625D1NlYqEi7uPrFVIN1dB-Zb1pwOEiVrAo_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=mpcstar_4.9_setup.exe

http://gsf-cf.softonic.com/20c/9bc/.../file?SD_used=0&channel=WEB&fdh=no&id_file=63600&instance=softonic_en&type=PROGRAM&Expires=1470789863&Signature=VftPowBLgGH-rjcY5JGoRsQyZoOYkDYlpk6SMLJ34t1iAw2CJSIB0GB6QZLgenvHR9RmYDULvMu4~mbhciZg37kiXJjuFDCZ1xQN7GybrZ-8qm2BsiGgDUZpyJkEWIp2cQGPm4G8ybvh~JntiLD6h2pf6qJ-6rvhmkiOmBBJBnA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=mpcstar_4.9_setup.exe

http://gsf-cf.softonic.com/20c/9bc/.../file?SD_used=0&channel=WEB&fdh=no&id_file=63600&instance=softonic_en&type=PROGRAM&Expires=1474392253&Signature=HSIWeOvzAgCuv4F-AKLfB7pD4z1V0aJtIXVinGPcFevXiBmbG8aKbQ5~I6dXyiswIom-Ufq~GXj~px0Ff2-Py~X9eqjcOy3SIhj29kPnZ1N2vXSSSEBighH42xf21j-bDwAB0eq1WvuUxGNbYsP1lpRQU6CuJtYzyN4Vur0XU2o_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=mpcstar_4.9_setup.exe

http://download.jprj.com/220/.../????_4_9.exe

http://gsf-cf.softonic.com/20c/9bc/.../file?SD_used=0&channel=WEB&fdh=no&id_file=63600&instance=softonic_en&type=PROGRAM&Expires=1424786682&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=JEfL1VSvbOxy11orC0F~OdN24JrdXDjn3P6UP69YL2D6UhIXbDGLDlRWzxz~kolLjqkzJzFehxjMNsiw12lMO3g1m2hNIXuGv5Tght5Hp44UwEEsKY6rLyCHjjcZLVTtJcQYk7BIygXqs2MSLkB50A51GMLDSxbLcNW~B4MkcOk_&filename=mpcstar_4.9_setup.exe

http://gsf-cf.softonic.com/20c/9bc/.../file?SD_used=0&channel=WEB&fdh=no&id_file=63600&instance=softonic_en&type=PROGRAM&Expires=1452892715&Signature=gZg4TeCN4946KMvKNAwx-HkEznCWPNtN1qi2-ecBoe7-psu56KaLFIqvlHFrv0TH19aD4vGkUSW1d3289OQbDLN3HJaPVyVWZzok1~jjfEM-Ei4jwQuPpGTkLebGeCXHhXimRvEXt9F-kgkrQGqRKV0ELm3glmY-vRHEQaHdbmM_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=mpcstar_4.9_setup.exe

http://gsf-cf.softonic.com/20c/9bc/.../file?SD_used=0&channel=WEB&fdh=no&id_file=63600&instance=softonic_en&type=PROGRAM&Expires=1467668431&Signature=Xlz5mPapJt0PO0HS9WN45q7VAkBgkPvnE3nIDhE8OExeURkEpNZg4r8Cru~-RS3KYV2Soses0muG~WKD-~OWlT3YOxVDKCItkFYl4hHhYgAW948glURpiEaH6vlHJzSTvyoKYuGXIWA4hRRj9eiH-8lQWdYTmE7qV2WMf6Dfbnk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=mpcstar_4.9_setup.exe

https://dw.uptodown.com/dwn/C1mBE3wbfdsXzSc8Y10btZsoaR_sYrnXGejJD3O2Kzt69KhFNffNwg7js3r5PrFgsO4Mifnh0FZrHEmhaWKA6qdYxRB33ScKhnddu-YpexFnXhB84GIADC2Kthx4HYiM/cARuUQj93xv-Mbou86y3LJFUQMDSBCFU4i9ENeCD1dlz9mNfzun72lkOntVHtNcg4Ty4eYf3CJh17HPtKAUvBpN0JNGD1ntTNe12pbvR7Prc-8fC0QShN_mh5pBJyU0a/.../

http://gsf-cf.softonic.com/20c/9bc/.../file?SD_used=0&channel=WEB&fdh=no&id_file=63600&instance=softonic_en&type=PROGRAM&Expires=1429336667&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=AR2ZDpvEpjU-M57UPkXG3DqJO5m9aistmVQZKNVnPjfY74ASkDstnu-7PW4WdHAd69Ev3c2HbPZD5IcbiUg7Jp~aKQdCPWXyg9EuGZ0zXzRCBNCPIwJD-6PuOSe1phTcvx4bvwJPY4pcusGX0XTBnE3BKu1CopZRZVfNp~Vn~OY_&filename=mpcstar_4.9_setup.exe

http://gsf-cf.softonic.com/20c/9bc/.../file?SD_used=0&channel=WEB&fdh=no&id_file=63600&instance=softonic_en&type=PROGRAM&Expires=1465411985&Signature=igMCl8UCTCB9DR~b5mCB9tdtAcZAlQ53u9nxitsmhjZTZ7-YmOvdvgwLzNqb4BQDNpKMchRb6-4pWEqenrAmK5EZmRRPSzldBbzBXpWb-1GF6E4ltpq0~y1CUc5RcC0NH0E2gFLx6f78z8g~x5gpKXv6-3U403B2SFJjTH6bF~M_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=mpcstar_4.9_setup.exe

Latest 30 of 47 download URLs

Scan mpcstar_4.9_setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.