» sqlstp.exe
Overview
Analysis
File Details
Programs (1)
Downloads (3)

sqlstp.exe

InstallShield

InstallShield Software Corporation

This is a setup and installation application.

File name:

sqlstp.exe

Publisher:

InstallShield Software Corporation

Product:

InstallShield®

Description:

Setup Launcher

Version:

5.10.146.0

MD5:

38369bacc2bf3c731ccf2c9ed7fac71c

SHA-1:

a420557b48437de7016a0764d29e914ce40e04b9

SHA-256:

377596e717dc9b3d5714ddb5b71e598f4085103e1d05f8dd7e01115073d86798

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

11/15/2024 10:31:16 PM UTC (today)

File size:

59 KB (60,416 bytes)

Product version:

5.10.146.0

File type:

Executable application (Win64 EXE)

Language:

English (United States)

Common path:

C:\Documents and Settings\{user}\Local settings\temp\{random}.tmp\_ts2.tmp\ett\varios\sp3\x86\setup\sqlstp.exe

File PE Metadata

OS version:

9.42356

OS bitness:

Win64

Subsystem:

Native (none required)

Linker version:

2.0

.NET CLR dependent:

Yes

CTPH (ssdeep):

1536:48hCWdXgZt7UY7+2DpaGrTUXPTC/qDoN:nhCrtgYS2oXP+/Mo

Entry address:

0x12B0121

Entry point:

4D, 5A, FD, 00, 08, 00, 04, 00, 20, 00, 00, 00, FF, FF, AE, 00, 00, 08, 00, 00, 16, 01, 00, 00, 40, 00, 00, 00, 01, 00, 24, 01, 00, 00, 00, 00, 00, 00, 00, 00, 8F, 00, 72, 00, 94, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 0E, 00, 00, 24, 01, 00, 00, 0A, 02, 00, 00, 00, 00, 8F, 00, 72, 00, 94, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00... 
[+]

Code size:

320 KB (327,682 bytes)

The file sqlstp.exe has been discovered within the following program.

OrthoWin Service Console by Orthema Holding Ltd.

www.orthema.com

About 1% of users remove it

The file sqlstp.exe has been seen being distributed by the following 3 URLs.

temp:Instalar.exe

http://www.k9pcfixer.com/downloadip_allcs_dcom.asp?utm_source=p9softros&utm_campaign=p9softros_glo7

http://www.olivetree.com/download/.../setup.exe

Scan sqlstp.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.