home

vestuves_stimomedia.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from d.websited.link.
MD5:
722dcef1c8322c69e6fec2b4530a6c1d

SHA-1:
fa4610eea086eb5f554d101fb328662d3f47bb08

SHA-256:
c53024c32462a71082bebc452137f6b66562afba8fe188c10f9a79bbf6a36f52

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
1/13/2025 5:23:02 AM UTC  (today)

File size:
2.2 MB (2,346,289 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\vestuves_stimomedia.exe

File PE Metadata
Compilation timestamp:
7/5/2013 11:38:27 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
6144:hVIxjUM1LdnA32c4mByPzsbL4klgU7g+W6NptR9IwUCKddSZ:c/dnAmc41zsb0inM+W6NptR9IwUPdYZ

Entry address:
0x20C3B

Entry point:
65, 0E, 00, 00, 59, 59, 85, C0, 74, 18, 6A, 00, 56, E8, 25, 00, 00, 00, 59, 59, FF, 15, 18, 70, 42, 00, 83, 4E, 04, FF, 89, 06, EB, 09, 56, E8, 15, 17, 00, 00, 59, 33, F6, 57, FF, 15, 30, 70, 42, 00, 5F, 8B, C6, 5E, C3, 6A, 08, 68, A8, CB, 5C, 00, E8, 7E, 11, 00, 00, 8B, 75, 08, C7, 46, 5C, 38, 87, 5C, 00, 83, 66, 08, 00, 33, FF, 47, 89, 7E, 14, 89, 7E, 70, 6A, 43, 58, 66, 89, 86, B8, 00, 00, 00, 66, 89, 86, BE, 01, 00, 00, C7, 46, 68, A0, 55, 5D, 00, 83, A6, B8, 03, 00, 00, 00, 6A, 0D, E8, 44, 15, 00, 00...
 
[+]

Code size:
151.5 KB (155,136 bytes)

The file vestuves_stimomedia.exe has been seen being distributed by the following URL.

http://d.websited.link/hp/?q=/ZdSMYk2HgKVL45678U4aiL51ZwnLOxftzbofCY2FHcTfCWmx1KII 6hX3zsSrZwRylWriZaGRE3XDagTQ461e20OFkNyBBVjgtqoxWiX32EHd6e7rsXW7fw8YdX9sMBD0N7qC8n5QbYOuCZLE2UiwCb7ZRLbATV vGslDnQ xO8p1fbZo2BT2MRZnPIXLqUbIR4ThJKErKcMGbLWfzgFJxaEylOUuw3uPLIKJa/ayL ZB0CyTmzVIQJKrxEDcblT2wGjaT7OojYAKerrlDUrff P/yYH9WKyMzqeqg ERiYqHS157HC4SiqgQPB7Ug/5psraHrjZHTKmSPMN0zZm65gQYSzwzgOMlOzaRRpuK47uVMwxDgji2QVbScWDGS8A/VZ1Fl8WHSTbs7lb4FeG6HnosnRJBDbhyj2FK0E Qs1G/Of8Q7SOg6Xcjjgzryjezplksh/j5b dWgmOgcfRc6Ghh048cUrYzgi3j8xUhO/2YoHrp2cJHQGFINi cBqrcm0I7RLSwSRKBbQD6ep05tzb88VYkBH2NLpa/d/EbKQ9AQVR0j3VFExoPVez1mK8o2tU1EBtQpwS0DauEvhyWKFDqgeJT6EK4mCf/Tz/.../ZeyAzmG5htbNQrhO2lR6TvmuqjdBFlPSRVR1LkY4oGYRPu&external_id=1431445826214514427&uuid=rYT72eDRFtPet8Ey8L1jBa0AroO5gO9fxwuWRdKTZR94h24d2MsgXNYmRBqlZB26KU7hYEdZC8oGkKjDb6Dda5T74TXTGTTulEuQsnxyvYgxvmqm7wZQkQwbIfX3yBdtm4Swt3zdezVy8SulxbeDVIVvX4qnG0Gga2tBE78SkXmRdfs67yEArBO

Scan vestuves_stimomedia.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.