home

hdvideoplayer_1766646110.exe

Palimupadi

Secure Software Products

The application hdvideoplayer_1766646110.exe, “Palimupadi Setup ” by Secure Software Products has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the Inno Setup installer. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions. The file has been seen being downloaded from www.headmetavault.com.
Publisher:
Cugel   (signed by Secure Software Products)

Product:
Palimupadi

Description:
Palimupadi Setup

MD5:
6fe324f906369f047ac2cbf13b267d8c

SHA-1:
e9432d38a01276acd3287f25a16bb808a0683466

SHA-256:
0949372fc3c194e87e74966d85738115b45fe2637e8367ff994cf0898e779e5b

Scanner detections:
1 / 68

Status:
Potentially unwanted

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Analysis date:
4/27/2025 8:09:18 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCore (M)
16.8.11.2

File size:
964.6 KB (987,784 bytes)

Product version:
2.4.9

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\hdvideoplayer_1766646110.exe

Digital Signature
Signed by:
Secure Software Products

Authority:
GoDaddy.com, Inc.

Valid from:
4/20/2016 4:29:38 AM

Valid to:
4/20/2017 4:29:38 AM

Subject:
CN=Secure Software Products, O=Secure Software Products, L=Las Vegas, S=Nevada, C=US

Issuer:
CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, S=Arizona, C=US

Serial number:
5E7095902F2C0288

File PE Metadata
Compilation timestamp:
6/20/1992 5:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:dnEybbUVTZCQHA+DJ8Uqt0yim9rJZxeIumjfgNP+wPHY:dEGOouAi8Umbz4ICNP

Entry address:
0xA5F8

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, CE, 8A, FF, FF, E8, D5, 9C, FF, FF, E8, 64, 9F, FF, FF, E8, 07, A0, FF, FF, E8, A6, BF, FF, FF, E8, 11, E9, FF, FF, E8, 78, EA, FF, FF, 33, C0, 55, 68, C9, AC, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 92, AC, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 26, F5, FF, FF, E8, 11, F1, FF, FF, 80, 3D, 34, B2, 40, 00, 00, 74, 0C, E8, 23, F6, FF, FF, 33, C0, E8, C4, 97, FF, FF, 8D, 55, F0, 33, C0, E8, B6, C5, FF, FF, 8B, 55...
 
[+]

Entropy:
7.9361

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
39.5 KB (40,448 bytes)

The file hdvideoplayer_1766646110.exe has been seen being distributed by the following URL.

http://www.headmetavault.com/UQj9fNgAgkwgTvnMjFy_TLkwc1CIF7TWjo7EMc2k7TmzXh_BDv0pV5lVyMpOo62JtLSdI1Ya8_sfzbkr74RZOuxMECHaty2MXydK3XxzO3HS4J545an_l9sMVM53AVtDkrXSLUYNeJHb4 IqjbxvknVBawxSnXx 3EHIHqsR5gRw7cKahqMZwW0HydieHy6bWGtiYKxySIPRQuHNrYLD3pZaFJ_sKZiPN2S1PaiD6BukbgM9yiWFBR9rNOSiUn_m_nOHuKG dEwbBS08X8wMLDQVWLDzwMJATMxmP71UZiYuURRCB0smRfH27RrJGhmXqum7cl37VhhJZXs40CBcPXDTcKVA1VPyL6 DYAg3l3VZtth3t_tk5YGZ4e0aRI7WTc8k6eY2xwpAmzdldObe0xi97znVBDhUw4e439Q7coVqz7c8 l 9KMEba3fa31n7aasYbMOAQ4SJosSLFGTPRzQ090adodcTHGykMO nS TI0p_58W0cfek5x29QvwnKV4fnuTEgJ4HncVAjVt7sSEULxxnVdcj9X4CybJGxn4BFVo08kZStkuPvIt5iP5vB0g_RXlS1xpMh1nPlAh89iNiwDsxTOHrIVSBxmAXU71KwdpPG5dYoekmeN7Y8kW1v6JvpS65eIek_kEfo2pyZfW5GSYq4i5bYJGau84iPs732I8a jZAPGHhC bdIbuQr6vz7X4NTmRH7_AjwKnnn rKSNpte1KMqw4X8x P dDAooTlwDaIdIdRA66rXf4UJK9r44NOGGU66q1uAp9Ku2yJi nv2zvTXPgqAJuBjnBD fBJqPRZZqjc5rzTmYWoNVCswsPjfyWEMplmu6xeVC16Rl5sy5Q==-GzMAAERPFttLEnTrDwiKCRSwAQcO_ULjQDRsjJ2vBc28xvNoZCLa_MEjVhU2f2i5N_ga

Remove hdvideoplayer_1766646110.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.