home

hdvideoplayer_4059913662.exe

Nesino

Secure Software Products

The application hdvideoplayer_4059913662.exe, “Nesino Setup ” by Secure Software Products has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the Inno Setup installer. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions. The file has been seen being downloaded from coolbar.pro.
Publisher:
Secure Software Products  (signed and verified)

Product:
Nesino

Description:
Nesino Setup

Version:
1.7.3.5

MD5:
3c8d4b33e00174eb25bc396ba9824f78

SHA-1:
005f656215263c5654dac2a728d1a03122d4c91f

SHA-256:
a3aaa2dae45c97a09035ad78737663dd6c897677245b777aff10e7fc8757a077

Scanner detections:
1 / 68

Status:
Potentially unwanted

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Analysis date:
12/27/2024 3:53:10 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCore (M)
16.8.6.9

File size:
948.4 KB (971,144 bytes)

Product version:
2.5

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
Language Neutral

Digital Signature
Signed by:
Secure Software Products

Authority:
GoDaddy.com, Inc.

Valid from:
4/20/2016 2:59:38 AM

Valid to:
4/20/2017 2:59:38 AM

Subject:
CN=Secure Software Products, O=Secure Software Products, L=Las Vegas, S=Nevada, C=US

Issuer:
CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, S=Arizona, C=US

Serial number:
5E7095902F2C0288

File PE Metadata
Compilation timestamp:
6/20/1992 3:52:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:1F1Jc6nAE5wksdRL5E4T9LmOQJ1RmFs6tke7:XeE5XsBhiqV

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, BF, A9, FF, FF, E8, 5E, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, 24, CE, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, 24, CE...
 
[+]

Entropy:
7.9361

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file hdvideoplayer_4059913662.exe has been seen being distributed by the following URL.

http://coolbar.pro/tracker/go-new?url=http://.../8ScAuH_uzpZ8Ip4Zow_s_U9cT17X8X3WfD1JI0j0T1XXB3wSTV_TibIjAc2EEqlI5 6D5aM0m2EXacWNqHAenH_bR Afdh0GnM_y kwfM8tGI60HK30nUJGYUXag TKwR 3zM7M5VoOJ_ugaWriz7Vt9FRsDCdhYT_0VPSTM5YOrEyeHQN8mIvyRkhax1PiyY2OVLtwXZoMO8EP7eW97wJzDUaQ8hB3mKVRK246qFmcA9ZKjD5J2FDuaHVae3pcIwTNNWuc og0bSTpwU1dwXWRpmtNbsNmbIMQ70T7zo2eB77ID2epfiGj_prmCmZbtRSknX5Qqkfcr_nsIJGUFYrM0hEEqKPjADPmyqfTNMIl4DbVew Hkn57eyxeRC8pihay7et8Y8HBsqDA1849x9qR_moN7d_wTCmcVGisUPdkP7zzYvgm wXybBc MAYuGYaJJzrb5coq7GqmXtrPAtlrFlh34pQvA4eaZmo3c_O8KUvZE2WnXnX2Nz0_dBkBSJ37B4IJLGCBDTNuZGL_IH_deenJNW30kFPAKbpi7yxiSUl_boPJF6YfdPlLEvVhjjuLt4 FuSNBA6bgKPN9C8N9GJNq4oGJYIdAAEbwqxkKQda_2A5_TomNGmaDNC2caoWgFIBvQ1 OrC5SF68v6dM7yOgjci8fwoctLT9SU4UZVmUkPc_E47uH_Nnm7kmBaO9GUCgyXrfRtz67tVYVby50G8ntZ1fpK HEANJaSWcoAqTbj5qxPHx5YVNPHsjqraaeOkO7_eXHYLRB47OTKZu569Sc4v6NweD0iTKtTIAXGVqkIUeF6yVzkliq2FWH8fXV4cV4-Gy4AAEQ3F5slGeyny9EFwR_D5eddCCcCLSS3DuTGa74Jz DR685Mk8IaPXTgdNGPAg==&cid=17

Remove hdvideoplayer_4059913662.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.