home

hiplayer_8387_hao123_ar.exe

HiPlayer Setup

This is a setup and installation application. The file has been seen being downloaded from fileshare1070.depositfiles.com.
Product:
HiPlayer Setup

Version:
1.18.0.44

MD5:
49260a90df821bcbbbea755a65ffada1

SHA-1:
1d5d0b4ff6f238415d9a882d04cf988e1f7ca9d6

SHA-256:
f6bc34d4d1c6f5c7543cb8e7504af21f15c860b78bb345bf9535c9313543b08f

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/8/2024 3:11:30 PM UTC  (today)

File size:
16.2 MB (17,027,944 bytes)

Product version:
1.18.0.44

Copyright:
Copyright (c) Hi Company

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\hiplayer_8387_hao123_ar.exe

File PE Metadata
Compilation timestamp:
4/10/2010 2:19:31 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
393216:BM04/JVYgIZPaGm5elSPlLJjm+KfEX8SrD+YG:B74/R0pmFldifMsz

Entry address:
0x354B

Entry point:
85, C7, 68, FE, 44, A2, 00, 50, 2C, 5E, 28, E6, 12, F9, 84, F2, 87, C8, 3B, F2, 8D, 15, 61, FE, 01, A3, 8B, C2, 33, C0, 87, F2, FE, C6, 8B, D0, 86, CE, F7, C2, 76, 16, BB, D0, E8, 29, 00, 00, 00, 15, D6, 3F, EF, 12, F3, 46, C7, C3, 5B, A6, F3, DA, 85, C3, 72, 06, F6, C1, 39, 40, 28, D1, 81, C7, B8, 90, 00, 00, C7, C5, BA, D0, 7E, 63, 81, EF, D0, 09, 00, 00, 5B, FE, C2, 69, D0, CF, 47, 70, 8C, 4E, 71, 07, 47, 8D, 15, 54, 7C, 55, CA, 0F, AF, EE, 0F, AF, D7, F7, C2, BB, 47, 81, DD, B1, 89, BA, 00, 00, 00, 00...
 
[+]

Entropy:
7.9973  (probably packed)

Code size:
25 KB (25,600 bytes)

The file hiplayer_8387_hao123_ar.exe has been seen being distributed by the following URL.

http://fileshare1070.depositfiles.com/auth-14667297345fc9682edbf9974df30f94-197.123.34.204-2602589854-140930213-guest/.../hiplayer_8387_hao123_ar.exe

Scan hiplayer_8387_hao123_ar.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.