home

hpreadid.exe

MD5:
997fc45479266d1594b8dd2ebc33c5c2

SHA-1:
78773d439aa5e33a20b595f03c06f13af176ebfb

SHA-256:
20e7bfd971a97474e434abd56549ad94a6422abf66df03192a701cd894c81586

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/30/2024 11:13:59 AM UTC  (today)

File size:
14.7 KB (15,043 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\downloads\hpreadid.exe

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
384:6HxfmmcswUT6md1LpbFWuz9Mq6iMzFZAdjtJU5/IV:6RzXTtL9XqzF2hJyu

Entry point:
4D, 5A, C3, 00, 1E, 00, 75, 00, 20, 00, 85, 09, FF, FF, 91, 03, 00, 98, 00, 00, 12, 00, D4, 00, 1E, 00, 00, 00, 01, 00, 09, 00, 00, 00, 22, 00, 00, 00, 2B, 01, 00, 00, 4D, 01, 00, 00, 64, 01, 00, 00, 7B, 01, 00, 00, BD, 01, 00, 00, DF, 01, 00, 00, 01, 02, 00, 00, 17, 02, 00, 00, 31, 02, 00, 00, 61, 02, 00, 00, 78, 02, 00, 00, BA, 02, 00, 00, F0, 02, 00, 00, 14, 03, 00, 00, 2D, 03, 00, 00, 53, 03, 00, 00, 6A, 03, 00, 00, B0, 03, 00, 00, D8, 03, 00, 00, FA, 03, 00, 00, 13, 04, 00, 00, 36, 04, 00, 00, 8E, 04...
 
[+]

Entropy:
6.8079

The file hpreadid.exe has been seen being distributed by the following URL.

https://h2.usa.hp.com/hprc/downloadFile/.../

Scan hpreadid.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.