home

xfplay9.92.exe

影音先锋 9.9.2 P2P 云3D版

零与壹软件

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from down.xfplay.com.
Publisher:
零与壹软件

Product:
影音先锋 9.9.2 P2P 云3D版

Description:
影音先锋 安装程序

Version:
9.9.2

MD5:
dcc49f87483c7ca67b14a6bd0a01b422

SHA-1:
7885561253bee891d4de5dc450a531982ef8f66b

SHA-256:
ec6a610e0cf9672e0b3631e0526969442b3ea69d9a364f621f9a016c5a32eae4

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/29/2024 3:48:42 AM UTC  (today)

File size:
17.6 MB (18,495,160 bytes)

Product version:
9.9.2

Copyright:
Copyright© 2005-2016 零与壹软件

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

File PE Metadata
Compilation timestamp:
3/17/2011 3:22:54 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
393216:4vwH2QiNgGbh13V5v0ghJSVk3jYiGF+HSIlUkUo/zULwsq3A6cs:4vwtiKAhRrvpJB3EDFgSIlUnowwBAS

Entry address:
0x16478

Entry point:
48, 89, E9, 0F, BF, CE, 0F, AF, D9, BF, 37, EF, 5D, 5A, 89, C1, 69, F8, 04, 0B, 4C, 38, 4F, 39, D8, 2D, D0, AD, 46, 96, 85, CE, 70, 06, 8D, 35, 60, EC, 43, A7, 03, E9, 84, F3, B7, 9F, 35, 9B, DE, 3C, 0D, 3B, EA, 71, 02, FE, C5, EB, 04, 1B, EF, 87, EB, EB, 03, 4E, 08, EC, 81, F0, 1D, 05, A9, B1, F2, E8, 5E, 00, 00, 00, 8A, D0, 3C, 91, 30, D8, 2C, 57, 12, CB, 81, FB, 9F, 1B, 00, 00, 83, E5, 00, 69, CA, 1F, 09, A4, DA, 3D, BE, 0C, 00, 00, 73, 06, 8D, 05, 38, 34, 76, 7B, 4A, 3A, E3, 23, F7, 81, C5, 60, 06, 00...
 
[+]

Entropy:
7.9991  (probably packed)

Code size:
84 KB (86,016 bytes)

The file xfplay9.92.exe has been seen being distributed by the following URL.

https://down.xfplay.com/xfplay9.92.exe

Scan xfplay9.92.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.