» xfplay9.92.exe
Overview
Analysis
File Details
Downloads (1)

xfplay9.92.exe

影音先锋 9.9.2 P2P 云3D版

零与壹软件

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from down.xfplay.com.

File name:

xfplay9.92.exe

Publisher:

零与壹软件

Product:

影音先锋 9.9.2 P2P 云3D版

Description:

影音先锋安装程序

Version:

9.9.2

MD5:

dcc49f87483c7ca67b14a6bd0a01b422

SHA-1:

7885561253bee891d4de5dc450a531982ef8f66b

SHA-256:

ec6a610e0cf9672e0b3631e0526969442b3ea69d9a364f621f9a016c5a32eae4

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

11/24/2024 3:58:37 PM UTC (today)

File size:

17.6 MB (18,495,160 bytes)

Product version:

9.9.2

File type:

Executable application (Win32 EXE)

Installer:

Inno Setup

File PE Metadata

Compilation timestamp:

3/17/2011 3:22:54 AM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

393216:4vwH2QiNgGbh13V5v0ghJSVk3jYiGF+HSIlUkUo/zULwsq3A6cs:4vwtiKAhRrvpJB3EDFgSIlUnowwBAS

Entry address:

0x16478

Entry point:

48, 89, E9, 0F, BF, CE, 0F, AF, D9, BF, 37, EF, 5D, 5A, 89, C1, 69, F8, 04, 0B, 4C, 38, 4F, 39, D8, 2D, D0, AD, 46, 96, 85, CE, 70, 06, 8D, 35, 60, EC, 43, A7, 03, E9, 84, F3, B7, 9F, 35, 9B, DE, 3C, 0D, 3B, EA, 71, 02, FE, C5, EB, 04, 1B, EF, 87, EB, EB, 03, 4E, 08, EC, 81, F0, 1D, 05, A9, B1, F2, E8, 5E, 00, 00, 00, 8A, D0, 3C, 91, 30, D8, 2C, 57, 12, CB, 81, FB, 9F, 1B, 00, 00, 83, E5, 00, 69, CA, 1F, 09, A4, DA, 3D, BE, 0C, 00, 00, 73, 06, 8D, 05, 38, 34, 76, 7B, 4A, 3A, E3, 23, F7, 81, C5, 60, 06, 00... 
[+]

Entropy:

7.9991 (probably packed)

Code size:

84 KB (86,016 bytes)

The file xfplay9.92.exe has been seen being distributed by the following URL.

https://down.xfplay.com/xfplay9.92.exe

Scan xfplay9.92.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.