hdpextsetup.exe

Ozxzpyo

Kuppr

The application hdpextsetup.exe has been detected as a potentially unwanted program by 10 anti-malware scanners. This is a setup and installation application, however the file is not signed with an authenticode signature from a trusted source. This file is typically installed with the program HDPlayer by CoolMirage Ltd. which is a potentially unwanted software program.
Publisher:
Kuppr

Product:
Ozxzpyo

Description:
Psyhxdnkerga

Version:
1.0.0.0

MD5:
4da34e41fa2e5e93a7309adc80aebdb2

SHA-1:
8376f47a6258418b28bd3dc7e1390af60b49d2cc

SHA-256:
cdff4d95262ddc908d77f380d71f4f8c82f3d42ad6016e9144f219d50753b228

Scanner detections:
10 / 68

Status:
Potentially unwanted

Analysis date:
2/27/2014 10:44:24 AM UTC  (four months ago)

Scan engine
Detection
Engine version

Baidu Antivirus
Trojan.Win32.ScrambleWrapper
4.0.3.14128

Comodo Security
ApplicUnwnt.Win32.AdWare.Agent.~a
17316

Dr.Web
Trojan.DownLoader10.47930
9.0.1.028

ESET NOD32
Win32/Packed.ScrambleWrapper (variant)
8.9084

Kingsoft AntiVirus
Win32.Troj.Generic.a.(kcloud)
331020.49267

Malwarebytes
PUP.Optional.AdLyrics
v2014.01.28.04

McAfee
Artemis!4DA34E41FA2E
5600.7237

McAfee Web Gateway
Heuristic.BehavesLike.Win32.Suspicious-SFX.O
7.7237

Trend Micro House Call
TROJ_GEN.F47V1114
7.2.28

XVirus List
Win.Detected
2.3.31

File size:
2.1 MB (2,153,476 bytes)

Copyright:
Ontinbubzed

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\hdplayer\hdpextsetup.exe

File PE Metadata
Compilation timestamp:
2/19/2012 7:01:49 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.22

CTPH (ssdeep):
49152:Nu+bv9+hljhQSVHYMNKfZGGTKNEOce5FOyaLQsy0fkAb8:sWv0jjhQwlQhKiOFF6LDy0fk5

Entry address:
0x4327

Entry point:
55, 89, E5, 57, 56, 53, 81, EC, AC, 01, 00, 00, FF, 15, 74, 93, 42, 00, C7, 04, 24, 01, 80, 00, 00, FF, 15, 58, 94, 42, 00, 53, C7, 04, 24, 00, 00, 00, 00, FF, 15, 98, 94, 42, 00, 56, A3, 40, 7B, 42, 00, C7, 04, 24, 08, 00, 00, 00, E8, 8D, 3B, 00, 00, A3, 9C, 7B, 42, 00, 8D, 85, 84, FE, FF, FF, 57, C7, 44, 24, 10, 00, 00, 00, 00, C7, 44, 24, 0C, 60, 01, 00, 00, 89, 44, 24, 08, C7, 44, 24, 04, 00, 00, 00, 00, C7, 04, 24, 01, B3, 40, 00, FF, 15, AC, 94, 42, 00, 83, EC, 14, C7, 44, 24, 04, 02, B3, 40, 00, C7...
 
[+]

Entropy:
7.9907  (probably packed)

Code size:
34.5 KB (35,328 bytes)

The file hdpextsetup.exe has been discovered within the following program.

HDPlayer  by CoolMirage Ltd.
HDPlayer is a bundled installation using a download monetization platform. Installing the co-bundled software through the modified installer may not be optional.
www.hdplayer-download.com
75% remove it
 
Powered by Should I Remove It?

Detection Incidence by Country