hjsplit.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from download1889.mediafire.com and multiple other hosts.
Version:
2.3.0.0

MD5:
06fa6d915079d6e5e97f794b56a67a75

SHA-1:
3dbbc6a7c5006822f1231a0925bd25825351863f

SHA-256:
b9011d9c13ff53554798e7fc3353625742f6ac51cbb13a8fc6e118401be2500b

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
10/22/2017 9:36:33 AM UTC  (today)

File size:
342.5 KB (350,720 bytes)

Product version:
1.0.0.0

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\hjsplit.exe

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
6144:k4U97exBwk4OhLfkLWJCfjLO15n+aCP0vdZhhL0MTYl6NR7MU5s:kmL2s2wWPCZHBYwNR7MU5s

Entry address:
0x1000

Entry point:
68, 01, 30, 49, 00, E8, 01, 00, 00, 00, C3, C3, 49, 8D, B9, 5D, BA, 21, 55, 2F, 46, 8A, B7, BB, D4, 92, 27, FB, 61, A7, 9E, 40, 70, DC, ED, BE, 58, 8B, 03, 16, 2B, D3, 7B, 19, C3, 31, 7F, 32, 33, 03, 4B, B9, 20, 71, 6D, 71, 10, FB, 73, A5, EE, 47, 52, 37, 62, B1, DF, 36, C3, 90, B2, 40, 0F, 46, E1, 98, BF, AE, A4, F7, 48, 7D, B2, DB, F2, C7, 6B, B6, 55, 80, 37, CE, 13, 0E, D2, ED, 41, AD, 87, 3E, AA, 79, CF, B4, 5F, AC, 51, D3, 6E, 48, 9C, 53, 49, 86, 97, 0B, 6E, DE, AF, CE, 13, 10, 7F, B8, 97, 4B, 01, DE...
 
[+]

Packer / compiler:
ASProtect v1.2x (New Strain)

Code size:
394 KB (403,456 bytes)

The file hjsplit.exe has been seen being distributed by the following 10 URLs.

http://download1889.mediafire.com/463k2ww43jeg/.../hjsplit.exe

http://bugboot.fr/.../hjsplit.exe

http://fileshare1110.depositfiles.org/auth-147844331526ec921f0120051d131804-186.222.142.165-31872042-115804727-guest/.../HJ-Split.2.4.-.by.G1Filmes.com.exe

http://fra-7m18-stor02.uploaded.net/.../aac6ace1-e3e1-4eda-a3cc-a7ccd379ea1d

http://www.pajak.go.id/dmdocuments/.../hjsplit.exe

http://download1889.mediafire.com/0de3d7tp7g1g/.../hjsplit.exe

Scan hjsplit.exe - Powered by Reason Core Security