hpr_site.exe

PDF Reader

HAMSTERSOFT LLC

This is a self-extracting archive and installer. The file has been seen being downloaded from hamstersoft.hamstersoft.netdna-cdn.com.
Publisher:
HamsterSoft  (signed by HAMSTERSOFT LLC)

Product:
PDF Reader

Description:
Installer PDF Reader

Version:
1.0.0.32

MD5:
57e17ce0f5aa83b813a81b2356b07821

SHA-1:
e5ad2b59018ea31b543746c52d4cb6da6a4d0fdc

SHA-256:
dfe3a9dfdbe6f638cd384b594915272e282e42579afffe0f0e070300dbf5375b

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/19/2024 2:48:19 AM UTC  (today)

File size:
5.1 MB (5,368,400 bytes)

Product version:
1.0.0.32

Copyright:
Copyright (C) 2014 HAMSTERSOFT LLC

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\hpr_site.exe

Digital Signature
Signed by:

Authority:
COMODO CA Limited

Valid from:
2/4/2014 4:00:00 AM

Valid to:
2/5/2015 3:59:59 AM

Subject:
CN=HAMSTERSOFT LLC, O=HAMSTERSOFT LLC, STREET="Derbenevskaya naberezhnaya, 7, building 14", L=Moscow, S=Moscow, PostalCode=115114, C=RU

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00CD14B0F34CA33834885CA15C01ED1126

File PE Metadata
Compilation timestamp:
4/15/2014 4:07:16 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
49152:cEsTPgcX0Sw+nCT0vsFz8/e9W3Eq/a2iO+E3VA2Qk6Jvv7B7m939QrLUFhcHySsB:cEszQT04W3+ya2QDJvv7BQKP7XmX6di

Entry address:
0x11D3EC

Entry point:
55, 8B, EC, 83, C4, F0, B8, 44, 54, 51, 00, E8, 84, D9, EE, FF, E8, 1B, 6B, FF, FF, 84, C0, 74, 4F, A1, EC, 30, 52, 00, 8B, 00, E8, 1B, D6, FE, FF, A1, EC, 30, 52, 00, 8B, 00, B2, 01, E8, 0D, F3, FE, FF, A1, 8C, 32, 52, 00, 80, 38, 00, 75, 26, 8B, 0D, 04, 2E, 52, 00, A1, EC, 30, 52, 00, 8B, 00, 8B, 15, 7C, 3C, 51, 00, E8, 03, D6, FE, FF, A1, EC, 30, 52, 00, 8B, 00, E8, 4F, D7, FE, FF, EB, 05, E8, CC, 75, FF, FF, E8, 1F, 9A, EE, FF, 8D, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
1.1 MB (1,161,728 bytes)

The file hpr_site.exe has been seen being distributed by the following URL.

Scan hpr_site.exe - Powered by Reason Core Security