home

videoboxnetsetup_videoplay.exe

VideoBox

Baidu Online Network Technology (Beijing) Co., Ltd.

This is a setup and installation application. The file has been seen being downloaded from static.br.hao123.com.
Publisher:
Baidu Online Network Technology (Beijing) Co., Ltd.

Product:
VideoBox

Description:
VideoBox's Install Program

Version:
2.1.0.702

MD5:
b9a4423fa8622c9fa7c3eef41de72283

SHA-1:
f834ffd86284d938a29e372d101c433600761cc6

SHA-256:
2595486763b835401ad0bae13b2f2e9b1ec7948c803216f3b294b9a1942679d8

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/2/2024 12:05:58 PM UTC  (today)

File size:
1.1 MB (1,119,384 bytes)

Product version:
2.1.0.702

Copyright:
Copyright (C) 2000-2014

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\videoboxnetsetup_videoplay.exe

File PE Metadata
Compilation timestamp:
12/25/2013 7:01:32 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
24576:6X7oqKvvsGp1v9mmuH6nQCWPQfnktaTzF:Uv6JLuNx6A0

Entry address:
0x31FD

Entry point:
81, F9, 2E, 31, 00, 00, 72, 05, 4A, 01, EE, 84, E5, 55, 08, E7, C7, C2, 19, 89, 00, BA, F7, C0, C5, 8F, 01, 77, 8B, EB, 33, FA, F7, C5, AF, F6, 02, A6, 8D, 15, F4, D6, C2, 17, 8A, CA, F6, C5, 10, B3, 0F, 68, E9, 05, B4, 00, EB, 09, F3, 69, FD, 03, 03, 19, 3D, 03, FF, E8, 2B, 00, 00, 00, 87, FB, 0F, AF, D6, 29, FD, 69, DF, 37, 1B, 51, 10, 0F, B7, C5, 69, DF, 60, 60, 0F, CE, B3, CC, 33, F2, C7, C2, B7, 07, 38, AF, 8D, 15, 2F, 54, 7B, FB, BD, 91, 63, B8, D6, 5A, 89, DF, F6, C3, B8, F6, C5, E8, 0C, 65, 0F, AF...
 
[+]

Entropy:
7.4201

Code size:
23.5 KB (24,064 bytes)

The file videoboxnetsetup_videoplay.exe has been seen being distributed by the following URL.

http://static.br.hao123.com/.../VideoBoxNetSetup_videoplay.exe

Scan videoboxnetsetup_videoplay.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.