Gridinsoft Logo
File Icon

The HQPlayer5Desktop.exe File Analysis

Updated 0 seconds ago
Checked by Malware Check
HQPlayer5Desktop.exe

Technical Analysis

File Name HQPlayer5Desktop.exe
File Type
Win32 EXE
Magic Bytes PE32+ executable (GUI) x86-64, for MS Windows
SSDEEP Hash
196608:FS5+oq5YLNS9CjK+x7+bOhjMEDTehYvcJStXcQMLajCK8:FSgoqE89mK+x7dfqPiYfK8
Scanner Version 1.0.220.174
Database Version 2025-07-17 20:00:23 UTC
⚠

Suspicious File Detected

Detected by 11 security engines - requires caution

This file requires additional checking for potential threats. Based on suspicious indicators, we will soon add it to our virus database.
15%
Detection Rate
9,377,296
File Size (bytes)
11/71
Engines Detected
2025-07-17
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
d3bc659f1d51493160b91387ee3a3389
SHA1
84341d1cfb3863732d04a92096313b9f6d510285
SHA256
fd374e64db7b527b20d897f9c24b7f1086e64fc89a8e62a9a85fd158f62b64b6
SHA512
c14713547c1f40165d6372579bd0baacb176da0a3ec68954131d0d2424eab542a74250bf89c6d52578bb2106ce4eff99188bf958129c835f48b7362351c69fbc
ImpHash
90b6dd04fbc38f01d340599421c9ed2e

Security Engines with Detections (11 of 71)

Bkav
W64.AIDetectMalware Malicious
Elastic
malicious (high confidence) Malicious
Skyhigh
BehavesLike.Win64.Generic.rc Malicious
McAfee
Artemis!D3BC659F1D51 Malicious
Cylance
Unsafe Malicious
CrowdStrike
win/malicious_confidence_60% (D) Malicious
Symantec
ML.Attribute.HighConfidence Malicious
McAfeeD
ti!FD374E64DB7B Malicious
Antiy-AVL
GrayWare/Win32.Caypnamer Malicious
Fortinet
W32/PossibleThreat Malicious
DeepInstinct
MALICIOUS Malicious
60 engines reported no threats - Only engines with detections are shown above for clarity

PE Analysis

Basic Information

▼
Icon
Hash: af65c29e9dd6a115c41a961b84595ba4
Fuzzy: e00ddcdea045a1b92d89a164043ae6ec
dHash: 8050d090b0e86000
Image Base 0x140000000
Entry Point 0x140c3c908
Compilation Time 2025-02-04 17:23:10
Checksum 0x00900dff (Actual: 0x00900dff)
OS Version 6.0
PEiD Signatures PE32+ executable (GUI) x86-64, for MS Windows
Digital Signature No valid SignedData structure was found.
Imports 43 libraries
Exports 1 functions
Resources 3 Resources
Sections 16 Sections

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
0x00001000 5,889,542 bytes 1,893,888 bytes 7.98 (Packed/Encrypted) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 0055143C0D4C597FFE6A53091CA44D2D
0x0059f000 2,029,428 bytes 796,672 bytes 7.96 (Packed/Encrypted) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ EDD419EEE0266113244056956A7D68AB
0x0078f000 226,952 bytes 10,240 bytes 7.94 (Packed/Encrypted) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE E871898D4EAAB35FDB578131FEE2B8EC
0x007c7000 275,388 bytes 155,648 bytes 7.70 (Packed/Encrypted) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 661739B307374A008017C6E41EB32994
0x0080b000 96 bytes 512 bytes 0.71 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 9D1AF9C2BB5D54E7534A54438E384500
0x0080c000 1,041,984 bytes 70,144 bytes 7.93 (Packed/Encrypted) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 874C05EBED1488A5AFE8E4194E3D4C60
0x0090b000 16 bytes 512 bytes 0.31 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ C68567478889B7F522529A4B65079544
0x0090c000 8,193 bytes 512 bytes 0.18 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 8AC46B76A2A9431FDAFD24D5613B7843
.voltbl 0x0090f000 8 bytes 512 bytes 0.14 (Normal) 0x00000000 C598515878EFD50CEB981285DE505BC9
.rsrc 0x00910000 68,496 bytes 68,608 bytes 2.21 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 2517EDDEB9FF276E6251BC0A7C006F8A
0x00921000 24,280 bytes 5,632 bytes 7.85 (Packed/Encrypted) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ DBAD9BC732567EA2907E822B1753A2CE
.edata 0x00927000 4,096 bytes 512 bytes 1.15 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ FD58E40788738AA80191A57C693CE235
.idata 0x00928000 4,096 bytes 3,584 bytes 4.17 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE AA87125163DD1C8B7D8670B88EA5BA4C
.tls 0x00929000 12,288 bytes 8,704 bytes 0.02 (Normal) IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 9824F750F653350448EFAD82961125F0
.themida 0x0092c000 6,348,800 bytes 6,348,800 bytes 6.47 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE E0EFAF67F34B9499056D27FF4B90B666
.reloc 0x00f3a000 4,096 bytes 16 bytes 2.35 (Normal) IMAGE_SCN_MEM_READ 949DAFCEFDEEFAF8A140487C562296EB
Entropy Analysis Alert

6 section(s) with high entropy (≥7.5) detected - possible packing/encryption

Resource Analysis

▼
Total Resources: 3 (68,219 bytes)
Resource Type Count Total Size Percentage
RT_ICON 1 67,624 bytes
99.1%
RT_GROUP_ICON 1 20 bytes
0%
RT_MANIFEST 1 575 bytes
0.8%

Certificate Chain Analysis

▼
Certificate Information
Certificate Chain Summary
GlobalSign Code Signing Root R45 #1 Primary
Validity Period: 2020-07-28 00:00:00 → 2029-03-18 00:00:00
Signature Algorithm: sha384RSA
Serial Number: 78 03 18 42 45 70 8A 41 CF 6F 01 B8 EE B4 A9 54
GlobalSign GCC R45 CodeSigning CA 2020 #2 Chain
Validity Period: 2020-07-28 00:00:00 → 2030-07-28 00:00:00
Signature Algorithm: sha256RSA
Serial Number: 77 BD 0E 03 A1 B7 08 F8 54 AB 06 72 10 D9 04 47
Signalyst #3 Chain
Validity Period: 2023-11-27 14:26:28 → 2027-02-05 18:46:11
Signature Algorithm: sha256RSA
Serial Number: 19 CE 43 61 13 07 C8 A0 0B A7 66 8B
Globalsign TSA for CodeSign1 - R6 - 202311 #4 Chain
Validity Period: 2023-11-07 17:13:40 → 2034-12-09 17:13:40
Signature Algorithm: sha256RSA
Serial Number: 01 9B EA DE C8 4D 6B 8F F7 6C 3A 9F 2E 01 24 16
GlobalSign Timestamping CA - SHA384 - G4 #5 Chain
Validity Period: 2018-06-20 00:00:00 → 2034-12-10 00:00:00
Signature Algorithm: sha384RSA
Serial Number: 01 EC 1C 92 40 DE FD 2E 40 5D 7C 47 74
GlobalSign #6 Chain
Validity Period: 2014-12-10 00:00:00 → 2034-12-10 00:00:00
Signature Algorithm: sha384RSA
Serial Number: 45 E6 BB 03 83 33 C3 85 65 48 E6 FF 45 51

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
11 antivirus engines detected potential threats. This could be a false positive, especially for system tools or packed software. Verify the file source and check if it's digitally signed by a trusted publisher.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware