home

kis15.0.0.463en_6527.exe

Kaspersky Internet Security

Kaspersky Lab

This is a setup program which is used to install the application. The file has been seen being downloaded from wgtot60.digitalriver.com and multiple other hosts.
Publisher:
Kaspersky Lab  (signed and verified)

Product:
Kaspersky Internet Security

Description:
Kaspersky Internet Security [15.0.0.463.0.111.0]

Version:
15.0.0.463

MD5:
abf18f5e8301a6ed5ad4c3fc50a6e710

SHA-1:
66512438bc5768573092b679adc39689ccb52ec2

SHA-256:
8ceb862a0a7e3ce6d32421f0bae3b28e76862d5e969612597359ee42be28463d

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 6:30:39 PM UTC  (today)

File size:
162.7 MB (170,558,560 bytes)

Product version:
15.0.0.463

Copyright:
© 2014 Kaspersky Lab ZAO. All Rights Reserved.

Trademarks:
Registered trademarks and service marks are the property of their respective owners

Original file name:
Setup

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\kis15.0.0.463en_6527.exe

Digital Signature
Signed by:
Kaspersky Lab

Authority:
DigiCert Inc

Valid from:
2/22/2013 12:00:00 AM

Valid to:
4/28/2015 1:00:00 PM

Subject:
CN=Kaspersky Lab, O=Kaspersky Lab, L=Moscow, C=RU

Issuer:
CN=DigiCert High Assurance Code Signing CA-1, OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:
0226E6BDA76DAE711E3DB2321E3B5308

File PE Metadata
Compilation timestamp:
4/20/2014 1:10:59 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
3145728:ziEjYlI4APLgUgsBTHhiO6eDDy+b96X6SMLVvXbAbeFP546GbB4:ziEkoFgs5hKeD1b9BSMLxLGbG

Entry address:
0x313D

Entry point:
E8, FD, 16, 00, 00, E9, 89, FE, FF, FF, 8B, FF, 55, 8B, EC, 81, EC, 28, 03, 00, 00, A3, 38, BC, 40, 00, 89, 0D, 34, BC, 40, 00, 89, 15, 30, BC, 40, 00, 89, 1D, 2C, BC, 40, 00, 89, 35, 28, BC, 40, 00, 89, 3D, 24, BC, 40, 00, 66, 8C, 15, 50, BC, 40, 00, 66, 8C, 0D, 44, BC, 40, 00, 66, 8C, 1D, 20, BC, 40, 00, 66, 8C, 05, 1C, BC, 40, 00, 66, 8C, 25, 18, BC, 40, 00, 66, 8C, 2D, 14, BC, 40, 00, 9C, 8F, 05, 48, BC, 40, 00, 8B, 45, 00, A3, 3C, BC, 40, 00, 8B, 45, 04, A3, 40, BC, 40, 00, 8D, 45, 08, A3, 4C, BC, 40...
 
[+]

Entropy:
7.9994  (probably packed)

Code size:
24.5 KB (25,088 bytes)

The file kis15.0.0.463en_6527.exe has been seen being distributed by the following 7 URLs.

http://wgtot60.digitalriver.com/wgt/9B5A4FCEF11DA80C/171F14235882A3D34841170D5B9DEF7BA5E5EAB51B3D9A0E8D273C5554AF209594715E144E5C2360DD47D7057679F2EC8578B11D664DB54B17F23E213E3E3D2DAF9866C48440B4803101EF0AA0BEA97397A693A7BBF30D56/.../kis15.0.0.463en_6527.exe

http://wgtot60.digitalriver.com/wgt/9B5A4FCEF11DA80C/171F14235882A3D34841170D5B9DEF7B3EA845FDF99BBCCC8D273C5554AF2095F00E8974E25818D77A3DD9218B677A75268CFE2B690ED9C3FCEE09DE4E61A76671A695C88BD33C4F4315B5FE55B5B59D8F5DC70B1E40C906/.../kis15.0.0.463en_6527.exe

http://wgtot60.digitalriver.com/wgt/9B5A4FCEF11DA80C/171F14235882A3D34841170D5B9DEF7B3668C01D683F49CB8D273C5554AF20956CAF6AA562484E665D4AEE3231516801B0F205C46271CD39E732883E7F594A1FA90E2238BFB72F72495A01DAC1736F428F5DC70B1E40C906/.../kis15.0.0.463en_6527.exe

http://wgtot60.digitalriver.com/wgt/9B5A4FCEF11DA80C/171F14235882A3D34841170D5B9DEF7BC5DD423EBFD9CDA08D273C5554AF20959405196D7337C13DC74059441B70E95C4086A871F42398D3CC83E5CB7144D74477CCDF8BAB8783F7213A215800B55F1C97A693A7BBF30D56/.../kis15.0.0.463en_6527.exe

http://wgtot60.digitalriver.com/wgt/9B5A4FCEF11DA80C/171F14235882A3D34841170D5B9DEF7BAEC7B954BF974B9B8D273C5554AF2095E4A7E1087EF3EAF4454A5E40D2C823683DD300A2288354DBFCAEA1E261636CE3E7DA606009A6EB3D7C0D2623D090861D8F5DC70B1E40C906/.../kis15.0.0.463en_6527.exe

http://wgtot60.digitalriver.com/wgt/9B5A4FCEF11DA80C/171F14235882A3D34841170D5B9DEF7BAB59EF4D35817B7F8D273C5554AF209570B9418F102428BE858F6DF1568FE56F6455D67E6BF611FAE0D86C7530AB46D731CA494C4E7B0DC40FDF49DCDC1739CC97A693A7BBF30D56/.../kis15.0.0.463en_6527.exe

http://wgtot60.digitalriver.com/wgt/9B5A4FCEF11DA80C/171F14235882A3D34841170D5B9DEF7B8D781628AC440EBD8D273C5554AF20951CFAAE29EEB733B9C74059441B70E95C6ED90088F7D670CFC0795C79ABCA006C25F3BDD5AE70705A92DBD0B0FD4D0DE897A693A7BBF30D56/.../kis15.0.0.463en_6527.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.