home

kismd15.0.0.463en_6014.exe

Kaspersky Internet Security

Kaspersky Lab

This is a setup program which is used to install the application. The file has been seen being downloaded from wgt.digitalriver.com and multiple other hosts.
Publisher:
Kaspersky Lab  (signed and verified)

Product:
Kaspersky Internet Security

Description:
Kaspersky Internet Security [15.0.0.463.0.7.0]

Version:
15.0.0.463

MD5:
c88b07602468e108631286d02ed0cfaf

SHA-1:
530be85ad533c21e517de86c2272fd2e2d847ea9

SHA-256:
c201fe0318d7679ffdd596f5bcf48802c248505695e7ebffe428ccbed6ed9ece

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/28/2024 2:08:39 AM UTC  (today)

File size:
161.9 MB (169,730,368 bytes)

Product version:
15.0.0.463

Copyright:
© 2014 Kaspersky Lab ZAO. All Rights Reserved.

Trademarks:
Registered trademarks and service marks are the property of their respective owners

Original file name:
Setup

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\kismd15.0.0.463en_6014.exe

Digital Signature
Signed by:
Kaspersky Lab

Authority:
DigiCert Inc

Valid from:
2/21/2013 7:00:00 PM

Valid to:
4/28/2015 8:00:00 AM

Subject:
CN=Kaspersky Lab, O=Kaspersky Lab, L=Moscow, C=RU

Issuer:
CN=DigiCert High Assurance Code Signing CA-1, OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:
0226E6BDA76DAE711E3DB2321E3B5308

File PE Metadata
Compilation timestamp:
4/20/2014 8:10:59 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
3145728:kM8+CMoehga8LJ9l8L3Qz786R7/2Xon48QiGFwThI0KpFP546gkBr:H8zMoeB8Lrl8jQf77/JWFaXK/gkN

Entry address:
0x313D

Entry point:
E8, FD, 16, 00, 00, E9, 89, FE, FF, FF, 8B, FF, 55, 8B, EC, 81, EC, 28, 03, 00, 00, A3, 38, BC, 40, 00, 89, 0D, 34, BC, 40, 00, 89, 15, 30, BC, 40, 00, 89, 1D, 2C, BC, 40, 00, 89, 35, 28, BC, 40, 00, 89, 3D, 24, BC, 40, 00, 66, 8C, 15, 50, BC, 40, 00, 66, 8C, 0D, 44, BC, 40, 00, 66, 8C, 1D, 20, BC, 40, 00, 66, 8C, 05, 1C, BC, 40, 00, 66, 8C, 25, 18, BC, 40, 00, 66, 8C, 2D, 14, BC, 40, 00, 9C, 8F, 05, 48, BC, 40, 00, 8B, 45, 00, A3, 3C, BC, 40, 00, 8B, 45, 04, A3, 40, BC, 40, 00, 8D, 45, 08, A3, 4C, BC, 40...
 
[+]

Entropy:
7.9994  (probably packed)

Code size:
24.5 KB (25,088 bytes)

The file kismd15.0.0.463en_6014.exe has been seen being distributed by the following 10 URLs.

http://wgt.digitalriver.com/wgt/9B5A4FCEF11DA80C/848D2212DBC2D52049A7D6CC7B487DAC3E716A25DE9847FD9EDD9D3776F4FB3E49D745CCD0194FF40E1D8C1279179FFFDBB90AAC524563A0FE95F5FEF93CB0E8653CF2089D3D1744FB2DE1BD262668581C1571F283F5F64697A693A7BBF30D56/.../kismd15.0.0.463EN_6014.exe

http://wgt.digitalriver.com/wgt/9B5A4FCEF11DA80C/848D2212DBC2D52049A7D6CC7B487DAC3E716A25DE9847FD72F8F49E3E4EF71E49D745CCD0194FF4C163C9A9100541F0DA6B5C23943037A53564B9D435EBE7E6653CF2089D3D1744958E95F0F4190EBBF7BCDCED21E2F27459AD50B1F41E622D/.../kismd15.0.0.463EN_6014.exe

http://wgtot38.digitalriver.com/wgt/9B5A4FCEF11DA80C/171F14235882A3D34841170D5B9DEF7BEDDF19CF2907C848A03204035D69A29148659C59F8BADBF29F96761B86177A031A0977FD7DF5DC56555825E9368459742118355815D8DCB266DE378FD4FEF43E0451C577DBEF2976/.../kismd15.0.0.463EN_6014.exe

http://wgtot06.digitalriver.com/wgt/9B5A4FCEF11DA80C/171F14235882A3D34841170D5B9DEF7B206DF185530D9BF7BB54EF2045CC633E808573F74C0C1A2F6FABCD8470F22B36EF11618570BD4D21256AF216DADCFD9F36BB97029D53E4D09CA4BEF8D2B4D9E15C301D4CF6797C8A/.../kismd15.0.0.463EN_6014.exe

http://wgtot06.digitalriver.com/wgt/9B5A4FCEF11DA80C/171F14235882A3D34841170D5B9DEF7B206DF185530D9BF7BB54EF2045CC633E790ED61C209932ED353F656B95CC3BA3F93369392D56AB3FEE18C13FD199F9582078D3EC723422022DC0607BA453A6525C301D4CF6797C8A/.../kismd15.0.0.463EN_6014.exe

http://wgtot62.digitalriver.com/wgt/9B5A4FCEF11DA80C/171F14235882A3D34841170D5B9DEF7BA00B09F3C55397D0E276F23CD95DB00EDF173B696DA6D94A3F5D1F475A052462DA95DF7F94A9D63FB5791ED79DA8FFDFF3CE65EE1BB53B32C015A0282534E36D0A7DE0793B014624647C638FDE4F6D4D/.../kismd15.0.0.463EN_6014.exe

http://wgtot06.digitalriver.com/wgt/9B5A4FCEF11DA80C/171F14235882A3D34841170D5B9DEF7B204E34DFBA1346582B6D2983E0AD920DCBA3A4EDF5184BBFFE2DF5B2C9A189953779564767C1917E11DFEAA2689C000E28DAF2DC3E0C6E34A14395C63640289E97A693A7BBF30D56/.../kismd15.0.0.463EN_6014.exe

http://wgt.digitalriver.com/wgt/9B5A4FCEF11DA80C/171F14235882A3D3AB3B55146FD30E1AFB5B97F6201E2642CDECADA929561F1772B0C71DC5F524249934DA5A052BBCF1138EDB0563782E5A72EE2E6032CC9AE30F0BDA6F37A19087F951F8FB0BE079010A7DE0793B014624647C638FDE4F6D4D/.../kismd15.0.0.463EN_6014.exe

http://usa.kaspersky.com/.../?file=kis&program=one&user=0&lang=en

http://usa.kaspersky.com/.../?file=kis&program=one&user=5&lang=en&trial=y&track=trial_kmdkis_usen

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.