kmplayer_en_3.3.0.33.exe

KMP Media co., Ltd

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. This file is installed with the program The KMPlayer (remove only). The file has been seen being downloaded from docs.google.com and multiple other hosts.
Publisher:
KMP Media co., Ltd  (signed and verified)

MD5:
bd6c22fec7440a8015b350af10759175

SHA-1:
df76c40e11924854ed82cb5ddcd9ae114986c938

SHA-256:
7c4eb0db005526dd76c6940d8c65c5116309c16bc2c47bca1633a34aaa939ccf

Scanner detections:
1 / 68

Status:
Inconclusive  (not enough data for an accurate detection)

Analysis date:
12/26/2024 2:01:39 AM UTC  (today)

Scan engine
Detection
Engine version

ESET NOD32
Win32/Bundled.Toolbar.Ask (variant)
8.9559

File size:
23.2 MB (24,313,864 bytes)

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Digital Signature
Authority:
Thawte, Inc.

Valid from:
9/15/2011 9:00:00 PM

Valid to:
9/15/2012 8:59:59 PM

Subject:
CN="KMP Media co., Ltd", O="KMP Media co., Ltd", L="Gangnam-gu ", S=Seoul, C=KR

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
2F339DC7AF9B9CF34A626D51A53BE2DC

File PE Metadata
Compilation timestamp:
12/5/2009 7:50:46 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
393216:N3QruE/yQWfskDGuEW1VqZ0ikcqhhX9kTrWv8bBFsjyROzUVs7tC0yjfZhB7rHD7:NATyUuEWLq63cWNkTrWEbB6jyROzU+56

Entry address:
0x323C

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, 30, 91, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, B4, 70, 40, 00, 53, FF, 15, 7C, 72, 40, 00, 6A, 08, A3, 58, 3F, 42, 00, E8, 09, 2C, 00, 00, A3, A4, 3E, 42, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, 58, F4, 41, 00, FF, 15, 58, 71, 40, 00, 68, B8, 91, 40, 00, 68, A0, 36, 42, 00, E8, BC, 28, 00, 00, FF, 15, B0, 70, 40, 00, BF, 00, 90, 42, 00, 50, 57, E8, AA, 28, 00, 00...
 
[+]

Packer / compiler:
Nullsoft install system v2.x

Code size:
23 KB (23,552 bytes)

The file kmplayer_en_3.3.0.33.exe has been discovered within the following programs.

The KMPlayer (remove only)  by KMP Media co., Ltd
K-Multimedia Player (commonly known as The KMPlayer, KMPlayer or KMP) is a media player for Windows which can play a large number of formats including VCD, DVD, AVI, MKV, Ogg, OGM, 3GP, MPEG-1/2/4, WMV, RealMedia, FLV and QuickTime.
www.kmpmedia.net
22% remove it
 
Powered by Should I Remove It?

The file kmplayer_en_3.3.0.33.exe has been seen being distributed by the following 12 URLs.

https://docs.google.com/uc?authuser=0&id=0B5QAbcDA9WAfM1BqLVZUUXVwUDA&export=download

http://cs11.superfiles.me/f/0/1466252627/33223627/0/.../KMPlayer_EN_3.3.0.33-spaces.ru.exe

http://cdn.kmplayer.com/KMP/.../KMPlayer_EN_3.3.0.33_.exe

http://download.softpedia.ro/dl/ef7034397a85f8068f4147e0e39879a6/50674bdd/100026726/software/MULTIMEDIA/.../KMPlayer_EN_3.3.0.33.exe

https://web.telegram.org/.../KMPlayer_EN_3_273351265113604243.3

http://storage3.dobreprogramy.pl/.../KMPlayer_EN_3.3.0.33(dobreprogramy.pl).exe

http://www.bigspeedpro.com/software_files/kmplayer/.../KMPlayer_EN_3.3.0.33.exe

https://doc-0k-30-docs.googleusercontent.com/docs/securesc/es887e2ahrogtsgera7plkctjbo7l9vt/cpghqmfnf06mj0d5932l80nhguv9pr6n/1477317600000/.../04254043714828004678/0B3J7kF4B97AbdVRGd0NjSzdkYVE?e=download

http://software.oldversion.com/download.php?f=YTo1OntzOjQ6InRpbWUiO2k6MTQ2Njc0NDM1ODtzOjI6ImlkIjtpOjM3MzQ7czo0OiJmaWxlIjtzOjI0OiJLTVBsYXllcl9FTl8zLjMuMC4zMy5leGUiO3M6MzoidXJsIjtzOjUxOiJodHRwOi8vd3d3Lm9sZHZlcnNpb24uY29tL3dpbmRvd3Mva21wbGF5ZXItMy0zLTAtMzMiO3M6NDoicGFzcyI7czozMjoiMWMzOTI0ZTk2N2IzZGZiZTRlY2YwMjMwMWE4N2U0ZTkiO30=

http://download.slunecnice.cz/slunecnice/626ab2d7cff56673f8e79c04ca2e96d9/500521f3/win/.../KMPlayer_EN_3.3.0.33.exe

Scan kmplayer_en_3.3.0.33.exe - Powered by Reason Core Security