home

kodi-15.1-isengard.exe

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from www.ranchsendgift.com and multiple other hosts.
MD5:
aa1c7cecd8eb8be7f8fbdbf0d0ed7b99

SHA-1:
2432a62032232edcc117d8beeedc3e77f8136b96

SHA-256:
399540d468b46dd845882c89e954132549093b984464a2d2bc1e67828a4795be

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/5/2024 2:46:28 AM UTC  (today)

File size:
63.5 MB (66,626,347 bytes)

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Common path:
C:\users\{user}\downloads\kodi-15.1-isengard.exe

File PE Metadata
Compilation timestamp:
12/5/2009 5:50:41 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
1572864:1GrSmw+lXytGZCRdWChigcwvaRDKtq+CuO4elxM3oCMHO:1GzhUGZCRdWzgcwvoDKtgkeTMYCh

Entry address:
0x30CB

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, 60, 91, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, B0, 70, 40, 00, 53, FF, 15, 7C, 72, 40, 00, 6A, 08, A3, 38, 3F, 42, 00, E8, F1, 2B, 00, 00, A3, 84, 3E, 42, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, 30, F4, 41, 00, FF, 15, 58, 71, 40, 00, 68, 54, 91, 40, 00, 68, 80, 36, 42, 00, E8, A4, 28, 00, 00, FF, 15, AC, 70, 40, 00, BF, 00, 90, 42, 00, 50, 57, E8, 92, 28, 00, 00...
 
[+]

Entropy:
7.9979

Packer / compiler:
Nullsoft install system v2.x

Code size:
22.5 KB (23,040 bytes)

The file kodi-15.1-isengard.exe has been seen being distributed by the following 50 URLs.

http://www.ranchsendgift.com/0DMsbVAKvSsxgce_ub6L_3zbsyBvC5PQ_hPAhJuRKUlYfxpQKPXWJdFZLIpascMj8PDhkaaUclxb_AuUMM7BZf1WoNpwrQtLxXi2eAShM5OVvzmOoePBT2m5xEfr Jv9G9tuNiRFFKTLYIMtwZhjV9ubFuAx7U_ZXp0bla1UVrUixBguPj83pFuvOf_g80MsToTf53Vu_7BKUb3Mj18K1OjRXGZEBGd1ZckNDpJhLa35reeDhk7kNqJhQKoDaqx0kLS8drLGVlqP54X6FCQP49EVJlZuGv1_Qjrdupz2HkG1T_I521BYoo8qO7WHrcpHdU55ybM2Co8t2vzTcmK0fskEWjhQ8ws7pie9j_lzZz3Ge5d8_5 dCx38iOGgbad90a2tArnj8sUQAbAGkei19ZERM2MYFqEVayvXb815EUe36ghuVt_TP3uQSfbjl_WSr2GcrGxfz43KNBFiacrKoMRomLfiYQbsZB3gVbjUfM0Z6 MCCLDpLiOeZ76U9PHdsg_wYmgMvUBYS8xKMeYJBrGBw2jROg==-G0IAAES3eV4qCj1Hz1k6IqICewKHHDh8JVmkAVngOGTvjicS6Y0Xzu7bRmtPwfmRxq sG5O0sFJ9OKNlMD4A-e

http://www.filehorse.com/download/file/.../

http://trumpetti.atm.tut.fi/xbmc/releases/.../kodi-15.1-Isengard.exe

http://lb.cdn.m6web.fr/d/c/a/8e28bbdf9b604b152b1938b17f649bb0/561955e2/soft/.../kodi_15-1_fr_430925.exe

http://fs40.filehippo.com/1739/.../kodi-15.1.exe

http://www.vaultcapitalpackage.com/cjarW4LYWvH7SrCi12yXF148GqCXdOVOX5O7gNF_2PKE7D9r8 eHUBcBmbsFBrNnwECThKULc0GAzryS9lGuUmAyYc2TTMFxazAJZnYzvGJPcwZK6L719T68WsLVhw s7G_eRE1cwy33sTxD5tMdmkAajNMIPM9BRhHz6xCgOImyX_OYsUAdhQJTKHKj_QxvD R05zQ1myB1nPL1Q0ilwJmEhvowxdM7nWfYhlm8D9gd8vN9TAP0ekrSNCHciEyED_CFrhwHB8VLxg44GI T7XrSLaieaZEdTmAPqix7d8_0KLUnWhfnwTV68dwN2_O M8ARD6YhywvUABAFiPmA3hpk4PynSFikatX9VD7tkrsrbEa_GfR56y8NR5nb55585Haab812xnsqKK4pLxpOCesfh1ltVwFnWCuHia23K7KP_yJV6ad3N1X3m16jcfFNVMG8kuwOAgR96QLuRl91qrbIwvyQxTxiDQFy1awQNiMPA4forn_gKjvJAhORPYTJNMhuYFF5s8X4t0 cNdkP62svB lsf34fuZ9BRG_Y6ECIa55qd0uSznFarqcLP2TVb558jlftjjU nDxjIaTF0sJ9VTEMSQ==-G0IAAES3eV4qCj1Hz1k6IqICewKHHDh8JVmkAVngOGTvjicS6Y0Xzu7bRmtPwfmRxq sG5O0sFJ9OKNlMD4A-e

http://www.ranchsendgift.com/tgXJ6RgQAmf3PNAC3a8UVAkUIYbTiiEw48Sqd pv5RxozERGdxmtj8L5hSINsSNqJvJUH8tNRc4qf5oOkWpt0nHTZNLnABo1ExTcrgAZwxowJu_lMUEaB9kS7ft0d_iveJXqIeKcL_mFDZIkU1aXeaUVZ5s7qeJkDGiCGrcbwsuD I6FNj7LUI7ervn4sxSDpwqO6DKQx3P53TUEdnZdAsACXeJjzA==-G0IAAES3eV4qCj1Hz1k6IqICewKHHDh8JVmkAVngOGTvjicS6Y0Xzu7bRmtPwfmRxq sG5O0sFJ9OKNlMD4A

http://www.towerbitscenter.com/X3voNDvRhUhLJ8fulatgSFwnA50h7SXs2Wu zMUiB_1qSSeTtNE0PivGWAhCCxcVplwNubccnN240ObEUhOaYmAxOVsgWjEpxHZsQ5KQb_XjdmaUa8rdnyTmPOO1W2hQEYTxdMl3xqvVxlxjiTdiLX bmU52kg2sJhoH8fT94vxgFP3qmqWYC52mu7GGU5HPwxRN_zB AIsM72CNxaqtX1vknZ5NESHTP6MCTVaRVlO7o9x4YoY=-G0IAAES3eV4qCj1Hz1k6IqICewKHHDh8JVmkAVngOGTvjicS6Y0Xzu7bRmtPwfmRxq sG5O0sFJ9OKNlMD4A

http://mirrors.kodi.tv/releases/win32/.../kodi-15.1-Isengard.exe

http://filehippo.com/es/download/file/.../

http://filehippo.com/es/download/file/.../

http://mirror.gtlib.gatech.edu/pub/xbmc/releases/.../kodi-15.1-Isengard.exe

http://ftp2.nluug.nl/mediaplayer/xbmc/releases/.../kodi-15.1-Isengard.exe

http://www.ranchsendgift.com/OYxa_jF958swkByQInMRKATgov4mW0fuiSRLe_vs8_JBnQ01zYJl3ehYIylDD Rm6hYVwfQbXMF57He5o EYw1cjPLCjZnku4swGYThF5u0XShlkCpEircWDvZaCT04xcMIyW7Cnhw3UTC qaBOBdZoL74_X0GYF1gx3pZYlHgtrwt6PXIaSv6c0_20H j8SJUMoFxn1gZM4MDNztkNjL2I06EHYdg==-G0IAAES3eV4qCj1Hz1k6IqICewKHHDh8JVmkAVngOGTvjicS6Y0Xzu7bRmtPwfmRxq sG5O0sFJ9OKNlMD4A

http://mirror.its.dal.ca/xbmc/releases/.../kodi-15.1-Isengard.exe

http://www.ranchsendgift.com/bxwNa hIZ6o0b NQ8FG3zwWfF1GkFT4lqtzdtBUyBuQiEf4ogbgsnUKPpOOQazSBUKNezJdhSQycqONLc_L_qqGTYJM6eHdErbDO7wqCq22GzvYZ6iQc6_S9ZpnSsmjqaAyhvZD9p90PrSAlzyHrl7zvop9bztO6YCKDw1L_Lu49x8gJaOdaiWj6U TUPLJmUvzPZDxdMIefXAphdaUgWWg8Ykhh9w==-G0IAAES3eV4qCj1Hz1k6IqICewKHHDh8JVmkAVngOGTvjicS6Y0Xzu7bRmtPwfmRxq sG5O0sFJ9OKNlMD4A

http://trumpetti.atm.tut.fi/xbmc/releases/win32/.../kodi-15.1-Isengard.exe

http://www.ranchsendgift.com/J16p3K_FJhIQQJvEqKBMXyBSfXhPLS4f35bX0Y_iVAU90kN HeurE1nMnESHzbV7B691szB5J07I1BKrB56xjZdusWEDGwRA6CgcN9vMBxxtc WHYpT1VHqeMa_3MBR8CgTsFEXf CyxJKAUOPzMcswcsWV3PZ_4WhDrfUwgAb35NzZ9uX175B7qSScOWskzrmxNodW1cOhN7DphWvPKYbo4KunQ8usR1t56Ai1YNUqa6Ux4xB3ADt4oTzYQohui5kSiGBLG1UZ0LZvFxdGF VAB219l2VIexODrMsaMdVbHWlOaK uL8oPQ CoIugVYojlqK8qaG5Exlcsl9qJUvaiirdbsCOhVmqzKEZVuqgrKp9xsXhCNpgzkyYGxLK8eztloK6duThp0mLAfFKK3xe7hVlApFDkn6paUZHME34DtwA_ZdkM1BMTr5sZKp0zX8e77K26ZEORG8DFMn1m6EyZU_53x2W59LfW5I4G2ixs6Z fAyqWJwQjwqXQsom1VaE_Xo0WGBy24BGlSbp1Fjv44NNlmiU1hIGIstk3x6pJ64hbKjXMtU khuYIniYZM8ltFn9U6djfXO4aaQ97UgpjsmORDRQ==-G0IAAES3eV4qCj1Hz1k6IqICewKHHDh8JVmkAVngOGTvjicS6Y0Xzu7bRmtPwfmRxq sG5O0sFJ9OKNlMD4A-e

http://filehippo.com/download/file/.../

http://www.filehorse.com/download/file/.../

http://ftp.bit.nl/mirror/xbmc/releases/.../kodi-15.1-Isengard.exe

http://dl.cdn.chip.de/downloads/.../kodi-15.1-Isengard.exe

http://www.ranchsendgift.com/BF8CihTDO XipAVXYLlqxk h79q_1xQVQqlFmbVl1bPF3DnLGVYS7cEA6LwPkHIcoNO9VegE_gVF_2cy9EvwlbPmpSSdMesxtkDp nE46625sdeIuz_H_igoXYNnRQdNTNSKadv0RysaGtt9G2X9VNStYFJvKSfpbYwKo2eWHx4c0XX9T8v5dRoQF500O4G5hzcJIsi7_9_Fd_7qDq8PqeNHaWmpsA==-G0IAAES3eV4qCj1Hz1k6IqICewKHHDh8JVmkAVngOGTvjicS6Y0Xzu7bRmtPwfmRxq sG5O0sFJ9OKNlMD4A

http://ftp.df.lth.se/pub/xbmc/releases/.../kodi-15.1-Isengard.exe

http://www.ranchsendgift.com/0aoGnoid6CL4kKfm1IxX9B3mvxuSuhs7 N5xN6 flh3H4IkGD0RoLdh4ugYLIxHxexiSRao1XSMr_K6tQ7dTgRNQoWU7SU5KXcKNavmkwHuIRwkdRXLmok1MJTD09Dl5v4XTme7Y7bzi3bpMNYQbtfBPWmn4h9ZW nPp9LjoQ09pxHsL Ui4I0o5J6DCde7NFFflcvtQM KMfHLLAjiH93lkzJajSw==-G0IAAES3eV4qCj1Hz1k6IqICewKHHDh8JVmkAVngOGTvjicS6Y0Xzu7bRmtPwfmRxq sG5O0sFJ9OKNlMD4A

http://letoltes.szoftverbazis.hu/GXB3s2-KWCGlsrBquoRP-A/1472414214/.../kodi-15.1.exe

http://mirror.de.leaseweb.net/xbmc/releases/.../kodi-15.1-Isengard.exe

https://doc-0k-2s-docs.googleusercontent.com/docs/securesc/rc85q4id11ndfpi0agkcimo36cqv2qvq/tg6hruj00sucu7vfp231clj8qj5aq6l7/1447675200000/09715157964728851167/.../0B4-uydqvnRmwb2NUNzVyYmJMdE0?e=download

http://ftp.osuosl.org/pub/xbmc/releases/.../kodi-15.1-Isengard.exe

http://ftp.halifax.rwth-aachen.de/xbmc/releases/.../kodi-15.1-Isengard.exe

Latest 30 of 71 download URLs

Scan kodi-15.1-isengard.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.