popcorn-time-0.3.8-3-setup.exe

Popcorn Time

David Lemarier

This is a setup and installation application. The file has been seen being downloaded from dl15.afterdawn.com and multiple other hosts a known adware distribution point operated by AfterDawn.
Publisher:
Popcorn Official  (signed by David Lemarier)

Product:
Popcorn Time

Description:
Popcorn Time 0.3.8-3 Installer

Version:
0.3.8-3

MD5:
d9019d87060a069dfddcad763f8a7140

SHA-1:
48056de0ed9cc0a9719e61ca514a8b3a840fda2b

SHA-256:
bb54d73f0b6f4683fb5ef02c4edaf4257fad5ba323e5b2cf8744a1fbc426ebf4

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/17/2024 6:36:34 AM UTC  (today)

File size:
27.8 MB (29,144,304 bytes)

Product version:
0.3.8-3

Copyright:
https://popcorntime.io

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\popcorn-time-0.3.8-3-setup.exe

Digital Signature
Signed by:

Authority:
StartCom Ltd.

Valid from:
10/17/2014 5:29:39 AM

Valid to:
10/17/2016 5:39:53 AM

Subject:
E=david@reallysuccessful.com, CN=David Lemarier, L=Victoriaville, S=Quebec, C=CA, Description=9L9j6kH3YFg2Clxn

Issuer:
CN=StartCom Class 2 Primary Intermediate Object CA, OU=Secure Digital Certificate Signing, O=StartCom Ltd., C=IL

Serial number:
1089

File PE Metadata
Compilation timestamp:
11/7/2014 11:18:25 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.24

CTPH (ssdeep):
786432:qjTUZZZQL3a6juH23CYnWn80U6U/VelYlDaHALxmezw:ATZrabH23CoK83/1OHOmezw

Entry address:
0x4452

Entry point:
55, 89, E5, 57, 56, 53, 81, EC, 0C, 03, 00, 00, FF, 15, A0, 13, 43, 00, C7, 04, 24, 01, 80, 00, 00, FF, 15, 90, 14, 43, 00, 57, C7, 04, 24, 00, 00, 00, 00, FF, 15, E4, 14, 43, 00, 52, A3, B0, EE, 42, 00, C7, 04, 24, 09, 00, 00, 00, E8, 46, 43, 00, 00, A3, 80, EF, 42, 00, 51, 8D, 85, 34, FD, FF, FF, C7, 44, 24, 10, 00, 00, 00, 00, C7, 44, 24, 0C, B4, 02, 00, 00, 89, 44, 24, 08, C7, 44, 24, 04, 00, 00, 00, 00, C7, 04, 24, CA, B4, 40, 00, FF, 15, F8, 14, 43, 00, 83, EC, 14, C7, 44, 24, 04, CC, B4, 40, 00, C7...
 
[+]

Entropy:
7.9990  (probably packed)

Code size:
36 KB (36,864 bytes)

The file popcorn-time-0.3.8-3-setup.exe has been seen being distributed by the following 50 URLs.

http://dl15.afterdawn.com/download/051674310da47fb15a264b3286bd0ee7/57a52354/.../Popcorn-Time-0.3.8-3-Setup.exe

http://dl.filehorse.com/win/video-software/.../Popcorn-Time-3.8.3.exe

http://www.techspot.com/downloads/downloadnow/.../?evp=fc5ca71c20a23b0d6503144b44dc67a2&file=1

http://dl15.afterdawn.com/download/13019add80df7d7d7da61b8697f672cd/5803cd4c/.../Popcorn-Time-0.3.8-3-Setup.exe

https://download.mozilla.org/?product=firefox-stub&os=win&lang=he

http://178.62.190.82/.../Popcorn-Time-0.3.8-3-Setup.exe

http://188.166.124.227/.../Popcorn-Time-0.3.8-3-Setup.exe

http://46.101.254.125/.../Popcorn-Time-0.3.8-3-Setup.exe

http://128.199.107.206/.../Popcorn-Time-0.3.8-3-Setup.exe

http://45.55.27.130/.../Popcorn-Time-0.3.8-3-Setup.exe

Latest 30 of 52 download URLs

Scan popcorn-time-0.3.8-3-setup.exe - Powered by Reason Core Security