home

QvodSetup5.exe

QvodPlayer

VAN698

This is a setup and installation application. The file has been seen being downloaded from mega.co.nz and multiple other hosts.
Publisher:
VAN698

Product:
QvodPlayer

Description:
QvodSetup

Version:
5.0

MD5:
268fd8628fd00039a9a39a060ea45889

SHA-1:
8d3fcb649c75e09b24cdd7208f96c38e9a3aa128

SHA-256:
98ed886fbdd7220ea835c89387711ed151b173943fb022a2dc5a2434c4a1dfd0

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
11/24/2024 11:26:32 AM UTC  (today)

Scan engine
Detection
Engine version

ViRobot
Dropper.Agent.135540
2011.4.7.4223

File size:
22.2 MB (23,300,418 bytes)

Copyright:
Copyright (c) 2010-2012 QVOD

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\qvodsetup5.exe

File PE Metadata
Compilation timestamp:
6/18/2009 5:33:27 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
393216:hGvaTFXuQ57s7o6AhnBVOzwVENqU7Qf1LcemFzEqJnuUKfFys:YvaTYe7s7oLB0SEQoQ+PEqlJKdys

Entry address:
0x3291

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, 28, 91, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, B4, 70, 40, 00, 53, FF, 15, 7C, 72, 40, 00, 6A, 08, A3, 38, 3F, 42, 00, E8, BA, 2C, 00, 00, A3, 84, 3E, 42, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, 50, F4, 41, 00, FF, 15, 58, 71, 40, 00, 68, B0, 91, 40, 00, 68, 80, 36, 42, 00, E8, 43, 29, 00, 00, FF, 15, B0, 70, 40, 00, BF, 00, 90, 42, 00, 50, 57, E8, 31, 29, 00, 00...
 
[+]

Entropy:
7.9999  (probably packed)

Code size:
23 KB (23,552 bytes)

The file QvodSetup5.exe has been discovered within the following program.

QvodPlayer 5.0  by VAN698
Publisher's description - “QvodPlayer is a quasi-based video on demand QVOD core, multi-functional, personalized player software.”
www.van698.com/movie
About 6% of users remove it
 
Powered by Should I Remove It?

The file QvodSetup5.exe has been seen being distributed by the following 34 URLs.

https://mega.co.nz/temporary/.../UxsSCJBQ

https://docs.google.com/uc?authuser=0&id=0B_FhtNjrJ2bxei1zZk1RNnJiOEk&export=download

http://www.van698.net/QvodSetup5.exe

https://doc-10-ac-docs.googleusercontent.com/docs/securesc/ak00593gmvoqs7ignbf7p1beh7ogo9fn/6beb6526givchfighntmt7sqrv8neqc0/1404489600000/17158004906057517116/.../0BygdVgpq3gOHSnp0MTJRMjc3cmc?e=download&h=16653014193614665626&nonce=m2kncn4qr0jb4&user=02441231202178234600&hash=9e2nnmgllmbgmldjtcd9eidds357o7h4

https://docs.google.com/nonceSigner?nonce=m2kncn4qr0jb4&continue=https://doc-10-ac-docs.googleusercontent.com/docs/securesc/ak00593gmvoqs7ignbf7p1beh7ogo9fn/6beb6526givchfighntmt7sqrv8neqc0/1404489600000/17158004906057517116/.../0BygdVgpq3gOHSnp0MTJRMjc3cmc?e=download&h=16653014193614665626&hash=64f7bkev2fcqs3htl7go15uhht20nmvm

https://doc-10-ac-docs.googleusercontent.com/docs/securesc/ak00593gmvoqs7ignbf7p1beh7ogo9fn/6beb6526givchfighntmt7sqrv8neqc0/1404489600000/17158004906057517116/.../0BygdVgpq3gOHSnp0MTJRMjc3cmc?h=16653014193614665626&e=download

https://doc-04-1c-docs.googleusercontent.com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/ded6snrpu6fk8520q4bcpmtcm5tko29v/1404907200000/17158004906057517116/.../0BygdVgpq3gOHSnp0MTJRMjc3cmc?h=16653014193614665626&e=download

http://attachment.van698.com/.../QvodSetup5.exe

https://doc-08-as-docs.googleusercontent.com/docs/securesc/2omc2q5jhvaq6jgpgu3u95k1kv6ipuga/1gv0f55f1m1dvb9kmt3h09cbnmbtme4r/1403668800000/17158004906057517116/.../0BygdVgpq3gOHSnp0MTJRMjc3cmc?e=download&h=16653014193614665626&nonce=4hvqmgdniuhmi&user=09703300561660418086&hash=hgiujnea442chvb2tnre33sg7ka8hijj

https://docs.google.com/nonceSigner?nonce=4hvqmgdniuhmi&continue=https://doc-08-as-docs.googleusercontent.com/docs/securesc/2omc2q5jhvaq6jgpgu3u95k1kv6ipuga/1gv0f55f1m1dvb9kmt3h09cbnmbtme4r/1403668800000/17158004906057517116/.../0BygdVgpq3gOHSnp0MTJRMjc3cmc?e=download&h=16653014193614665626&hash=1hp0dmovuuk5nerit0la5tih6te4qsrt

https://doc-08-as-docs.googleusercontent.com/docs/securesc/2omc2q5jhvaq6jgpgu3u95k1kv6ipuga/1gv0f55f1m1dvb9kmt3h09cbnmbtme4r/1403668800000/17158004906057517116/.../0BygdVgpq3gOHSnp0MTJRMjc3cmc?h=16653014193614665626&e=download

https://doc-14-1c-docs.googleusercontent.com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/0hqshjtckga2aj4jfjt2vjaf99p4c9of/1342497600000/17640159426280656020/.../0B_BGIOWyuxlITW9UQk5OX2gzdk0?e=download

https://doc-04-1c-docs.googleusercontent.com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/k0d4ntklbj07uen7gn5uac8qvkg8vd8c/1404777600000/17158004906057517116/.../0BygdVgpq3gOHSnp0MTJRMjc3cmc?h=16653014193614665626&e=download

https://docs.google.com/uc?id=0BygdVgpq3gOHSnp0MTJRMjc3cmc&export=download

https://docs.google.com/uc?authuser=0&id=0BygdVgpq3gOHSnp0MTJRMjc3cmc&export=download

https://doc-10-50-docs.googleusercontent.com/docs/securesc/32serdgs0viasqmf3cruu3lainc7ufmu/tt73r8bi087nalhk45k0shcv73612009/1385481600000/06414117617227486266/.../0B3mS1uNgSG9LUkt6RFhsczVDbVk?e=download&h=16653014193614665626&nonce=923qo70qha9la&user=04720112572718653102&hash=3ebv18t5h409qb5bsoopdo0kmrg7ghme

https://docs.google.com/nonceSigner?nonce=923qo70qha9la&continue=https://doc-10-50-docs.googleusercontent.com/docs/securesc/32serdgs0viasqmf3cruu3lainc7ufmu/tt73r8bi087nalhk45k0shcv73612009/1385481600000/06414117617227486266/.../0B3mS1uNgSG9LUkt6RFhsczVDbVk?e=download&h=16653014193614665626&hash=rin18n5r65d08kukmh638fo1m3ia32u4

https://doc-10-50-docs.googleusercontent.com/docs/securesc/32serdgs0viasqmf3cruu3lainc7ufmu/tt73r8bi087nalhk45k0shcv73612009/1385481600000/06414117617227486266/.../0B3mS1uNgSG9LUkt6RFhsczVDbVk?h=16653014193614665626&e=download

https://doc-0o-3s-docs.googleusercontent.com/docs/securesc/rgidr04qb29h0o43e45v5cih8ch4akj2/fvoju7d88qi99os6gggsiois71k75edt/1381838400000/06414117617227486266/.../0B3mS1uNgSG9LUkt6RFhsczVDbVk?h=16653014193614665626&e=download

https://docs.google.com/nonceSigner?nonce=1j1qtpmop4aic&continue=https://doc-0o-3s-docs.googleusercontent.com/docs/securesc/rgidr04qb29h0o43e45v5cih8ch4akj2/fvoju7d88qi99os6gggsiois71k75edt/1381838400000/06414117617227486266/.../0B3mS1uNgSG9LUkt6RFhsczVDbVk?e=download&h=16653014193614665626&hash=4epvng3g8ketnsj47nukkoqa7j6l40ne

https://doc-0o-3s-docs.googleusercontent.com/docs/securesc/rgidr04qb29h0o43e45v5cih8ch4akj2/fvoju7d88qi99os6gggsiois71k75edt/1381838400000/06414117617227486266/.../0B3mS1uNgSG9LUkt6RFhsczVDbVk?e=download&h=16653014193614665626&nonce=1j1qtpmop4aic&user=12226534297050279073&hash=qirv5s2lljffrrehq95phetuapvmvu2c

https://doc-04-1o-docs.googleusercontent.com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/btvmakf1b2nsgcerv8b799eo8qb8qb0m/1381924800000/06414117617227486266/.../0B3mS1uNgSG9LUkt6RFhsczVDbVk?h=16653014193614665626&e=download

http://www.van698.net/.../QvodSetup5.exe

https://doc-04-64-docs.googleusercontent.com/docs/securesc/1vq12gg7l6dhn3em137a8uu1fc8a1vi5/lubgjjeg8rmqll7diike2ee1bl37a302/1382277600000/06414117617227486266/.../0B3mS1uNgSG9LUkt6RFhsczVDbVk?h=16653014193614665626&e=download

https://docs.google.com/nonceSigner?nonce=hu5hpmds015du&continue=https://doc-04-64-docs.googleusercontent.com/docs/securesc/1vq12gg7l6dhn3em137a8uu1fc8a1vi5/lubgjjeg8rmqll7diike2ee1bl37a302/1382277600000/06414117617227486266/.../0B3mS1uNgSG9LUkt6RFhsczVDbVk?e=download&h=16653014193614665626&hash=g80c68ni1704vso6o07vrh8fkg66hgr8

https://doc-04-64-docs.googleusercontent.com/docs/securesc/1vq12gg7l6dhn3em137a8uu1fc8a1vi5/lubgjjeg8rmqll7diike2ee1bl37a302/1382277600000/06414117617227486266/.../0B3mS1uNgSG9LUkt6RFhsczVDbVk?e=download&h=16653014193614665626&nonce=hu5hpmds015du&user=12891774476286156207&hash=2q61g4epkego724c4ar909bnnlt395ar

https://doc-04-1o-docs.googleusercontent.com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/5tt1chim41ns3hdd60c1qpi9p4s9q088/1382328000000/06414117617227486266/.../0B3mS1uNgSG9LUkt6RFhsczVDbVk?h=16653014193614665626&e=download

https://doc-04-1o-docs.googleusercontent.com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/okskmoh9toisfji05qcc1ko7p0h1clom/1382263200000/06414117617227486266/.../0B3mS1uNgSG9LUkt6RFhsczVDbVk?h=16653014193614665626&e=download

http://www.fun698.com/.../QvodSetup5.exe

http://dl.kuaibo.com/QvodSetup5.exe

Latest 30 of 34 download URLs

Scan QvodSetup5.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.