home

setup.exe

The KMPlayer

Pandora TV Co., Ltd.

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. This file is installed with the program KMPlayer (remove only). The file has been seen being downloaded from s3.amazonaws.com and multiple other hosts.
Publisher:
PandoraTV  (signed by Pandora TV Co., Ltd.)

Product:
The KMPlayer

Description:
The KMPlayer Setup/Install

Version:
3.9.1.130

MD5:
a0cb9231ec0817e1d8710066cedf7f2d

SHA-1:
19780d6c2effa64e605e4c1eb8149c91206ca968

SHA-256:
79563d2883808c3eec5dd4ba55c37a0f92ce55b7159909989125b9d4b060f345

Scanner detections:
1 / 68

Status:
Inconclusive  (not enough data for an accurate detection)

Analysis date:
11/23/2024 4:57:55 AM UTC  (today)

Scan engine
Detection
Engine version

Dr.Web
Adware.Downware.5053
9.0.1.0309

File size:
34.2 MB (35,862,096 bytes)

Product version:
3.9

Copyright:
Copyright PandoraTV 2013.

Trademarks:
Freeware

Original file name:
KMPlayer_3.9.1.130.exe

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\softwares\kmplayer.v3.9.1.130_p30download.com\setup.exe

Digital Signature
Signed by:
Pandora TV Co., Ltd.

Authority:
Thawte, Inc.

Valid from:
5/12/2014 4:30:00 AM

Valid to:
5/12/2016 4:29:59 AM

Subject:
CN="Pandora TV Co., Ltd.", OU=IT Team, O="Pandora TV Co., Ltd.", L=Gangnam-gu, S=SEOUL, C=KR

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
2670E850C13552677FC3CFBA525E11B8

File PE Metadata
Compilation timestamp:
2/24/2012 10:49:59 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
786432:2tUgyYPRxlC8W/lgOKGzopZZWe5CZpbGVTbf:2tUgyAzWNgfGsnS2r

Entry address:
0x39E3

Entry point:
81, EC, D4, 02, 00, 00, 53, 55, 56, 57, 6A, 20, 33, ED, 5E, 89, 6C, 24, 18, C7, 44, 24, 10, D8, 91, 40, 00, 89, 6C, 24, 14, FF, 15, 30, 80, 40, 00, 68, 01, 80, 00, 00, FF, 15, B8, 80, 40, 00, 55, FF, 15, C0, 82, 40, 00, 6A, 08, A3, B8, 2E, 47, 00, E8, 37, 2A, 00, 00, 55, 68, B4, 02, 00, 00, A3, D0, 2D, 47, 00, 8D, 44, 24, 38, 50, 55, 68, 1C, 93, 40, 00, FF, 15, 84, 81, 40, 00, 68, 04, 93, 40, 00, 68, C0, AD, 46, 00, E8, 19, 27, 00, 00, FF, 15, B4, 80, 40, 00, 50, BF, A0, 30, 4C, 00, 57, E8, 07, 27, 00, 00...
 
[+]

Entropy:
7.9999

Packer / compiler:
Nullsoft install system v2.x

Code size:
28 KB (28,672 bytes)

The file setup.exe has been discovered within the following program.

KMPlayer (remove only)  by Pandora.TV
www.kmplayer.com
About 7% of users remove it
 
Powered by Should I Remove It?

The file setup.exe has been seen being distributed by the following 40 URLs.

http://s3.amazonaws.com/moviecodec/.../3.9.1.130_20141103045254.exe

http://d.baixakifiles2.com/?ic_user_id=254&data=4iAAmAqnxhNzNSuyhksVFVAEPfO/aql sJxM5Ctap41RV4ZThTMbPPv6YYK tWFCMSNpEqgvCNNrqttdMekvgiBqUjDeK5kmC0k9eJfcrcbCGCta/9NWu3 JY7pLqTI9rHj ylbOGNoY6/REvWjLq RafjdeE8bNKvB1lpHvUsJuLmNPD88U4H2WyFzh5PI7PKkzf51MFpFfn0p9SNq6QpqQx Yq YOsEI55aWfAjzhypB6QaIBn/CLH5WKN6y9PoW4EzTgVt31U8wGCKZptdeOhVPCJ7nOAp6577BSZmZ7kQ/0CFcgj9u0h16YyFzTp9VflG13kWznR5scij3uyDnk2SzDUyvJR5wVtyKBspVtgqrqVDpfvftVlKZIx95SkLoFCmiBrTEfcxw6rYq7iljZC8ICnopT62cuO7dY95RJk2R73FE2WPkt8uM9CnsUDFtSoj1RuCxh/MqVi04FFJmSCzAHRcd7G8NZgczAew9F7X6nwVUv5M9dUl3LZQ0kTsJyIVLuGeIybax4rsQ6P5bpHzh492OvBJbbmmETcmici1tkEjFj8x50N1xZ5Mg29Sdl4VCkA/.../MhE3dgLqayG62WIikiP15dmQOY7TSkuhMvdboe4UTCNSK6f4eVzrDt83eXBMydACScwFRiPffSU1Td4al9PAaB7jmhYQjXqnJDctCXAyEwdTNHOJocdSaI6W2irF5gaWJSwY79vNbecPNO2d

http://www.filehippo.com/es/download/file/.../

http://41.223.201.246/.../3.9.1.130_20141103045254.exe

http://www.filehippo.com/download/file/.../

http://filehippo.com/download/file/.../

http://r2.computerbild.de/exec/r2r.pl?m=w-cobi;u=http://d.computerbild.de/downloads/.../3.9.1.130_20141103045254.exe

http://filehippo.com/download/file/.../

http://download.instalki.info/programy/Windows/Multimedia/.../KMPlayer_3.9.1.130_www.INSTALKI.pl.exe

http://dw1.ar.uptodown.com/dl/1415548725/.../kmplayer-3-9-1-130-multi-win.exe

http://filehippo.com/download/file/.../

http://km-player.ru/.../KMPlayer__3.9.1.130.exe

http://filehippo.com/download/file/.../

https://dw.uptodown.com/dwn/cimBpgM5nriAbHDYiNXyXNquaTZENg4c0cG9Z_T9GOdYE2vtpa9J0FxwUa6k4KRezgbsv3CRq0iU2DDZbXPFxC9t82XzyCVRRJTwlX_s7hOgztwtfll2wQw5PMpBj6J1/8oobYY9BH-_1_vnRXCAPIf4AZhdXwDBO7RWqqA4wu-5F8lvYkDI_EYCKzwNPJCbyV6DS-OSHJa1CoRctQkymspzp9MrdomQiZn7Okg68m2dTBiEmXRMYNgTSCMpZzcBV/.../

http://www.filehippo.com/download/file/.../

http://filehippo.com/download/file/.../

http://www.filehippo.com/download/file/.../

http://filehippo.com/download/file/.../

http://filehippo.com/download/file/.../

http://filehippo.com/download/file/.../

http://dl.rayeganafzar.com/.../KMPlayer_3.9.1.130.exe

http://filehippo.com/download/file/.../

http://files.jalantikus.com/dde/312/.../KMPlayer_3.9.1.130.exe

http://filehippo.com/download/file/.../

http://software.thaiware.com/download_url.php?id=10794

http://biblprog.org.ua/goo.php?site=http://cdn.kmplayer.com/KMP/player/download/.../3.9.1.130_20141103045254.exe

http://filehippo.com/download/file/.../

http://filehippo.com/download/file/.../

http://www.filehippo.com/download/file/.../

http://dnld.moiprogrammy.net/KMPlayer_Rus_Setup.exe

Latest 30 of 40 download URLs

Scan setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.