home

setup_multilang.exe

Kingsoft PC Doctor

Kingsoft Security Co.,Ltd

This is a setup and installation application. This is installed with multiple programs including Kingsoft PC Doctor 3.7.0.47. The file has been seen being downloaded from www.lo4d.com and multiple other hosts.
Publisher:
Kingsoft Corporation  (signed by Kingsoft Security Co.,Ltd)

Product:
Kingsoft PC Doctor

Description:
Kingsoft PC Doctor Installer

Version:
3.7.0.47

MD5:
2bffc14ddbf56790b9eb6b7b37ba8a75

SHA-1:
f83cb6174317e937b990d0202bd2b4d33fecc637

SHA-256:
ea127c15238347b83951f0f9084405baf50373e1df4057d748db73cbcc261d90

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/23/2024 10:17:25 AM UTC  (today)

File size:
5.3 MB (5,576,608 bytes)

Product version:
3.7.0.47

Copyright:
Copyright (C) 1998-2011 Kingsoft Corporation

Original file name:
ksinstall.exe

File type:
Executable application (Win32 EXE)

Language:
Chinese (Simplified, PRC)

Common path:
C:\users\{user}\downloads\setup_multilang.exe

Digital Signature
Signed by:
Kingsoft Security Co.,Ltd

Authority:
VeriSign, Inc.

Valid from:
3/9/2010 1:00:00 AM

Valid to:
3/9/2013 12:59:59 AM

Subject:
CN="Kingsoft Security Co.,Ltd", OU=Kingsoft Duba, OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Kingsoft Security Co.,Ltd", L=Beijing, S=Beijing, C=CN

Issuer:
CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
11B3AF5DB11EC91D1CF0B3E1B80C85E4

File PE Metadata
Compilation timestamp:
4/11/2012 1:45:00 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
98304:HkTHzjQWQ7BjAoVUORMECtpk7GVNqiu5TZy4QrIkpvi/f46PvxrWfEiAqBhk:HkTzjlQN/Vj9Co78Nq3CsCvgfX35WfHk

Entry address:
0x27984

Entry point:
E8, 2B, 8D, 00, 00, E9, 17, FE, FF, FF, CC, CC, 68, F0, 79, 42, 00, 64, FF, 35, 00, 00, 00, 00, 8B, 44, 24, 10, 89, 6C, 24, 10, 8D, 6C, 24, 10, 2B, E0, 53, 56, 57, A1, 44, 60, 44, 00, 31, 45, FC, 33, C5, 50, 89, 65, E8, FF, 75, F8, 8B, 45, FC, C7, 45, FC, FE, FF, FF, FF, 89, 45, F8, 8D, 45, F0, 64, A3, 00, 00, 00, 00, C3, 8B, 4D, F0, 64, 89, 0D, 00, 00, 00, 00, 59, 5F, 5F, 5E, 5B, 8B, E5, 5D, 51, C3, CC, CC, CC, CC, CC, CC, CC, 83, EC, 14, 53, 8B, 5C, 24, 20, 55, 56, 8B, 73, 08, 33, 35, 44, 60, 44, 00, 57...
 
[+]

Code size:
225 KB (230,400 bytes)

The file setup_multilang.exe has been discovered within the following programs.

360Amigo System Speedup Free  by 360Amigo
360Amigo is registry optimizer. 360Amigo System Speedup bundles a branded version of the Conduit Toolbar, designed to deliver search based advertising and results. During installation the user is presented in some cases with the option to install the toolbar (on by default).
www.360amigo.com
53% remove it
Kingsoft PC Doctor 3.7.0.47  by Kingsoft Security
Publisher's description - “Kingsoft PC Doctor, which focuses on providing computer users excellent privacy cleaner, registry cleaner and, brilliant Windows optimization service, is your best free professional and easy-to-use Windows Diagnosis and Optimization software.”
pcdoctor.kingsoft.com
56% remove it
 
Powered by Should I Remove It?

The file setup_multilang.exe has been seen being distributed by the following 50 URLs.

http://www.lo4d.com/get-file/pc-doctor/.../

http://global-shared-files-lw.softonic.com/f83/cb6/.../setup_multilang.exe

http://global-shared-files-l3.softonic.com/f83/cb6/.../file?nvb=20140815145454&nva=20140816025554&token=05f168c3f105cf61bb497&id_file=326655&channel=WEB&instance=softonic_en&type=PROGRAM&fdh=yes&SD_used=0&filename=setup_multilang.exe

http://kingsoft-pc-doctor.software.informer.com/.../

http://gsf-cf.softonic.com/f83/cb6/.../file?SD_used=0&channel=WEB&fdh=yes&id_file=326655&instance=softonic_en&type=PROGRAM&Expires=1428507042&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=Bg57mmBPN35NMw8zaXMhoCh1njthGEr8J1pIQHL1gAcrdzZz8JTYYFk9POTIXVaTTb3AfKO6aSrcomRVA6LG6C-22QD2AEhWgt4eHMBttH70GyR5pLhIrT0DnciE7xxA5jvqCxP1TKstt5s8qd4hAtmH5VQLOINRqF-BWYoQPFY_&filename=setup_multilang.exe

http://gsf-cf.softonic.com/f83/cb6/.../file?SD_used=0&channel=WEB&fdh=yes&id_file=326655&instance=softonic_en&type=PROGRAM&Expires=1431377171&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=EC6OkkDL9ZZPVRLdEfCG48Y1ZH3oDE3DkZWSf7NYxQTtUQhn40bzgqvMwbRtVBc1NB0riO0ahdlP6NAOiFoJSjymoDsIog0w-7nO5fuNOFFZD474Qb0a3RHPlez3yhO8CKVKPf1D5CBPcjs4AAOwwqaj07l0t2l~zfeO~-0XXdM_&filename=setup_multilang.exe

http://universal-downloader.en.softonic.com/326000/326655/.../setup_multilang.exe

http://gsf-cf.softonic.com/f83/cb6/.../file?SD_used=0&channel=WEB&fdh=yes&id_file=326655&instance=softonic_en&type=PROGRAM&Expires=1438173032&Signature=ESCgBPc-aaO5dHNNQwef5UmpfI8Eb919Klit8Xu0laX1EQVU6bmSF84zpmEiZthaz77xiG5LmEF5p7XidW2BToeW9EbH7suKiQnYA1c0zjsttxpCKNh3AZQMHsokiJmmd35pS-yni4-SNUM9Pxln5fE3LuHq1PgNbP6BAuJ~16A_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=setup_multilang.exe

http://gsf-cf.softonic.com/f83/cb6/.../file?SD_used=0&channel=WEB&fdh=yes&id_file=326655&instance=softonic_en&type=PROGRAM&Expires=1428266641&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=SCMzToFWEaxb4EIAY15HIgbGL~rTxhSMVby0RfUrO4dDhMYDm4PFWLfIvad5sKkb67gxUai8yLcPQGGAmP~hOqK~LqnX~hWJYKGxfQqPi5qwpbN4MCBQWeicyadrTu6OI891~GKdH~DHJQab4d8DeFAlNVlIlvEiMo4CmYxWJfE_&filename=setup_multilang.exe

http://global-shared-files-l3.softonic.com/f83/cb6/.../file?nvb=20141130115006&nva=20141130235106&token=0feb33138d69c22caef9f&instance=softonic_en&filename=setup_multilang.exe

http://gsf-cf.softonic.com/f83/cb6/.../file?SD_used=0&channel=WEB&fdh=yes&id_file=326655&instance=softonic_en&type=PROGRAM&Expires=1436828889&Signature=fisWBW8MNqoo6kAZi-n3aPjNtkArbRliDeC6ygearC1MpSMvJNpu8c9JGsJiAA5LooqiEm6XE0cEx3dzvib6bKNMnlS8Q4wQ7Gx3WarAUhPF-2povfm3hCD6VzLX4S~xnnL1Yve55MTCSycvwBBoCOuJwJuoFF07aRAESSJINMQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=setup_multilang.exe

http://gsf-cf.softonic.com/f83/cb6/.../file?SD_used=0&channel=WEB&fdh=yes&id_file=326655&instance=softonic_en&type=PROGRAM&Expires=1449417582&Signature=QjiPSCXgLxfD51H686Wx6w7Y6vrtctcLALrebqrutChDL0KdPVZE7Pcey5gTUTW~A~3UkIjA1RRUTamX45pl7u3uuoZrAAW0XmkZ-sjRcthHfDaiKKGzvva7SseFT0lD8Vsfif0HDDQCxAIK4WzHUltvx5SsHWzRWTGe-ruQNEc_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=setup_multilang.exe

http://kingsoft-pc-doctor.soft32.com/get/file/id/.../

http://download.softpedia.com/dl/52a7035bdacf29cfcd77aeba8963be53/5761afd2/100193392/software/.../setup_multilang.exe

http://www.lo4d.com/get-file/pc-doctor/.../

http://global-shared-files-l3.softonic.com/f83/cb6/.../file?nvb=20141012140920&nva=20141013021020&token=0ceca20b9f9c4026c489a&instance=softonic_en&filename=setup_multilang.exe

http://global-shared-files-l3.softonic.com/f83/cb6/.../file?nvb=20140823224909&nva=20140824105009&token=0d299c509d1df218319f6&id_file=326655&channel=WEB&instance=softonic_en&type=PROGRAM&fdh=yes&SD_used=0&filename=setup_multilang.exe

http://gsf-cf.softonic.com/f83/cb6/.../file?SD_used=0&channel=WEB&fdh=yes&id_file=326655&instance=softonic_en&type=PROGRAM&Expires=1434804764&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=YX3D9IKlSrJ~Uf22rE~ZGAfGVs3iZanJ1c-ct-4bcpDQJb1hbOPxrZOHvx~VHDT41T78khAbEihqYxh0MlDHhihyhNh44CZlB1~kLiaO~VJ8dv9B1AjT9FjchA0N-hcfHMLsoCM-7BdZ2QyC4gK15jNTqc0GuOmiJpFhGiVFioc_&filename=setup_multilang.exe

http://global-shared-files-l3.softonic.com/f83/cb6/.../file?nvb=20140625162334&nva=20140626042434&token=02e8d2759c520776ec3ad&id_file=326655&channel=WEB&instance=softonic_en&type=PROGRAM&fdh=yes&SD_used=0&filename=setup_multilang.exe

http://storage.shp.net.pl/setup_multilang.exe

http://gsf-cf.softonic.com/f83/cb6/.../file?SD_used=0&channel=WEB&fdh=yes&id_file=326655&instance=softonic_en&type=PROGRAM&Expires=1443142060&Signature=JXhcDxRBJtEtNwwbfTFla3TCotQH2BNerxiYu~EhdWGx8ABM21mytSIrG2BR8oh9xGHMSGqsYElm6AAwKJffuY2H6KKV6svbC5-R9UtwATiA7NL~femHHGNzCR~D~pCVNiWD~qtU3tHSaNUFXlSP~OrGurLHoNb9mCOdZFhEKiM_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=setup_multilang.exe

http://gsf-cf.softonic.com/f83/cb6/.../file?SD_used=0&channel=WEB&fdh=yes&id_file=326655&instance=softonic_en&type=PROGRAM&Expires=1455919700&Signature=YGrOr-KnPy-ZvOU4vPt0vzSkk1W4w9VRaAl8Rhxm5YnWrKGuZNWCZ-QijBL3nLJ5uYcquDTzS9IiUt0kONfZXmpL409nuSaKT6Wr5Yvqfd3WshdMk50TxGQN7IkeI1-0nmBfk5kBnzrqw-jQVfGcKlnahcomKXW8M7XCr-aJ-7k_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=setup_multilang.exe

http://gsf-cf.softonic.com/f83/cb6/.../file?SD_used=0&channel=WEB&fdh=yes&id_file=326655&instance=softonic_en&type=PROGRAM&Expires=1448618859&Signature=Dp7Cai4QMMvgBk5Izd3lbwlBr3av66hv60iBBphROQJQd6-yhFDcytkjNNP7my39SQwvMnTiqnfp6xHSMlWz1JxuDqkXx5PWk7UQvf7KrMk2rxubb0qu3V8ky1hsELD~2SQXwWwXhMBokZMSaem1Wo~LjObhU4yyamWGV5tE7Gs_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=setup_multilang.exe

http://gsf-cf.softonic.com/f83/cb6/.../file?SD_used=0&channel=WEB&fdh=yes&id_file=326655&instance=softonic_en&type=PROGRAM&Expires=1444293531&Signature=dSStP2KSdwWKtKox1835XksUYQbxbjZOqt~5~t4qHo~AG3wsRkh~WBLzBKMwZV-GzdWA~DXooVAmUqaq~7aUUhojpoM6E5h7cIkBldRBmlIkuzTWZ1t6~uy1ShPnID1PZIR4bWR-zSJPXLVae4d0Ap2gSmQPmi6Hqn1KD~uJDLQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=setup_multilang.exe

http://gsf-cf.softonic.com/f83/cb6/.../file?SD_used=0&channel=WEB&fdh=yes&id_file=326655&instance=softonic_en&type=PROGRAM&Expires=1443379327&Signature=Pf00FbDh-aTyPFfqScsXZdDLKaPhXZtqx42uBnl1YU5skGMUWaX20J3yBpeOBxJLYpqLIaI7m0BeeqEtCIZKUBTs0nutRilKp-a8F11ugU7Ff8AdhvHn9kUnvikpDOl~e7-XFNLBd-DCCVwiBzBweNd7P29Y2Qpy9RkdRha7GPM_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=setup_multilang.exe

http://gsf-cf.softonic.com/f83/cb6/.../file?SD_used=0&channel=WEB&fdh=yes&id_file=326655&instance=softonic_en&type=PROGRAM&Expires=1452463444&Signature=NCCQ3CjCYv65TYqufejvfshqf2EqmPPCkVbL4aEFAF-LWWMV5oFr6XdTlhrUhTKWTqqfLmsKpI4c7-b38ARpmYcP-JPkK~xKYKl6uuHkN2o~Hkx~Vtg3gcdY2lFZxGO5AACRT4ln-gp2WXSJbzjqEPuRLpbHK8Zoise1SK6NG1I_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=setup_multilang.exe

http://gsf-cf.softonic.com/f83/cb6/.../file?SD_used=0&channel=WEB&fdh=yes&id_file=326655&instance=softonic_en&type=PROGRAM&Expires=1442887213&Signature=DsTzNk7CHr3R~vVbU6iTSM8ABwxkmPTmC4tO2J7WXI5Iz75VXKwqgJ4ZINucqjHTtCqVJL9xYxf4TxaFNGD4sBHD8B5xH4CcGtA85xVbwL0QmY4hdJHz5GhpWoo8ODUI8pvBmWBegDO~lsWeClc~p5dfEGRqQB-j7IVC3HRtHEw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=setup_multilang.exe

http://gsf-cf.softonic.com/f83/cb6/.../file?SD_used=0&channel=WEB&fdh=yes&id_file=326655&instance=softonic_en&type=PROGRAM&Expires=1433719424&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=HEGgjy26ATaj~lhjOq-gYPbB6sBtJQmsDHm648LhFBNpEYEx2qm3YJDJB5e1503xBJD3iLZaZECm-r6AaBf~d3HnRSBvexin3rhv38Xa2IyGa1vehqrNeBQGzNBDg0GCQ-mIc6BJDDtf3gY1jBWSlJyXfwF5lrahMgN70VVzSyI_&filename=setup_multilang.exe

http://gsf-cf.softonic.com/f83/cb6/.../file?SD_used=0&channel=WEB&fdh=yes&id_file=326655&instance=softonic_en&type=PROGRAM&Expires=1454650810&Signature=A53x0QPNJSxXDms3kBNyainlNnYEjhV0I3voUWwu4B1VnbVZBufEd1x2OzVdJ8wVdql0z4g4J8U~Kdv-sBwVH3ZvQU2KLVcf0UEthY~e0GTGp3Fg5QC0gFadKJFuU7Tq2OIN9scDFXYwRecgkFlf7jUeljd6jwD~VTb5Y4MlkFc_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=setup_multilang.exe

http://gsf-cf.softonic.com/f83/cb6/.../file?SD_used=0&channel=WEB&fdh=yes&id_file=326655&instance=softonic_en&type=PROGRAM&Expires=1454304732&Signature=WHyIagwRnFEcAYqmUVT45IZJCPWtf85DiKP4WOOr-oUz0Nx-T-Vos6GVde6hl3y3XJCYGiHPkKWSIz6HvgrBNSggkxt265BxUovigHjXOwi72lnhAG8UpDZ-YEs7twcJT5yyKCVzp6WNcSlzXUkS3AGdMQEvnMGJc6yCVQGxOCc_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=setup_multilang.exe

Latest 30 of 80 download URLs

Scan setup_multilang.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.