home

splayersetup.exe

射手影音播放器

Sagittarius Technology Co.Ltd

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
Publisher:
Sagittarius Technology Co.Ltd  (signed and verified)

Product:
射手影音播放器

Description:
射手影音播放器安装文件

Version:
3.7.0.2356

MD5:
c4179ac6218d2e0241e230c2cd75aae0

SHA-1:
43b37f99f13be25cf71ab001d5f4e9db56a587c7

SHA-256:
7c3ea79f53048b85cd3c8f3b16c41c67bb766216100e8c6a64d28b415b412eec

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/24/2024 2:22:21 AM UTC  (today)

File size:
6.9 MB (7,183,512 bytes)

Copyright:
splayer.org

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Common path:
C:\users\{user}\downloads\splayersetup.exe

Digital Signature
Signed by:
Sagittarius Technology Co.Ltd

Authority:
The USERTRUST Network

Valid from:
7/15/2010 2:00:00 AM

Valid to:
7/15/2012 1:59:59 AM

Subject:
CN=Sagittarius Technology Co.Ltd, O=Sagittarius Technology Co.Ltd, STREET="724-4, No. 710, Siping Road", L=Hongkou District, S=Shanghai, PostalCode=NA, C=CN

Issuer:
CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:
6C587715EE87072E7EB8816807E4BD39

File PE Metadata
Compilation timestamp:
4/10/2010 2:19:31 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
98304:+e9QFFyLjFIvfg99V5hWOU8ALequ/laH76ketaV5cNO3FcYWuRtf3J2O9F22wAjz:+eSyuXkZU8TqalEGHaV73OYWYfTwiUk9

Entry address:
0x354B

Entry point:
81, EC, D4, 02, 00, 00, 53, 55, 56, 57, 6A, 20, 33, ED, 5E, 89, 6C, 24, 18, C7, 44, 24, 10, D8, 84, 40, 00, 89, 6C, 24, 14, FF, 15, 30, 80, 40, 00, 68, 01, 80, 00, 00, FF, 15, B8, 80, 40, 00, 55, FF, 15, B0, 82, 40, 00, 6A, 08, A3, 98, 06, 47, 00, E8, 67, 27, 00, 00, 55, 68, B4, 02, 00, 00, A3, B0, 05, 47, 00, 8D, 44, 24, 38, 50, 55, 68, 1C, 86, 40, 00, FF, 15, 80, 81, 40, 00, 68, 04, 86, 40, 00, 68, A0, 85, 46, 00, E8, 35, 26, 00, 00, FF, 15, B4, 80, 40, 00, 50, BF, A0, 10, 4C, 00, 57, E8, 23, 26, 00, 00...
 
[+]

Packer / compiler:
Nullsoft install system v2.x

Code size:
25 KB (25,600 bytes)

The file splayersetup.exe has been seen being distributed by the following 20 URLs.

http://gsf-cf.softonic.com/43b/37f/.../file?SD_used=0&channel=WEB&fdh=yes&id_file=89922&instance=softonic_pl&type=PROGRAM&Expires=1444637173&Signature=TFbDQstE4ZksvKW~o02RXsjzeigFq7n8mdNCTq-bf2KwSeH-MRKAjc5DbUvPN9MFfe5txefuW5L~IZYyGY74y7sYIqsnI6~i5U0a6o2MdCTWAk6NJf7E3AbTY7NLIsYWypaP8Gt8aXh9fU7fpA42kXG5Cef2byPVTi7fn2ft7AQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=SPlayerSetup.exe

http://gsf-cf.softonic.com/43b/37f/.../file?SD_used=0&channel=WEB&fdh=yes&id_file=89922&instance=softonic_pl&type=PROGRAM&Expires=1459999412&Signature=LLRYimh75igG6v3jVbXy6bhaItXK3YuMZ4~3CaOq4U4WmX7yckLSoIN-hU9aVPjIkbJeSki~Rx1sapCCGEZlW9J0ZK3Pfm-ztMc5nMw-vRlNLCXU7L750wTRLrfq12AO8QWyk3vXCKU7BQf0NMat-vDSMKBCY8Gv6b6DVkdC96A_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=SPlayerSetup.exe

http://gsf-cf.softonic.com/43b/37f/.../file?SD_used=0&channel=WEB&fdh=yes&id_file=89922&instance=softonic_pl&type=PROGRAM&Expires=1451820013&Signature=MVtinexS8emfLMcEwubrwlYh9n4yLBTwTMozQmcdK86kdW0u0fwL3y9ryFPcl9VaAIS-Iumof21prMIZyjG3cTlIJ-4LaT-~MAOgLXzF3RL3yV56H25JUH99lXhoEbZlMfopQv-xGv2szCtSk~tkUtnFSTNTXS-tXOUrNFLWUCU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=SPlayerSetup.exe

http://letoltes.szoftverbazis.hu/gs3IWoY2WUqEsbvgb6yP7w/1481763956/.../SPlayerSetup.exe

http://gsf-cf.softonic.com/43b/37f/.../file?SD_used=0&channel=WEB&fdh=yes&id_file=89922&instance=softonic_pl&type=PROGRAM&Expires=1472513280&Signature=cmAz83P89SzznJ5EBBpeMmLkCbuHbsPkNgDDxxJc3uXdnFTf1ea8Fc7G68WnRe228CAScr-JrP3xgGz0OJstibjNQEWmJj4Tn04wT5sFGMmSoUCNLgFMoumvBrQ0LY-O9H6CP2hqMcR1g2Wc-DB0myKC7kiRiFFarLPQ-dZN8vg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=SPlayerSetup.exe

http://letoltes.szoftverbazis.hu/VZ9OkLnUMF3mLp_VHXIKNw/1477157536/.../SPlayerSetup.exe

http://gsf-cf.softonic.com/43b/37f/.../file?SD_used=0&channel=WEB&fdh=yes&id_file=89922&instance=softonic_pl&type=PROGRAM&Expires=1461219347&Signature=ONXL6rTDoEczjYGTQezxp-uVtda9saB5PgMJzksrpxVLPVMUJe1udZTWxt~u2F3HdgYLHb3ot30dGZjzDJpTxbRWEQXHPtYamswQQKoCHvbqclSNuU0Y3l3s7fZgWrsIcgukyr4kb8phK-B5kHBpO9pV~vVD5EabQXQ4DhElYxA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=SPlayerSetup.exe

http://gsf-cf.softonic.com/43b/37f/.../file?SD_used=0&channel=WEB&fdh=yes&id_file=89922&instance=softonic_pl&type=PROGRAM&Expires=1454075741&Signature=grqzx7QPm7zYPQ2jvCtWcWaqcONwes74a9m9-o9agbithXQhXl5C9A9Vln0EllBnLMR9a3AjK4bxBMOhwvSDE-xG4qu0kL8s3kxamT-xE9Z3JZvs9exPyM1P8mymi0oOmXZwXViGecJyVrBDCGUK2SljxhQnoAkbYzmzsHKojjA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=SPlayerSetup.exe

http://gsf-cf.softonic.com/43b/37f/.../file?SD_used=0&channel=WEB&fdh=yes&id_file=89922&instance=softonic_pl&type=PROGRAM&Expires=1464942603&Signature=Edq~0cWBsp1EQE2pE4WNfBkzAhSc-lwDmEO4SP5Ncna7ry1sRXyEm-KA03gN5lzuXokh6KhkDrANVuL~mhcTrkKJiV1EPhYTozwUtu-elLky3T22PPEWiqGNtWGO3voHlY-HetNgrl2~J-ahYtJ3Ep893a2RiSfPfnMfTssoHMU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=SPlayerSetup.exe

http://gsf-cf.softonic.com/43b/37f/.../file?SD_used=0&channel=WEB&fdh=yes&id_file=89922&instance=softonic_pl&type=PROGRAM&Expires=1466049029&Signature=hvYcLEqscxmgW78JY0lMI0frE4dy5NZolTPKyqfkxvCjmFWJATtuz5sWteNlhIv0urJPeu9UCsFuXyNmZI95TxhigKOKD8pEFhsfdAKCTsufbeV3GTMfApG~FOdAl2aqjrQRL2IM5ALGI7nYuIB8pnPb~sxXfx5svI-WClgWgTg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=SPlayerSetup.exe

http://gsf-cf.softonic.com/43b/37f/.../file?SD_used=0&channel=WEB&fdh=yes&id_file=89922&instance=softonic_pl&type=PROGRAM&Expires=1463510320&Signature=Ao79WF6IoFFyNvy39NrwFAClQgKdYUe2rQxTw6-uoI6kxMHsjgsR0OVpUMlRqz5j1wyEaIzOlMAU90Yn4rI2~8oVf58h3RRrTEEB-PJLvvoLp61Kr~mPkp3qZWXdEbapmy2KSN2hzAMMLImFxufIt7bE8Xg-oFxugUH6F68t8YY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=SPlayerSetup.exe

http://gsf-cf.softonic.com/43b/37f/.../file?SD_used=0&channel=WEB&fdh=yes&id_file=89922&instance=softonic_pl&type=PROGRAM&Expires=1464508938&Signature=C2lJZGiYOQ1b4FWtOUj8pfEsaoc~7xGfmBGoXhMXO8TIHAy-ZySjwXFtyELD1hz1vx9O9q~xLvKQ47Hb0j07M-RceHEE35MX3-TfkNSsSnKzrSyFzJatIJQLKr8t6BM14BVYS2QSpyqfPLTk8eRPd3QurWfm7JCoLGI5rznOG8M_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=SPlayerSetup.exe

http://gsf-cf.softonic.com/43b/37f/.../file?SD_used=0&channel=WEB&fdh=yes&id_file=89922&instance=softonic_pl&type=PROGRAM&Expires=1457928035&Signature=X3n0PwVcbNIJeTgrV~eJYE8RmDX7ATl32sBfSp7GfoTNbJHXWslJph-LdUjhvKAIJXATtTUzgu4ZmPfXmwCwyWwMc2hiMPYvG1QXXWYEr2-2ffTDeF4skCz3bVx~FnfdPbW2bTy5jhVanuJ4iTx8valKgyweBf-y~huN3I9Yq0c_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=SPlayerSetup.exe

http://gsf-cf.softonic.com/43b/37f/.../file?SD_used=0&channel=WEB&fdh=yes&id_file=89922&instance=softonic_pl&type=PROGRAM&Expires=1454904563&Signature=YAc0dmmfwRBULW5pd40M2~D8YMzSuLt~eqNjKfC1S4dg1Xvx~PRYTcXu5Hh1OsEjv7Am1ezSnfkpTRvcjELPbnRXKcH68pYrRvpUQmWd~eS5jFdeA3wxfNtjYLB4KZv3eIi0yLqaB7Xa6fed~NpaCAltyi~hqVYMhZXYolqg3ws_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=SPlayerSetup.exe

http://gsf-cf.softonic.com/43b/37f/.../file?SD_used=0&channel=WEB&fdh=yes&id_file=89922&instance=softonic_pl&type=PROGRAM&Expires=1460450514&Signature=cXP8RiEDPS2I4eyEOU770cAC4gbNORSdP2WUvpltJfuPj8nhKSYMVd~ocND7lnkHHHim-zvleSHNKTru8QBi4MROXsH1aLsq5UqtlUA833dKKsMtFEpNm0XRzeR7ZytS8V8fToUN9gic4rIe83LFivMUP5ZE2Ah8s3k0UqxMo9c_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=SPlayerSetup.exe

http://gsf-cf.softonic.com/43b/37f/.../file?SD_used=0&channel=WEB&fdh=yes&id_file=89922&instance=softonic_pl&type=PROGRAM&Expires=1458432824&Signature=LJgfomahd0IcPmspOLdpwTNcPOcLx-H5SGqd5hb-6e8pcNRELh0zxIfEiXdYFVVymwZrffI3KLdn-OLNtQVfWqE1tMDBHuj6hi-khpXMKBULboJK-yiYUvVpmiIliVSlrq-3n0NKoFZ27cxa5u1D5ZAMjsizGjKYNG6pKyLNYO4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=SPlayerSetup.exe

http://gsf-cf.softonic.com/43b/37f/.../file?SD_used=0&channel=WEB&fdh=yes&id_file=89922&instance=softonic_pl&type=PROGRAM&Expires=1455594988&Signature=PcaR-cXzXHZuUKlJQSQfb0gvPL2oasxQ8ZY1-AfVZFpX-69WxcZKpd3QSUJaJRec0ePek2ecacDvn~8NRi34gESsz6quJFiaiWC6jIQKntJnx3GvsVC8eOJ2qIS1qoOtVxlkRVqOOfe99f3nCogQbHJ4Q5nPZXQvUSSXoSabZ8o_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=SPlayerSetup.exe

http://letoltes.szoftverbazis.hu/lgy_BjwyDEvBajbcHj92Zg/1455856615/.../SPlayerSetup.exe

http://file.splayer.org/SPlayerSetup.exe

http://letoltes.szoftverbazis.hu/SzakTV3Z194lru5Lq5HksA/1394928248/.../SPlayerSetup.exe

Scan splayersetup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.