» kanto-karaoke.exe
Overview
Analysis
File Details
Downloads (4)

kanto-karaoke.exe

Kanto Player

Globosoft S.R.L.

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from www.softonic.it and multiple other hosts.

File name:

kanto-karaoke.exe

Publisher:

Globosoft S.R.L.

Product:

Kanto Player

Description:

http://www.kantokaraoke.com/

Version:

6.0.0.0

MD5:

00f84c2a36574674a3cf89a5f2115a63

SHA-1:

1307713be071673a76fd3fac368d8fbee15bed0c

SHA-256:

f8b809b3325723378d8e20013fb0ba1e6cc978d198f977b90c796ee340c654ac

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

11/24/2024 12:05:01 PM UTC (today)

File size:

9.6 MB (10,098,230 bytes)

Product version:

6.0.0.0

Globosoft S.R.L. 2014

File type:

Executable application (Win32 EXE)

Installer:

Inno Setup

Common path:

C:\users\{user}\downloads\kanto-karaoke.exe

File PE Metadata

Compilation timestamp:

6/20/1992 12:22:17 AM

OS version:

1.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

196608:KiKsNqTzB8YUJvCt77o0hO1ziYoU2SA99RfAQoBX3dzTpeL6bIsuTm:NN+8Jo45diYKSAHu0+1

Entry address:

0xA5F8

Entry point:

55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, CE, 8A, FF, FF, E8, D5, 9C, FF, FF, E8, 64, 9F, FF, FF, E8, 07, A0, FF, FF, E8, A6, BF, FF, FF, E8, 11, E9, FF, FF, E8, 78, EA, FF, FF, 33, C0, 55, 68, C9, AC, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 92, AC, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 26, F5, FF, FF, E8, 11, F1, FF, FF, 80, 3D, 34, B2, 40, 00, 00, 74, 0C, E8, 23, F6, FF, FF, 33, C0, E8, C4, 97, FF, FF, 8D, 55, F0, 33, C0, E8, B6, C5, FF, FF, 8B, 55... 
[+]

Packer / compiler:

Inno Setup v5.x - Installer Maker

Code size:

39.5 KB (40,448 bytes)

The file kanto-karaoke.exe has been seen being distributed by the following 4 URLs.

http://www.softonic.it/sads/tracker.php?ev=c&co=IT&sid=1bd346e780d4a3423db3644117ad6079&upv=1eb17bf6114c8f25498dfb634878189d&z=results&sk=0&abt=&eid=&params=F24F8F4D368AFA5D32C8A90D9EFD1CBA6DDFC07E15CA71849BF2BD7E5BEEEA5107EEFCB0A59A63EFDBA1B6EEA53E40D5886E47DBB9999EC83DE929D34DC06FF524C75E64E5DFCB59EA82BD0764D8E330564E5CC3A2C0DC88F2F3763B37E5E5A962BDA0BD67BE431770E1F53654501192F8229FBDCE1507E6ACE81207EC1E2625D111D9A6CE8185C77F4D198853865D968FF91C144CDE07B0FD909138A012C569&h=E44A746A120CABE2AEEC6C8573BB1F11C5E1A4EDBC4F8B0DD3127DF495058945&directdownload=1&f=69684966&d=http://www.download77.net/.../KantoPlayer.exe

http://www.softonic.it/sads/tracker.php?ev=c&co=IT&sid=1e686217aa0556ce048e9c7331910c60&upv=084bc0e7181416bf97cd6a8e09a7d9c8&z=results&sk=0&abt=&eid=&params=F24F8F4D368AFA5D32C8A90D9EFD1CBA6DDFC07E15CA71849BF2BD7E5BEEEA5107EEFCB0A59A63EFDBA1B6EEA53E40D55E77233B0C6EC8E4FB6D53480064A7A6E6BA6B4901785D4E33A0FA165A9DC5C98E8746EDF79A4D90F1A0DE887878E2A50A9A38AF45D782657FEE6E60C87FD4494C4B92E2F52508C03934F9F411B14DB5B288B6BC391A70359883523BDBDDB44B30841F35D61BFCA6D3313CD1A5E59BF5&h=0095B3C6378592966D9B0675A5CC2E08D3210061CD09D3090A3D82D1D712E145&directdownload=1&f=69684966&d=http://www.download77.net/.../KantoPlayer.exe

http://download77.net/.../KantoPlayer.exe

http://kanto-karaoke.softonic.it/download

Scan kanto-karaoke.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.