home

kantoplayer.exe

Kanto Player

Globosoft S.R.L.

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from www.softonic.com and multiple other hosts.
Publisher:
Globosoft S.R.L.

Product:
Kanto Player

Description:
http://www.kantokaraoke.com/

Version:
7.0.0.0

MD5:
57ed81e4db4a2234924b9ca51e2a1ae4

SHA-1:
015b6f8a27767d88f017679e0a96fb6c05f6e9bd

SHA-256:
f9aecdde3e5dfd9b6c8f397158e0c5171b11fc76b15397657d92e482c4196acd

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/28/2024 11:00:20 AM UTC  (today)

File size:
9.6 MB (10,078,834 bytes)

Product version:
7.0.0.0

Copyright:
Globosoft S.R.L. 2014

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\kantoplayer.exe

File PE Metadata
Compilation timestamp:
6/20/1992 10:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
196608:pomh9fn++zdcsf/PKWPOyBx1/WP9MCUrh6wjT7AzMM5f6hR9zIJN/hd:t9P+scAPKnyBx1/CMH16evnMpOHI7/hd

Entry address:
0xA5F8

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, CE, 8A, FF, FF, E8, D5, 9C, FF, FF, E8, 64, 9F, FF, FF, E8, 07, A0, FF, FF, E8, A6, BF, FF, FF, E8, 11, E9, FF, FF, E8, 78, EA, FF, FF, 33, C0, 55, 68, C9, AC, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 92, AC, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 26, F5, FF, FF, E8, 11, F1, FF, FF, 80, 3D, 34, B2, 40, 00, 00, 74, 0C, E8, 23, F6, FF, FF, 33, C0, E8, C4, 97, FF, FF, 8D, 55, F0, 33, C0, E8, B6, C5, FF, FF, 8B, 55...
 
[+]

Entropy:
7.9973

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
39.5 KB (40,448 bytes)

The file kantoplayer.exe has been seen being distributed by the following 6 URLs.

http://www.softonic.com/sads/tracker.php?ev=c&co=SV&sid=b5cf92181724c1384825c5f02872511f&upv=525cd78c6c7344bf4e53b9d709493a71&z=results&sk=0&abt=&eid=ADC-249&params=F24F8F4D368AFA5D32C8A90D9EFD1CBAC9B15663BFCC32A4B420C96190DC24F2C5A95DD48BEC7DE4585B81C85FFC89A0EC240225339F7EC4049B74FD2F3060EB7871674AEA6C4C9B014BE4649869384796ADBDD21930D4FAFA8387A38FF1E5301227FA125567FA5E85B8E1FE3512A8F71CA51B08B6C7362E09E05DAA080AB46CECBDA8F704AB923602116AEFF8EFC2E6E5B6256359BCBCB67DFBEC0EA2DFA96AF053DFE958A9344F02725F764B8D4007&h=F5BE1F42C48112DAB75DBE1FF7F8BE949C6F654C57BCA1A88079B1B44B8AD713&directdownload=1&f=69684966&d=http://www.download77.net/.../KantoPlayer.exe

http://www.softonic.it/sads/tracker.php?ev=c&co=IT&sid=246c28dbd3cda9e628552f11cd229527&upv=2cd107c99a9c1dfc8964153c7786ebc3&z=results&sk=0&abt=&eid=&params=F24F8F4D368AFA5D32C8A90D9EFD1CBA6DDFC07E15CA71849BF2BD7E5BEEEA5107EEFCB0A59A63EFDBA1B6EEA53E40D5886E47DBB9999EC83DE929D34DC06FF524C75E64E5DFCB59EA82BD0764D8E330564E5CC3A2C0DC88F2F3763B37E5E5A93AA4949204E769C345F55A31E6B1AAAB038BD03FB9521CE7940C65B63AC7CF1DFD8AF7AAF2A11BCAF6767DC2751ADC40774D0D62991F422E74B5D139B8F7BF3E&h=266CA280A04DCA7C8DD8C9DF0DFB308AD4D08DBA6FD99E78F9ABB15DA346C1B1&directdownload=1&f=69684966&d=http://www.download77.net/.../KantoPlayer.exe

http://software-files-a.cnet.com/s/software/14/30/63/.../KantoPlayer.exe

http://www.softonic.it/sads/tracker.php?ev=c&co=IT&sid=50c62cd3174dfc4f6513b78909c052ab&upv=d795916ffd5564bc81e2ff77d1a33911&z=list&sk=2040&abt=&eid=&params=F24F8F4D368AFA5D32C8A90D9EFD1CBA6DDFC07E15CA71849BF2BD7E5BEEEA5154D3DB1FAE5C0FCF65B87D5CF2B383AFC9BFE88C2B69ECF89112D86E6A9DBB4B9AD3077694E2739A81FA2EC0E5DF287FB26F3F7EC50D073D4E1B8BD1E78BD6B40A02C22A26BF575B7B881DE2209BD7381108587652EBF11C080B0BD8D2E1CE1FE221C08C7F00F3538880E7AD6CB478868AC77C1ABB4D6224A44BB616ADCC1FFD&h=6E5B8EBAA0B067C70163165052C72F1C3CDCF585B7A866AA1C9AFF23DA0E7FC8&directdownload=1&f=69684966&d=http://www.download77.net/.../KantoPlayer.exe

http://www.download77.net/.../KantoPlayer.exe

http://download77.blotek.it/.../KantoPlayer.exe

Scan kantoplayer.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.