home

karaokecdgcreatorsetup.exe

Karaoke CD+G Creator

Doblon

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from lb.cdn.m6web.fr and multiple other hosts.
Publisher:
Doblon   (signed by Doblon)

Product:
Karaoke CD+G Creator

Description:
Karaoke CD+G Creator Setup

MD5:
cc6f79893560a2395210124c415f657e

SHA-1:
245fbe4e73692ac9fcbbdc71a0ea4dcd13408753

SHA-256:
31ee6e5a60a67ac5f2157e508104deccd215a63fdca8a5f31ea8c2c440626e35

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
11/12/2024 7:29:20 PM UTC  (today)

Scan engine
Detection
Engine version

NANO AntiVirus
Trojan.Win32.TPM.dneywr
0.30.24.1357

File size:
15.7 MB (16,509,232 bytes)

Copyright:
© 2006 Doblon

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Common path:
C:\users\{user}\downloads\karaokecdgcreatorsetup.exe

Digital Signature
Signed by:
Doblon

Authority:
COMODO CA Limited

Valid from:
8/10/2011 9:00:00 PM

Valid to:
8/10/2016 8:59:59 PM

Subject:
CN=Doblon, O=Doblon, STREET=Dywizjonu 303 15C/12, L=Gdansk, S=Gdansk, PostalCode=80-462, C=PL

Issuer:
CN=COMODO Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00D0EEC14CB827B1428C342494A880071E

File PE Metadata
Compilation timestamp:
6/19/1992 7:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
393216:8I2iRB82t2IELf7IV6zEbDN5TWGaD/ZfhfQ:RRK2t2DLMczin7uZZfQ

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, 53, C9, FF, FF, E8, 9A, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, E8, CD, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, E8, CD...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file karaokecdgcreatorsetup.exe has been seen being distributed by the following 11 URLs.

http://lb.cdn.m6web.fr/d/c/a/534433b4761492d605f1bc5ef2b592ce/576a54bd/soft/.../karaoke-cd-g-creator_2-4-11_en_58632.exe

http://karaoke-cd-g-creator.fr.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAOt7av9KwgTuVxI5hynOxgYD4ZNZeX5LUFAuL1YfAW/gbcORhFPvr3PKZeMbIQ mTCs/xk15Sy0h4WCfEOoXl0qb61tTtVxaRzvxALAj3ykrME1Ln/.../rrElHR8=

http://www.tamindir.com/indir/MjAxNi0wMy0xOSAyMjoyNzozNA==/karaoke-cdg-creator/windows/.../

http://www.dostindir.com/kaydet.php?pid=szS1AAA=

http://gsf-cf.softonic.com/6de/2a8/.../file?SD_used=0&channel=WEB&fdh=no&id_file=50895&instance=softonic_en&type=PROGRAM&Expires=1459663650&Signature=LBbphPcA1pwevsCQVyiS2vJ8yZ7Pw4sc~eO16H~cwVVA7q81iEOlqgEFPUEXvbZpHe3ZXATwWZk9sKdtYfgnbuAXnDGocLnEEvxsjDwrNUtHa0Z9q9zkVtldI15QOcLwwEZUSjEwPS4xLvqU~2HB7daBcH48AJzAhQF4DVfWAnw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=karaokecdgcreatorsetup.exe

http://karaoke-cd-g-creator.software.informer.com/.../

http://www.programosy.pl/.../pobierz,powerkaraoke,2.html

http://download.powerkaraoke.com/karaokecdgcreatorsetup.exe

http://www.powerkaraoke.com/.../karaokecdgcreatorsetup.exe

http://karaoke-cd-g-creator.softonic.com/.../trmsvRChbxdrflJq3ZIylWv B6Q8 mgpLNhZYPVoOQv5RcrSRFs9QChqYHscfTnJ8DgNzeaJMyBCjzEdxoBNtYMLDrxaMEfAQb4IOGtLu76sc37JiCVfYJxHmrdpLEhus5ANxCukiGz1U7uZlbf1NO8=

http://karaoke-cd-g-creator.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAOt7av9KwgTuVxI5hynOxgYD4ZNZeX5LUFAuL1YfAW/gbcORhFPvr3PKZeMbIQ mTCs/xk15Sy0h4WCfEOoXl0qb61tTtVxaRzvxALAj3ykrME1Ln/.../rrElHR8=

Scan karaokecdgcreatorsetup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.