home

wanko_to_kurasou_english_v1.0.exe

Wanko to Kurasou English

The program is a setup application that uses the Inno Setup installer. This is installed with Wanko to Kurasou English v1.0. The file has been seen being downloaded from tindabox.net and multiple other hosts.
Product:
Wanko to Kurasou English

Description:
Wanko to Kurasou English v1.0

Version:
1.0.0.0

MD5:
7b8345b6e9edb4bb34ae86befac92c2c

SHA-1:
fbd16a9cac2a0ef035c02ac20a77654a98824523

SHA-256:
242c895fe6e7581b01ea73a0ba3ec303846ddb499735735d5a893427cbf697a8

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 6:37:23 PM UTC  (today)

File size:
20.9 MB (21,941,858 bytes)

Product version:
1.0.0.0

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
Language Neutral

File PE Metadata
Compilation timestamp:
6/19/1992 5:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
393216:EPrijKM/ogFQTuyXQoQKIFrh8hhOmz3BHhYwtCprfbadr3fDvidVnf5Vs:EP+3/ogFQAo5I+hhOmswg9aF0hO

Entry address:
0x9A58

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 6E, 96, FF, FF, E8, 75, A8, FF, FF, E8, A0, CA, FF, FF, E8, E7, CA, FF, FF, E8, 0E, F3, FF, FF, E8, 75, F4, FF, FF, 33, C0, 55, 68, 0B, A1, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, D4, A0, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 9B, FE, FF, FF, E8, 02, FA, FF, FF, 8D, 55, F0, 33, C0, E8, AC, D0, FF, FF, 8B, 55, F0, B8, E4, CD, 40, 00, E8, 1F, 97, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, E4, CD, 40, 00, B2, 01, B8...
 
[+]

Entropy:
7.9999

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
36.5 KB (37,376 bytes)

The file wanko_to_kurasou_english_v1.0.exe has been discovered within the following program.

Wanko to Kurasou English v1.0
About 8% of users remove it
 
Powered by Should I Remove It?

The file wanko_to_kurasou_english_v1.0.exe has been seen being distributed by the following 2 URLs.

https://tindabox.net/download?id=16

http://downloadani.me/.../Wanko_to_Kurasou_English_v1.0.exe

Scan wanko_to_kurasou_english_v1.0.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.