» hko_download_manager.exe
Overview
Analysis
File Details
Programs (1)
Downloads (7)

hko_download_manager.exe

Hello Kitty Online DLM

Solid State Networks I, LLC

File name:

Publisher:

Hello Kitty Online (signed by Solid State Networks I, LLC)

Product:

Hello Kitty Online DLM

Version:

1,9,1,9

MD5:

8c242de941d262ae8429072dd3a583bd

SHA-1:

93e986d3e4b1db4b14086c19fa9578432eda3e16

SHA-256:

a9bd65afb61645fe917e627d0f7b19870cea465e3e709cd325f01d9c80ac6da4

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/25/2024 8:34:25 PM UTC (today)

File size:

1.1 MB (1,159,216 bytes)

Product version:

1,9,1,9

Original file name:

skinned.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\users\{user}\downloads\hko_download_manager.exe

Digital Signature

Signed by:

Solid State Networks I, LLC

Authority:

VeriSign, Inc.

Valid from:

6/17/2011 1:00:00 AM

Valid to:

6/17/2012 12:59:59 AM

Subject:

CN="Solid State Networks I, LLC", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Solid State Networks I, LLC", L=Tempe, S=Arizona, C=US

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

4A4969D093BB74D84E5320982E433C29

File PE Metadata

Compilation timestamp:

6/11/2011 8:51:00 AM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

24576:SdAwZootLKAXF3b8HyQWE20LsVm1JffT+ogrBT3YbLOiE:YAwZowuAXlbNrQ4ATBgyhE

Entry address:

0x9A8D8

Entry point:

E8, 5F, 62, 00, 00, E9, 78, FE, FF, FF, 8B, FF, 55, 8B, EC, 83, 3D, C0, 28, 4B, 00, 00, 74, 15, 68, C0, 28, 4B, 00, E8, 76, 63, 00, 00, 59, 85, C0, 74, 06, FF, 15, C0, 28, 4B, 00, E8, 59, 5C, 00, 00, 85, C0, 74, 07, 50, E8, 11, 5E, 00, 00, 59, FF, 75, 08, FF, 15, 24, F2, 4A, 00, CC, 6A, 0C, 68, 68, 78, 4C, 00, E8, 25, 60, 00, 00, E8, AC, 5C, 00, 00, 83, 65, FC, 00, FF, 70, 58, FF, 50, 54, 50, E8, A2, FF, FF, FF, 8B, 45, EC, 8B, 08, 8B, 09, 89, 4D, E4, 50, 51, E8, BE, 50, 00, 00, 59, 59, C3, 8B, 65, E8, FF... 
[+]

Entropy:

7.2429

Code size:

692.5 KB (709,120 bytes)

The file hko_download_manager.exe has been discovered within the following program.

BitTorrent by BitTorrent Inc.

BitTorrent is a desktop application that allows you to work with torrent files.BitTorrent allows you to download files available as torrents, search torrent sites for music, videos, books, software and other free or public domain material.

www.bittorrent.com

7% remove it

The file hko_download_manager.exe has been seen being distributed by the following 7 URLs.

http://download.freedownloadmanager.org/Windows-PC/.../FREE-1.9.9.0.2.html?ac7beb

http://goo.gl/K1ZSE

http://pod.installer.hellokittyonline.com/HKO_Download_Manager.exe

Scan hko_download_manager.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.