home

itibiti_knctr_c.exe

KNCTR

Itibiti Systems inc.

The application itibiti_knctr_c.exe, “KNCTR Setup ” by Itibiti Systems inc has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from en.softonic.com and multiple other hosts.
Publisher:
Itibiti Inc.   (signed by Itibiti Systems inc.)

Product:
KNCTR

Description:
KNCTR Setup

MD5:
588508393ffa7e1cf7eb1c56d57e4c5b

SHA-1:
1eb24a9eeeac810f024f9cda0fa7aeed82da1e8a

SHA-256:
44d19c259f4b9dc9ffc4701ef12880a8bbffa424e0108d83d78cd0a9f8fe656e

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
4/27/2024 12:24:51 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.Itibiti.KNCTR.Optional.Installer.Meta (L)
16.2.2.17

File size:
4.4 MB (4,605,552 bytes)

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
Language Neutral

Digital Signature
Signed by:
Itibiti Systems inc.

Authority:
COMODO CA Limited

Valid from:
4/9/2012 5:00:00 PM

Valid to:
4/10/2014 4:59:59 PM

Subject:
CN=Itibiti Systems inc., O=Itibiti Systems inc., STREET=30 West Beaver Creek Road, STREET=Suite 111, L=Richmond hill, S=ON, PostalCode=L4B 3K1, C=CA

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
2706332CEA5ECD5F764C92A7FA80B017

File PE Metadata
Compilation timestamp:
10/30/2010 1:54:54 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
98304:YjiCCrq8fzGrK9Ww0Lt7dklZNBa/mQdmnhIEUfH3ChQI:Yji5GwSvwFXmEOHShJ

Entry address:
0x16478

Entry point:
55, 8B, EC, 83, C4, A4, 53, 56, 57, 33, C0, 89, 45, C4, 89, 45, C0, 89, 45, A4, 89, 45, D0, 89, 45, C8, 89, 45, CC, 89, 45, D4, 89, 45, D8, 89, 45, EC, B8, B0, 52, 41, 00, E8, AC, 03, FF, FF, 33, C0, 55, 68, 45, 6B, 41, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 01, 6B, 41, 00, 64, FF, 32, 64, 89, 22, A1, 48, AB, 41, 00, E8, 4E, EC, FF, FF, E8, F5, E7, FF, FF, 8D, 55, EC, 33, C0, E8, 7F, 84, FF, FF, 8B, 55, EC, B8, AC, D6, 41, 00, E8, E2, E9, FE, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, AC, D6, 41, 00, B2, 01...
 
[+]

Entropy:
7.9917

Developed / compiled with:
Microsoft Visual C++

Code size:
84 KB (86,016 bytes)

The file itibiti_knctr_c.exe has been seen being distributed by the following 9 URLs.

http://en.softonic.com/sads/tracker.php?ev=c&co=US&sid=bf8cb7af3e0f9eca44ac01caf344fcf4&upv=92c6928339467ff0e78de2a964f9abe0&z=results&sk=0&abt=&eid=&params=F39B2A32BFC101987B1458170C278E031A872F37FCA34CAE6F173519F808D83AD9203F5D543CE96E5184D704EAD4E61DAB35BCE55E88BC9CC511087C2B938EB5965AE0D487A5283D932E69FD2140AC9D0932A46F7F149FB096D6DDF6CE2AA741A3F8BCC9B5D3A05F2A66583DAE2C473241E68563E874B5B0B689325E75A2E9F44C4004DBD10BA6CEC39C1A017CBDA2AF08D51EDFA6EAD9C7B5C671251180C44DFA8C9D163BF9831A9AF002AA2503A994&h=1085CAF659F080E73AF87D0478FED6899D8B764EA5B1712EE3ECCDBEA9AFF68B&directdownload=1&f=69672683&d=http://www.itibitiphone.com/download/download/.../Itibiti_Knctr_C.exe

http://en.softonic.com/sads/tracker.php?ev=c&co=US&sid=1dbab00cc3486987f2afe0afba809a35&upv=c681bd0bdfd5b6b7178807793e5f0eaf&z=results&sk=0&abt=&eid=&params=F39B2A32BFC101987B1458170C278E031A872F37FCA34CAE6F173519F808D83A7736A8B51F5A10293B33C782FD092C5A8DE687BFC95F66D680DA760203D6AAE684C40629B8CAC030BC1AAD7DA68ACE6950CBD2F40EF8675F460246F32A0BCF98512FCE29D4CE5A55FAE0485B4A0B64DF92E043C3FB1B93D29D849B9DCAE1ECB4D2B1078A29F5983494535447C6091EE124BB89C35B7E88864B43A6447EBA9CDDE73F8E872CF5DB864B6C21BAA730D0B8&h=82119DDCFC7EAE1EE85522C883FFB14CD56032CFDAF60A640F1DF24418C77252&directdownload=1&f=69672683&d=http://www.itibitiphone.com/download/download/.../Itibiti_Knctr_C.exe

http://en.softonic.com/sads/tracker.php?ev=c&co=US&sid=bfc65905fedfa59866e527520805d700&upv=bdba79eed8eef583e62d07357dd5237e&z=results&sk=0&abt=&eid=&params=F39B2A32BFC101987B1458170C278E031A872F37FCA34CAE6F173519F808D83AF85082F5CE88CEA7D5FABCFED9B1466E82F311F7D477156C997B77577789D5C22E4578A73FB2D2A2019257538ECADFC3EA96C970A0728D468AEF881885F6AD48C64A15AEC743050BAFB1585C203F6A05701E2C94CD87DC969E4F1AF38EE3825FDCD89ED3772AA464640A4DE85E8B069EBA4235B039CCA50B584FA7704B3834BEDCCAC747454E807ADC53F50C22C7044A&h=77422EE21770CB80D04A42DE0E3CC98CDDF89CFA94E3D4F014F13D41258D1237&directdownload=1&f=69672683&d=http://www.itibitiphone.com/download/download/.../Itibiti_Knctr_C.exe

http://en.softonic.com/sads/tracker.php?ev=c&co=AU&sid=fac54bf6577c5823590b76353e3e105e&upv=328e9b7002be53cf46f44f62cbaedfbf&z=results&sk=0&abt=&eid=&params=F39B2A32BFC101987B1458170C278E031A872F37FCA34CAE6F173519F808D83AF85082F5CE88CEA7D5FABCFED9B1466E18370008D6DB966D3FA7F3C7E08FB02B729E5841CBFE8B713D56C1AA2B703F078D46588F55BFAEC98340A38D082B4F433C56FA1869EE26EB741B1E63F0057901D753328B4580EA1C72658C6FB02B5CC915773126EF3C555DA9591093A53C70225B59D0C54A5D38B5A5C149CBE17459AB6148070C6D10A28B79A1D52E1FEDE2D5&h=0C455C5C1D905DF287B3D5229CFC38F66AA0B656FDFD16F5DF4168C857F53F27&directdownload=1&f=69672683&d=http://www.itibitiphone.com/download/download/.../Itibiti_Knctr_C.exe

http://en.softonic.com/sads/tracker.php?ev=c&co=CA&sid=29af0b07172a903b480f4d0d5e669f93&upv=76395b313111a24e973463fab11cc377&z=results&sk=0&abt=&eid=&params=F39B2A32BFC101987B1458170C278E031A872F37FCA34CAE6F173519F808D83AD9203F5D543CE96E5184D704EAD4E61D5C3723CC0AF352C58B934292C9DC5ADD2D7B732AFDEA040111B1A5B976CABBEA83B3B05F92DEE5C139B9CC4B55EA46E9EA8CB50941DE68AEE92DCEF4B53A1E5E26EE8715CD8BA5FCC49F8BC52C9212FE8ED48BC280ECA95DA402138E6D4DD6876A06E1FAE44042287B9FB8608F6E235D500D6D0FE2234029998CECC8F67D7DD3&h=2AC66B242E0A5DA82968D30F8E4736574E54E7420CB486B2FC36791506CEB1E0&directdownload=1&f=69672683&d=http://www.itibitiphone.com/download/download/.../Itibiti_Knctr_C.exe

http://en.softonic.com/sads/tracker.php?ev=c&co=US&sid=ac575ad4e08fde5c7489ff1ffeb5f62a&upv=307c4ce5e7c4279ae832769e454f84a5&z=results&sk=0&abt=&eid=&params=F39B2A32BFC101987B1458170C278E031A872F37FCA34CAE6F173519F808D83AC85C20244EED7677FD8C3F872FCA573E9B254D34479579FEA163C562994C32770D8AA704B096B5DFD33645D25C7A08408948CD12AC8DB38D50F698A471299CE6B967768B7DE988630B4AA3F43084DF568ABCFF7EBF8439BA3D26145084DB5ACBC3397D95CDB02C29396A1787C68C4CEF3ADECA925187255EFD2271BE867DB3663E8D32BC4FEB69057CC5CD777000FAFC&h=A95F653A0AFDCF2ADF0D7421EE49A835A02D273F18907064EAD31B569F9F438C&directdownload=1&f=69672683&d=http://www.itibitiphone.com/download/download/.../Itibiti_Knctr_C.exe

http://en.softonic.com/sads/tracker.php?ev=c&co=GB&sid=50cbd8bb4ee493f790a0fc1e9506406f&upv=6d4dec219dd515e1cb39c2cc1fca25c2&z=results&sk=0&abt=&eid=&params=F39B2A32BFC101987B1458170C278E031A872F37FCA34CAE6F173519F808D83AC85C20244EED7677FD8C3F872FCA573E866FF09DD7A604BF1C2284C7B84DC8A770082E3F9B09A0DA2BE492DF5E7DAAA04AE2D393541A2A2B0EDCF723A4D8BCF9A59419FCC0A5C83FAC9B1BCBD2BE9D788E3F1EE88D339C3FC5672FBCF1B5B31804BF80A181B10C827BF289D7F67ECD8124CCB650050DB5D24BB3A07C6642971B00CC86753A861EB1539A1E8EBC86283C&h=5D8A13910011B731EB9645877F1605C73BB2E0E1FD3B9A7CB9AAD5C186B11500&directdownload=1&f=69672683&d=http://www.itibitiphone.com/download/download/.../Itibiti_Knctr_C.exe

http://en.softonic.com/sads/tracker.php?ev=c&co=NZ&sid=50d65bb18262145d15a5ae53c96719d3&upv=ea64edfb41f99153ccce9303a5479390&z=results&sk=0&params=F39B2A32BFC101987B1458170C278E031A872F37FCA34CAE6F173519F808D83AEBE5DEC148D364A773E08D8C0B29809586239B8FB4BF12591752C562320D000E7CC9A2BD70F386AE94519D21874A4031A6FF587DF1791D90BD07FC44A89AC781B8910CE9C5BBDCEF2C341493AAC9205A41770ED239025AE6DC864F6124D1DA5E39E98CF207B37234B96A9E64BBE962B2F245E02E9A4FCCB551F4924FCC4F97E074301EECB3EE9981BD6E71B37A218F89&h=F066341A24F5D23267406EC35BB8A38AE539AC9382058FD4A927A80574A2B7FB&directdownload=1&f=69672683&d=http://www.itibitiphone.com/download/download/.../Itibiti_Knctr_C.exe

http://en.softonic.com/sads/tracker.php?ev=c&co=US&sid=c9ed0cfbb5c847b3a5055bb8579ef997&upv=8c956232e73d18ff8fe51a47732f6402&z=results&sk=0&abt=&eid=&params=F39B2A32BFC101987B1458170C278E031A872F37FCA34CAE6F173519F808D83A4EB5DD193769A500205E3597DFF0BA6BF6CCEDA22D8E04DE8944007CFA107FC47A114703F0261E53A1C4B4AC1A77CD846B65C863A94A667CFCA9713C706B9B7C738A423CA4CA272A5F1FE9FF5F8D77536D2069D4E2B772FAA1C5D2BE7B1B0681273657BBF60C715ADBCCC273A0C133FD01649916DBC6AF24E7123E04BDEBFC92F5E8F33D325B9D485FC34B53BC946747&h=42DC59486297814BF56E4DD72CD07D39B19A64BD0B8CF2FBFC47E5577D41DDC4&directdownload=1&f=69672683&d=http://www.itibitiphone.com/download/download/.../Itibiti_Knctr_C.exe

Remove itibiti_knctr_c.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.