home

kazaa-lite-resurrection-0-0-9-es-en-pt-fr-de-ar.exe

Kazaa Lite Resurrection

FileSharingZ

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from dw.uptodown.com and multiple other hosts.
Publisher:
FileSharingZ

Product:
Kazaa Lite Resurrection

Version:
0.0.9

MD5:
cbb310cbf1d69fb1c3c7b08e3de10551

SHA-1:
bbb846dd2c37a00b33f29e067dce5a7599b84bdd

SHA-256:
5bb442a3012848a4d49d283011e12c01264448586abfc9397da6f5a068d06424

Scanner detections:
2 / 68

Status:
Inconclusive  (not enough data for an accurate detection)

Analysis date:
4/25/2024 9:50:00 PM UTC  (today)

Scan engine
Detection
Engine version

Avira AntiVirus
SPR/KillProc.B
7.11.173.240

NANO AntiVirus
Trojan.Win32.XPACK.cumscq
0.28.2.62286

File size:
4.4 MB (4,620,003 bytes)

Product version:
0.0.9

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\kazaa-lite-resurrection-0-0-9-es-en-pt-fr-de-ar.exe

File PE Metadata
Compilation timestamp:
6/19/1992 3:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
98304:NHpe7ARWGAdGCev/IBYzkrKr+Cga7KggfIF5/ucE2/rltg4TjPb9Ug:rWGU0IGwmrNgPgF/VZtL9Ug

Entry address:
0x9A58

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 6E, 96, FF, FF, E8, 75, A8, FF, FF, E8, A0, CA, FF, FF, E8, E7, CA, FF, FF, E8, 0E, F3, FF, FF, E8, 75, F4, FF, FF, 33, C0, 55, 68, 0B, A1, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, D4, A0, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 9B, FE, FF, FF, E8, 02, FA, FF, FF, 8D, 55, F0, 33, C0, E8, AC, D0, FF, FF, 8B, 55, F0, B8, E4, CD, 40, 00, E8, 1F, 97, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, E4, CD, 40, 00, B2, 01, B8...
 
[+]

Entropy:
7.9965

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
36.5 KB (37,376 bytes)

The file kazaa-lite-resurrection-0-0-9-es-en-pt-fr-de-ar.exe has been seen being distributed by the following 15 URLs.

https://dw.uptodown.com/dwn/lCGhX8oKe_JH2B4XuhFUwcujUBM8c8d3mAMBAfvwQlMAJ2D39umJmek-94Af8y7JGcjqFg2nNSVXu_rpeEZUL9UXl63cH6i3bTzZEeJx0I_ValgbfUBf2tR99xId1DSn/0YICPOag138ArTMRgxH8xJMmay0U9HSTinrB5vhknUHK0TVuZqanI4CzptMuzz-EfuqGt4RBRnwUb23R-qaeipjL3-6vYmx1r95Rcp4-F8XBL2LPSpRzq7ngTKe9Ftl1/7DfAJnd__rESMCdbMSHq_O2ocpq9hRN_d4yNDDQEWkF1EAxr5aSGoSedV71DwraWxPfIuz2hQUZjsSoWoGrIHhTBokiJSV3dfDcCvcNPQ3AUIsDC8pUOmauJcLILUoej/.../

http://dw.uptodown.com/dl/1418808297/.../kazaa-lite-resurrection-0-0-9-es-en-pt-fr-de-ar.exe

http://dw.uptodown.com/dwn/hW7-FND5Qbci_C6ggKKsguc6t5cSTHS5yVkVCcQHOKRMDd7JubhYfrIDgClMNWIBDAb8J1wuey1f3HG6jVd5zmu8AK64b5wbzWhGXf05P9qufjKGx_FyxvWQR8uTLtwl/5negXHS09gYmdt60WESs58x0ErS0RDLiQ62cPgXnIVVuecZ0HD-70zPCB3s_XfqaKKYSpO0usTHMPM3NrSuG6Mz9deR2fYrvmE7RoFtzB1vyriu3DxFttdV83j2GLcB6/eCR2-_crnhCb2Bcn0PtdQTj4UVWtVoPvjw9bqsZ45tcogQbzanudUePwzUEOi9Fk62tjqsyXiIjiVl30SABArKZ6EJOe39nhvlAMBpGoaipL2DRaKtiWvlaCxWh6QPfX/.../

http://dw.uptodown.com/dwn/_F6gvFkU-ILWPRbkYDW1wpVYgvxLHxw6EO3l17BGucQ7VbZP1-YhOqOlENOwpbCsQAe7l9m2Y9UiRS4-MlA-D10hgKhHgv2_0u5K8LdpJ7RnPXjZQkKF4-CjMS5xJORE/ugLau-uOPGVtj4euzwgtgv-7kBW9g5fgh-k55q2X5mHTvu2SJ-rT3OtRU0kGu0K6sITauFLMhfeNAFcxY2ELLyw8gnxWzMPaK01Bd4dUJWKuZVsvPnwZauuwquItWSa2/UNWft86uiHGHSF0SVgRymjlBCDUTADoBfP7sTExBEo0ANq6HPXdans3nUqrzQMjmFS3F1euzxV9z9tr4zoQ0by2SJPBvrbh-gHsQQ9Arx60EhWmTCssKiG1VkWJ9yMx8/.../

http://pliki.programiki.pl/KLR009_(www.programki.pl).exe

http://dw.uptodown.com/dwn/u1_SkEWn-YdysX0rCAljys64r_J67okymb_tL4KeI1bx6-_biEC7NFvzbHK6xt85R5achszB3guDAdeJsEkiGpBVH2QqDutXgNKfZHx-Vqu2sT7x7C79t4HHmTiKDULV/rtv7Z1ZD8MQvP1zLHHHVRNIRoH8CnNpF8OCbyfP-MvCJ36RX8WxrNJYYzmoOPHw8e8_pqvGY9A-vBmc48_UYYlrsrcLtlBkZMCSvVJp2vkliCIr3s7U8ewBd7mPgcKbI/fAFCCEZfGqYDWg6scV_tfeICcBz5FsNqGfuyPnkgSeozmL2DRh_UuHvRILWsE0FoQfowZWlEHN5nQNJI7vA7Rjtc75tEbh26vl1jmTzsghzKKRqI-uF-Tck9UF_E5mcu/.../

http://dw.uptodown.com/dwn/6qUohNUJNsb8xDiyMsZM2Elxdfjt7GC1L1JpWCjNGaQaxi4eFUD8oHG1nYnXIiqx3DBNO8wfjwaBFhHS9WCvfnXFX6doUiHmGmUXEJaQxyzx8zD2q_pXrI_PrQMpk1pM/mGjnMD6h5cz0_E7pGUueJOH4ct_zigGToB6gJ_t9JGY0sGnJry4Nq7BzwLezKjD0IE0HagrgTgkGzCyvickjQutUZ9rEgAajmacXqAln7Ci3EOUVtxXiBZHI5AWzWchK/0Bi3cW4Gim4dx__sm5W5HUnrUONKtP7pRvFf_CWfheTiSIOYms0piPFvBtXQYwFnliMAXWSWpGafqBcLFy6ZEHwz2c-d3aYruaVFFM8KIPfmsBqCU0FsjFXK6hdFqOMH/.../

http://storage.shp.net.pl/KLR009_(shp.net.pl).exe

http://dw.uptodown.com/dwn/6q4G6ZiSHQw7HTlR5lsmk4UUCSDF1-uTWLgDsCsLjnSKTdPJNdC3skVQP618JYkg4jwhgBdvbyKmtHPWyiJgStdiMEQsiF8RDmbx0hadQys7-vPHl-PTLdG59GkSB4jH/07JMxutr7L6DISoBsxPCAci9ttQNxhMzK5fcU6EvR65PPk4em1BBFn6vWd-ZhPbLLrB2s1EXFxYEv1B0HMF_HGZ2ku5Di_bpBm1WEpRQ8eKp5Dk6xX4gouUl4ejdesu9/1tH_B6bgAzx0v92A4PL0jGurI_GTpz5JK9X2ytBbuMx02HqL66ylv8PHDJ75LHdj5cpTDhIwgu3Ocdi_-tImJIRrupGxBCNTgrpz9iI_ERX4KJTGbin__zZLr2J9O4ru/.../

http://storage.programki.pl/KLR009_(www.programki.pl).exe

http://dw.uptodown.com/dwn/B4sCC5mcFxRKHwtfbLHHH_Qi1RQnsevLZ7BGAAJAe82TaAfVx2_gsLjg0Y3RdxiuJrXyBgcCljkba_nIiL4fxYjFJFsWUtDs7TrlnQNR49nZIoKrz3K7BlN6Q3XRqkT2/1I5qsKuQPYYoy2y2NxFFNwiWlZwGNqTBS2pkyO0LNU0az69JjnHZQjqSBF9Uu-9LBiZSk4Qr3LJ7DZaoXuprZsU_aWfUq0lnvPTmAig88FhZXHG_3k2jcEQOHIWtiZdT/StZGcKbKpqKL3bVxfo1fspw2gZef1HFSMXLe3doXqPE1mEVKG7ePeNcDsDpJfRtQ8YrLw-G6cFiDe1jIiOuVpip_B1vdIalqRxdq1YpzwZMzYpBTrDp4cX8e6iMeNzAl/.../

http://dw.uptodown.com/dwn/0HXByyiqKJlxMoKiEdBZki6CzCfQfd8_uVOXTvIHmkP_qgdr3fUVbfh53MvWlkbRjVzGvgHS5J1tE4mb9PYx4Nzfg1kOqMfl2lfDw0YA0zv4To7vogrlkOMtduJpJ7Zq/G2IOx3YLWjvfz4blaxDAlAeOnBGeTg_w81phlhWrKB3fVTkH0pimfibFreW16HhVlorQlErjZAsV_kd5UgSUjqLr9mqZ6TEB7fheGz59oY3JtSUPeilYEoEA6ly9c-vU/FZeeKH2yIm5LKNEU0tpNFZ2fprjcN8dK6X6lxm3TA9wtGnWNA2ObR6aSzJmZu8vBor1NraltLro3KiQ65cDfuSZOcdSRR6S3zWnNfAfn2EB0PCCHqS__dWS_6n2tTJml/.../

http://dw.uptodown.com/dwn/5IqRl-mD2I8AvOWseVPnvHWvP_SA8jt9IOTRDEFh1U-yyXImDlG9ys3irATna1SyH8YGDZ_r3GFCQdazhuHZrzcXUd8bK_cifJ_F6oDhP_fqb_RgPCemWOaw5zweovd0/GjF-HAyy1m4LJFOn3f_0VniMkqD_4_zl0uMPj65H7KC-pqN3Sg2un5XSdrwl2FDDj3bNi1_dozw4zV5BJcLVqaDO1mAbByG7TmVoiX_U1K4YMbAU91uMamp3F0A5xiZ1/rtuC5wPEh2P2ipWZfJqnOmwlNezmDe2s0MlIgTz3YfCwACAHMSyn3OMW5mYgVi2eM5bZKlCFEOqdkaaxC02vxM2ATMrcVxHNfr96M6NeSzjO-CGETd5fsi4EwRg9D0JZ/.../

http://dw.uptodown.com/dwn/UWpeW2KHhUZaHqVahamqfuOpkXxzHW9UNmfPo3o-tEwMd-azlF0kueF8J_8BfUHz7kIS3c7N2ufbwhEdW3uXvTtN6LZXBHMipU2zEXWXZ7LYas-yB4C2EUaCbrHJ7qZF/6Mmdskeg3Q-j5VZCKtODS6LNZ1Op9TNC5xAW9NJiCvTQ70j6xwDPXbkOyfhsjTP--n3q4xI32R_djCZ1dl3gFJynWYoqMQFuGj_yNh3DLAMEPjsCzr2tQwW-XWhIVKJh/.../

http://dw.uptodown.com/dwn/KQNwXF52jwtpzi-LgV5jT2ssoF11lPmZ8u9SCZQUZFR01Ddavywzm8Ut2RdJG9zEy5C5kn_NbF3D_I_pqzqEeOLg7Y79HIt18dmXyPbo3inkNGt8fl8WPwJ3zlxk2biK/MSsXleOZPIUzifXXDHDAomwBy_4LY-XSG1jae-SS4f0edtShO7Jyml-7pdytj--XXr8iGImKay6rZDyvDZS0Lehmlgeoadwn5Oz4ckgBldMHo6u1g_t_VHA-C08mMwj_/.../

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.