home

kntsetup.exe

This is a setup and installation application. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
MD5:
99f18d6e79fcca0d7f1ed8f457e23a0a

SHA-1:
d333279f5779a3c8e04e0ff81d6a5ad89dab18b3

SHA-256:
dd7bec2877635f14d20fb71ce2d31baae527704c0560cf5e6c5be1ce3d02938b

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
4/25/2024 9:06:02 PM UTC  (today)

Scan engine
Detection
Engine version

Emsisoft Anti-Malware
Gen:Variant.Adware.Graftor.125844
8.14.03.19.08

File size:
1.6 MB (1,668,896 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\kntsetup.exe

File PE Metadata
Compilation timestamp:
6/19/1992 6:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:JF/P4EkIWY+l9Aztj2wRNH/mkYG/M5SDITCLK+NpXBES4YdoEIAfQ0wT53+LDv:JZkd9cycGSDI4EFYdtfH434v

Entry address:
0xBE88

Entry point:
55, 8B, EC, 83, C4, B8, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, BC, 89, 45, B8, E8, C3, 71, FF, FF, E8, 72, 86, FF, FF, E8, 89, A8, FF, FF, E8, 4C, F5, FF, FF, E8, CB, FA, FF, FF, BE, 78, FE, 40, 00, 33, C0, 55, 68, 51, C4, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 10, C4, 40, 00, 64, FF, 32, 64, 89, 22, 8D, 55, F0, 33, C0, E8, 74, F2, FF, FF, 8B, 55, F0, B8, DC, FB, 40, 00, E8, 83, 72, FF, FF, 8B, 15, DC, FB, 40, 00, B8, E0, FB, 40, 00, E8, A0, 7C, FF, FF, C6, 05, 33, F0, 40, 00, 20, BA, 01, 00, 00...
 
[+]

Entropy:
7.9897

Developed / compiled with:
Microsoft Visual C++

Code size:
45.5 KB (46,592 bytes)

The file kntsetup.exe has been seen being distributed by the following 50 URLs.

http://gsf-cf.softonic.com/d33/327/.../file?SD_used=0&channel=WEB&fdh=no&id_file=21181&instance=softonic_en&type=PROGRAM&Expires=1480566851&Signature=J8id-RcOCfS2N1ZiOD9eI9~7NcqVrFqPsemcbZkjmH~flrJmDwn2I6C7ZoODIamb0MwFgPi7hFc2MgnwZUR~1YNLyEHJwxvthpDwpJJmjw~1tI3-Vo~hyks00ZWaj3cKtDmJQ2P1IFZsJHNU4h2RJDbxNsRJ4GLRrQZK9Z3eT3Y_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=kntsetup_165.exe

http://gsf-cf.softonic.com/d33/327/.../file?SD_used=0&channel=WEB&fdh=no&id_file=21181&instance=softonic_it&type=PROGRAM&Expires=1480638010&Signature=QdRupQSj0Wca1x5ZGzDM38UoUtws5TaijV5ezFusAdAy2D5sCWBu2lKIk~1HZ1zlhu1oHVUK5kWfHrfps3P3V7HqdJ0Yhce4CDRp0ECknku2IPvGQPuY7USPDQ0-vcvxQn9KQdV6FHcZSi9mJlL6CsZqOW5Nq~X2oGl-S2sm3~o_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=kntsetup_165.exe

http://gsf-cf.softonic.com/d33/327/.../file?SD_used=0&channel=WEB&fdh=no&id_file=21181&instance=softonic_en&type=PROGRAM&Expires=1486184695&Signature=Kluqm7LA7QzUKiEvXVEuWU92TP4wa65k3C~1TvbdD~7NDtjvT5lzTPnHaplgps3q3FeoMsT1a4WJOesOv1V9PY5BIQAJHWKV~VOwMWoQNv-cwiwqGjC-AOKKx7eVfj8x7HOtxtxMBpjyn4ntBGC6XiWoq6d4Ar9t0wjA7HI0VA8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=kntsetup_165.exe

http://gsf-cf.softonic.com/d33/327/.../file?SD_used=0&channel=WEB&fdh=no&id_file=21181&instance=softonic_pl&type=PROGRAM&Expires=1473895613&Signature=C76p2Q7~JvJ~Jm84I416RvOMMkczWjG3uP0pf-STTvkBcASPNkfIMGJZ2bdBp5Kq1HNHQstDPRTM3l0K88sD1N35uQMT3C4gOIokuLlkAEsj326Yiu5kzM8RQOUmZr-CpKIPiLMXOn6Va5~hKx8rdDqZXIgcRtvEpacVdWbuYmw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=kntsetup_165.exe

http://gsf-cf.softonic.com/d33/327/.../file?SD_used=0&channel=WEB&fdh=no&id_file=21181&instance=softonic_en&type=PROGRAM&Expires=1453602481&Signature=PHOsmE-41chDQpGyJ8-EJ1t5KDaVz1EOmlt~ZiIbstIop2YF20sXEpXPaSZtqOUDGWBcEAPzheG18kw421Tnrz7-GtRoieaXIRYlcBVNfaJ4WISWUtYpIm2goYJ3lhmZyzPrmZC3wbiv0cg1PS8csgoEe9iSMwiSUp-cdJ43F8I_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=kntsetup_165.exe

http://gsf-cf.softonic.com/d33/327/.../file?SD_used=0&channel=WEB&fdh=no&id_file=21181&instance=softonic_en&type=PROGRAM&Expires=1478087714&Signature=Ih~HI6hu0l7B9mgGMem8LgPknSC-8eLphlZzrg3HJLPeK71ZFBHSi4k394qAxIcCmoNUBYa~hNk1d89YIVwuEs4BCvi22l1k-1lps0ZEFiUcHa2NF5wMBjCGh1Ogd6Vq6oqYHH7mSva0qGrz9BQ2y8O61R7f6PQpY07vbqlzJlM_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=kntsetup_165.exe

http://gsf-cf.softonic.com/d33/327/.../file?SD_used=0&channel=WEB&fdh=no&id_file=21181&instance=softonic_en&type=PROGRAM&Expires=1463862050&Signature=ShTEd1l2rckM45UvXkSHkXBf21VS7gw1jr2NvqPzEyNfqQwfMEJJ0JjiOevx~U6qdii6cf3t7q1csv8q4izQ7oWE7j3F6nd5IuExpJcV4m2~CNNAW3r0njqAubnhlCG4JOgcTJQ~lSg0UPc-452GFRLEFRP03YUq3~fte4Ga1KY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=kntsetup_165.exe

http://gsf-cf.softonic.com/d33/327/.../file?SD_used=0&channel=WEB&fdh=no&id_file=21181&instance=softonic_pl&type=PROGRAM&Expires=1476048760&Signature=aknwTLB0XvN1tvqBmytzTsnWCu~Dkm2LNROZdaEenv1zCZb3OKdMG1yDEIeBRv~~ZYaOGOcgTIJ2f996HrGQogtxUfUkWmEf25zogl~dI92u54YZkI2FvqsO3wbfNUjIGMv0Pa9KJG2D3Ujc6X0rNmluuD2YT~dNSrZRV41gAGc_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=kntsetup_165.exe

http://ncu.dl.sourceforge.net/project/keynote/KeyNote 1.x/.../kntsetup_165.exe

http://soft.mydiv.net/win/dlfileb7671_36996/.../kntsetup.exe

http://gsf-cf.softonic.com/d33/327/.../file?SD_used=0&channel=WEB&fdh=no&id_file=21181&instance=softonic_en&type=PROGRAM&Expires=1477643655&Signature=IzPRartOg2DkdeolHYudwAnu~wOuDxOwHhrZgmZc3Ivuojy2~w4sqqzd06Gc~epEfdMUC4rPTT-NJoVccJhAUGPqhlOHN6wDFNh2Om1sokeNhbq6o3IyqGRd-wJvoWq7gYIo1vLrlwwCfl57C3yboJC71V1tNHuZn3u6XTQJ73g_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=kntsetup_165.exe

http://soft.mydiv.net/win/dlfile4e322_36996/.../kntsetup.exe

http://gsf-cf.softonic.com/d33/327/.../file?SD_used=0&channel=WEB&fdh=no&id_file=21181&instance=softonic_en&type=PROGRAM&Expires=1472176101&Signature=WN48ncSq1ZCCmWd5t6GFJxqi~dnZnj9ubTCx61IKxWaFdOKPQk9BeBp5IvW~MDRW8G74mKqJaJeFzAXLQ7jblWFjxW4XwxQSm4Z8u-9x4NpiTavRcI-oMlY2hByL3GYiR9nFRRxM4MUOOGf9U-YGH8KXZtXrMUKxWlZImBqy4E0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=kntsetup_165.exe

http://gsf-cf.softonic.com/d33/327/.../file?SD_used=0&channel=WEB&fdh=no&id_file=21181&instance=softonic_en&type=PROGRAM&Expires=1475010525&Signature=fh7G1Y~doAxpB~bk25A5lZ2eWPc0L-l7lWwOjyqK9qhOFHnO0FAnROlG8YlUSW8VwrVXX4DWomzSA0swof4r0ObMlrhFwZr~yRTnoo-CxCUdWw-11ooQ0G-hyK4ek48IT~WIijyNTw8g4-XAwksQ-N7XhloLaHEwSfO95puY2~I_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=kntsetup_165.exe

http://gsf-cf.softonic.com/d33/327/.../file?SD_used=0&channel=WEB&fdh=no&id_file=21181&instance=softonic_es&type=PROGRAM&Expires=1473394794&Signature=Dc8PIiluhRYJq33QftymlDFp0RLncD-PFUTk2HOAe23c3Mg0PBhYtCufKXL9nSzWl~fJ0~rWpL8UOBXBlMg4b7HdIE2mV7HdhfcTJ5Nk9VszXYzQrr85sFzk77SS8ZYCuR6u-v8o967eJghwNujibzM~SGINA7xbd~yxU78ju5g_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=kntsetup_165.exe

http://www.packagehostdownload.com/k5TBPwNvg8Rn3qIJCzb28d03hS7lWNuJr81T2eAGi18rg8Mg38eQgLBlmfZIcEahfJIf0jRAOxtbiC3iqSYe_sJID5QRPZZ6Mwa_fwhhLtaR1KMoU2zW4I5kEt7BgRMZYhR6Rqvkg5hiU2BlIxVD88TaGREMBUJ9RKAArkh2te27WhztemLzSwQ1VaxvDCcGP_cGygyLvEN1Gh5ZHa52U0VA5qNrBg==-Gy4AAERveH72XstBqFHAIQfs_6IEA7JgA04sKdjOGhPfa8o8Wz6ghedH1Ip7Y3wC

http://gsf-cf.softonic.com/d33/327/.../file?SD_used=0&channel=WEB&fdh=no&id_file=21181&instance=softonic_en&type=PROGRAM&Expires=1479099638&Signature=bRg1fcP11o8eE9MUC9h0N8PQ1~j0Do28qwVEl5DrQ0UQMVCw~-kTlpZO9xDj~ihtT5j6PixpRDfigCDacukyNAzIrs1bReN3w4af72s-ENCRt1k~9E0KkpWPKAsfUqWmzB1xhMe52jt-2aU4FkQ8PiWntuq4HDWRDtKF1ZMfGTo_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=kntsetup_165.exe

http://gsf-cf.softonic.com/d33/327/.../file?SD_used=0&channel=WEB&fdh=no&id_file=21181&instance=softonic_es&type=PROGRAM&Expires=1434513369&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=Po4pRN7Q2ZKc5Z2TlPCcisRMAzT6kxJ-9KvRBpOT4eNyMz82bPw2eBQflpCmOhmwQeyrQAi9vugh~7ZuWm4m-SmUgAMdouM76bf72nCXl0ALdnLmzTtQPbDdyq7M7WEmySo2KXsCr8ErbhTQol9rsKzkVT4OKA8Oq1QOXWw6irA_&filename=kntsetup_165.exe

http://gsf-cf.softonic.com/d33/327/.../file?SD_used=0&channel=WEB&fdh=no&id_file=21181&instance=softonic_pl&type=PROGRAM&Expires=1475531697&Signature=HrCUEgZfc2ZI6dHK8pnJmE4WD9s3LwLX3c~9YBK6UnQeYfOGjLybk9lB5-1vevBoPZZ8AFqwVFvQ9xLnhY1aZ62~L2kSdCaDyF8kI8ePMpD1EGahUFDj5N96~7BpghhK941FAHW7qU9Quzx79nTheHFlTzzMJQKPebtAlM75vrk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=kntsetup_165.exe

http://gsf-cf.softonic.com/d33/327/.../file?SD_used=0&channel=WEB&fdh=no&id_file=21181&instance=softonic_en&type=PROGRAM&Expires=1466971157&Signature=iarlwmS~0qa~n6xDz18i5M78gFQYkm9y0bPWUq3R6KAFnoMQqvqspxi3QpV6fQR17pdkbTpHnY9ha91Pt4kfMXHl6iNwr4l5XlCMQhd8rcozSpr256389v72zWN5MSlLG5QKoMhfyVaXVL3~13insdZL2umF60zDtMIVhmGRH94_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=kntsetup_165.exe

http://www.ranchsendgift.com/fOCCKRY9wDaOBnmtLNzGR0xgMHwXhDmTR5MRtXKnqI7ps9MUJm meYm5tRy3hXnla_xpck7kbKOFBjrRB9TIjNBS_EQZ2M kkEentpAcBpcar6PhI_D90jVRgaPoeEulYaGaDkgQQqEoTbhHwVuyB1Q1cN fRdl2ylkf Q2FZAAfUyC4NBX2NDz0JDxpBr2lkMpcFJqaNTfxeITet_0ln26oIKIBKcFtn5sWLHGSx1XOTVW2vp379xM6Dtjd5xlik0ZvU nHTbL9Aebh7RKWGINLGJoCX4MWjPe4GGQg9DUsDpeGDxqW4pCexggul_Mxw2eB7uziM6 gLUHj9jQlhqJnbisP8LWl623EhkjsZkCWCaVrPhL bBI66pM4iO_SPpDTcRc84CzuP5NuGSM0OsA8YkwyEpWtS1CTrzRN4ElFHXCBdZICXU9ER tXMFhbIskp8ckVEoZ_VECRh01_lqjtYH6BMA38aAaJFDaa0nJ46IxxbTpHtio6oyoho5iBJKJewJyV-Gy4AAERveH72XstBqFHAIQfs_6IEA7JgA04sKdjOGhPfa8o8Wz6ghedH1Ip7Y3wC-e

http://gsf-cf.softonic.com/d33/327/.../file?SD_used=0&channel=WEB&fdh=no&id_file=21181&instance=softonic_en&type=PROGRAM&Expires=1475397908&Signature=bhyMzvDRY8ec8Pye05moku24Whq0r38HscX5FAgVIV8FqBvhpCKxmCOKuAOhYU2Q82C6tAth1cp6uHpUXoVd03hvUB235wMDaoSskzQH2qcqOPtQnnjTHJAblI2jQTnJ0kkkAwFyfia9Iu6G~1aoaQQxBwhDVCC0bEAsYb8hSFA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=kntsetup_165.exe

http://gsf-cf.softonic.com/d33/327/.../file?SD_used=0&channel=WEB&fdh=no&id_file=21181&instance=softonic_en&type=PROGRAM&Expires=1476150033&Signature=Jzrhvyxla4RY2HvVkXf3N1bI-LFfmLjNGFWuFDKE5X8Mr1nS8WCQJbHVRsen6BM1T2yCAmX6rhbUa0XDC~ACoCbuT1feIsFtXQXCUE2ts~xRW7JOh0AOsZUzVYC5Ub5RS5Ouk8Lg2R282KHczc3pNNCeQOLZfDYAraD5ykIAoTM_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=kntsetup_165.exe

http://gsf-cf.softonic.com/d33/327/.../file?SD_used=0&channel=WEB&fdh=no&id_file=21181&instance=softonic_en&type=PROGRAM&Expires=1429509397&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=IqNrqMNU7gHaTPWzwX64uZvaI0Pqj3L3noWXxzsV7g7gMj~lvElxc131o6~PqEBcLAZP-95E~aDAE8eEMCovaH6FGfxex21l-Ggo3WHBj-oH6mUrDyZaTyP05ZLhS-v9uwRoc6z5uw~t7uPJHa4np4VEIX-wdhHYd2lGrXB3E10_&filename=kntsetup_165.exe

http://gsf-cf.softonic.com/d33/327/.../file?SD_used=0&channel=WEB&fdh=no&id_file=21181&instance=softonic_en&type=PROGRAM&Expires=1465878365&Signature=FbICMu-oeBzyNdGFT5EsyiZrJ3LQTNn8Jwuo48edjvWGNlW7ALLZhB79XReYwggWR~Kg98HHFhBTI2YnqHkbt2L8GFpPyWP4MnkO5YzH8MxpBJJjJRvVTpeO3U3QzwpEoav9KUSk~otKYbm3H0Swn3ZwCKyKiHwEW2hKzIvZHKE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=kntsetup_165.exe

http://gsf-cf.softonic.com/d33/327/.../file?SD_used=0&channel=WEB&fdh=no&id_file=21181&instance=softonic_en&type=PROGRAM&Expires=1481169879&Signature=UVqZCnxBxngoQZ8xJWL5bumrWFqx0EWKBZCD1z6vg~-rzjYNlOzkP6YMn0hmKDld1-94KHmwZA~3b7xFVZJbijjslCck4futWQrUhpQDYHKVUCZAWICwdZxhQlrdOJouuNT79RETYsuIgduxZ2ZDYQLtX~nujUJ6Imb4-PsU5m0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=kntsetup_165.exe

http://gsf-cf.softonic.com/d33/327/.../file?SD_used=0&channel=WEB&fdh=no&id_file=21181&instance=softonic_en&type=PROGRAM&Expires=1472302316&Signature=AVCQov1PzZcNkBnnyVgFVg5sP-3ZmQt6P0bmGmUaAQex-qUrK7Al4WiGLEsUYwRUfwvuYN23JtEBff8x9kyCmcThyT8otk1kcYG45fspLQ4duddPOCKzQxgCiQTkLIklKgGR3ruXykISlzQrvm61huQIMkOIt3P~ag6o-Fr4BdE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=kntsetup_165.exe

http://gsf-cf.softonic.com/d33/327/.../file?SD_used=0&channel=WEB&fdh=no&id_file=21181&instance=softonic_en&type=PROGRAM&Expires=1474567913&Signature=Eh3gb~pcIFoMRn4DcKyYxCeSu0xPMm5-h2KgP-8P3UiKpx1NrQRVxhHVbHEAlvJs0VPL9PrACMF1IRVE4Dz-AAxR6Sxz1368okpDU1VYTELIp4GEPQ1ExuLFjQO9GpQlEjgEH4Jtanyh31QgHyMtTBghWLVIr08RQ2q7J3VOhhU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=kntsetup_165.exe

http://gsf-cf.softonic.com/d33/327/.../file?SD_used=0&channel=WEB&fdh=no&id_file=21181&instance=softonic_en&type=PROGRAM&Expires=1458089496&Signature=Oox8DylUedds7QhYT2tXOVL95z5JHJLjJ75zxYJ69-2UtS6-r1EcTzch42rAHhlHDkyuePy3KQCiF~H-cVhGXwALDKMDRzrWoG1CXm52iWPlOZGYMFYVEryUUPQyJ7-7QzwjloYk9lAhQVKisKWFiSNw60h~9eDoBgUL9lUgVKg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=kntsetup_165.exe

http://gsf-cf.softonic.com/d33/327/.../file?SD_used=0&channel=WEB&fdh=no&id_file=21181&instance=softonic_pl&type=PROGRAM&Expires=1473210068&Signature=GTMGOnZynLV7Su5QugnZIJfZLoZuG9P2rlYA7KAA~PPX9YLN-AFN7z2PXfbMBdrnMo~Lk2iRarFWri1XFtF1U~1AZaSoZDhWbgkKUGh9CalNcj1BabWakhHpdDezm4EJackao3Ei-4wxSReMV5ufGspPqzJdX8~bqfC6cLU7WdI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=kntsetup_165.exe

Latest 30 of 76 download URLs

Scan kntsetup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.