The Kontakt_Button.exe (Kontakt Library Tools) File Analysis

Updated 11 months ago

Checked by Malware Check

Kontakt_Button.exe

Technical Analysis

File Name	Kontakt_Button.exe
File Type	Win32 EXE
Magic Bytes	`PE32+ executable (GUI) x86-64, for MS Windows`
SSDEEP Hash	196608:Ej+IxQCnSBxdkhk7xjCcmccBfedgrJtMYVkIsuh/J8ran5NoYjqbz02GsnftWkQN:nfBjck7xjCcm5pOAtDuuxJrToMToWkC
Scanner Version	1.0.183.174
Database Version	2024-07-25 15:00:14 UTC

⚠

Suspicious File Detected

Detected by 19 security engines - requires caution

This file requires additional checking for potential threats. Based on suspicious indicators, we will soon add it to our virus database.

26%

Detection Rate

11,931,547

File Size (bytes)

19/74

Engines Detected

2024-07-25

Analysis Date

Scan Another File

File Identification

Hash Type	Value	Action
MD5	8004baac30d89d12ad6451963822d83f
SHA1	28ee4629801933e5c41955d26ed1909f67ef84a3
SHA256	d2aaecf14e2ec86e964b0782d539a1ea661d4ad6e46df8565966d38bd54074be
SHA512	5e7b66dfcc780b9cc6c23cd322e08b0711e32567fc49c8ac06e4c6f8382f7d169d6edc3a8a30353131f56b0b15b95beea854c86a8ac7caf7bbb4a9f2b1bcf6b5
ImpHash	e2a1496c94d52a035fe47259ee6587b7

Security Engines with Detections (19 of 74)

Bkav

W64.AIDetectMalware Malicious

Lionic

Trojan.Win32.Generic.4!c Malicious

Cylance

Unsafe Malicious

K7GW

Riskware ( 00584baa1 ) Malicious

K7AntiVirus

Riskware ( 00584baa1 ) Malicious

VirIT

Trojan.Win32.MSIL_Heur.A Malicious

APEX

Malicious Malicious

TrendMicro-HouseCall

TROJ_GEN.R002H01BT24 Malicious

McAfeeD

ti!D2AAECF14E2E Malicious

Sophos

Generic Reputation PUA (PUA) Malicious

Ikarus

Trojan-Dropper.Win64.Agent Malicious

Google

Detected Malicious

Antiy-AVL

Trojan/Win32.Inject Malicious

Microsoft

Trojan:Win32/Casdet!rfn Malicious

Malwarebytes

Malware.AI.1178325667 Malicious

MaxSecure

Trojan.Malware.218710574.susgen Malicious

Fortinet

W32/PossibleThreat Malicious

DeepInstinct

MALICIOUS Malicious

alibabacloud

Trojan:Win/Casdet Malicious

55 engines reported no threats - Only engines with detections are shown above for clarity

PE Analysis

Basic Information

▼

Icon	Hash: f2e80604aa02f39a62e5cbd5253968ed Fuzzy: b2e38e9f745e275cbc4759cb33072cab dHash: 619cc2a4a8c29c61
Image Base	`0x140000000`
Entry Point	`0x140024b40`
Compilation Time	2021-06-11 09:16:51
Checksum	0x00c9dd29 (Actual: 0x00b6d584)
OS Version	5.2
PEiD Signatures	`PE32+ executable (GUI) x86-64, for MS Windows`
PDB Path	`D:\Projects\WinRAR\sfx\build\sfxrar64\Release\sfxrar.pdb`
Digital Signature	The PE file does not contain a certificate table.
Imports	2 libraries KERNEL32, gdiplus
Exports	0 functions
Resources	22 Resources
Sections	7 Sections

Version Information

▼

Comments	Kontakt Library Tools 7.0.0
CompanyName	Native Instruments
FileDescription	Kontakt Library Tools
FileVersion	7.0.0.0
LegalCopyright	Bob Dule
ProductName	Kontakt Library Tools 7
ProductVersion	7
Translation	0x0409 0x04e4

PE Sections

▼

Name	Virtual Address	Virtual Size	Raw Size	Entropy	Characteristics	MD5
`.text`	`0x00001000`	223,632 bytes	223,744 bytes	6.50 (Compressed)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`46C4528142A5CFEABEAC728092A91E6D`
`.rdata`	`0x00038000`	65,754 bytes	66,048 bytes	5.12 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`E64EB928F7D6295D35C50D7749291EAB`
`.data`	`0x00049000`	148,996 bytes	5,120 bytes	3.41 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`420B2AC233806469E06A0C24A1F36CB0`
`.pdata`	`0x0006e000`	10,512 bytes	10,752 bytes	5.46 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`6FDB73CC0B766486CDA79210BA844A69`
`.didat`	`0x00071000`	808 bytes	1,024 bytes	2.82 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`C28FFF66265942C60E7D237926BF449D`
`.rsrc`	`0x00072000`	29,335 bytes	29,696 bytes	6.22 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`4B859B6E3C5FCCF071FE617344AA8E1A`
`.reloc`	`0x0007a000`	2,264 bytes	2,560 bytes	5.15 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_DISCARDABLE\|IMAGE_SCN_MEM_READ`	`584FD4C0FFAA2CA2F3709283EA7C2F95`

Entropy Analysis Alert

1 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼

Total Resources: 22 (27,919 bytes)

Resource Type	Count	Total Size	Percentage
PNG	2	8,430 bytes	30.2%
RT_ICON	1	9,832 bytes	35.2%
RT_DIALOG	6	2,916 bytes	10.4%
RT_STRING	10	4,166 bytes	14.9%
RT_GROUP_ICON	1	20 bytes	0.1%
RT_VERSION	1	680 bytes	2.4%
RT_MANIFEST	1	1,875 bytes	6.7%

Certificate Chain Analysis

▼

Certificate Information

Product	Kontakt Library Tools 7
Description	Kontakt Library Tools
File Version	7.0.0.0
Copyright	Bob Dule

✓ This file has been digitally signed and the certificate chain has been verified

The signature ensures file integrity and authenticity from the publisher
Timestamping proves when the signature was applied

Certificate Verification Status

The PE file does not contain a certificate table.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
Email Security: Be cautious with email attachments and links, even from known contacts.

Proactive Protection

19 antivirus engines detected potential threats. This could be a false positive, especially for system tools or packed software. Verify the file source and check if it's digitally signed by a trusted publisher.

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.

Your Score for

5 4 3 2 1