mkvtoolnix-amd64-6.7.0-setup.exe

MKVToolNix

Moritz Bunkus

This is a self-extracting archive and installer. The file has been seen being downloaded from dw.html.it and multiple other hosts.
Publisher:
Moritz Bunkus

Product:
MKVToolNix

Description:
MKVToolNix 6.7.0 [20140102-565]

Version:
6.7.0 [20140102-565]

MD5:
f62e2258867a5ff3bec28bc7d9a6ffc7

SHA-1:
eaf7358d77be31a162a03a25fea85c0d9c97da64

SHA-256:
9f0228bd1439439e886111ecd3b55a815e46be6388fc32fe2b6b44a06e3d1f54

Scanner detections:
3 / 68

Status:
Clean  (3 probable false positive detections)

Explanation:
These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:
5/21/2018 10:35:35 AM UTC  (today)

Scan engine
Detection
Engine version

Panda Antivirus
Eicar.Mod
14.01.12.05

Quick Heal
EICAR Test File
1.14.12.00

Trend Micro House Call
TROJ_GEN.F47V0108
7.2.12

File size:
11.4 MB (11,948,236 bytes)

Product version:
6.7.0 [20140102-565]

Copyright:
Moritz Bunkus http://www.bunkus.org/videotools/mkvtoolnix/

File type:
Executable application (Win32 EXE)

Language:
English (United States)

File PE Metadata
Compilation timestamp:
12/18/2012 6:31:05 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.23

CTPH (ssdeep):
196608:nHk8JhHOxJMbsrp8q1z7AhU+JFfJj9oO84sWZ4lkSPupCoUtXsLWYoKlw:XJlbs9JzUhvFx9otmJppSsL/w

Entry address:
0x4378

Entry point:
55, 89, E5, 57, 56, 53, 81, EC, AC, 01, 00, 00, E8, 57, 58, 00, 00, C7, 04, 24, 01, 80, 00, 00, E8, 03, 55, 00, 00, 53, C7, 04, 24, 00, 00, 00, 00, E8, 66, 58, 00, 00, 56, A3, 40, 1B, 44, 00, C7, 04, 24, 08, 00, 00, 00, E8, 5C, 3B, 00, 00, 57, A3, 9C, 1B, 44, 00, C7, 44, 24, 10, 00, 00, 00, 00, C7, 44, 24, 0C, 60, 01, 00, 00, 8D, 85, 88, FE, FF, FF, 89, 44, 24, 08, C7, 44, 24, 04, 00, 00, 00, 00, C7, 04, 24, 01, B3, 40, 00, E8, 90, 57, 00, 00, 83, EC, 14, C7, 44, 24, 04, 02, B3, 40, 00, C7, 04, 24, A8, 1B...
 
[+]

Code size:
35.5 KB (36,352 bytes)

The file mkvtoolnix-amd64-6.7.0-setup.exe has been seen being distributed by the following 20 URLs.

http://dw.html.it/index.php?softname=mkvtoolnix-amd64-6.7.0-setup.exe&code=1477814606&q=NjU1NzZ8bWt2bWVyZ2U=

http://www.videohelp.com/.../mkvtoolnix-amd64-6.7.0-setup.exe

http://dw.html.it/index.php?softname=mkvtoolnix-amd64-6.7.0-setup.exe&code=1464627545&q=NjU1NzZ8bWt2bWVyZ2U=

http://dw.html.it/index.php?softname=mkvtoolnix-amd64-6.7.0-setup.exe&code=1477263433&q=NjU1NzZ8bWt2bWVyZ2U=

http://dw.html.it/index.php?softname=mkvtoolnix-amd64-6.7.0-setup.exe&code=1476891185&q=NjU1NzZ8bWt2bWVyZ2U=

http://download890.mediafire.com/acj466e53yjg/.../mkvtoolnix-amd64-6.7.0-setup.exe

http://ec.ccm2.net/es.ccm.net/download/.../mkvtoolnix-amd64-6.7.0-setup.exe

http://download866.mediafire.com/ak274aus43sg/.../mkvtoolnix-amd64-6.7.0-setup.exe

http://www.programosy.pl/.../pobierz,mkvtoolnix-mkvmerge-gui,3.html

Scan mkvtoolnix-amd64-6.7.0-setup.exe - Powered by Reason Core Security