home

mkvtoolnix-amd64-7.5.0-setup.exe

MKVToolNix

Moritz Bunkus

The executable mkvtoolnix-amd64-7.5.0-setup.exe has been detected as malware by 4 anti-virus scanners. The program is a setup application that uses the Nullsoft Install System installer, however the file is not signed with an authenticode signature from a trusted source. The file has been seen being downloaded from download.fosshub.com and multiple other hosts.
Publisher:
Moritz Bunkus

Product:
MKVToolNix

Description:
MKVToolNix 7.5.0

Version:
7.5.0

MD5:
c238ab125e40b95005b0a08961f6581c

SHA-1:
8d77bbdb5ca5975806e4fe6db38671fb9120b312

SHA-256:
b29c8cf5a5bef76932d5acb1179840e0f590a59ee7fea77e73ddf3f398af5a6a

Scanner detections:
4 / 68

Status:
Malware

Explanation:
This is part of the Crossrider Internet browser extension framework which may modify the user's web browser settings including changing the home and search pages.

Note:
Crossrider is the owner of a platform that enables the creation of cross-browser extensions by developers but is not the owner of this detected application.

Analysis date:
4/23/2024 10:51:43 AM UTC  (today)

Scan engine
Detection
Engine version

Panda Antivirus
Eicar.Mod
15.01.05.07

Reason Heuristics
Threat.Win.Reputation.IMP
16.12.2.14

Trend Micro House Call
Suspicious_GEN.F47V0105
7.2.105

ViRobot
Trojan.Win32.A.Badur.18790552[h]
2014.3.20.0

File size:
17.9 MB (18,790,552 bytes)

Product version:
7.5.0

Copyright:
Moritz Bunkus http://www.bunkus.org/videotools/mkvtoolnix/

File type:
Executable application (Win32 EXE)

Installer:
Nullsoft Install System

Language:
English (United States)

Common path:
C:\users\{user}\downloads\mkvtoolnix-amd64-7.5.0-setup.exe

File PE Metadata
Compilation timestamp:
3/4/2014 9:01:41 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.23

CTPH (ssdeep):
393216:n7lLu5NVFba69iZnA7QHldkalKjgOruXgo/psBmU8YQ7ADJ8:2NPWUT7QHl298OrIgoqmJY5Du

Entry address:
0x433F

Entry point:
55, 89, E5, 57, 56, 53, 81, EC, 9C, 01, 00, 00, FF, 15, 74, F3, 44, 00, C7, 04, 24, 01, 80, 00, 00, FF, 15, 58, F4, 44, 00, 53, C7, 04, 24, 00, 00, 00, 00, FF, 15, 98, F4, 44, 00, 56, C7, 04, 24, 08, 00, 00, 00, A3, 40, 6B, 44, 00, E8, 49, 3C, 00, 00, A3, 9C, 6B, 44, 00, 8D, 85, 88, FE, FF, FF, 57, C7, 44, 24, 10, 00, 00, 00, 00, C7, 44, 24, 0C, 60, 01, 00, 00, 89, 44, 24, 08, C7, 44, 24, 04, 00, 00, 00, 00, C7, 04, 24, 01, B3, 40, 00, FF, 15, AC, F4, 44, 00, 83, EC, 14, C7, 44, 24, 04, 02, B3, 40, 00, C7...
 
[+]

Entropy:
7.9951  (probably packed)

Code size:
34.5 KB (35,328 bytes)

The file mkvtoolnix-amd64-7.5.0-setup.exe has been seen being distributed by the following 19 URLs.

http://download.fosshub.com/Protected/expiretime=1423329934;badurl=aHR0cDovL3d3dy5mb3NzaHViLmNvbS9NS1ZUb29sTml4Lmh0bWw=/6706bd8d5092b76ad71820682f55a796787fa9eabb5d0dfa8d0627e884d4f119/.../mkvtoolnix-amd64-7.5.0-setup.exe

http://download.fosshub.com/Protected/expiretime=1420736611;badurl=aHR0cDovL3d3dy5mb3NzaHViLmNvbS9NS1ZUb29sTml4Lmh0bWw=/85a151408561f5a011066fbbebe57ef528f104e56325e8bae048aaf6d8bfccfe/.../mkvtoolnix-amd64-7.5.0-setup.exe

http://download.fosshub.com/Protected/expiretime=1423002868;badurl=aHR0cDovL3d3dy5mb3NzaHViLmNvbS9NS1ZUb29sTml4Lmh0bWw=/a34abdd3370f91e969817ed87c531a7ad8b3191ba2a07f545df6a836573c4f60/.../mkvtoolnix-amd64-7.5.0-setup.exe

http://download.fosshub.com/Protected/expiretime=1421723215;badurl=aHR0cDovL3d3dy5mb3NzaHViLmNvbS9NS1ZUb29sTml4Lmh0bWw=/3e4a4c2d07d1538f8485f4fc4b0ade6478c1fe667de776ae08947487932c7ddc/.../mkvtoolnix-amd64-7.5.0-setup.exe

http://dl15.afterdawn.com/download/b0ed731334bf5840fd8fe48549c0558f/57b92738/.../mkvtoolnix-amd64-7.5.0-setup.exe

http://download.fosshub.com/Protected/expiretime=1420806214;badurl=aHR0cDovL3d3dy5mb3NzaHViLmNvbS9NS1ZUb29sTml4Lmh0bWw=/e54dfcb24a4587e2bf79d94856c107d9f3f5cc02bb53d9bf4b8a083893bd90c4/.../mkvtoolnix-amd64-7.5.0-setup.exe

http://download.fosshub.com/Protected/expiretime=1420492079;badurl=aHR0cDovL3d3dy5mb3NzaHViLmNvbS9NS1ZUb29sTml4Lmh0bWw=/b0d004e9edf32621e4e5c70073919514fa30f2142c53ef133c39710d6d4cab40/.../mkvtoolnix-amd64-7.5.0-setup.exe

http://download.fosshub.com/Protected/expiretime=1420489250;badurl=aHR0cDovL3d3dy5mb3NzaHViLmNvbS9NS1ZUb29sTml4Lmh0bWw=/c4fa65777dde629a405aea1232cb43217ed163ddb3f6700fa4a596bbbe1f96df/.../mkvtoolnix-amd64-7.5.0-setup.exe

http://www.freecodecs.net/fc/.../mkvtoolnix-amd64-7.5.0-setup.exe

http://www.free-codecs.com/download_soft.php?d=c7b01767549809993feff16af379a77a&s=689&r=&f=MKVToolnix.htm

http://download.fosshub.com/Protected/expiretime=1421488325;badurl=aHR0cDovL3d3dy5mb3NzaHViLmNvbS9NS1ZUb29sTml4Lmh0bWw=/aca18aed063b03c567eb0d34ca205f17911c1a27515ad266e73f47ff5f3be4a5/.../mkvtoolnix-amd64-7.5.0-setup.exe

http://download.fosshub.com/Protected/expiretime=1421437371;badurl=aHR0cDovL3d3dy5mb3NzaHViLmNvbS9NS1ZUb29sTml4Lmh0bWw=/3e4bcd4fc38931a94a41ea23a4545c687aca9726c5a542975a62f9b75394f2f3/.../mkvtoolnix-amd64-7.5.0-setup.exe

http://download.fosshub.com/Protected/expiretime=1420871010;badurl=aHR0cDovL3d3dy5mb3NzaHViLmNvbS9NS1ZUb29sTml4Lmh0bWw=/968b21a24b02bae54579f46d26f10c89313eb295e810d5d18d30d0b8fe51f417/.../mkvtoolnix-amd64-7.5.0-setup.exe

http://download.fosshub.com/Protected/expiretime=1421821680;badurl=aHR0cDovL3d3dy5mb3NzaHViLmNvbS9NS1ZUb29sTml4Lmh0bWw=/c1e5eb059accfe2b1cbd328f9e9c308272714a9c1c8ae1ac02d9bb96d9acf690/.../mkvtoolnix-amd64-7.5.0-setup.exe

http://download.fosshub.com/Protected/expiretime=1422555503;badurl=aHR0cDovL3d3dy5mb3NzaHViLmNvbS9NS1ZUb29sTml4Lmh0bWw=/83efd405ef470eacf16676e1cb55ee6c316497dbd3960c42c5e466fbb0f79c24/.../mkvtoolnix-amd64-7.5.0-setup.exe

http://www.videohelp.com/.../mkvtoolnix-amd64-7.5.0-setup.exe

http://www.free-codecs.com/download_soft.php?d=c5b758df1ec5f2e29806037aa6f832d2&s=689&r=&f=MKVToolnix.htm

http://download.fosshub.com/Protected/expiretime=1420432456;badurl=aHR0cDovL3d3dy5mb3NzaHViLmNvbS9NS1ZUb29sTml4Lmh0bWw=/dd92d271040c1b78d3a905f386d490f53c9aac81b70d86d7d394d46743bee7a4/.../mkvtoolnix-amd64-7.5.0-setup.exe

http://download.fosshub.com/Protected/expiretime=1421762640;badurl=aHR0cDovL3d3dy5mb3NzaHViLmNvbS9NS1ZUb29sTml4Lmh0bWw=/49ce1bc6e56b15161315e2b044847acffbb9c22d456418e751eddb7b7af6972d/.../mkvtoolnix-amd64-7.5.0-setup.exe

Remove mkvtoolnix-amd64-7.5.0-setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.