home

mp3-knife.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from www.vins.co.il and multiple other hosts.
MD5:
a87cb82e77edb06a73c98517e903df70

SHA-1:
f662de63d82703287876af0030db5697e0704325

SHA-256:
d56dfb8093a7ad00fcffa72e909423291a6375e6b16e0267fe07dc4a985ccc65

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/23/2024 11:31:01 PM UTC  (a few moments ago)

File size:
1.9 MB (2,024,289 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\downloads\mp3-knife.exe

File PE Metadata
Compilation timestamp:
9/20/2012 1:57:03 AM

OS bitness:
Win64

CTPH (ssdeep):
49152:YplF02+/bb4+/GqTZe/azkGR8tbCCpAjqekiUZrmxs+L:GlO/bbJ7zk/hzujVUwxDL

Entry point:
32, 09, 6F, 51, 49, AC, 21, 35, 41, 1C, A9, 85, 7E, 23, DB, F3, E5, 2D, CD, 86, BD, EB, CB, 31, 63, AA, 03, 1E, F9, 94, D4, 9E, 5E, E8, 18, 4E, 94, D0, 16, 4F, 87, 39, 3B, ED, 94, 4A, 4D, 90, 52, 13, D7, 35, 02, E8, 16, DB, 01, 1F, DB, F7, 2D, 5D, F9, 32, C9, CF, C8, C2, 90, 60, 40, 68, 44, D8, 94, B7, 9F, 58, A8, 3A, 2E, 4B, F1, 5D, C6, FB, C0, 0A, 51, 77, 1A, F3, F1, 86, 46, 0E, 8F, 7C, 24, 80, 77, 0B, 6A, 82, 6E, 8F, EE, B6, 49, 0F, 3E, C3, 8A, 42, 19, 75, 09, 8D, 44, 14, BD, 80, 6F, 97, C3, 0A, E8, E4...
 
[+]

Entropy:
7.9690  (probably packed)

The file mp3-knife.exe has been seen being distributed by the following 3 URLs.

http://www.vins.co.il/.../mp3-knife

https://mail.google.com/mail/u/.../?ui=2&ik=d76039fc71&view=att&th=154d7db4b1a252da&attid=0.1&disp=safe&realattid=f_ioieewit1&zw

http://www.vins.co.il/.../mp3-knife

Scan mp3-knife.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.