home

mp3converter.exe

Nbxsoft Inc.

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from download1us.softpedia.com and multiple other hosts.
Publisher:
Nbxsoft Inc.

Description:
Free MP3 WMA WAV Converter Setup

MD5:
b3e2513fb46829d3780f5c072ff98ae3

SHA-1:
24da85e046b3a47ffbe932dfbdf19457f18adbf6

SHA-256:
42dcaa8ab150d263b573ae5ef125072d4be2497eca308574320139e3259e27f9

Scanner detections:
2 / 68

Status:
Clean  (2 probable false positive detections)

Explanation:
These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:
4/24/2024 2:42:11 AM UTC  (today)

Scan engine
Detection
Engine version

AVG
Win32/ElKern.C
2015.0.3409

Bkav FE
W32.Clod4a0.Trojan
1.3.0.4959

File size:
6.1 MB (6,371,313 bytes)

Copyright:
Nbxsoft Inc. 2000-2007

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\mp3converter.exe

File PE Metadata
Compilation timestamp:
6/19/1992 11:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
98304:d7pp6q0gtFznYETPVy4S6F1JDwPHiBoMzwyB4MBCCFAySsTvRZ/FI2V9l5OO37:wq3zYET1Mvi2mwyxCYAuTDFpVrr

Entry address:
0x98D8

Entry point:
55, 8B, EC, 83, C4, CC, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, EE, 97, FF, FF, E8, F5, A9, FF, FF, E8, 20, CC, FF, FF, E8, 67, CC, FF, FF, E8, 0A, F3, FF, FF, E8, 71, F4, FF, FF, 33, C0, 55, 68, 82, 9F, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 38, 9F, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, B0, 40, 00, E8, 9B, FE, FF, FF, E8, 26, FA, FF, FF, 8D, 55, F0, 33, C0, E8, E0, D0, FF, FF, 8B, 55, F0, B8, D4, BD, 40, 00, E8, 9F, 98, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, D4, BD, 40, 00, B2, 01, B8...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
36 KB (36,864 bytes)

The file mp3converter.exe has been seen being distributed by the following 8 URLs.

http://download1us.softpedia.com/dl/15d130c89ccdffa336494b952247fe4b/54159deb/100080951/software/multimedia/.../mp3converter.exe

http://s7725.chomikuj.pl/File.aspx?e=pn-2b36LiI9zMUN0dqU4m6TaCmxJtloFCXWOY5NsT026JtHcKQTWE7UERre7ISSkcJNxyjRN8x-jsaLiBjvLT4eRD1zp_-5qbfKrdm77VYdml9q6rWO-oIFiIXxM92kyyV4BD88I-LaZ9o35AWC2hg&pv=2

http://s10002.chomikuj.pl/File.aspx?e=pn-2b36LiI9zMUN0dqU4m_Qf4Wg2Q0S9S7zFmNFeRV9io56Vg6lYAX_xc8aKXEP0bD8fVN4BOaoa4dZDSCFZ0hLydfN5_V0ApA3xWoRFnRdTFE09xT5bVhSEWo8xzBlXf9_SrBU8w-ncz0MPFgRKTQ&pv=2

http://s10002.chomikuj.pl/File.aspx?e=pn-2b36LiI9zMUN0dqU4m21UdmfTy2vEbQ79op9g0oHAU0xIsy0xxXNT3llYKsQ7Mlq0JdlbqT0TZNMHNY7XLGYacjdpSLPWkCHA6OcN6_5d1uV7R2BHn_ck9E3a71Oq1f95jwmavQHRv_fgIs_2pQ&pv=2

http://tatus.hu/request.php?36189

http://s10002.chomikuj.pl/File.aspx?e=pn-2b36LiI9zMUN0dqU4m21UdmfTy2vEbQ79op9g0oF8tgWMjOqUMcjkQVbo0xLqs04oiqHr3rNrNxSDLu9DOAD3AjLXTeWp_X3ZuaUE0fY3fdI0n3dy1bx_MQWeRhmvj4Mog05SvMFruPiY7S1hBA&pv=2

http://www.video-gif-converter.com/.../mp3converter.exe

http://files.downloadnow.com/s/software/10/72/83/.../mp3converter.exe

Scan mp3converter.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.