home

nomoneyfreevideoconvertersetupstub.exe

Free Video Converter

Koyote-Lab Inc

The application nomoneyfreevideoconvertersetupstub.exe, “Free Video Converter Install” has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer, however the file is not signed with an authenticode signature from a trusted source. The file has been seen being downloaded from global-shared-files-l3.softonic.com and multiple other hosts.
Publisher:
Koyote-Lab Inc

Product:
Free Video Converter

Description:
Free Video Converter Install

Version:
1.0.0.129100

MD5:
6d91e0717ff0ca5f471f0d4d7d463465

SHA-1:
753736e42afa9fd93c6a033092ab9e38f03f2912

SHA-256:
dd5cbd7f35cdaecb19cd62afca90019a0cc03f1f6ae407aca5e244015c928350

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
4/23/2024 9:22:53 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.Koyote.Toolbar
16.2.9.14

File size:
960.9 KB (983,947 bytes)

Product version:
1.0.0.129100

Copyright:
Copyright (c) 2012

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Common path:
C:\users\{user}\downloads\nomoneyfreevideoconvertersetupstub.exe

File PE Metadata
Compilation timestamp:
5/30/2013 10:09:15 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
24576:EfYIHpp1voKrTTh7xfAAUfgktJAX3H8L2k71v:uJp1dr/h71AMyIH4bJ

Entry address:
0x38AF

Entry point:
81, EC, D4, 02, 00, 00, 53, 55, 56, 57, 6A, 20, 33, ED, 5E, 89, 6C, 24, 18, C7, 44, 24, 10, 68, A2, 40, 00, 89, 6C, 24, 14, FF, 15, 30, 90, 40, 00, 68, 01, 80, 00, 00, FF, 15, B4, 90, 40, 00, 55, FF, 15, BC, 92, 40, 00, 6A, 08, A3, 98, EB, 47, 00, E8, 25, 2A, 00, 00, 55, 68, B4, 02, 00, 00, A3, B0, EA, 47, 00, 8D, 44, 24, 38, 50, 55, 68, 64, A2, 40, 00, FF, 15, 80, 91, 40, 00, 68, 4C, A2, 40, 00, 68, A0, 6A, 47, 00, E8, 8F, 27, 00, 00, FF, 15, B0, 90, 40, 00, 50, BF, A0, F0, 4C, 00, 57, E8, 7D, 27, 00, 00...
 
[+]

Entropy:
7.9781

Packer / compiler:
Nullsoft install system v2.x

Code size:
29.5 KB (30,208 bytes)

The file nomoneyfreevideoconvertersetupstub.exe has been seen being distributed by the following 18 URLs.

http://global-shared-files-l3.softonic.com/753/736/.../file?nvb=20131019210542&nva=20131020090642&token=0f79b51c0d67d551c4f29&id_file=71282&channel=WEB&instance=softonic_es&type=PROGRAM&fdh=no&SD_used=0&filename=NoMoneyFreeVideoConverterSetupstub.exe

http://sd-cf.softonic.com/71000/71282/.../NoMoneyFreeVideoConverterSetupstub.exe

http://global-shared-files-l3.softonic.com/753/736/.../file?nvb=20131022005449&nva=20131022125549&token=0c4c57ff8b28ead7a71ec&id_file=71282&channel=WEB&instance=softonic_es&type=PROGRAM&fdh=no&SD_used=0&filename=NoMoneyFreeVideoConverterSetupstub.exe

http://www.sharefuncurrent.com/k6vBiL88LEEpilLhwOuqcoS0fTat3nQjZQJkhY4ZynyX7cJ7btCJv_Ab8kIf3jD1RVgV29XUwCaBW8ppKjZ11X2Tc3oD2FqqkxybCXVKnQGHez2uZw6MUgmjBmGKwKltK3awQCHl81qXXv5_B sdH2w8ozHg8etEvGmDavD39pI4K28IweR9pRlSiuyJVc9BsIHbihKIFcDxwYsvkYH_gSoC9jvefqRYrRvQLt04b8PUhzVx1VqsMrLtEwKixLTvYhaTsTP5Od8KbDdoWIEf91mQ_sMKpvE7kN6JfKBrBn_v_f5efVLHU_51vSGu 3HjeGultu19wnf6sooOLanDQW2YLEq1zEWFmEXsbTkkUbmhH 0wdPC 99qEzuQa3_DO cG Y OfG9R9od4e2fg_XMzXErZ3NBviZ5zniJWLWb1ANvXURmrANO2vljTXspkPkDERQDHBgp3QyQET CC8kqehDkV FnG3bgAnZK8f1GyQEyXkH0Dmqs6BBuQobISWBqsBDz_b-G2IAAGRkXa1dE7huPMEhBy63lkigAViEwcbYeUoElfH1Oi9BfEPTvh_t2miUObwc_ PVgZpA3OAYv90Ndb9Ofl7i zu6tN6tiVppkWZm6DuObBXoRJSgWQalaJwE-e

http://global-shared-files-l3.softonic.com/753/736/.../file?nvb=20140213150312&nva=20140214030412&token=0db03ba1b957a6df940d3&id_file=71282&channel=WEB&instance=softonic_br&type=PROGRAM&fdh=no&SD_used=0&filename=NoMoneyFreeVideoConverterSetupstub.exe

http://global-shared-files-l3.softonic.com/753/736/.../file?nvb=20140401195910&nva=20140402080010&token=04b7c0dcdd937ceb58db5&id_file=71282&channel=WEB&instance=softonic_es&type=PROGRAM&fdh=no&SD_used=0&filename=NoMoneyFreeVideoConverterSetupstub.exe

http://gsf-cf.softonic.com//753/736/.../file?id_file=71282&channel=WEB&instance=softonic_it&type=PROGRAM&fdh=no&SD_used=0&Expires=1397874579&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=fTYg~kOBs7hDh-Ww6zViQXrx6bqjILbwEpJeEutYmzwK1Qv639YZaKH8-xbYzLuny9ugm-M1s2osE9ng5nFp~qpXjYjOHy1pFVsB6o9CtbeRFUVfdElmQ6cEYMhFiBhEKeCO~xZoJGBb8KI383-OSYDjfTvOsBHGgTOsR~HqgvA_&filename=NoMoneyFreeVideoConverterSetupstub.exe

http://gsf-cf.softonic.com/753/736/.../file?instance=softonic_es&Expires=1414470022&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=W9sgbNp85ZWhUb9DrvzNDbievpc98Z3QQQXDkNnVNEgC0ltTf2rWiNO5YiQtCnfIcq0Uaxi9OYN~ro8sjkQSH2gOLxdatPB7moNjOEPHZCJLM8T8-uNRPGhGyB1z3oVVNdgLtzc0Tk7AY5o26m2bUp7rn4cHfZh7aBiEYCREN60_&filename=NoMoneyFreeVideoConverterSetupstub.exe

http://global-shared-files-l3.softonic.com/753/736/.../file?nvb=20131125015038&nva=20131125135138&token=08e56cd762cc368f773ab&id_file=71282&channel=WEB&instance=softonic_es&type=PROGRAM&fdh=no&SD_used=0&filename=NoMoneyFreeVideoConverterSetupstub.exe

http://global-shared-files-l3.softonic.com/753/736/.../file?nvb=20141026175105&nva=20141027055205&token=00e165a4d0fe647eb6361&instance=softonic_es&filename=NoMoneyFreeVideoConverterSetupstub.exe

http://gsf-cf.softonic.com//753/736/.../file?id_file=71282&channel=WEB&instance=softonic_es&type=PROGRAM&fdh=no&SD_used=0&Expires=1411107803&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=HU~QZryxGZsFAeOphrel6TkBnu2RPDROx0ekL2oUjlVlFndWubPfZ3~p7Albyg6EHTI~G2ZbkTkv6p26i~ftvAGQOQMwneqWvLnqXdedEiHAjEtvT3bOPXWkiGqnoxgrutYuijBZkfwSJbMqpWcMw4l7OHxF96Li0NcCY~OosLg_&filename=NoMoneyFreeVideoConverterSetupstub.exe

http://global-shared-files-l3.softonic.com/753/736/.../file?nvb=20140817161311&nva=20140818041411&token=09f728a05bcdbe3ab0738&id_file=71282&channel=WEB&instance=softonic_it&type=PROGRAM&fdh=no&SD_used=0&filename=NoMoneyFreeVideoConverterSetupstub.exe

http://global-shared-files-l3.softonic.com/753/736/.../file?nvb=20140709195349&nva=20140710075449&token=05c9c4faa472217258bab&id_file=71282&channel=WEB&instance=softonic_fr&type=PROGRAM&fdh=no&SD_used=0&filename=NoMoneyFreeVideoConverterSetupstub.exe

http://global-shared-files-l3.softonic.com/753/736/.../file?nvb=20140629115922&nva=20140630000022&token=0fbe08b35235620150f19&id_file=71282&channel=WEB&instance=softonic_de&type=PROGRAM&fdh=no&SD_used=0&filename=NoMoneyFreeVideoConverterSetupstub.exe

http://global-shared-files-l3.softonic.com/753/736/.../file?nvb=20140321074802&nva=20140321194902&token=0e382fd1a569604d634e8&id_file=71282&channel=WEB&instance=softonic_fr&type=PROGRAM&fdh=no&SD_used=0&filename=NoMoneyFreeVideoConverterSetupstub.exe

http://global-shared-files-l3.softonic.com/753/736/.../file?nvb=20140316140152&nva=20140317020252&token=02b6b700e79c346ee1465&id_file=71282&channel=WEB&instance=softonic_es&type=PROGRAM&fdh=no&SD_used=0&filename=NoMoneyFreeVideoConverterSetupstub.exe

http://koyote-free-video-converter.softonic.com/download-tracker?th=8yS3 KGEYLiw7GKMHzA/trmsvRChbxdrflJq3ZIylWtT4Zikg/LHKitJ7wDKBaMjnLXxbQOFczQz0QYatb2KfGQTfyktDnVEu5N5KU6Js6g ZaRxd085orR17pYQdklLrM0b828R/Vudwm/wZ28/PDInQD5FX7fu4hQ dTGU1Bexf2xm9nzJM3FUI/voibhtUYYzGGEt6/.../G0GmynNJttv hw==

http://gsf-cf.softonic.com//753/736/.../file?id_file=71282&channel=WEB&instance=softonic_it&type=PROGRAM&fdh=no&SD_used=0&Expires=1396142509&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=JP8xFvMZS6i8pS1Zo7p6~a50ck5JDR6qxAwnIrrNs6-ZlN74XI6Z~JV2YvF83oacUgTzT5I0Y2-cYQRGrHGQfdwb6SoKz0xd7b0uw1eQtvRYAMCD~6WxKc1rAn7C5s6EJOBvRQf9W2W361qe~rkM0rOwKSqyjm8sDWALMdqB56o_&filename=NoMoneyFreeVideoConverterSetupstub.exe

Remove nomoneyfreevideoconvertersetupstub.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.