home

video2mp3.exe

Video2MP3

JH Software Private Limited

The application video2mp3.exe, “This installer database contains the logic and data required to install Video2MP3.” by JH Software Private Limited has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. This is a setup and installation application and has been known to bundle potentially unwanted software. The file has been seen being downloaded from jhsoftware.in.
Publisher:
Windows Portable Booster  (signed by JH Software Private Limited)

Product:
Video2MP3

Description:
This installer database contains the logic and data required to install Video2MP3.

Version:
1.0.0

MD5:
dcc8fd2fb9779785d83464a39b241bad

SHA-1:
5ea57c81f0071dc582808fb12a087ff3d12877aa

SHA-256:
bc65059fe487b04f970a3b30a7fcaee685eb338168be2ee3c76035460c74e89b

Scanner detections:
1 / 68

Status:
Potentially unwanted

Note:
Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Analysis date:
4/26/2024 4:42:32 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.JHSoftwarePrivate.Installer (M)
15.10.23.11

File size:
7.7 MB (8,087,416 bytes)

Product version:
1.0.0

Copyright:
Copyright (C) 2014 Windows Portable Booster

Original file name:
Video2MP3(setup).exe

File type:
Executable application (Win32 EXE)

Language:
English (United Kingdom)

Common path:
C:\users\{user}\downloads\video2mp3.exe

Digital Signature
Signed by:
JH Software Private Limited

Authority:
Thawte, Inc.

Valid from:
7/27/2014 5:00:00 PM

Valid to:
7/19/2015 4:59:59 PM

Subject:
CN=JH Software Private Limited, OU=IT, O=JH Software Private Limited, L=New Delhi, S=Delhi, C=IN

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
1EB0D774DCDE92063F522689F4040A38

File PE Metadata
Compilation timestamp:
7/30/2014 1:40:34 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
196608:xXmA+bK52ZS92UxJbxwlJdFrN3ElN2jYmeDP37:QK5iS9hJtm53CareDv7

Entry address:
0xC875C

Entry point:
E8, 47, CC, 00, 00, E9, 79, FE, FF, FF, 8B, FF, 55, 8B, EC, 51, 53, 56, 8B, F0, 33, DB, 3B, F3, 75, 1E, E8, 5D, 4E, 00, 00, 6A, 16, 5E, 53, 53, 53, 53, 53, 89, 30, E8, C5, D5, FF, FF, 83, C4, 14, 8B, C6, E9, C2, 00, 00, 00, 57, 39, 5D, 0C, 77, 1E, E8, 39, 4E, 00, 00, 6A, 16, 5E, 53, 53, 53, 53, 53, 89, 30, E8, A1, D5, FF, FF, 83, C4, 14, 8B, C6, E9, 9D, 00, 00, 00, 33, C0, 39, 5D, 14, 66, 89, 06, 0F, 95, C0, 40, 39, 45, 0C, 77, 09, E8, 0A, 4E, 00, 00, 6A, 22, EB, CF, 8B, 45, 10, 83, C0, FE, 83, F8, 22, 77...
 
[+]

Entropy:
7.5198

Code size:
1021.5 KB (1,046,016 bytes)

The file video2mp3.exe has been seen being distributed by the following URL.

http://jhsoftware.in/.../Video2MP3.exe

Remove video2mp3.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.