home

allfreemp3cutter.exe

Nen

Hukagip

The application allfreemp3cutter.exe, “Nen Setup ” has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the Inno Setup installer, however the file is not signed with an authenticode signature from a trusted source. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions.
Publisher:
Hukagip

Product:
Nen

Description:
Nen Setup

MD5:
99cb058a018f2a53f15c09c38024dab8

SHA-1:
130fcc319584da300336aa0eeec3c92ad98c3c9a

Scanner detections:
1 / 68

Status:
Potentially unwanted

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Analysis date:
11/15/2024 3:28:10 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCore.RE11 (M)
16.3.17.6

File size:
952.4 KB (975,231 bytes)

Product version:
4.5.2

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
Language Neutral

Common path:
C:\Documents and Settings\{user}\My documents\downloads\allfreemp3cutter.exe

File PE Metadata
Compilation timestamp:
6/20/1992 5:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:s/QjxdRwqtlnjFau1V4z6NNtMRnSLNPsX6niSP2FVMpfrzHRNggsh:sotdRnt/VtT6RSLxC6nxP2mA

Entry address:
0xA5F8

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, CE, 8A, FF, FF, E8, D5, 9C, FF, FF, E8, 64, 9F, FF, FF, E8, 07, A0, FF, FF, E8, A6, BF, FF, FF, E8, 11, E9, FF, FF, E8, 78, EA, FF, FF, 33, C0, 55, 68, C9, AC, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 92, AC, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 26, F5, FF, FF, E8, 11, F1, FF, FF, 80, 3D, 34, B2, 40, 00, 00, 74, 0C, E8, 23, F6, FF, FF, 33, C0, E8, C4, 97, FF, FF, 8D, 55, F0, 33, C0, E8, B6, C5, FF, FF, 8B, 55...
 
[+]

Entropy:
7.8856

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
39.5 KB (40,448 bytes)

The file allfreemp3cutter.exe has been seen being distributed by the following 9 URLs.

http://www.universesharecycle.com/c?x=uOzIdRnzhr2IiHqp049pZR5q/yjdcTXd/FKnd9rkHDU=&c=SR O/mzvDQIJWHKetD us2yZh9tVoGkgRgknmjx k/wTeTNQerYLvqn4jvUTNUfFc0hle833a8RxxcK2CR7dewRYaVYiR2pXf2hXwig38eOveNxkmhK/5xcsDfZ2q2Du8ffaf1U 16wO/DVWldq m6syE6wHHSS1xvDSluuZsrrF1UhnZAPajNRzoTXkxxyk&e=0&downloadAs=AllFreeMP3Cutter.exe&fallback_url=http://www.downloadonic.com/allfreevideoconverter.com/.../AllFreeMP3Cutter_IS.exe

http://www.bitssigncurrent.com/c?x=373tn59GBR7VtrzeTKExa27cDLnxsF6ltF0ZCxI5NQw=&c=bWWGlpnTZvXqoHTDJVZO3eHVNlme/iatvCXJO7dJeAWanHHOn73UO3H9hv/ wFpZLDn9OeIdr KI6q7yaD6DLMgLg9GaTc2Q0RoLRVtq851ddaJhtOLotP4UmC PBBiTRx7LKt9x2A0d1Wu6AQv6HuDW7Ujp3gd2CK0I/MY35vohmwdUPktnjqAZN7FZ9HR&e=0&downloadAs=AllFreeMP3Cutter.exe&fallback_url=http://www.downloadonic.com/allfreevideoconverter.com/.../AllFreeMP3Cutter_IS.exe

http://www.giftbitssigns.com/c?x=parjlZVIw8BTQUh/6J4yr12Ee SIr salcyqsbfflCg=&c=CsfcvKohs4YAqIUrLoPAlq6AK773Dv0K3pw vAK1iTzIejLESbMPyf9WCLjanPrYGLhRFn/ElV9fTckRW51gDEXNL A566w9UOhGMc0dhWZeGL7mjLz4d5zAldUIy7V9yaJ2bujxCz5EMdDC84JiDqRtXBycMsZ26XJJdqiowj9gwWg4GlP6Ru3rq8PIUDwM&e=0&downloadAs=AllFreeMP3Cutter.exe&fallback_url=http://www.downloadonic.com/allfreevideoconverter.com/.../AllFreeMP3Cutter_IS.exe

http://www.bitssigncurrent.com/WVl6OTRQVFJSZVRoTU5HMTFSMWN6ZFVSVUpUSkNhR3B4UkdkWUpUSkNXbkZuVDNjelduRkVaa1J3SlRKQ1RVSTBWMWxuVmtVbE0wUW1ZejFWY0hOQ1RIVndNMXBKWjI4NWRVNXRUMjF1SlRKQ2RFVjRkamhDYVUxamFXc3lUa3hHVkVORVRYb3lRM0J1VjFWVGFYUTVSMmczYW5keU1VOVRaRkl6TVdkWVFURnBRamhCTTNWcE5XUk1WM2xtY2tWek5HVnVOV0pQYUVwbU1YRkdaM05qVTNGeGJ5VXlSalZRZEc1MVJVbGtNakJFYkZSa2JWRkNOMk42Y3psbFZuUW1aRzkzYm14dllXUkJjejFCYkd4R2NtVmxUVkF6UTNWMGRHVnlMbVY0WlNabVlXeHNZbUZqYTE5MWNtdzlhSFIwY0NVelFTVXlSaVV5Um5kM2R5NWtiM2R1Ykc5aFpHOXVhV011WTI5dEpUSkdZV3hzWm5KbFpYWnBaR1Z2WTI5dWRtVnlkR1Z5TG1OdmJTVXlSbVpwYkdWelpHOTNibXh2WVdRbE1rWkJiR3hHY21WbFRWQXpRM1YwZEdWeVgwbFRMbVY0WlE9PQ==

http://www.chucklerepositorygrab.com/c?x=hjIt31o8mDwBVijlHIt53 /LduryyNaDWKJd2LmCC8U=&c=LGMfbnTWdbPlo/kiYjaRPA371J8fDnOC8b2KqWrZ90BHo2CLmc6QgIQgBftvLyb12NQUYLVS KFXYZ6VEvizww7ojzVBIDI ODYmduHCLKaivTvkH63/gDAByeWQ86oOt8vutA47Wj/9X9gjyWybFNEQdBXelWzwPe6p1GPHCrYsa cikYVKaJ0E kgYI/AS&e=0&downloadAs=AllFreeMP3Cutter.exe&fallback_url=http://www.downloadonic.com/allfreevideoconverter.com/.../AllFreeMP3Cutter_IS.exe

http://www.centerbytechuckle.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

http://www.giftbitssigns.com/c?x=XYE2G5iSIrn2R9BEzcmNYBdGaqkDRAwl0qROaAhPF9M=&c=1ZGZr4X3jRgtWrJcRke l/4rEAngUQBz7 6xVs1OxQZqm0fVGVzJVRDIKXN2RoMrAhM4tsQ2voadb0y4Zz/ kXbngNCZKwJb89XQI7m5KrDxf1XFv/pmmv6 kJDYiFw6hc3CG7/AmeEOYTjIB11D8lwoRx/ cDZ747697fq6crZigyWDJIozjNnnvgZaFK0T&e=0&downloadAs=AllFreeMP3Cutter.exe&fallback_url=http://www.downloadonic.com/allfreevideoconverter.com/.../AllFreeMP3Cutter_IS.exe

http://www.centerbytechuckle.com/c?x=/fz0dXOKj0FAzNsqGY3wkLT7JJRNLSEOE6376Pu8L1k=&c=Ej6k VIGQfyFVYiWnVJYmytIvlKv9pMD8uWwzoZ4uEFEQbURoXTW01B9zNYY5gQUD9/MUGQVyS/2r1869z/XapDRLQnLum7SkAI8KKDW LnWPKYBxJPh8qhA3D tvgKF/VjWypvsrYEROa4jGmChsQrjfNLSsNdm33NBxCuMypxZXZEh0v9GhgBKaZAw7WOR&e=0&downloadAs=AllFreeMP3Cutter.exe&fallback_url=http://www.downloadonic.com/allfreevideoconverter.com/.../AllFreeMP3Cutter_IS.exe

http://www.chucklerepositorygrab.com/c?x=DxnZmloydwkya ZtQCXcJhBbDhYTJy/PJErxsczGCls=&c=R gYLmiWVMZHMfGeS/hKgFkRR60iyFucXj95A9T1bMsIXPTGKdrrMEJ8XgFXciRdTukl7wIvHwjPf1Y0cIFtTQyKbPMxcaJKSR e8buZ9WyWmmYS/DG9wBKq9pEIc1RoFGR0gP0lVa42iVzHmUM/hNn3fZSMwYTRb LdTSNfPV1lhC/sB s2FU0jkAcyJ0NI&e=0&downloadAs=AllFreeMP3Cutter.exe&fallback_url=http://www.downloadonic.com/allfreevideoconverter.com/.../AllFreeMP3Cutter_IS.exe

Remove allfreemp3cutter.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.