» freemp3wmacutter.exe
Overview
Analysis
File Details
Downloads (8)

freemp3wmacutter.exe

Nen

Hukagip

The application freemp3wmacutter.exe, “Nen Setup ” has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the Inno Setup installer, however the file is not signed with an authenticode signature from a trusted source. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions.

File name:

Publisher:

Hukagip

Product:

Nen

Description:

Nen Setup

MD5:

5141fafd15eab391a0dc01d9e38cca76

SHA-1:

9a7ad04e28de922986380552da697b8340192099

SHA-256:

f62cabf49a08cd8fc3b176f05a752f5f0d4e9ce97744983692bee7fd3974a849

Scanner detections:

1 / 68

Status:

Potentially unwanted

Explanation:

Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Analysis date:

11/15/2024 7:38:13 PM UTC (today)

Scan engine

Detection

Engine version

Reason Heuristics

PUP.InstallCore.RE11 (M)

16.3.16.23

File size:

952.4 KB (975,231 bytes)

Product version:

4.5.2

File type:

Executable application (Win32 EXE)

Installer:

Inno Setup

Language:

Language Neutral

Common path:

C:\users\{user}\downloads\freemp3wmacutter.exe

File PE Metadata

Compilation timestamp:

6/20/1992 12:22:17 AM

OS version:

1.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

24576:p/QjxdRwqtlnjFau1V4z6NNtMRnSLNPsX6niSP2FVMpfrzHRNggsh:potdRnt/VtT6RSLxC6nxP2mA

Entry address:

0xA5F8

Entry point:

55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, CE, 8A, FF, FF, E8, D5, 9C, FF, FF, E8, 64, 9F, FF, FF, E8, 07, A0, FF, FF, E8, A6, BF, FF, FF, E8, 11, E9, FF, FF, E8, 78, EA, FF, FF, 33, C0, 55, 68, C9, AC, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 92, AC, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 26, F5, FF, FF, E8, 11, F1, FF, FF, 80, 3D, 34, B2, 40, 00, 00, 74, 0C, E8, 23, F6, FF, FF, 33, C0, E8, C4, 97, FF, FF, 8D, 55, F0, 33, C0, E8, B6, C5, FF, FF, 8B, 55... 
[+]

Entropy:

7.8856

Packer / compiler:

Inno Setup v5.x - Installer Maker

Code size:

39.5 KB (40,448 bytes)

The file freemp3wmacutter.exe has been seen being distributed by the following 8 URLs.

http://www.bitssigncurrent.com/c?x=p5Su8UTIElhc6qz7irkqW7qF2syySApfpu81AfJ2E8o=&c=4RIRF2/LUVR0FWMm0HKepy2koP9USs8O7fNuJARDTNpdVgDpbacRbULjdNBVn6NICQ bk23j43L Qyg83jMf9hL2b5gAaIehh7PuA/XEuhq6k yQDD3RcxK5sQkHhD2B7V2A1d3cqPHn0/rt5KC3DxzpF/0F2c8655piNyy2f94l6bmmBQlCw9r9h4kWILdj&e=0&downloadAs=FreeMP3WMACutter.exe&fallback_url=http://www.downloadonic.com/freeaudiovideosoft.com/.../FreeMP3WMACutter_IS.exe

http://www.bitssigncurrent.com/c?x=MmkLO6Bc7pcNo65v1ZkndWV3zSIU3OdvXA4TLSSjtMw=&c=oe3ZXUAzppg8IiZJlZu4gaCqwM/p5fTS56TnBJz 3hrnS1ok/x4SS78K3BGsrX1MFSgWExhRoYfoNDDsWLEy6nC6i9EkrVN3tuGKHQ5YLm9J8QjR58cBMbE29086cE nWWzO7GetpVuBflASF4OuqWFL8q1ICX0uRjd2KqC9CtXgv5TcpK4n6dZZk/uQZNxe&e=0&downloadAs=FreeMP3WMACutter.exe&fallback_url=http://www.downloadonic.com/freeaudiovideosoft.com/.../FreeMP3WMACutter_IS.exe

http://www.bitssigncurrent.com/c?x=xCXEQTZiVMcianM Z 8LqPwS wb07USmsvN2tbm0CCM=&c=3AJ66I yTuKMX2WNXCcKx5jJrhuYntspJAK0JPZdpSXPGLCO3Xo qWPEfCDzy3ePzQPq8 /vz9Kzjr8 BSUZBo4LUnvLT3eKiC498rWdTMJ4eRlorubcDhzjqsf5mDhEm7ffeLINQhO6Acpq9ghdTbF2D6quH8WyIJZc5lwQm OW6i4YZeW2PHYnkq3umWO2&e=0&downloadAs=FreeMP3WMACutter.exe&fallback_url=http://www.downloadonic.com/freeaudiovideosoft.com/.../FreeMP3WMACutter_IS.exe

http://www.bitssigncurrent.com/c?x=JuE6IaOfXW/vyd5S87OwNFfBVCCcBXO4EqAl9wStQeo=&c=nOp2BGtbvC6i5Ew8e6OgQb55a4Pu9TOauo7tNfNF6NuY7ICcGgyPHPL0Yj 7d12nXhnou6rLVVf icCSLEXlkX30fRUu/k euF6yfJFYzJVVTsrqqGOinvPBG4E0owrcFDtKBul3U36aTpXteYstYfIZhWi/025ncL4mMyMB1X wkW2jAKIbcCNx2ZpH3qAr&e=0&downloadAs=FreeMP3WMACutter.exe&fallback_url=http://www.downloadonic.com/freeaudiovideosoft.com/.../FreeMP3WMACutter_IS.exe

http://www.bitssigncurrent.com/c?x=2n1EHrN7zVDy5IKtRCSQDGagqfy3DUlAzbnpo 2tbus=&c=lQRgtaMz6Sfrm/i1BNVtb733H9kE5d1cYL3HSGeqribjb0d7zyGpWWSFrkZob41ODoyuqKv66e3NNZV0jJnXk89ykTI4JmqDDvBSCDDkijimc6U8d2DVUxcMmrgjZ4xlw/0DktWUCVkptbwxXOitFcoXkWXNFpFWBCp7rR44rW9nnrpHvniA8iQPVKfjN/7P&e=0&downloadAs=FreeMP3WMACutter.exe&fallback_url=http://www.downloadonic.com/freeaudiovideosoft.com/.../FreeMP3WMACutter_IS.exe

http://www.universesharecycle.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

http://www.giftbitssigns.com/c?x=gQam ftvqtO5rt/GT7AxsrXHVFF8OreXS4gGTVZ6C Q=&c=IGRVzDhRniesGP2EWvhDse4e2GJFmELiPqNazgLQnbrSS0lnF fW7JDP1YDQvCHn93pBrb6iZ9jJasJ9jA6PdWDuTrJVI8uvnEDcfdMG2HD0lVHtV6ga8u5CvZwXWTkFpR1U7KCJvMBj4H4r7k8hbg==&e=0&downloadAs=FreeMP3WMACutter.exe&fallback_url=http://www.downloadonic.com/freeaudiovideosoft.com/.../FreeMP3WMACutter_IS.exe

http://www.contentstockbits.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

Remove freemp3wmacutter.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.