home

freetrimmp3.exe

Nen

Hukagip

The application freetrimmp3.exe, “Nen Setup ” has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the Inno Setup installer, however the file is not signed with an authenticode signature from a trusted source. The file has been seen being downloaded from www.bitssigncurrent.com and multiple other hosts.
Publisher:
Hukagip

Product:
Nen

Description:
Nen Setup

MD5:
08e5bf121673b7eb9c6496fb788ed7ec

SHA-1:
07700e462c9952ade65722bad81989edd083d15d

SHA-256:
737dd0e272b844558f70079c9683bc924410856de4570c27584b346d1bc2a5b4

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
11/15/2024 3:30:02 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.Bundler (M)
16.8.6.11

File size:
952.4 KB (975,231 bytes)

Product version:
4.5.2

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
Language Neutral

File PE Metadata
Compilation timestamp:
6/20/1992 1:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:F/QjxdRwqtlnjFau1V4z6NNtMRnSLNPsX6niSP2FVMpfrzHRNggsh:FotdRnt/VtT6RSLxC6nxP2mA

Entry address:
0xA5F8

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, CE, 8A, FF, FF, E8, D5, 9C, FF, FF, E8, 64, 9F, FF, FF, E8, 07, A0, FF, FF, E8, A6, BF, FF, FF, E8, 11, E9, FF, FF, E8, 78, EA, FF, FF, 33, C0, 55, 68, C9, AC, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 92, AC, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 26, F5, FF, FF, E8, 11, F1, FF, FF, 80, 3D, 34, B2, 40, 00, 00, 74, 0C, E8, 23, F6, FF, FF, 33, C0, E8, C4, 97, FF, FF, 8D, 55, F0, 33, C0, E8, B6, C5, FF, FF, 8B, 55...
 
[+]

Entropy:
7.8856

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
39.5 KB (40,448 bytes)

The file freetrimmp3.exe has been seen being distributed by the following 10 URLs.

http://www.bitssigncurrent.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

http://www.bitssigncurrent.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

http://www.bitssigncurrent.com/WVl6OTRQVzlyVWxjMGMwOWlUMjVqTUZsNFpVNDFkbkZTY1RSTlZrVlpVVWRTVW5aMGVXOTNhRUYzZUZaYU5UQWxNMFFtWXoxSU5GY2xNa1lsTWtKSmMyWldkV3RET1hkNGRuVlJPRmR1U2lVeVJpVXlSalJwYnpGTVEwNWxRVWRHU1dOdk5uQlRRVEJZVUd0WlVXUjBiRzV1WTNSYVVqazFNWFZKZUdGV1drMTRNV2syY201RmVXSkxOMGRSSlRKR2FDVXlSbmxqU0VWUWNHVktUR2Q1Vlc1NWR6aEhaVnBYSlRKQ1FYbHlhalZFU25GQ1RIaGlUM1IwVVdWU2FGVm9hVUU0Y1hOaFRqQmFOSFJ0YlROYWFGQnBja2REVG01elVTVXpSQ1V6UkNabFBUQW1aRzkzYm14dllXUkJjejFHY21WbFZISnBiVTFRTXk1bGVHVW1abUZzYkdKaFkydGZkWEpzUFdoMGRIQWxNMEVsTWtZbE1rWjNkM2N1Wkc5M2JteHZZV1J2Ym1sakxtTnZiU1V5Um1aeVpXVjBjbWx0YlhBekxtTnZiU1V5Um1acGJHVnpaRzkzYm14dllXUWxNa1pHY21WbFZISnBiVTFRTTE5SlV5NWxlR1U9

http://www.bitssigncurrent.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

http://www.centerbytechuckle.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

http://www.bitssigncurrent.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

http://www.centerbytechuckle.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

http://www.bitssigncurrent.com/WVl6OTRQWEJSVUc1eFpsbFdNVk5IZG5RM01WUmFjV3BrVFhVMlJsSTRSMngyT1RoNFMzQjNRa1pWUVdaU1VWRWxNMFFtWXoxYVpFUTRRalJJVUZSeGVFZ3pOMlZPVEU5MmFXTXpSbXBpU1ZadmNEZDBOMFZPVEVac2VWaERSSEJuVmpKeU1uQlNRemxzYnpod1RGcE5NR2hZY0ZWaVQyVk1RbnAzVGxaUWQzbElXRWhVYkdWWmRtZHVlbFpvUlhoWE1FRTBKVEpDV0Rsb2FqTllVbXRoT1d0V1IxZHdXVk41T1hocE4zVmxWRmRtTWpGV1lVaE9WRGRvWlZoaFRYZEVVR3hKZUZORU5taDZSVkZ6UVNVelJDVXpSQ1psUFRBbVpHOTNibXh2WVdSQmN6MUdjbVZsVkhKcGJVMVFNeTVsZUdVbVptRnNiR0poWTJ0ZmRYSnNQV2gwZEhBbE0wRWxNa1lsTWtaM2QzY3VaRzkzYm14dllXUnZibWxqTG1OdmJTVXlSbVp5WldWMGNtbHRiWEF6TG1OdmJTVXlSbVpwYkdWelpHOTNibXh2WVdRbE1rWkdjbVZsVkhKcGJVMVFNMTlKVXk1bGVHVT0=

http://www.bitssigncurrent.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

http://www.chucklerepositorygrab.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

Remove freetrimmp3.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.