home

mkv-to-mp4-converter-setup.exe

The program is a setup application that uses the Nullsoft Scriptable Install System installer. The file has been seen being downloaded from mkv-to-mp4-converter.en.softonic.com.
MD5:
1ccf41b613f4d0624c0d41ee94f44ad6

SHA-1:
ffb83ad0b30c62df875c9705f80c5c0f75767945

SHA-256:
147fc7bbec6bcd7521e6cef7fa6f740873b5e267e6699f9d562ca3d95fea3a55

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 1:42:40 PM UTC  (today)

File size:
16.3 MB (17,137,496 bytes)

File type:
Executable application (Win32 EXE)

Installer:
Nullsoft Scriptable Install System

Common path:
C:\users\{user}\downloads\mkv-to-mp4-converter-setup.exe

File PE Metadata
Compilation timestamp:
12/5/2009 2:50:52 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
393216:Aj9vTRLy7OlIgtANo1pyXnaUL+ifX3LY//ObE96C+HgDv:Aj9FLy7OlXtAUpyXalif30XOvbHgDv

Entry address:
0x30FA

Entry point:
89, C2, FE, C0, 0F, BE, CA, 8A, DD, 0F, B7, F1, 0F, B6, F9, 84, F0, 8B, FF, FE, CB, 69, FD, F3, 35, B8, 6D, 3D, 9A, 47, 00, 00, 71, 05, F2, 0F, BE, FC, 43, 33, D7, 69, DD, 36, 53, 97, C9, 47, 0F, AF, EB, F3, FE, CA, 69, D5, B8, 62, 5F, 66, 85, F5, 2B, C0, F7, C5, CA, CF, 1B, 3A, 81, EF, 81, 97, C1, F7, 0F, AF, F7, FE, CB, 4B, 0F, AF, CA, 05, ED, 67, 0E, 00, 89, FD, 2D, EC, 67, 0E, 00, 89, F5, F2, BA, 66, 2C, 07, 55, 12, F6, 11, F6, 8D, 35, 0D, 58, 7C, F7, 8D, 3D, B3, E1, A2, 7B, 0F, AF, F3, 3D, B6, 00, 00...
 
[+]

Entropy:
7.9983  (probably packed)

Code size:
23.5 KB (24,064 bytes)

The file mkv-to-mp4-converter-setup.exe has been seen being distributed by the following URL.

http://mkv-to-mp4-converter.en.softonic.com/download-tracker?th=1/.../16MIOzRwqccoV7ljLgfBZxdIlzljpK as6tUSy6HiUdG7GxI9dATfHWp5OaiSHJXfohS8gczIhdy9hqjnwLBpE4wizqOuzVOnO8OxyI=

Scan mkv-to-mp4-converter-setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.