home

mkvtoolnix-64bit-8.7.0-setup.exe

MKVToolNix

Moritz Bunkus

The executable mkvtoolnix-64bit-8.7.0-setup.exe has been detected as malware by 1 anti-virus scanner. The program is a setup application that uses the Nullsoft Install System installer, however the file is not signed with an authenticode signature from a trusted source. The file has been seen being downloaded from download.fosshub.com and multiple other hosts.
Publisher:
Moritz Bunkus

Product:
MKVToolNix

Description:
MKVToolNix 8.7.0

Version:
8.7.0

MD5:
dfda903ce829fe11355820c426a62069

SHA-1:
10c858c93dee1e869d6e93898fdbf7d076c4c021

SHA-256:
f8dead1d385fbad7a7734ef488cfa57a3cb015803f23f044acbe9dc98bd07002

Scanner detections:
1 / 68

Status:
Malware

Explanation:
This is part of the Crossrider Internet browser extension framework which may modify the user's web browser settings including changing the home and search pages.

Note:
Crossrider is the owner of a platform that enables the creation of cross-browser extensions by developers but is not the owner of this detected application.

Analysis date:
12/26/2024 6:11:06 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
Threat.Win.Reputation.IMP
16.12.9.7

File size:
13 MB (13,671,866 bytes)

Product version:
8.7.0

Copyright:
Moritz Bunkus https://www.bunkus.org/videotools/mkvtoolnix/

File type:
Executable application (Win32 EXE)

Installer:
Nullsoft Install System

Language:
English (United States)

File PE Metadata
Compilation timestamp:
12/11/2015 7:37:55 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
196608:lvLA4rCiVi+IpPlCAfo7uS5t7BBRzWvp+/UOanovinsI4MDRlMnX9SfecLWpiBTR:RH7hIhlCUS3RWpfZo+fGQfeKZT+nC

Entry address:
0x432F

Entry point:
55, 89, E5, 57, 56, 53, 81, EC, AC, 01, 00, 00, FF, 15, 74, 03, 45, 00, C7, 04, 24, 01, 80, 00, 00, FF, 15, 58, 04, 45, 00, 53, C7, 04, 24, 00, 00, 00, 00, FF, 15, 98, 04, 45, 00, 56, A3, 18, 7C, 44, 00, C7, 04, 24, 08, 00, 00, 00, E8, 7B, 3C, 00, 00, A3, A0, 7C, 44, 00, 57, 8D, 85, 88, FE, FF, FF, C7, 44, 24, 10, 00, 00, 00, 00, C7, 44, 24, 0C, 60, 01, 00, 00, 89, 44, 24, 08, C7, 44, 24, 04, 00, 00, 00, 00, C7, 04, 24, 01, B3, 40, 00, FF, 15, AC, 04, 45, 00, 83, EC, 14, C7, 44, 24, 04, 02, B3, 40, 00, C7...
 
[+]

Code size:
34.5 KB (35,328 bytes)

The file mkvtoolnix-64bit-8.7.0-setup.exe has been seen being distributed by the following 17 URLs.

https://download.fosshub.com/Protected/expiretime=1452033352;badurl=aHR0cDovL3d3dy5mb3NzaHViLmNvbS9NS1ZUb29sTml4Lmh0bWw=/101741665da2aa0b726a11b2f277c1ef9fb181a7cbf7593ebb907fb715af6ef1/.../mkvtoolnix-64bit-8.7.0-setup.exe

http://www.videohelp.com/.../mkvtoolnix-64bit-8.7.0-setup.exe

https://download.fosshub.com/Protected/expiretime=1451662989;badurl=aHR0cDovL3d3dy5mb3NzaHViLmNvbS9NS1ZUb29sTml4Lmh0bWw=/957192189742bc9347537588fb27e695f25603b0bfa62203be1282e42aa3774d/.../mkvtoolnix-64bit-8.7.0-setup.exe

https://download.fosshub.com/Protected/expiretime=1451997969;badurl=aHR0cDovL3d3dy5mb3NzaHViLmNvbS9NS1ZUb29sTml4Lmh0bWw=/f1ae7d73940c5c7c95640c71b60a49802203473db78709c15a66566e12425baf/.../mkvtoolnix-64bit-8.7.0-setup.exe

https://download.fosshub.com/Protected/expiretime=1451899021;badurl=aHR0cDovL3d3dy5mb3NzaHViLmNvbS9NS1ZUb29sTml4Lmh0bWw=/833c526c9134e6fc7719a0d52767ee5d252b5c0ca7150786d51fd6ecaa5a54f3/.../mkvtoolnix-64bit-8.7.0-setup.exe

http://dlgbit.winfuture.de/46dcc3957e07b8ca0fc080a127411b24/568bd9e9/software/.../mkvtoolnix-64bit-8.7.0-setup.exe

https://download.fosshub.com/Protected/expiretime=1451845485;badurl=aHR0cDovL3d3dy5mb3NzaHViLmNvbS9NS1ZUb29sTml4Lmh0bWw=/a82076069224261ae835ff7ee687d713e7786afa906b2773077ae8e47c3d07dd/.../mkvtoolnix-64bit-8.7.0-setup.exe

https://download.fosshub.com/Protected/expiretime=1451861372;badurl=aHR0cDovL3d3dy5mb3NzaHViLmNvbS9NS1ZUb29sTml4Lmh0bWw=/af903449e8218300fdd293c29adf0c256466748b9459be0062ae20fb348c4c52/.../mkvtoolnix-64bit-8.7.0-setup.exe

https://download.fosshub.com/Protected/expiretime=1451701211;badurl=aHR0cDovL3d3dy5mb3NzaHViLmNvbS9NS1ZUb29sTml4Lmh0bWw=/ffc6cc30f895d76c8989eb48df774cdcc275a1921ad582a01f19cc78b394c619/.../mkvtoolnix-64bit-8.7.0-setup.exe

https://download.fosshub.com/Protected/expiretime=1452194701;badurl=aHR0cDovL3d3dy5mb3NzaHViLmNvbS9NS1ZUb29sTml4Lmh0bWw=/f368a9dd84b9e63598a1a95672383632eac9cb94ae0eaa3eee63a41d9ae76575/.../mkvtoolnix-64bit-8.7.0-setup.exe

https://download.fosshub.com/Protected/expiretime=1452401643;badurl=aHR0cDovL3d3dy5mb3NzaHViLmNvbS9NS1ZUb29sTml4Lmh0bWw=/380a67b87aaf9fd804ac43a0f3a33c77924247712c4c12023f77760df9e75be0/.../mkvtoolnix-64bit-8.7.0-setup.exe

https://download.fosshub.com/Protected/expiretime=1451814931;badurl=aHR0cDovL3d3dy5mb3NzaHViLmNvbS9NS1ZUb29sTml4Lmh0bWw=/4ae8583acc4a29b1cd2fcb0f3a3af9872f56f60c5513532370acc4c2621ffa6c/.../mkvtoolnix-64bit-8.7.0-setup.exe

http://s6225.chomikuj.pl/File.aspx?e=G5TFElIWIXmWZhj7R-L7ijWUBeLIcwTAg6SI_29t5O140Jv_NOIdlskqs2Be-Wwg_RuO2zCdmvis1N0Y2Jc39b9kleKK03iU9HIEn5cUrut1ZPXJrGLLGmKN20WWO9CF0AVqK2R7isVLxDvspGiR78LhlhQl7avNrrBYhObr5z4&pv=2

https://download.fosshub.com/Protected/expiretime=1452203349;badurl=aHR0cDovL3d3dy5mb3NzaHViLmNvbS9NS1ZUb29sTml4Lmh0bWw=/48ee99d2d5d0968e86b485d0d3edec72f82da0537adb1861eae853be5a039823/.../mkvtoolnix-64bit-8.7.0-setup.exe

https://download.fosshub.com/Protected/expiretime=1452189473;badurl=aHR0cDovL3d3dy5mb3NzaHViLmNvbS9NS1ZUb29sTml4Lmh0bWw=/3d3c4f1c7a8e07adf788b1fd9efa776420a036b1a72740af45bd1c9a80a3464f/.../mkvtoolnix-64bit-8.7.0-setup.exe

https://download.fosshub.com/Protected/expiretime=1452368614;badurl=aHR0cDovL3d3dy5mb3NzaHViLmNvbS9NS1ZUb29sTml4Lmh0bWw=/7f77eb01d844c9c26e5af87a3362bf4251f811a912f2e920c5aea49a663d8759/.../mkvtoolnix-64bit-8.7.0-setup.exe

https://download.fosshub.com/Protected/expiretime=1451849622;badurl=aHR0cDovL3d3dy5mb3NzaHViLmNvbS9NS1ZUb29sTml4Lmh0bWw=/1edc1f43f98a70d6a31a0b483e0fb93a0b937fde64eb7410a26d949279b86644/.../mkvtoolnix-64bit-8.7.0-setup.exe

Remove mkvtoolnix-64bit-8.7.0-setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.