home

mmcsetup.exe

Mobile Media Converter

MIKSOFT

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from download2159.mediafire.com and multiple other hosts.
Publisher:
MIKSOFT

Product:
Mobile Media Converter

Description:
Mobile Media Converter Setup

MD5:
087f143f8e41f10fce33a5da460bd0bd

SHA-1:
245cf93371e748cd414af15e9ef3ee0e65217cc2

SHA-256:
e627e200af9a4348ece649ad1c85ed3109d574450ebb2d8f91f03473d9cffd2d

Scanner detections:
2 / 68

Status:
Inconclusive  (not enough data for an accurate detection)

Analysis date:
11/5/2024 10:34:41 PM UTC  (today)

Scan engine
Detection
Engine version

Dr.Web
Adware.Siggen.19046
9.0.1.0308

Trend Micro House Call
Suspicious_GEN.F47V0203
7.2.308

File size:
10.7 MB (11,171,995 bytes)

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Common path:
C:\users\{user}\downloads\mmcsetup.exe

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
196608:nmp6TGnVsbMqRjiQfm4M7JacmFBahZBHhVMRvE+J0oVGo4Ao:nQsAqpFfkJa/BEBBWRuTo4Ao

Entry address:
0x9B24

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, A2, 95, FF, FF, E8, A9, A7, FF, FF, E8, D4, C9, FF, FF, E8, 1B, CA, FF, FF, E8, 0E, F3, FF, FF, E8, 75, F4, FF, FF, 33, C0, 55, 68, DB, A1, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, A4, A1, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 9B, FE, FF, FF, E8, 02, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 04, D0, FF, FF, 8B, 55, F0, B8, E8, CD, 40, 00, E8, 53, 96, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, E8, CD, 40, 00, B2, 01, B8...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file mmcsetup.exe has been seen being distributed by the following 38 URLs.

http://download2159.mediafire.com/z60p0wyf5png/.../MMCsetup.exe

http://download1664.mediafire.com/matolg781yig/.../MMCsetup.exe

http://download1812.mediafire.com/8d21cjpb2wig/.../MMCsetup.exe

http://download1299.mediafire.com/mehaypbvc0kg/.../MMCsetup.exe

http://download751.mediafire.com/uwjkmr7b9mdg/.../MMCsetup.exe

http://s6200.chomikuj.pl/File.aspx?e=XK1W5Pl6ArlsSGleDB42Zpzjx_Jhu_rlTZHY4KYIEmbjEynLu9Oz7yltxwFgMaSkcRmYtGHZPyVNeHzfTMp9NdWLCq1-aj-jdQohwmkQhrRNZI7ouEZ6UA7R7FNP-kYQtqIZNi8MKKn9hHVUJZXugh3skOPNENym4a16kbqtxGw&pv=2

http://download2209.mediafire.com/d9bgagw58qwg/.../MMCsetup.exe

http://download2098.mediafire.com/1kdqt1i1oddg/.../MMCsetup.exe

http://download2159.mediafire.com/3p3f7npg0pdg/.../MMCsetup.exe

http://download1812.mediafire.com/v42pmx4zq4ig/.../MMCsetup.exe

http://download1927.mediafire.com/f7oob38xkgyg/.../MMCsetup.exe

http://download813.mediafire.com/r280y22pm7vg/.../MMCsetup.exe

http://download15.mediafire.com/ips3z3zbgwcg/.../MMCsetup.exe

http://download1812.mediafire.com/6nqbiimt33rg/.../MMCsetup.exe

http://download2159.mediafire.com/pv2v1v951xzg/.../MMCsetup.exe

http://download2159.mediafire.com/5cd732poqbxg/.../MMCsetup.exe

http://download1697.mediafire.com/487zxp8bhuwg/.../MMCsetup.exe

http://download15.mediafire.com/dmao10i2d9fg/.../MMCsetup.exe

http://download1697.mediafire.com/xxmyw2qncicg/.../MMCsetup.exe

http://download2098.mediafire.com/r7j3itkrs78g/.../MMCsetup.exe

http://download2159.mediafire.com/7gvcwl10lnng/.../MMCsetup.exe

http://download1299.mediafire.com/a5mvlxt27vyg/.../MMCsetup.exe

http://download1099.mediafire.com/vm3yibhnc4wg/.../MMCsetup.exe

http://download15.mediafire.com/aryd2e7t23wg/.../MMCsetup.exe

http://download2159.mediafire.com/o54of48i72xg/.../MMCsetup.exe

http://download2159.mediafire.com/vn6tur59z2lg/.../MMCsetup.exe

http://download1299.mediafire.com/badijybr2tog/.../MMCsetup.exe

https://mega.nz/temporary/.../eFFXmByS

http://download15.mediafire.com/ppbkr88kv8cg/.../MMCsetup.exe

http://download1812.mediafire.com/j1nbykodc2ug/.../MMCsetup.exe

Latest 30 of 38 download URLs

Scan mmcsetup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.