mp3 audio converterinstaller.exe

Kopig

The application mp3 audio converterinstaller.exe, “Kopig Setup ” has been detected as a potentially unwanted program by 2 anti-malware scanners. The program is a setup application that uses the Inno Setup installer, however the file is not signed with an authenticode signature from a trusted source. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions. The file has been seen being downloaded from www.bitsguardtoday.com and multiple other hosts.
Product:
Kopig

Description:
Kopig Setup

MD5:
f88225592a9c65832b5e32073d0bc950

SHA-1:
d347366186c611580b8d597d6065b44664e0ef8f

SHA-256:
cc26f0b395dc47476fa0bd9b7b30a6661b26f74a1d90c7a36124e6e9c76b15dc

Scanner detections:
2 / 68

Status:
Potentially unwanted

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Analysis date:
12/27/2024 1:52:02 PM UTC  (today)

Scan engine
Detection
Engine version

ESET NOD32
Win32/InstallCore.AEO.gen potentially unwanted application
8.0.319.0

Reason Heuristics
PUP.InstallCore.EST (M)
16.3.9.14

File size:
1 MB (1,091,211 bytes)

Product version:
3.8.3

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
Language Neutral

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:6NXQHOUE8Vy1GTGYDlui0BGtdjNQRLMYjk2co+bQNiCs3qJfTKGY:6NAuUF7lu5+jNQRokFx+bQThep

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, 53, C9, FF, FF, E8, 9A, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, 24, CE, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, 24, CE...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file mp3 audio converterinstaller.exe has been seen being distributed by the following 41 URLs.

http://www.bitsguardtoday.com/c?x=JUfB9sxD427rJpfSa7ZQlIyggZ2C4TXs5Ymr895ZS6I=&c=9tFIhZACn bNl3NxqJ5zY4e269lanUeD4ZTTRB3XEJmbjwwyO2QGOpgfQG134VkQ2Yf eva mnsjEtsZxGUWNt10tVWIzQtnGYmFAuu31lTffog3XDOcP0NKVqt1R8EKXr9q8qiGZGjO/L5W6 Scqrf7vAKBiR/1n3vpi FYHdoS6qhyDxS13CoRco 1Ixks&e=0&downloadAs=MP3 Audio ConverterInstaller.exe&fallback_url=http://www.ezaudiorecorder.com/.../cvrtmate.exe

http://www.conceptsgiftrepository.com/WVl6OTRQVU5DWVUwMVlVNUhjMWhhUWpWSldWQTNWaVV5UmxGUlFXSlFVakJETnpkWWVHVldiQ1V5UmpSYUpUSkNOWGxXUjNNbE0wUW1ZejFuUW10WGRrWlBlR000T1dsNE5sRjVWbTExVFV4cVdqSnVaMDgzV25CRk9FeEdiSGxtWlhGUVpURTJWR1o1VVZSNU4xTnBPVmxVVFdSM2FITTRXWEZVYVVKd1kyMVRkWGRZUVZsT0pUSkNRbUZ6V1dod1oxcEZWMUJtTUd3MmFrNUxRak5sWjFCR2JGRTBUbEZQZUVSU2JVbFVUR3QzYkhSV2FGVlhRVnBzVlVkWk5EWkJXbkJJVjB4V1pHbzRaR0ZDTWxFNFJHUlRkeVV6UkNVelJDWmxQVEFtWkc5M2JteHZZV1JCY3oxTlVETXJRWFZrYVc4clEyOXVkbVZ5ZEdWeVNXNXpkR0ZzYkdWeUxtVjRaU1ptWVd4c1ltRmphMTkxY213OWFIUjBjQ1V6UVNVeVJpVXlSbmQzZHk1bGVtRjFaR2x2Y21WamIzSmtaWEl1WTI5dEpUSkdaWHBqYjI1MlpYSjBaWElsTWtaamRuSjBiV0YwWlM1bGVHVT0=

http://www.conceptsgiftrepository.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

http://www.bitsguardtoday.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

http://www.bestcleanshare.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

Latest 30 of 41 download URLs

Remove mp3 audio converterinstaller.exe - Powered by Reason Core Security