mp3coverdownloadersetup.exe

Mp3 Cover Downloader

Diego Alicata

The program is a setup application that uses the Inno Setup installer. This is installed with Creevity Mp3 Cover Downloader. The file has been seen being downloaded from www.towerbitscenter.com and multiple other hosts.
Publisher:
Diego Alicata

Product:
Mp3 Cover Downloader

Description:
Mp3 Cover Downloader Setup

Version:
1.4.0

MD5:
5e72fc79911ae24d62c618718d0c3cf9

SHA-1:
446c834db0e077eb224ee473c7205314ddda31c6

SHA-256:
a2bc6f18a40d78005f9d6534f7c8d5c2d8203197b0c6bdad9cbc1457669f12cd

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/24/2024 1:52:45 PM UTC  (today)

File size:
1.3 MB (1,334,718 bytes)

Product version:
1.4.0

Copyright:
© Diego Alicata 2010-2011

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\mp3coverdownloadersetup.exe

File PE Metadata
Compilation timestamp:
6/19/1992 7:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:OnaSw2Q2D4cYxEUQoX6QGO8DrbmSbyB921ZMIT3CHe/cQ/mnAuo:OaiQ2DASUQoFGBnbmSbO2rfUQ/rl

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, 53, C9, FF, FF, E8, 9A, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, E8, CD, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, E8, CD...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file mp3coverdownloadersetup.exe has been discovered within the following program.

Creevity Mp3 Cover Downloader  by Diego Alicata
www.creevity.com
About 7% of users remove it
 
Powered by Should I Remove It?

The file mp3coverdownloadersetup.exe has been seen being distributed by the following 17 URLs.

http://www.towerbitscenter.com/kiGsv8eK7Lo2SZfaHtX3742a8AIpjWm_WN64dbIH0ozKEl_R86btxjleR1BfA3XjRxj5xbqcBiHMF6vecaNryhQRSHa19RsHKglHq2cWexWSqQzwKzm13iFyC5kTY9UQU7_dSo3pV80MISfvbwhc2rNfqE4G_6TwguTrVeCaCprMWctMh6lScZfMgrB2zlR9kjsLPxm8jsgdlO7AXK0miqp48ay DfQAYfTH536eM4lDvXkVHAM=-G0UAAATKbbHNsBC1mgxRLhiEZ0xRxzjAAf16kcXGh4mcSNI6XG_M8W8G3JW_J1veaEMTpcsrRttBHhkP

https://mp3-cover-downloader.softonic.com/download-tracker?th=8yS3 KGEYLiw7GKMHzA/trmsvRChbxdrflJq3ZIylWvD2zbFK2JeGeqhdaAZKqPqusfavhYtPGN6vxX89vE8n/x/.../aPImZKdnvKcTOLogsJy BsbTgBZqwyUGYJ0DCQDJKcuJy73TiIH7Y5jOx6jkaXBP0tfLYJRYxjeXJjoYjyQqanN4Jd3gFqcGDrXoPTzEFU3fuvpNxA==

http://gsf-cf.softonic.com/446/c83/.../file?SD_used=0&channel=WEB&fdh=no&id_file=314393&instance=softonic_es&type=PROGRAM&Expires=1460468807&Signature=dMPXlKkLc3R6JFqjcmrROqjB~2~ka4TTkzhhN8freiStf3C2c3ksf~AuRFN4hbtWEjzZbK4QJvVYwc41HsZgkWYXvChXnQ5LxMMK7GWZe2BkZs8IFeKiJcaeXwFp0FSN56JH76PhKeuCA2F0pKwD9Dnhn~98XWdaQLLPiXbGO8o_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Mp3CoverDownloaderSetup.exe

http://gsf-cf.softonic.com/446/c83/.../file?SD_used=0&channel=WEB&fdh=no&id_file=303948&instance=softonic_it&type=PROGRAM&Expires=1476949485&Signature=G6aDze7~QUyfOu4TIXEjuSvHY7pir-JtIRc8mUaVv0amSqjRHNdVtIfisLpQHiu7qHD5VhmT2HG78aspNTYxEqmS8PF-tzAtf0D0Td2lcKDZulLyAhWCz0ErdnItYzDL~C~~Y3MsHVaAC0-Jz0Ve2B4PBJBB-ClHVcQPRn0I4yA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Mp3CoverDownloaderSetup.exe

https://mega.nz/temporary/.../TwUh0KTa

http://www.packagehostdownload.com/yDZdTtmS78PXUkiNisjFbq8_ MzyWu6ATt8cS2e2pkHZ Pz968p32RPLpWHfb x2fqAfycag6k0pL0aBDDDcnhYSQm7EFnIJ_lL6drGXzHVtbHxyICwGdGzuMjrK0iB1P28CLe2J9lEsZY0RFIk DuSIHjX lO918nEveAWNHBJgHkhhf4gNPl93X6SqDsONapU6OPse2w7Sz589UinXKJUmLN tXQ==-G0UAAATKbbHNsBC1mgxRLhiEZ0xRxzjAAf16kcXGh4mcSNI6XG_M8W8G3JW_J1veaEMTpcsrRttBHhkP

https://creevity.softonic.com/download-tracker?th=8yS3 KGEYLiw7GKMHzA/trmsvRChbxdrflJq3ZIylWvD2zbFK2JeGeqhdaAZKqPqusfavhYtPGN6vxX89vE8n/x/.../aPImZKdnvKcTOLogsJy BsbTgBZqwyUGYJ0DCQDJKcuJy73TiIH7Y5jOx6jkaXBP0tfLYJRYxjeXJjoYjyQqanN4Jd3gFqcGDrXoPTzEFU3fuvpNxA==

http://gsf-cf.softonic.com/446/c83/.../file?SD_used=0&channel=WEB&fdh=no&id_file=303948&instance=softonic_fr&type=PROGRAM&Expires=1470489881&Signature=AXigWoc~z1NOSaiwj~RNLjHhBAN7iS67sDL7L817~NwD2Ro5zRrUu89rOZvwFATaQQRNTCIeekI6IgnxYw84FdvGzPCyb~VTSV1vcm7OSfEJucyNymye-4XRx0B-MXz7NqdqPyTFYV5hLOIV5PRvugykG4y4MeNjmHKD-UR8axE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Mp3CoverDownloaderSetup.exe

http://www.ranchsendgift.com/kl0RWQoxlZ0s7t1nfIl6fpu9hJXk_XAJ0gOXIt8siJ4YLwjdamOsUw0W0fVNUG78OPjWdIfUzm5adYPzZ vexvqGVBlWXoQdGsxOqGbeQRTwrGZ7ECyNVftOrcz4xj3ROZ7vR43wS4Up1Ny_Efp9KqgErrT7U_YhnMt0kzU9moabOw8KPD33_yPZGChinvuE7p0_6f6m1UZblRpvtvVhI9Brp5_hkA==-G0UAAATKbbHNsBC1mgxRLhiEZ0xRxzjAAf16kcXGh4mcSNI6XG_M8W8G3JW_J1veaEMTpcsrRttBHhkP

http://creevity.it.softonic.com/download-tracker?th=1/.../7qUs dLt9R0hj8nvkoJwKay9XJYpuhpVULHmDhyS6Ue7Z6E6WfXXnbd1g6rdUI6zZrwrLqePYuBM9SOboRDewuQTNEDrIw3yGjfakXSGvFTeAS6j35ikg==

Scan mp3coverdownloadersetup.exe - Powered by Reason Core Security