home

mp3cutter.exe

MP3 Cutter

Di Wu

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from indir.gezginler.net and multiple other hosts.
Publisher:
MP3Cutter.org   (signed by Di Wu)

Product:
MP3 Cutter

Version:
2

MD5:
63e48ae7cde24b837970c7b45607ae54

SHA-1:
8d5a70f2e162f94fda1e20e0965f055462db09a7

SHA-256:
276f597158584c07e34ecfdae5f99f1a268cff6526709dc2caa2fb0cb6bad099

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/25/2024 12:42:06 PM UTC  (today)

File size:
11.7 MB (12,313,304 bytes)

Product version:
2

Copyright:
www.MP3Cutter.org

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\mp3cutter.exe

Digital Signature
Signed by:
Di Wu

Authority:
thawte, Inc.

Valid from:
1/24/2016 5:30:00 AM

Valid to:
7/15/2016 5:29:59 AM

Subject:
CN=Di Wu, OU=Individual Developer, O=No Organization Affiliation, L=Xi'an, S=Shaanxi, C=CN

Issuer:
CN=thawte SHA256 Code Signing CA, O="thawte, Inc.", C=US

Serial number:
16D584A0EB0B5CF22BFAD4022D8CE214

File PE Metadata
Compilation timestamp:
6/20/1992 3:52:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
196608:FG6mqNiFulQCTTmnsx+pORR7crEn/vBY5Y8gLHwtmC1yD65Tx73UaW9DORhYG4js:PpgFWDTTmn6+1CJuY8dnyW5TCYR+C

Entry address:
0x9B60

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 66, 95, FF, FF, E8, 6D, A7, FF, FF, E8, 98, C9, FF, FF, E8, DF, C9, FF, FF, E8, 0E, F3, FF, FF, E8, 75, F4, FF, FF, 33, C0, 55, 68, 17, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, E0, A1, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 9B, FE, FF, FF, E8, 02, FA, FF, FF, 8D, 55, F0, 33, C0, E8, C8, CF, FF, FF, 8B, 55, F0, B8, F0, CD, 40, 00, E8, 17, 96, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, F0, CD, 40, 00, B2, 01, B8...
 
[+]

Entropy:
7.9924

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file mp3cutter.exe has been seen being distributed by the following 34 URLs.

http://indir.gezginler.net/i/17350/.../

http://soft.mydiv.net/win/dlfileb47a3_298854/.../mp3cutter.exe

http://www.towerbitscenter.com/6nJZE3qW_A_Opx2HU9lAXKwxOvyEloHpy_1hKhFjiw 8XB2Iu9oRZ3FUvBUEeVGkmHKoozQKdUKQZBg08eFkWH0LKaxDbY1rrjbaMOZt5OgZdpIFJXoKWhLTNJbFqxgbhgjCfdAAhAvm sE1RxR7_I2y5KapFQcNd3gCqOA1py5iS1gisHG1I84hgWPKJ_Kv8YD3F_K WYzyoqDtMP3hElFVtXvHvA==-GyoAAERPFqMgRh5hdgMmcsDelkikR3lyFOiNwd9otSUxsud1KTk8AA==

http://indir.gezginler.net/i/17350/.../

http://www.ranchsendgift.com/v BrVU8IV1SDMUca7uzB3mChJjLEdPmx0wJVcKFRobOWb9ZXjrheLBWyUxcI7esPUW13qjmAtwGLVkhqe9r VoV4DiUCiHtnPqNDv_7rcFmFNE4V0Qp3gWDoBB20NxmdafQhiMU9mhhcYBF6j6EZ7mbpCVj6NxxHOzNYrw1NLT37Nj8LIZyQxzCpOHyq29FeKNY4LTKum23VWPJUyC tI9gnuCrgYQ==-GyoAAERPFqMgRh5hdgMmcsDelkikR3lyFOiNwd9otSUxsud1KTk8AA==

http://indir.gezginler.net/i/17350/.../

http://www.towerbitscenter.com/kbU7uY_XriKChnAYb p7cp4qmrLc5XoNP2UP8ZOpsF_ni0tW6 PAJk kZrZPD8o0uUfa9yysraw4QxOe0CoFhZoY5wf8jgm3w5DPImSNZs5jL1B5saZ4odprZeyPTXHqDbJC6kdCWt7vqskxpteuk3hpS1KbrJsxDTew13_BGNcBArZQroFZ x8ISqAlxZlKvzXhjM2iuNOSWTbKBCcA2avG3_jjaQ==-GyoAAERPFqMgRh5hdgMmcsDelkikR3lyFOiNwd9otSUxsud1KTk8AA==

http://www.towerbitscenter.com/rWDLR5Szxn06 hykbUNKLt4cR5iwZCY6bWtwunZBgIMMppWZzDV1S5 uFzyt31eK8 Du51Wno59 hf_CnPO3G21PrnX3C4fY7Q2VF7pUe26yE1qqILiTOKj4GkCr2MbCId1 Mi5AVkizIOFsG YTdNF44u3nznUhO80qbzMUke9mc3Jsw_R3Tv 8_BNHYIAKtN8XmOqNok7fz7mtxnRIWNaXm 1LBdCauvGAp4e9afEAKWY55waHfwzPMOjua4m_zPe6GTzViPk4 zPdKR8zMLAaXMrFINarJk5aV62kPJv52CD0A02ui9_hedo9 92MN4Ux81TtVeknFyxTpjg8KDbXovV_ReaFKe8rJVVNwTYb5c67yReoJl6ihEcqu3Tu3x_kCaoLEFH3nPQFKWNk ZwNEZBFrNP7xLWgHMEFv_vHXJljxBLK6eJgFSaiIwUq7jVg_f894Gjwey_HHJim72pbgmuTGss47tq76B9ZQEz7gBZFor8SeaWNDfekZKyd2PDXpAQNr4eygzmGyBMN5ufCVQ6OGkQsKnCHxh_jF5OthhvtM_Bd1R8pgpF3by czhECrWwi-GyoAAERPFqMgRh5hdgMmcsDelkikR3lyFOiNwd9otSUxsud1KTk8AA==-e

http://www.towerbitscenter.com/wVPCxzgYTrdPA20BqEuDdvTs2wzs3JUB6WBXPxU08FqIN1__3tyy8J2rVQ2pO QK0P112BuSYh2tdasRj Vx_N1BEJq2iGi5qujuv0GIX3M2CplCT_v7U5vq2CT2ncBzBkbOp8x6M7MhnSQYwbnlhh2C6GaTJzmePKUPJcS2ojEZEekfhL6s7XHY23KgAxnSpeFSlUg7OcVpm9t 4 jVSWxnjY8pxgfrnbkAsDVDuqNkXNVv VwCdqwYqGa XFFa0 3HE_MDT05weBEjYujvhu_6N2xayQAymZkd7haLQ2UASavZLsnOdiq38fh9Z_HcGgwOuVtvpRQITQtBpIopdn7_A7BZqzEMlVIXu0m4kfdRXsodYhGewOClM5MHB79rEj6dvOSsXKtntcAKKDptkuFw91zWV2CXM_4eEh9KhpxEkfRWMaz3UVFOTvyCuiwLtnlgg915yA86yh9dbzbC7e0tIxnFJYLUKZIGsMxbaey6NCtU_KEVos_fJ_ml1XIZmwJ3X1Ae rE0q3K7o5O7p4_2hm8k91ju7GGoJO_o0Ea1v8uL7dl_ E23t8aB9vCqeIfVCSu3-GyoAAERPFqMgRh5hdgMmcsDelkikR3lyFOiNwd9otSUxsud1KTk8AA==-e

http://indir.gezginler.net/i/17350/.../

http://indir.gezginler.net/i/17350/.../

http://indir.gezginler.net/i/17350/.../

http://soft.mydiv.net/win/dlfile58a61_298853/.../mp3cutter.exe

http://indir.gezginler.net/i/17350/.../

http://www.ranchsendgift.com/ueNKgdPZv2RROC WhC4dri4ggRFSIaPYWIEBIYQmSuHwvyGWqm9PZVdKVrOIdZOn7Lp35lhGy0ofkH07qmOWAkpCzKeq5rMCK5mFkH6JCMzyK_vhHLSJsw0lGGz8LNZd_SBBCv2jX0nHdpSiiceFiKV_kjfPQtfwExRK4RMpsvO6uA1JgPMpDbDAYjPRaEJjyPfYMFYCp0cDIKmtjgWg5BO_ham9RQ==-GyoAAERPFqMgRh5hdgMmcsDelkikR3lyFOiNwd9otSUxsud1KTk8AA==

http://www.towerbitscenter.com/XDS5G2fprj8PcBYUum4Me7_NEk8EuQiY7Mspji3HSPTKfOL6pvs6Ou52ag5QZLPaDZHGlNJTLKUCozGZjwmvHyXdzyx2t68B5QEaiwBXwo0Ghfbk 9otBTUHQd6W0iZfrsIQQc0rGqhK4Afzekdi5cT8OQdXDbd5r65hlSFE1SOSGUEsliER3lEp4b3eilZRKeBErpSkCA8H7N4 pASCQRC1nTBzQg==-GyoAAERPFqMgRh5hdgMmcsDelkikR3lyFOiNwd9otSUxsud1KTk8AA==

http://www.ranchsendgift.com/eBm qljQ6o1PGpgH31rmtaN7rl1smQc66 uuIEqUJa0Lh6drPW77qZfi7CjaW7lOr8XTwyIboetHv5F0GvBZK7hzA xylz_MZklBLBl6pkPoBV2q8MevUj2MLJkMQUONn1n3DT0OdHO5Le1BHObsU6xrK23ym6JG0VVe3J1YLySD61Rao1GNtuzZX P9WEtxUwe8XdGPsEE9rnfMvR_66IF3TOvw7g==-GyoAAERPFqMgRh5hdgMmcsDelkikR3lyFOiNwd9otSUxsud1KTk8AA==

http://www.ranchsendgift.com/gbNLyR5OdIHYkLAHBup2uU0ra57D8TX47YqkOoAgZi7gH10GNVr9jv75B05surXRaVHzhwAoYgyvXp QDOSY_hkMeke U8NFj5nnmChMAle2iHJnNcgzjzYUB0yLt7FFoCYnwfEpEIEIedbpxhN7IdD1A7g4wfvjUt5APm_jTx0 cLyK2PAocDbXHCYzHSxNH5j2oMuG1T98mADiL9AyVNp6T8XCCQ==-GyoAAERPFqMgRh5hdgMmcsDelkikR3lyFOiNwd9otSUxsud1KTk8AA==

http://www.ranchsendgift.com/NeRK8awgBbxYkjMdcxPxUrIZlMdjkKZWLM921AzDpxmyW6LXMB49TdXQYulbiIpXFzYZHKZdgC8DE6ElU14PplpXXP9jN2Mk7QWttPmEoKXKCY_sQe1c_Mc9PAZWRFtPTb uPFB8Qre8IsO5sMdALtqTLferXOT4qZQlzb6htxZgk1xdKMP20 MnLcTcs1Do5UkCSluRv4iKEENABPcqfy8IZZWaFA==-GyoAAERPFqMgRh5hdgMmcsDelkikR3lyFOiNwd9otSUxsud1KTk8AA==

http://indir.gezginler.net/i/17350/.../

http://www.ranchsendgift.com/8K0miZDyRdRxkQhXSbyHR9Z0uwTtE9X4pSi9rA71iBWsnP5J4n_9eRD0tepq7jRJkE4SmNCdnEY6y4jTQMpVxmUiLemk10ZZQN3ASwWV5RhiqIf87np1IhMFfLUAGf2LWHpZc_MXVvu3Ey94enWI_U7T62nM6vfC0VP0WPNSSIhnuoXAGfr_jH GwzpM6Agqi6QeP5s8MVOeDIFl36HkE bHCeATqw==-GyoAAERPFqMgRh5hdgMmcsDelkikR3lyFOiNwd9otSUxsud1KTk8AA==

http://mp3cutter.org/.../mp3cutter.exe

http://www.ranchsendgift.com/lIBke 5ZmXOhtuely 8gWiadVh4sntNytIqYj5DBCx3pQogvmmOzkdmyLXdn4Pqmu_SStENBhuHL OiXiArnyIalwcqHkTbKcYXD_h05AJQ0z25H1 k4wuxr0dHG64jMLpYqgbdvmu15j5mZEf1b4BAOusgZYyXjALinIlVGWDeB0RWcZy3LmJN9hc6J1GJGLHeD2YyZ9WSqCrhnaO xodQSf77xoA==-GyoAAERPFqMgRh5hdgMmcsDelkikR3lyFOiNwd9otSUxsud1KTk8AA==

http://indir.gezginler.net/i/17350/.../

http://indir.gezginler.net/i/17350/.../

http://www.cooolsoft.com/.../MP3Cutter.EXE

http://pc-bullet.com/download.php?go=2&file=43&mirror=89

http://indir.gezginler.net/i/17350/.../

http://indir.gezginler.net/i/17350/.../

http://indir.gezginler.net/i/17350/.../

Latest 30 of 34 download URLs

Scan mp3cutter.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.