home

setup_freem4aconverter.exe

Kastor Free M4A Converter

KastorSoft

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from dw.uptodown.com and multiple other hosts.
Publisher:
KastorSoft

Product:
Kastor Free M4A Converter

Description:
Kastor Free M4A Converter Setup

Version:
1.11.0.0

MD5:
0f233854452513ceb3a657f58f764454

SHA-1:
a43596056027f407dadf93a438acc685b1bffef7

SHA-256:
11c0e26a21fd78657869efd357fbada6f1cb75abc720e9f15f3fe5a938514f2b

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/27/2024 9:36:18 AM UTC  (today)

File size:
2.1 MB (2,251,595 bytes)

Product version:
1.11.0.0

Copyright:
kastorsoft.com

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\setup_freem4aconverter.exe

File PE Metadata
Compilation timestamp:
6/19/1992 7:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
49152:5abLPItEk4bmJH+ZS4irdcvMhbQslst8Lte5Oc3144inXBgJ:QvPItEk0k+04ipcIstAt/o4jRgJ

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, 53, C9, FF, FF, E8, 9A, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, E8, CD, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, E8, CD...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file setup_freem4aconverter.exe has been seen being distributed by the following 7 URLs.

http://dw.uptodown.com/dwn/sD_68UBVBxCAH59YDwSdxhc7Dgk_IA2cpQGCc4hnJ3fHU6l8N0w_4g4Ykx7uuzLthYLWSm64DTioriXELcdehYX6NzwmmlYkbjDByRSoPENJv0nU4s9-QM68yRER2pTd/aohluHkw3vvOOq8fb5GqZ4EZSpHGM9g_7ei2th-8c1v8jcETiQgKA_arFhD19lRtnb-9n7kle26LDsBbKgTjhabswPngQ3jckXv2fcpPhYfCSEX30XAMHlA2orF60Q9j/h3s3hMcJx6FS8cVp2qvpHaYrqqoqNdYEIdxP6a4pnV6N_q0rTn3D3ECHw0KBxTlPEGtQeT82DxnmoYOQdX7PDQ_8Ecug30FYTtUxBnV7fFnqCN2fYpzYPFGvfAhs-EoJ/.../

http://dw.uptodown.com/dwn/UOcLGbILJgXf8bCdjwWmBPSaW6j44f3scgdyifxHrU7pnztiNcQyzgGFSBJgcJ3wxy4VQGendvv36CoqV64AD_9ek_00rh5vImMPljktHxIxJ6L61WqBIbT3KppHFUc2/8qg5UlNjnYkpINKwOQTajN4zt9I7QUHE0Qg5S1531u_cju9RRBo1NNluFXtfjRH5mPyWWT70typJcKL6g0jvnukt1HdTWsp_ELkQyHasZbPH5HX3v6XTqsmLeJ2sUogQ/PMkA0krF_FFa_fji9UTLkK5fZv5T-sIUbn4LzaYPQWomRVb2lCx6MfcS77wl1hQtRA8K83FuzBVw0svZ3l7XJRCSAXNOeJCHMlW_0rYStWYfSBv144lLCvghSpj2P7FJ/.../

https://dw.uptodown.com/dwn/Q8cTuv8Y4_TWXJbYBAF7gvQoTGdakh3gWDpcQ_Ler-oDlWUlFK6yr18xZ0FlMnWHgQr2dBce2lfZgDjctMIrJLzcNkqZ__neq21XzeEaCk29K2aAKbBlyniur0ygO75J/N_IBsjPtDzJ19aFOVPW_0UZQfK7lWTKMD4EoLHle9NY_K_u_N-xsmM0p-FYRLAWMsiWH29i4U8Wf_ovNbBcn55psl7LR-lKbYwqXkz6bZQT4iyCzyxn4ccMhAshWb9MF/2W7Ll-nKe4HQwbV8yB9qi1u6eQjzyCvrGEcVXF_34mfROHwfosjInc9l9PDhXSoI5P_Jp0xtnfRu4sxNLsmilDqu7cH2ZiHPVQ0IlC5gP6ttXs7Jcuj1IgZeaz7aajMa/.../

http://dw.uptodown.com/dwn/uGXvsK4tCfNABVVMjEr0MCquAU3ihSX6Ygpth-jmJ68Tfo1H-HUkUdiQtM_Fyld_6MJuxvm6aQ92Tm98XTvOxbCFOCA6yhCgzc_fLqrcDAI3PhZ_bYg5Nm0HThYJbI0g/tr6iiC3WIRoUEQGXfBBwBhjx7rhxjzgaCzgHxHs9glV-Jd80mgyF2kbj1cd9TD425983M_6LT4u7cyzWMDa9VDWffgwRnAnSI_dYuxTogAAI3LknZaM9Kf1dg_uDTK2C/rcLjZR84w9Nzccx-4hw_rL_wuDujd2m_PPLjwuseQBuIx40FVhBcIf9dnEUqN_ku9hLZ54LFTguT_enLfuihARuyDD_ssl2e1lvENpf7cnprj9JPU-_7Z0NMAvluGSmH/.../

http://dw.uptodown.com/dwn/4uepylhLeCaOhGJRK8oKfVK1_h2F2nVwCdzJWbMYohhpiy3yLmzQiuByo2VlpCbZBPe31RbE8YF7DA7mCsbHOMmSD-oV23Yx6Y8U2H73b87-WcVkWj27Z0tilxnCmOLm/EBv-qUZv8HlTH1gc3Q4rVF9QGx5VNl-MIkMoIRVzKwqRO6BkHa8ISv5zda1PdsB2bwXu5aFBgaQthpLhqrMmCpnU0TTcc0-19F5GmwWbbj8E38oTGJ0Zozzo3qWgozN1/.../

http://software.thaiware.com/download_url.php?id=10647

http://www.kastorsoft.com/.../Setup_FreeM4AConverter.exe

Scan setup_freem4aconverter.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.